DmOmaCpMo.exe
Host Process for OMA-CP Client file version info
Program on Windows 5 known copies with hashes
Is it the real DmOmaCpMo.exe?
C:\Windows\system32\5 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DmOmaCpMo.exe · signed by Microsoft Windows
e6582bc83520f7a0deb7ee7e62b1167b7ea77f2f5470088720caca0231e6dea310.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\DmOmaCpMo.exe · signed by Microsoft Windows
c9fda4b2b4851db71d73e568b5d10be577d525a2f2f68b83b2110862e3491b1610.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DmOmaCpMo.exe · signed by Microsoft Windows
2a07e6e74d3e468a92ce3b86107d23cf34cd1ca6cf7dafdcf79b0a929ad81fef10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\DmOmaCpMo.exe · signed by Microsoft Windows
9910d2c25f494b1c1668e6b67efedef17109419ce73cfad2d9de5bd2896d400a10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\DmOmaCpMo.exe · signed by Microsoft Windows
75d5064a345b0991c2c53a5339bd0d80d7d20fa088e6aaf82ff012ab5c425ddfFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.