omadmprc.exe

File Path: C:\WINDOWS\system32\omadmprc.exe
Description: Host Process for Push Router Client of OMA-DM

Hashes

Type	Hash
MD5	`9F611CF7B078A9BD0C5ACDE81EA0AE18`
SHA1	`E63A6865A4DC875FF29D9BA843C9AD5FE1F6D927`
SHA256	`AFDCE276AFD151826AD0750083CB596E449DED31B4D840237E99D8E852D94C9E`
SHA384	`6E5BDB797DF9BC71BC1BC77ECFDFF3B7B4AA5E8347972E55F5DD6F23B972D6DA58D5D6BEA21CBE66DB66A782FF21D5FB`
SHA512	`A60ED163FA72F0817C286220AE80007A82853FE48800D6420E4C6294FB942A32CB195E9EDEFA1D008A4C6CD902093700D46B29994E080046ADAE1BFCBCFAED53`
SSDEEP	`3072:z5RdJpCN47m3VbTuCMB1hCrLlQhXDBmT0xhfyHJ+hdTninIsacAH+TQpRTlnr:1loVlMPKuNDBm4xB4J/xa+TQpNln`
IMP	`F86C0E6237466EEFCC14A74676DBC7BF`
PESHA1	`FA129E2499A2169D18207948464CC2626F0B0B3B`
PE256	`67F12CDB6157C44E8F4124BBE187F4211BDC03554A1E5A1A1BFF6948CA4D6C01`

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\omadmprc.exe
C:\WINDOWS\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: omadmprc.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.1 (WinBuild.160101.0800)
Product Version: 10.0.22000.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/afdce276afd151826ad0750083cb596e449ded31b4d840237e99d8e852d94c9e/detection

MIT License. Copyright (c) 2020-2021 Strontic.