This binary has two main features. If it is executed with the "help" parameter, it will install a service to execute itself as a service. This has a notable side effect: if rmaserv.exe is executed isolated on a sandbox (so without the parameter), the service is not created. The second main feature is the service. This service has two features. This event is the mechanism used by the C2 contact module to alert the service executable to perform the cleaning of all components