recdisc.exe

  • File Path: C:\WINDOWS\system32\recdisc.exe
  • Description: Microsoft Windows Repair Disc

Hashes

Type Hash
MD5 D2D2BF7A40B2A58E8FF723C6437CDBD5
SHA1 7CC98331415D90DC4937BA94B43B932F9DF152D0
SHA256 655C90B2BAE26BDEC66F7D9DEB0A5FE8CF919D394B94D15F0EA6B62862E4B4D2
SHA384 8421E7FB28334120D22E366DFF2B71B5F3CC46416C40E87FD2F340EEF005808C6B6E9431F256A47722BE39B8B9586007
SHA512 0D79D26318A72F0A27CDC88DD052BD868666E4A431054B043A9FDB540E0C3ADC6A4B941A7AEA96826A0D4DF0CDDFEB77D95BF7917A69E4D745A1FAD9CB0545D5
SSDEEP 3072:4gJQmH0csGjljrgHMNM7pNQQwDLXdBMeAuegPO8evTq2VW:/zfsGjljrgs6VSXdBNFegEv+2V
IMP 4BA5EB30EB4A0DB165B8ECCB2795287D
PESHA1 D468159DEB021BEC90AC83B91DA438F091D376F8
PE256 CBF796FB085E63F7E33EB21348DBF4D5AE268C7E9980BBB70D277761A1768AA6

Runtime Data

Window Title:

Create a system repair disc

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\en-US\duser.dll.mui File
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui File
(R-D) C:\Windows\System32\en-US\netmsg.dll.mui File
(R-D) C:\Windows\System32\en-US\recdisc.exe.mui File
(R-D) C:\Windows\SystemResources\imageres.dll.mun File
(R-D) C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_6b887e04d8b70b4e\comctl32.dll.mui File
(RW-) C:\Windows\System32 File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_6b887e04d8b70b4e File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467 File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\Windows\Theme1077709572 Section
\Windows\Theme3461253685 Section

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\recdisc.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: recdisc.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/655c90b2bae26bdec66f7d9deb0a5fe8cf919d394b94d15f0ea6b62862e4b4d2/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\recdisc.exe 43
C:\Windows\system32\recdisc.exe 57
C:\WINDOWS\system32\recdisc.exe 52
C:\Windows\system32\RelPost.exe 43
C:\Windows\system32\RelPost.exe 43
C:\WINDOWS\system32\RelPost.exe 44
C:\windows\system32\RelPost.exe 38
C:\Windows\system32\RelPost.exe 43
C:\WINDOWS\system32\RelPost.exe 46

MIT License. Copyright (c) 2020-2021 Strontic.