RMActivate.exe

  • File Path: C:\Windows\SysWOW64\RMActivate.exe
  • Description: Windows Rights Management Services Activation for Desktop Security Processor

Hashes

Type Hash
MD5 C3BDA80F17FFA78BD5FF9DFB91BF65B7
SHA1 DEF8B8521D92542D872317C4A4EA5978E0F14448
SHA256 62E94CB99BD3207951211B8566BCAADF19BE925090404BD7AA0191BFC83FD08F
SHA384 CA2173D54CC485C36AE25C9D39CE37A25E96B923F7C25F68F140C68A4AA862F6854C82FBD609A74A0920048713C804D9
SHA512 33C59880DA6CDAA2E03A2D2F37558D1F47498895144F67CE76BB2CC43B4DBDE42160A8AD06C4FFB0582EAECBA2603F1FD838EF3E3649D61B5AAA0D509CA341A0
SSDEEP 12288:1fOj2FGKc4zSZpD1nswafC/+KGidvQPxUQ4e1kVg6TeGaB:12jOSZpDVswIC/+KGiyP34e1kK6KxB
IMP EBCDFF4FE394A3E0CD90455A8A72EF29
PESHA1 7EC72FBD49280CACF340D0D41F5911A54A928919
PE256 BAA0FB225012C2DC0BD57C4F04A7F21237774550945E3C8EE55CCEB3CC8825E1

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\RMActivate.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rmactivate.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/62e94cb99bd3207951211b8566bcaadf19be925090404bd7aa0191bfc83fd08f/detection

MIT License. Copyright (c) 2020-2021 Strontic.