CmdID

CmdID / Files

RMActivate_ssp_isv.exe

Windows Rights Management Services Activation for Server Security Processor (Pre-production) file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real RMActivate_ssp_isv.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Rights Management Services Activation for Server Security Processor (Pre-production)

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\RMActivate_ssp_isv.exe · signed by Microsoft Windows

224347079c47c32b02cf4c62aa17a402f7911276b7d4eff21c96a3dae549c577

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\RMActivate_ssp_isv.exe · signed by Microsoft Windows

66cfbefb01d144130f7643b66020e4a5d348c3aa1ffecafb2ea152958a10dd70

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\RMActivate_ssp_isv.exe · signed by Microsoft Windows

7d50ea6005cd3fd81b4d238081401fb6b248c0f5c7f815537d28a096ff5154a8

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\RMActivate_ssp_isv.exe · signed by Microsoft Windows

aead49ca461086872d44d6b4c749a961fbfe39a3f6d51a9b46756f854c574356

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\RMActivate_ssp_isv.exe · signed by Microsoft Windows

55dd43ddcfba07dd37fe2ad99222741db5a364db5c8cdad35f36f114770ad6b5

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\RMActivate_ssp_isv.exe · signed by Microsoft Windows

ab8d9d5de268ad208e72f8eabac920c8fd6998b90f17bc148cb3f8792c0f44a6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\RMActivate_ssp_isv.exe · signed by Microsoft Windows

29bd8c3471b341ca78b9c2612de89ce3558a3cd07d675995000e0b3c79b05509

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\RMActivate_ssp_isv.exe · signed by Microsoft Windows

62da7f512fadd7821a46e12230d18e3aba6c0ec6827c1b9db8e8424cb5e9159b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\RMActivate_ssp_isv.exe · signed by Microsoft Windows

2ef0dff80fb2b7d149fd2249a104b12d4658bdda1307daec22ac74fd61ce4a59

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\RMActivate_ssp_isv.exe · signed by Microsoft Windows

cfe8518915fd867314a0502b4c7270f8b0ebfa9c0aae22a74e676eda89f65072

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\RMActivate_ssp_isv.exe · not signed

36b3b5c705c560ac45e25ec9e06e2fb17df0bd0edbe0ac880bec8cb010d9c2ea

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\RMActivate_ssp_isv.exe · not signed

e24ee5f3f849ccede07bcd23d20ee79fb73ea07f6f75d275df5690962b8e3fa2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.