RelPost.exe

• File Path: C:\Windows\system32\RelPost.exe
• Description: Windows Diagnosis and Recovery

Hashes

Type	Hash
MD5	932819A3B3ED8CF19348D7B349E7B49A
SHA1	E11F228CC9D70AFE74A742943B75002D17DD22B9
SHA256	A135A1310BAC10803BCE2EEE4D33804B9574191D773DC8E12BC3713A1B3F0744
SHA384	79A2EFFC9FBFC8B9EB9546218DFC3B5067907F2ED6FDAF15A8EC40B18E33C3254C9DFCEB0AF39A4CA57B9BD754881CF2
SHA512	36E767289BFA3B18C3897BE2EDD40F657F21C4AB1D9AB4B28DCB9397E0CB567F52B470BD43FF54790819E7E6DD2A24D89B0B9980BF1321115937FD82C78F2ECC
SSDEEP	3072:T5MdLG2w7itD54IYKTODnePxCmtpaGyAuegPO8evTq2VA:dMA2XrOFnHFegEv+2V

Runtime Data

Child Processes:

RdpSa.exe

Signature

• Status: Signature verified.
• Serial: 3300000266BD1580EFA75CD6D3000000000266
• Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: RelPost.exe.mui
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.14393.0 (rs1_release.160715-1616)
• Product Version: 10.0.14393.0
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\recdisc.exe	46
C:\Windows\system32\recdisc.exe	52
C:\WINDOWS\system32\recdisc.exe	43
C:\WINDOWS\system32\recdisc.exe	47
C:\Windows\system32\RelPost.exe	55
C:\WINDOWS\system32\RelPost.exe	44
C:\windows\system32\RelPost.exe	50
C:\Windows\system32\RelPost.exe	46
C:\WINDOWS\system32\RelPost.exe	49

MIT License. Copyright (c) 2020-2021 Strontic.