rrinstaller.exe

  • File Path: C:\WINDOWS\SysWOW64\rrinstaller.exe
  • Description: R&R installer

Hashes

Type Hash
MD5 684E778715859DF0DD515FB742775633
SHA1 E0E329341556AB354AA03A7E03FDE5F58923AB02
SHA256 FA9C8F9D2FF7CEB03C391C260418E6100A40ACB090A1F0D24CAD7A61BA97BA3C
SHA384 646E3C6E26CAD43784C03A79149C53E1F6904E425399FF5DB2647DAE90B818F66487F36D0F60209A774EC1B2811D1D17
SHA512 71C1656AB34BE07A613472119E621F0FCF4F403588B9B3F4A9DD05BBDD167648B306F46B6BA429BC5101EADE0B17712B00ABB91805E08261194A58064ABACE64
SSDEEP 768:URsIaVF2LwPDinZUxp/YyGTLHKPrjhc3nIRaVpHq8p:U/aVHPDinZUT7qSm3nIRaV1q8
IMP A43BA85C5E8C2890FA236CA5D35AC2AB
PESHA1 6B9F09963E6C8A8FE445BC6CD929F2DDF4F5C541
PE256 515DC8FBA74AADB4B9F9F2201C65917D2D2FC7F6F7344C59308A55B5788B2DED

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\rrinstaller.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rrinstaller.exe
  • Product Name: Microsoft DRM
  • Company Name: Microsoft Corporation
  • File Version: 11.0.22000.1
  • Product Version: 11.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/fa9c8f9d2ff7ceb03c391c260418e6100a40acb090a1f0d24cad7a61ba97ba3c/detection

MIT License. Copyright (c) 2020-2021 Strontic.