winresume.exe

  • File Path: C:\Windows\system32\Boot\winresume.exe
  • Description: Resume From Hibernate boot application

Hashes

Type Hash
MD5 D9341DC8E1A66AC40B3CDF5BB6BE151B
SHA1 ED64E0E8583203C5C8A9FB382E377874B9527D18
SHA256 093A8BBF4407FCB92E6D70CCBEADB7F7489C81C91A5149976F04FA923132407C
SHA384 E1E6AD79D831AEF8EB35A4A201B4BE58E75C7C7294C50FEFEC6CCA1E6ED617E277DE62C1122D48BD6872C608C72416D8
SHA512 B02855CB35ACF923F7BFEDCA3F37EF5FF3E8FC1B4CF598CA4AEEBC48CAC2D1955B41F4218B78954B02761B157540CE0AFE68E0567C0B76AE6CB0595D93215826
SSDEEP 24576:1C1vP37zfr+k0k9VyJ7BAs2cJSidPm7oI0J:Y3ri71BgcQihm8/
PESHA1 1227014AA7DB24562C208047B3E2CD091159D493
PE256 395372FE87F65834C800A995E3DE16802E684811986A18F2F2A0D4A6F6E94177

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: hiberrsm.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/093a8bbf4407fcb92e6d70ccbeadb7f7489c81c91a5149976f04fa923132407c/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\winresume.exe 100

MIT License. Copyright (c) 2020-2021 Strontic.