tzutil.exe

File Path: C:\Windows\SysWOW64\tzutil.exe
Description: Windows Time Zone Utility

Hashes

Type	Hash
MD5	`31DE852CCF7CED517CC79596C76126B4`
SHA1	`96994BBFE05406E21A0969CA110C2E5F0234CE64`
SHA256	`044C52F7B934C4EB64EAC31B1D8E5F29C9FEE2B3F080EA9BC6F180464CC8DB2D`
SHA384	`3DB6370767D15EDCFF4B92BB3A2B192CE00F56A029868BB68823804B0EA6E712EAE892DAF2663DE45853D69BCB680FC4`
SHA512	`12C87B636172253DE86DDE8A203F66EDD827D136A54306B4CA9F6C62BD1130E8E969D35FEEA158F00E881ACF2A4ADE85BC73147560217C306A3F82D4A63D8CD5`
SSDEEP	`768:3qaRM9gF04O6KHjiPqqNZOcjehPcALfRePBSLj8Vy/99:3JaKF09HeSa6BcGKBKAVy/9`
IMP	`C790BA0E7FECB0FFFC05EA7D2D0D5D32`
PESHA1	`BB5265CB2A7DE7A6E658611B07AAD147FB9D1A9E`
PE256	`97947E72573E3839CAC8555C6B0EB38AE8BB2AF214CABF88CF65854048A18B54`

Runtime Data

Usage (stdout):

Windows Time Zone Utility

Usage:
TZUTIL </? | /g | /s TimeZoneID[_dstoff] | /l>

Parameters:
    /? Displays usage information.

    /g Displays the current time zone ID.

    /s TimeZoneID[_dstoff]
       Sets the current time zone using the specified time zone ID.
       The _dstoff suffix disables Daylight Saving Time adjustments
       for the time zone (where applicable).

    /l Lists all valid time zone IDs and display names. The output will
       be: 
           <display name>
           <time zone ID>

Examples:
    TZUTIL /g
    TZUTIL /s "Pacific Standard Time"
    TZUTIL /s "Pacific Standard Time_dstoff"

Remarks:
    An exit code of 0 indicates the command completed successfully.

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\tzutil.exe

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: tzutil.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/75
VirusTotal Link: https://www.virustotal.com/gui/file/044c52f7b934c4eb64eac31b1d8e5f29c9fee2b3f080ea9bc6f180464cc8db2d/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\SysWOW64\CertEnrollCtrl.exe	27
C:\Windows\SysWOW64\CertEnrollCtrl.exe	25
C:\Windows\SysWOW64\expand.exe	32

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

tzutil

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Displays the Windows Time Zone utility.

Syntax

tzutil [/?] [/g] [/s <timezoneID>[_dstoff]] [/l]

Parameters

Parameter	Description
/g	Displays the current time zone ID.
/s `<timezoneID>[_dstoff]`	Sets the current time zone using the specified time zone ID. The _dstoff suffix disables Daylight Saving time adjustments for the time zone (where applicable). Your value must be surrounded by quotes.
/l	Lists all valid time zone IDs and display names. The output appears as:<ul><li>`<display name>`</li><li>`<time zone ID>`</li></ul>
/?	Displays help at the command prompt.

Remarks

An exit code of 0 indicates the command completed successfully.

Examples

To display the current time zone ID, type:

tzutil /g

To set the current time zone to Pacific Standard time, type:

tzutil /s "Pacific Standard time"

To set the current time zone to Pacific Standard time and disable Daylight Saving time adjustments, type:

tzutil /s "Pacific Standard time_dstoff"

Additional References

Command-Line Syntax Key