chrmstp.exe
Google Chrome Installer file version info
Program on Windows 4 known copies with hashes
Is it the real chrmstp.exe?
C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.125\Installer\C:\Program Files\Google\Chrome\Application\85.0.4183.121\Installer\C:\program files\Google\Chrome\Application\85.0.4183.83\Installer\4 known copies
95.0.4638.69 · C:\Program Files\Google\Chrome\Application\95.0.4638.69\Installer\chrmstp.exe · signed by Google LLC
7cbe211a4a539659d66b471fc43fa66de772a877494a0bb877515a3589e9da2c85.0.4183.121 · C:\Program Files\Google\Chrome\Application\85.0.4183.121\Installer\chrmstp.exe · signed by Google LLC
62ecbb932e0211217f62bd0d3d5744a54104e2431e27ff7a7822a25d04a8581b85.0.4183.83 · C:\program files\Google\Chrome\Application\85.0.4183.83\Installer\chrmstp.exe · signed by Google LLC
1cd2942c9c95d062359f7c2634d664b58569c8238dbb49276ed7a8ffcdaeb28f84.0.4147.125 · C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.125\Installer\chrmstp.exe · signed by Google LLC
b3a9bbfd7aaec835b51af73bd8848eb62b54fc2e4db4101d07d196f358d49f18From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.