RelPost.exe

• File Path: C:\Windows\system32\RelPost.exe
• Description: Windows Diagnosis and Recovery

Hashes

Type	Hash
MD5	1291A9F82F82C0B57F312300A1B09895
SHA1	90CBB32F4D24E7871D63A771C1ED074FA05499EB
SHA256	036E9C86B1D9338C2328822680FA51DBBC0E7855BC73254F147EA99A24C17602
SHA384	A3865745284A6E338D4D9F6E8210955F69AEF09A60BCE3C26549B5972EAF3F0CC51DA52255AD31B695332FF741C1A9A0
SHA512	643381A71846C355ABD5D61597ABC2102E03B909EE39899C936CBF92AEF3465055E103A72BBB438D3736FC49EF53A2B2E8C5379249B1CEEB9D782C067104A963
SSDEEP	3072:PW60aMspTl8Z7W2wOIiBVWJBxqhGapLGuAuegPO8evTq2V9:P5METWB/OExFegEv+2V
IMP	DC797A665163FBB4A885E91E7062BEFB
PESHA1	C4155596EFC6931CD83F6F221862A4EF29A427BA
PE256	78DE363D0D1C7E8CB7DF9DFE64FC0C8D54762D4C77DAAD7DF25458C5FC563D6F

Signature

• Status: Signature verified.
• Serial: 33000001C422B2F79B793DACB20000000001C4
• Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: RelPost.exe.mui
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.17763.1 (WinBuild.160101.0800)
• Product Version: 10.0.17763.1
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.
• Machine Type: 64-bit

File Scan

• VirusTotal Detections: 0/68
• VirusTotal Link: https://www.virustotal.com/gui/file/036e9c86b1d9338c2328822680fa51dbbc0e7855bc73254f147ea99a24c17602/detection/

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\recdisc.exe	54
C:\Windows\system32\recdisc.exe	50
C:\WINDOWS\system32\recdisc.exe	43
C:\WINDOWS\system32\recdisc.exe	50
C:\Windows\system32\RelPost.exe	55
C:\WINDOWS\system32\RelPost.exe	52
C:\windows\system32\RelPost.exe	50
C:\Windows\system32\RelPost.exe	49
C:\WINDOWS\system32\RelPost.exe	47

MIT License. Copyright (c) 2020-2021 Strontic.