SysResetErr.exe
Windows System Reset file version info
Program on Windows 8 known copies with hashes
Is it the real SysResetErr.exe?
C:\Windows\system32\8 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SysResetErr.exe · signed by Microsoft Windows
509b2198ada20565d44f439e303a0429fbc527e9acf9c03206b3f7a42715461610.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SysResetErr.exe · signed by Microsoft Windows
27f03dc93fa9362b72565f8f193f56800063c708395dc3def584cfd34b96deca10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SysResetErr.exe · signed by Microsoft Windows
45a958eea77dcfac46a5c798120534d8c17fb4a575776d1e24a4947cee283fa610.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SysResetErr.exe · signed by Microsoft Windows
bfe48016255e47883471a7090632fb65e8db70bb2c48ce1b43288eff82bc7e2310.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SysResetErr.exe · signed by Microsoft Windows
fc73996315bc9d306917e18a7065ce78e2bb31b5bfb5c164e31679e83e68738110.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SysResetErr.exe · signed by Microsoft Windows
c8623f878c64947c1990cbebc72b118aba78c630810a3ff9419cac046441c08e10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\SysResetErr.exe · signed by Microsoft Windows
7994237531700a8fae449ac3c38176e5220d167f4053466c1343f400b6af2d4710.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\SysResetErr.exe · signed by Microsoft Windows
1b49672585eafa29627a8243da4340f568817e6ab96b9a56ee1831a77fae987aFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.