home

batpost.exe

BatPost

RITLABS S.R.L.

It runs as a separate (within the context of its own process) windows Service named “BatPost Server”.
Publisher:
RITLABS S.R.L.  (signed and verified)

Product:
BatPost

Description:
BatPost E-Mail Server by Ritlabs

Version:
3.01.201

MD5:
8bc4f73cb78ef3bef4062002016a4434

SHA-1:
947cbed2906b522fe03dda1e3f3a96b2abab4873

SHA-256:
feaa2c24552b96861e52839464a18fce69b20833d0af54c2d4ac134148d3190e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 3:22:20 AM UTC  (today)

File size:
607 KB (621,560 bytes)

Product version:
3.01.201

Copyright:
Copyright (C) 1997-2013 Ritlabs S.R.L.

Original file name:
BatPost E-Mail Server by Ritlabs

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\batpost\batpost.exe

Digital Signature
Signed by:
RITLABS S.R.L.

Authority:
Thawte, Inc.

Valid from:
8/21/2012 1:00:00 AM

Valid to:
8/22/2013 12:59:59 AM

Subject:
CN=RITLABS S.R.L., O=RITLABS S.R.L., L=Chisinau, S=Moldova, C=MD

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
39F5849F5E8EA79588C687EEE9368E89

File PE Metadata
Compilation timestamp:
6/19/2013 11:25:28 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:4+x8xrpPXMwEpyLtKFmSc6gikbI2Lwz9nOMs6b7MP+Dd2RiL:4+xoXMwEEttSzgDbI2LwlOMd7MP+h2K

Entry address:
0x1000

Entry point:
68, 01, 10, 59, 00, E8, 01, 00, 00, 00, C3, C3, CE, E9, 59, 89, 23, 1F, DF, 75, 65, 87, 3D, EE, 27, DF, E7, 6B, C7, 1E, 6A, DE, 9B, 17, D8, EA, 97, 38, 21, 93, 46, 3D, 0A, 42, 08, 07, 48, AF, 61, 9E, EC, 48, 6B, 08, EA, 9A, 12, 71, A4, 0E, D2, 54, BD, B9, 1D, 7F, 84, FB, FD, 80, A7, 3F, 01, 9E, 82, F0, FD, A0, DF, C6, 30, 0D, 04, 50, D7, 38, 90, 8C, E0, 37, 46, F2, 75, A4, 39, 62, 0C, 14, AA, 7F, F2, 21, 46, 5B, 6A, F6, 0D, 51, A8, 30, 93, 37, C4, 12, 49, BD, 56, 5E, 73, 07, D4, C0, B6, 3D, F2, 33, 34, B8...
 
[+]

Entropy:
7.9721

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.3 MB (1,363,456 bytes)

Service
Display name:
BatPost Server

Service name:
BatPost_Server

Description:
BatPost Server application

Type:
Win32OwnProcess


Scan batpost.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.