winresume.exe

  • File Path: C:\Windows\system32\winresume.exe
  • Description: Resume From Hibernate boot application

Hashes

Type Hash
MD5 FFC7A70B844C3CBA7F97D7E0434AB7F7
SHA1 8388231DF03CF07C6FFD7A35760AD740CCCAA0B3
SHA256 5F55D1A1DEB8508A31F5630F9716F81E58A8E05FA1A7B8043F26BE618149B9EA
SHA384 87B898539B4AC6F5E153BE2DAA40AC99740B4AC9203DEF5F6DE4552BE224C793823742D43E3AD6FB8143597F2D971820
SHA512 060E15141DE39C8DEBB6EBB8FC04FB1561FDE576A41BEFBC27A65D2F5FE5F5E92293AEAC00B1C72786A9CE1F05D0134FA59F1DC9DE790C1EE68F0A6B25A92E18
SSDEEP 24576:BP4+yfOzoiHHgHMzOFncU32P+0p/y1uoImZuZRVb:BA+yf8qHF932+cqZ0b
PESHA1 B1C45934895D4B64803D4F865E5C7AB73976BAEF
PE256 0A4A24F766CFE65D143FF20BE4056192B907CC4F4D416E92FEEE46C28943E0F2

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: hiberrsm.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\Windows\system32\Boot\winresume.exe 100

MIT License. Copyright (c) 2020-2021 Strontic.