DsmUserTask.exe
Device Setup Manager User Task Handler file version info
Program on Windows 6 known copies with hashes
Is it the real DsmUserTask.exe?
C:\Windows\system32\6 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DsmUserTask.exe · signed by Microsoft Windows
a25b357b570f2170043d8c64b809e3ed14d49da58d633f211956fc9f2440fbe110.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\DsmUserTask.exe · signed by Microsoft Windows
88352fb0b4550a4a8c24cfc2e23f6db551bb60c41b2fe3db0797a3b7b10e606410.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DsmUserTask.exe · signed by Microsoft Windows
3257026fdd0559fe3c92c7e4093af5f9d798f391d21db2c09366c099a26e21b810.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\DsmUserTask.exe · signed by Microsoft Windows
e2544e63fe1c1ba957ec5723b74cf78476a2c54568af569a37d7a4f9fb804c9310.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\DsmUserTask.exe · signed by Microsoft Windows
e2a467fca75950b2a72cdfc63e415431dfd15ee5bea1937ec2aba640bddaa6386.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\DsmUserTask.exe · not signed
517c9292281404b4735c860f4d84b868e01430979fbfb84f40a4e18363b528b6From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.