rrinstaller.exe

  • File Path: C:\Windows\SysWOW64\rrinstaller.exe
  • Description: R&R installer

Hashes

Type Hash
MD5 0FC620A6F80CB075E05CA72352D84584
SHA1 DC9CBA68BA26359AC9F3CB3349131C624C72741A
SHA256 E580885A1DC294BF9C7653ABD08AB8DE490D63F8E30AB73BBF031A3CE8A57128
SHA384 12BCF659506029AC7F3C794909770C5E8D571F7364C201A1175968090D72B36456DB4FF16A3860BB65508367288EA523
SHA512 5DEC08D70ADBAC4C8E768D18B666F95CBF069EE7747127B32D0D80BB748B7B80E767ED8FE47528E9C2B8271A4BA14FFF452FC0E1ED9D5B4ECB05808DC416C154
SSDEEP 768:KHqsIfEFqPnmjtPHddqJYby8vhlNCE34HPt+4bz7ymo8:lfzmjtPHddqJYLhlKH/ymH
IMP 22CD5E9B5D2130049B28E3DC366A44AD
PESHA1 FD4FD6B1B9379547EF6B7FBDCF2DCBDF612E31E6
PE256 2269B5C60D4821D3C5FB9347B41E1511AC218998CEC8B4BDC9849E3C6D03DBAA

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\rrinstaller.exe

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rrinstaller.exe
  • Product Name: Microsoft DRM
  • Company Name: Microsoft Corporation
  • File Version: 11.0.19041.1
  • Product Version: 11.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/e580885a1dc294bf9c7653abd08ab8de490d63f8e30ab73bbf031a3ce8a57128/detection

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\rrinstaller.exe 74
C:\WINDOWS\SysWOW64\rrinstaller.exe 47

MIT License. Copyright (c) 2020-2021 Strontic.