winresume.exe

  • File Path: C:\Windows\system32\winresume.exe
  • Description: Resume From Hibernate boot application

Hashes

Type Hash
MD5 5E23A7B0416C9C2AFFAA6D5A827876E9
SHA1 6C94D4239CD83E74B19EE3FF1843031474B015BC
SHA256 5961BC573DAF3BE2774C7585CA09938B2B6C4E61660EC80F86C90E7162509D62
SHA384 59E224164CFED0ECD98ACA883B1E0928EFBD7594749F9DA4C94735F2ED5A4FE92EEF05F199AC1DA8F0EDA5F226104E2B
SHA512 01127D656A81DFA0810E1134905F902F3743E129E43002B98181C3744332B93F845B89CB26F6F5ABBE83A1502E33F8BA547B910EE11FA16C9CCA36E595E95553
SSDEEP 24576:0e1a8eGOECpXDZuYTkkgZJAmDACPm2oIXKkF:DlChFD8AmMombEF

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: hiberrsm.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\Boot\winresume.exe 100

MIT License. Copyright (c) 2020-2021 Strontic.