CmdID

CmdID / Files

RelPost.exe

Windows Diagnosis and Recovery file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real RelPost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Diagnosis and Recovery

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\RelPost.exe · signed by Microsoft Windows

d4f2b96e50b6a53218056abfbba53c1a1c711a0b9c9ce08337e0aa23be141abc

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\RelPost.exe · signed by Microsoft Windows

509a5a06f26e7cd8fed50d39d36d32d617887f04fdd8edc2546254df61c1132f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\RelPost.exe · signed by Microsoft Windows

a862ccb7450c946fc29f6ea213e7c2bfaf8dd9a29544de18c7620b19b823819c

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\RelPost.exe · signed by Microsoft Windows

036e9c86b1d9338c2328822680fa51dbbc0e7855bc73254f147ea99a24c17602

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\RelPost.exe · signed by Microsoft Windows

a135a1310bac10803bce2eee4d33804b9574191d773dc8e12bc3713a1b3f0744

6.3.9600.17031 (winblue_gdr.140221-1952) · C:\windows\system32\RelPost.exe · not signed

5836b9e06e9fc8692c0321320e934accadc716ee5d016722135fcdcc38c902dc

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.