winresume.exe

  • File Path: C:\windows\system32\Boot\winresume.exe
  • Description: Resume From Hibernate boot application

Hashes

Type Hash
MD5 4FC909E0BD9CF003729B9727281BA847
SHA1 B7A70ED7E461A589B3E16B360DB86A06C81EAC0D
SHA256 47AD7012A9F441AA8C693A289D9B91EB6E57679E3E798256179A61BCE64F773F
SHA384 AD96A7D7B0FE8329183FE38255811A04E98A83C3E5F86B93EE3300343A0A2DAEDD2D910AC477218299131A40FC751C13
SHA512 68E624A6097B82E05CBC5C6499207C0EA8519D7E2B8A33AAE7E6A2F3D9165F753B4AD4054C00F5658167B7C4BE1A8F9BF969FC7796800B8D0999488721CA3398
SSDEEP 24576:Py+JVSmbRfzi7AfnpEmz2q3EwwvucmBdtth2x5xWMOTh1G4DwKcU1BQ+cB77:PrSqRW7A2mx3s2cMHhc5x5O3Dw1+W

Signature

  • Status: Signature verified.
  • Serial: 33000000BCE120FDD27CC8EE930000000000BC
  • Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: hiberrsm.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.16384 (winblue_rtm.130821-1623)
  • Product Version: 6.3.9600.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\windows\system32\Boot\winload.exe 30
C:\windows\system32\winload.exe 33
C:\windows\system32\winresume.exe 38

MIT License. Copyright (c) 2020-2021 Strontic.