powercfg.cpl

  • File Path: C:\Windows\system32\powercfg.cpl
  • Description: Power Management Configuration Control Panel Applet

Hashes

Type Hash
MD5 40AC1B322FE470990DE133F1395E7878
SHA1 993CC1366A7FFF1DED9B0CFB53368AE6B0CABF89
SHA256 4B4AB4EEC549313A67B7B2C77BFE149F545E45AD577332F5626563ED3610DA75
SHA384 3BAE047836603F665A858BDAE53C32AF4B6A0E08B38FC167148E41312E80908C3E687B9F0E04ED3E1DD3D651FD7C2E55
SHA512 2801172CB284C99AC0445E5BA3F981B332FCED9DCFEA7EBB09C9D0675C3324C469B6C22E12A867350B6D8D45EC488EACD409E7D8C31BCDAA42500C95830EE23E
SSDEEP 3072:ODOb1bMEjv1IfZn8RxjLvkHvKyWcfzOm9MDdYP08nkZt6Dl7Yes:ODe1jjSQZLPIfmDdYs8nkZ0Y
IMP 728E9D9996552F647A0A278FBB80196C
PESHA1 632CF488BCB150384C41F39CC74B91955A778314
PE256 678F1C2B30BB2FF876DDB99CE94A1CF10085679C3EA339F3A97D23DDBA64A472

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\imagehlp.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\SYSTEM32\rundll32.exe
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: POWERCFG.CPL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/4b4ab4eec549313a67b7b2c77bfe149f545e45ad577332f5626563ed3610da75/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\powrprof.dll 55
C:\Windows\SysWOW64\powercfg.cpl 54
C:\Windows\SysWOW64\powrprof.dll 49

MIT License. Copyright (c) 2020-2021 Strontic.