RMActivate_ssp_isv.exe

File Path: C:\WINDOWS\system32\RMActivate_ssp_isv.exe
Description: Windows Rights Management Services Activation for Server Security Processor (Pre-production)

Hashes

Type	Hash
MD5	`B21C404B9E550DF52658165CF9F667BB`
SHA1	`125F5F8708BDA34612073A502DAC7492A0CC42AE`
SHA256	`224347079C47C32B02CF4C62AA17A402F7911276B7D4EFF21C96A3DAE549C577`
SHA384	`23473CEE88F94F3FA16409497714384C8999BFE8C096F408C82B6F277A0CF05FA34DD357FCF546500D0D47414F0CD935`
SHA512	`1C0F2644A92C3CEC95B94790A263E2F3EE7C8EC42F7C55967163BED2167697EAE1F18180A7F76D2CBF874838B0768BF945CE2EF2494A60B33F2857D980442B0F`
SSDEEP	`12288:WhD9XS6SeDAYt7ZbFSI3H+4nhJTiIu/sMPnxhIbSe:09FSecYtfM4hJTiIupPxhcd`
IMP	`0A975696C1EBDA2FE57027FB43C0A3BD`
PESHA1	`9BBD556343806DB5C741F712112F89023B5E061A`
PE256	`6880F906E3BD5CF80E1A6196CBADBDBA1D39B1A9B6FB7C33831F02BD464C6559`

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\RMActivate_ssp_isv.exe

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: rmactivate_ssp_isv.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.1 (WinBuild.160101.0800)
Product Version: 10.0.22000.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/71
VirusTotal Link: https://www.virustotal.com/gui/file/224347079c47c32b02cf4c62aa17a402f7911276b7d4eff21c96a3dae549c577/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\RMActivate_ssp_isv.exe	27

MIT License. Copyright (c) 2020-2021 Strontic.