home

batpostd.exe

BatPost

RITLABS S.R.L.

It runs as a separate (within the context of its own process) windows Service named “BatPost Dispatcher”.
Publisher:
RITLABS S.R.L.  (signed and verified)

Product:
BatPost

Description:
BatPost E-Mail Server by Ritlabs

Version:
3.01.002

MD5:
4c824a489886bbcf3f0a7e016f881c04

SHA-1:
84298817bdff1ec55a5e91f733a89920c687a49f

SHA-256:
44786b731ef2895db249a8f8c31d1f7168ae7b34ca2aa46e7a0af03ac5d4893e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:48:28 PM UTC  (today)

File size:
324.8 KB (332,600 bytes)

Product version:
3.01.002

Copyright:
Copyright (C) 1997-2011 Ritlabs S.R.L.

Original file name:
BatPost E-Mail Server by Ritlabs

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\batpost\batpostd.exe

Digital Signature
Signed by:
RITLABS S.R.L.

Authority:
VeriSign, Inc.

Valid from:
7/3/2009 3:00:00 AM

Valid to:
7/4/2012 2:59:59 AM

Subject:
CN=RITLABS S.R.L., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=RITLABS S.R.L., L=Chisinau, S=MD, C=MD

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4937EA1F1A1D047E261DACAD6990914C

File PE Metadata
Compilation timestamp:
6/13/2011 3:03:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:p3499HBXtmXNVh2rshipnENCj5+T8/NKwvP6bQ7yMP+DE827Gl0Qdo:A3E9Vhni6NCj5q8/Nr6b7MP+Dd2g0eo

Entry address:
0x1000

Entry point:
68, 01, F0, 48, 00, E8, 01, 00, 00, 00, C3, C3, 9F, 34, 28, C2, 1A, 69, C7, 53, BF, 40, 8D, 86, 47, DC, 02, 85, 3D, C5, F1, 73, 45, 10, C1, EA, FC, 0E, B1, 40, C1, DD, AE, F9, 5D, F0, 60, 11, 33, 31, CE, 56, 19, CA, EC, 91, C4, 97, CE, 69, 1F, DE, 7E, 71, 4B, 2E, AC, 50, 61, 4B, 78, 48, CA, 43, 98, 07, DC, 48, E6, 91, 31, 5B, 8D, F9, 64, 77, 8B, B8, 2B, CC, 51, 09, 51, 65, 33, 06, 3B, 92, 11, D6, 7A, B6, B2, 53, 75, 05, 7D, B1, 7D, 90, 3F, F2, 27, 83, 96, 56, 88, A5, 9F, 54, B4, D8, 04, 0E, 8A, 41, 98, 1B...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
422.5 KB (432,640 bytes)

Service
Display name:
BatPost Dispatcher

Service name:
BatPost_Dispatcher

Description:
Controls execution of BatPost Server

Type:
Win32OwnProcess


Scan batpostd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.