RelPost.exe

  • File Path: C:\Windows\system32\RelPost.exe
  • Description: Windows Diagnosis and Recovery

Hashes

Type Hash
MD5 932819A3B3ED8CF19348D7B349E7B49A
SHA1 E11F228CC9D70AFE74A742943B75002D17DD22B9
SHA256 A135A1310BAC10803BCE2EEE4D33804B9574191D773DC8E12BC3713A1B3F0744
SHA384 79A2EFFC9FBFC8B9EB9546218DFC3B5067907F2ED6FDAF15A8EC40B18E33C3254C9DFCEB0AF39A4CA57B9BD754881CF2
SHA512 36E767289BFA3B18C3897BE2EDD40F657F21C4AB1D9AB4B28DCB9397E0CB567F52B470BD43FF54790819E7E6DD2A24D89B0B9980BF1321115937FD82C78F2ECC
SSDEEP 3072:T5MdLG2w7itD54IYKTODnePxCmtpaGyAuegPO8evTq2VA:dMA2XrOFnHFegEv+2V

Runtime Data

Child Processes:

RdpSa.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RelPost.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\recdisc.exe 46
C:\Windows\system32\recdisc.exe 52
C:\WINDOWS\system32\recdisc.exe 43
C:\WINDOWS\system32\recdisc.exe 47
C:\Windows\system32\RelPost.exe 55
C:\WINDOWS\system32\RelPost.exe 44
C:\windows\system32\RelPost.exe 50
C:\Windows\system32\RelPost.exe 46
C:\WINDOWS\system32\RelPost.exe 49

MIT License. Copyright (c) 2020-2021 Strontic.