dmcertinst.exe
DM Certificate Installer file version info
Program on Windows 7 known copies with hashes
Is it the real dmcertinst.exe?
C:\Windows\system32\7 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\dmcertinst.exe · signed by Microsoft Windows
ed70a9363104357b56c9304011077f59d6c5ecb0e06de25c2d623bdb48fbb8c510.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\dmcertinst.exe · signed by Microsoft Windows
bc91d1ec93e1ebf081b8c76666433ed82cc1360b5e478afbe5fd7dd1f4e8083110.0.19041.1151 (WinBuild.160101.0800) · C:\Windows\system32\dmcertinst.exe · signed by Microsoft Windows
9e62dd84d875655040ab3a4a6757d6b6655a2a4d46872b2942c9da14a3495c8c10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\dmcertinst.exe · signed by Microsoft Windows
5891acca1dd40691c52d6d6e006eebff6d8d2f5d0a25e8f74320f308daaa7fe010.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\dmcertinst.exe · signed by Microsoft Windows
a8af7555e0fdab3e999214547c117c33884326b9f23538c38767aa94d859236510.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\dmcertinst.exe · signed by Microsoft Windows
41b3f0af54f2351288992247826d96727bdb95f3467f5dd02d27dfd562f7767f10.0.14393.1066 (rs1_release_sec.170327-1835) · C:\Windows\system32\dmcertinst.exe · signed by Microsoft Windows
82c85cd40108d5259793ad73b63f25bd734bd75880bd67d226df76e56c63dbc0From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.