winresume.exe

  • File Path: C:\WINDOWS\system32\winresume.exe
  • Description: Resume From Hibernate boot application

Hashes

Type Hash
MD5 2254828A21069FDCBDC9B39F9F783CBF
SHA1 B2752F03BBF5CC320CC0B6C1C541B5F23A92314D
SHA256 2E8DCC11086A97DED6C1AD9B963134A1BE885B610D8A978BF642EB2708AC758E
SHA384 DCAFACE1725FB5CF8BE7B7C36F2D1FEDF5A2CB01D3CC87092C11C561A6975EFB85BBCAF10227F1F074185B3DA9F6DAD8
SHA512 0B4E5BC59C137D55EA5A652EFF816D69D859E7B311820A9F5EA8281C3B8F194E505C4A2A06187BFC59AA3A531395B0E8407936B8B0AD4FC38F94C5F0D5CC1A79
SSDEEP 24576:Qkqbixk/UQMXApgYCStjrIM1KGkysqBzY7R6J8Nw:D2dyY3tjGGdswzKRlN
PESHA1 BC67DC8EFF843EACCB84A61549ECA155D888EAB3
PE256 D8B3694F1D3427E80C48563949E3D0A6929C6735C100A4D134C642C442DC45BA

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: hiberrsm.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\Boot\winresume.exe 100

MIT License. Copyright (c) 2020-2021 Strontic.