winresume.exe

  • File Path: C:\windows\system32\winresume.exe
  • Description: Resume From Hibernate boot application

Hashes

Type Hash
MD5 5972AFF680FAECF58D49086966F791AA
SHA1 4E1C5674380AED563D51A2627BAC793EE12B2EE9
SHA256 84AE4C7B424A58781E7A59AC306031BAF6B111EAEFB6E50D01C66AB0EBCE3E46
SHA384 DE29F1928A61BA83F282F27C837F696E2B9747E3735B3C24032028ED816F514F28CF4BC8291CBB13D834B8CCB8D6318C
SHA512 CD9BBD818C59369F106D555E6A86B4E68C7D962AB1BFFB836B3E73B76511686E839F592C6A64A4F13A239E9F5C7DFE470BC640D862CF118F9552CD321058911F
SSDEEP 24576:NSfUiHKYv2sjGn3T8gjBnxH5zM4pwydb5xWMOTh1G/UANmHkfBQzcBn4:NUqYL6nYGnx+8wyd5x5OwUANWzZ

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: hiberrsm.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.16384 (winblue_rtm.130821-1623)
  • Product Version: 6.3.9600.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\windows\system32\Boot\winload.exe 33
C:\windows\system32\Boot\winresume.exe 38
C:\windows\system32\winload.exe 35

MIT License. Copyright (c) 2020-2021 Strontic.