RMActivate.exe
- File Path:
C:\WINDOWS\system32\RMActivate.exe
- Description: Windows Rights Management Services Activation for Desktop Security Processor
Hashes
| Type |
Hash |
| MD5 |
8B7857E44B90AF0347D7FD41F62A4813 |
| SHA1 |
51111149910424C67429220FF92DDADE2740C674 |
| SHA256 |
AA7172C7CA94F4BEE16D9B629E7FF8322F8B6568DD722AFDCA4C09FE67B8C5D5 |
| SHA384 |
543AD6F9819D6CF97FBF126C8C4FFA8B91CBA4BCDE61E69BBB406A164EB94C23089943CE64E558BED2DE89535C2A5FB8 |
| SHA512 |
FC961E193389A24C8DC5C9934F4D205B093B059EF24B487A6327A42C4BD18EED4FA12952905249CFE957E5D00A86B77AF3FC379C26C99296F7B4B2A80936B03C |
| SSDEEP |
12288:4s7XK8D9qkhLZu6KSxKiYG2xXXgZwy73kTwv5q2TD2tvaS:ZhUDGkAZR3kaXTD2tSS |
| IMP |
A64B00149541ECB0FA84FD98B79BF54D |
| PESHA1 |
A00BD3A86CD6B19EDD5DBC72713E119188C5AA29 |
| PE256 |
431CCBDFE1CC7E3A1F9F841D4819745AC0EF3A0AAAA2708E4993A27447B8498D |
Runtime Data
Loaded Modules:
| Path |
| C:\WINDOWS\System32\KERNEL32.DLL |
| C:\WINDOWS\System32\KERNELBASE.dll |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
| C:\WINDOWS\system32\RMActivate.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: rmactivate.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/aa7172c7ca94f4bee16d9b629e7ff8322f8b6568dd722afdca4c09fe67b8c5d5/detection
MIT License. Copyright (c) 2020-2021 Strontic.