RMActivate.exe

  • File Path: C:\Windows\system32\RMActivate.exe
  • Description: Windows Rights Management Services Activation for Desktop Security Processor

Hashes

Type Hash
MD5 7AB107EB402094077ABB814A370DA5D2
SHA1 E7C52FB9C3A1DFABA7FA171C378C028764BF3ABB
SHA256 E5AED34EEA1160D2E0674C3373420CB486E68DFA81C3B32A8174963140AB2A5D
SHA384 AF1642CF1F42C544028E9F31A8EAC0498AA5C6FBBAAB4F9DC1E76ABB4EEDB56F72EF7DC3A54D40B545A6823F0D54F4EB
SHA512 E6CE040E37ED72DA14FAC2D1CC82216341A06856C12BEBD170521C0EA89463688A86DF568CEB2BB0013C695CF98D723AF7A8D99FF49B09D358FFBC39F8ACCE69
SSDEEP 12288:OMQ+mXYIKPPOKfv1sUxVsZbzjSWaT6rLW1Yf2TyIFHCKMt:xmKPl1txmaDT6STJHCKM
IMP A64B00149541ECB0FA84FD98B79BF54D
PESHA1 493B2F611942EB9DF37BC00F37C0CB6412988F27
PE256 4BD5A4C8DB3078F8106BB22EDDF149B999E91B3FAAFE98D2477A42B4D21AD0F9

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\RMActivate.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rmactivate.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/e5aed34eea1160d2e0674c3373420cb486e68dfa81c3b32a8174963140ab2a5d/detection

MIT License. Copyright (c) 2020-2021 Strontic.