rstrui.exe

  • File Path: C:\WINDOWS\system32\rstrui.exe
  • Description: Microsoft Windows System Restore

Hashes

Type Hash
MD5 1D4A8AD1E0012FABABFC7F3B4F0EF4F9
SHA1 42D395F125DF22A71DB334ADB14A21E7BA98060A
SHA256 5A0A9C08C2D07D2E370974C023A288F8E8526B43EBAF12151DCE0B42A2336869
SHA384 D3385AC51E8D5E22869D9CA43C7F5EAA15455E7BFC93DE2D22589F486E16BC9E079CCD1228ED3DF6B9E163C6E2935F55
SHA512 EE6AE22BFB8502EDA9750F62DF06F048FBEE33CE56926009BBC20A2AD3F67BC4B61C0DCD566B5A6812E304C848A7B70465A56861141028A727D01EA5D95F57B7
SSDEEP 6144:6GEtHges25EgmpBaAc6WrpDZ9Oangx2+UvQ/KpmOq:6GWAXppBaAcdrxZ9OKFvQ/Kp

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rstrui.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\rstrui.exe 44
C:\WINDOWS\system32\rstrui.exe 47
C:\Windows\system32\rstrui.exe 49

MIT License. Copyright (c) 2020-2021 Strontic.