CmdID

CmdID / Files

tzutil.exe

Windows Time Zone Utility file version info

Program on Windows 12 known copies with hashes Command tzutil

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real tzutil.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Time Zone Utility

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\tzutil.exe · signed by Microsoft Windows

7bd05235b4f10160e3e47011f3d52bb43e5d685e65367c347606ba3ca84afa70

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\tzutil.exe · signed by Microsoft Windows

ea2d6f29a8e9240e552e0c248d228d6485386c4baf4c4366788bd3826d32d1e1

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\tzutil.exe · signed by Microsoft Windows

044c52f7b934c4eb64eac31b1d8e5f29c9fee2b3f080ea9bc6f180464cc8db2d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\tzutil.exe · signed by Microsoft Windows

bf331cdf306fe1d01a5b4b81b898a268d0d1c8461c4aeda19d5c67f5fad981b1

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\tzutil.exe · signed by Microsoft Windows

3317945b70147afc4fec63e9863022b1d24a74d63e0a85a0758bd15cc8906803

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\tzutil.exe · signed by Microsoft Windows

407edd480f5061cebe80ceb4634233ca1575546973a622306865644fde28b531

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\tzutil.exe · signed by Microsoft Windows

c65e9d883299477c6f26afc78139038b81d33a03cfed9172410d9febe5576c12

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\tzutil.exe · signed by Microsoft Windows

d0f640ba7db3906ae5352eee6989bde941b51d20fc4a61bbeb83281112b1d28a

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\tzutil.exe · signed by Microsoft Windows

82dd94761865be53ba3122e0542ba05d373445b376afacaf20b6e3af2b33ce79

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\tzutil.exe · signed by Microsoft Windows

da67c992ecd1330fe32c2ff3a4d6e77ce6a5a51927fbdbb3c7e8fffdc32877ef

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\tzutil.exe · not signed

9ea15872b2f24e0c093b7b20f80986f13a99e0c57a7d2a2dc0e4ae0faab1727c

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\tzutil.exe · not signed

fa0f83a95c15a1b348e621e4736cb860815d1db334ea5058c60b2dc0f4ba11ef

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.