CmdID

CmdID / Files

RMActivate_ssp.exe

Windows Rights Management Services Activation for Server Security Processor file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real RMActivate_ssp.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Rights Management Services Activation for Server Security Processor

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\RMActivate_ssp.exe · signed by Microsoft Windows

09777608b46d8ddef38687d4ee7a24c8464dd8f9d2a49948bb77b2674ecbd8e2

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\RMActivate_ssp.exe · signed by Microsoft Windows

f2e9b64e8075b6de35ccb15ce8d1afcab9ccd8fd8e883eae64b101e5d1ef3d02

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\RMActivate_ssp.exe · signed by Microsoft Windows

04b23c3bb0541d69d6fe30500eb1b22b1e03452b824ce1ce29b7f89eb1c386e0

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\RMActivate_ssp.exe · signed by Microsoft Windows

c7a5368a48a063b991e9b4effe43635ed7725b2dcc18b4aad431577414d13aa4

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\RMActivate_ssp.exe · signed by Microsoft Windows

289f40be3e1b949c71bcf3566b94d41dd4b1a7061c664633b9877629db7b00f8

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\RMActivate_ssp.exe · signed by Microsoft Windows

2b51b55053bb9f97b9b836b9eafc36e1051c523418f58c5f8a880d2a2286ea6b

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\RMActivate_ssp.exe · signed by Microsoft Windows

b437fec40dbcd4105eed821ff75ba7eea5145bae15783701ae09d52f31db3e98

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\RMActivate_ssp.exe · signed by Microsoft Windows

c310b3e2390d428172ae9040d469bb871305c502479caeff1c893b8940f16f7a

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\RMActivate_ssp.exe · signed by Microsoft Windows

45cd4e13545a2f9a328e12d31a3174dcc2043b36729868bc3c4e9324d080323b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\RMActivate_ssp.exe · signed by Microsoft Windows

f7199c104247a0161ee140e8d9d414c1d5ef90f1983b475fd5cdb8291b408a8b

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\RMActivate_ssp.exe · not signed

215b99261d3467e6d536191fbadbc1b6eef0462be9d159f0ba7f0b91fecfeb59

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\RMActivate_ssp.exe · not signed

41011e17f51f36ee20baa8d1d33f5c085b3a4c0fcfb02937fa86f54ca8a87e40

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.