dciman32.dll
DCI Manager file version info
Library on Windows 2 known copies with hashes
Is it the real dciman32.dll?
Original name
dciman32 in the file’s header: a renamed copy still carries itInstalled in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDCI Manager
2 known copies
10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\dciman32.dll · signed by Microsoft Windows
4e7ecdde2993cfde6e3768abb7178cf0e773b2faa744c2331c9d70fd674e828c10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dciman32.dll · signed by Microsoft Windows
50952cf8c504325a375aa3986bb1daf06d563a4a17b07d03051ba4dc03bf0a5aFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.