TpmInit.exe

  • File Path: C:\Windows\system32\TpmInit.exe
  • Description: TPM Initialization Wizard

Screenshot

TpmInit.exe TpmInit.exe

Hashes

Type Hash
MD5 8828BBB0A8A2EC40E4A976DCE47BD15F
SHA1 6CA5B6590646A439B1575203C2B230910506C303
SHA256 33A4096E7BB753373B1499993DC186D705C99DEBB3D9C13B0AF9BAEFA7575108
SHA384 89D413BA01A20D0E3E3CCA3CF099718837156267BBF1674FE1CA8DEAF76E5C165F7CED0BB9D48756FF246C8ACBE679DC
SHA512 15788516EC4FC3701F8DB054FD91EABAF5E15974C3CF5C0C8AC7B068A0AC03962F6B6E786E6697A7E30BC39675DF70C24B77032943B447B7AE2B040396338D17
SSDEEP 1536:T5Q0RzxjPGl4JLlficQ5myuxy+7BB8kOuGiceY0lA3CJHkxUM:NQIdPQ4H00g+7BB8ktPYfSFkx1

Signature

  • Status: Signature verified.
  • Serial: 33000000BCE120FDD27CC8EE930000000000BC
  • Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TpmInit.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\tpmcompc.dll 47
C:\WINDOWS\system32\TpmInit.exe 47
C:\Windows\system32\TpmInit.exe 47
C:\Windows\system32\TpmInit.exe 54
C:\WINDOWS\system32\TpmInit.exe 47
C:\windows\system32\TpmInit.exe 33
C:\Windows\SysWOW64\tpmcompc.dll 49
C:\WINDOWS\SysWOW64\TpmInit.exe 47
C:\Windows\SysWOW64\TpmInit.exe 50
C:\Windows\SysWOW64\TpmInit.exe 52
C:\WINDOWS\SysWOW64\TpmInit.exe 47
C:\windows\SysWOW64\TpmInit.exe 44
C:\Windows\SysWOW64\TpmInit.exe 44

Possible Misuse

The following table contains possible examples of TpmInit.exe being misused. While TpmInit.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .TpmInit.EXE``{:.highlight .language-cmhg} © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.