RMActivate_isv.exe

  • File Path: C:\Windows\SysWOW64\RMActivate_isv.exe
  • Description: Windows Rights Management Services Activation for Desktop Security Processor

Hashes

Type Hash
MD5 F5DB05C308AE5103CFDD47105BAE8D1B
SHA1 97BC04CF01C7DC7F4BA6DBDC4D246FD93E725C87
SHA256 2A2CA139764FD9449F547DA29BE38B660C1E89BDF5B56AD01055B122A12D9C73
SHA384 CADCF2130B322953FADD3DE10925B609B3A70CC9660357117A70CBFCD1A88B744FB3D4D2D37A86089460BE13253FD738
SHA512 C5247DD593128BA4D8B1CDC50107CF7FF52B478C49BF02E0B7035693238AFB8E8161680F66D84CFA18E73757FD53979E3B4241F2248D33273F06AADF0D485AD9
SSDEEP 12288:xGV+9pjWE/122veQS3LpJHur1Glh4GLQfIBo+HJ8LH838YAVgX4wHkDkm4NgOSt:IV+9pjb24ubpJHurglGGLQfIB7HJ8/Ye
IMP EBCDFF4FE394A3E0CD90455A8A72EF29
PESHA1 A66CE4F1C3730D63EEDEEC3CB997691153A04B2E
PE256 75740371F81FA5AA05C2281D002402832E9AE5D3BAE8C25456A4B18A3174A268

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\RMActivate_isv.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rmactivate.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/2a2ca139764fd9449f547da29be38b660c1e89bdf5b56ad01055b122a12d9c73/detection

MIT License. Copyright (c) 2020-2021 Strontic.