winver.exe
- File Path:
C:\WINDOWS\system32\winver.exe
- Description: Version Reporter Applet
Screenshot
Hashes
Type | Hash |
---|---|
MD5 | BB7A76D48B80F22A57AF7A9368F4350A |
SHA1 | 43DA08DC335BC6F938AD12EB1F17BD60D6738649 |
SHA256 | 9D3B7AF75AD2CEA3ED7B41B9BB68B795C44E06B0A2A755E215A3A53893C9BC5C |
SHA384 | 60E808C0BC93A19C6F83D7C5491D62770E5E38244459C614931643597A4190A31B5D271272F70181F189CEBF15F9CC34 |
SHA512 | B8DDB9CBABB037337BBAABDBB5466C94DCB8970D3C1C8741FF0A67B2F9B29C79E37D3024F2669C904D556A8D48F698F0792D84AAB3675027643310D22E46C8C2 |
SSDEEP | 192:8VIA0NmTJVxj1Zso2BZIEhrr8bjEhry5C73p4afWyZepplLUWAsWi:rAICJXjQo4ZZrZrWC7u1y4pplgWAsW |
IMP | 92BE77A081419D46930EEB51BF20D61B |
PESHA1 | DA15F8A702B5D6E8B818E13B05255B59D2FD1098 |
PE256 | 745245D6137CB46EDEEAEBA189E2A8CF0942267914E9BCD09CBC28A387725DDE |
Runtime Data
Window Title:
About Windows
Open Handles:
Path | Type |
---|---|
(R-D) C:\Windows\Fonts\StaticCache.dat | File |
(R-D) C:\Windows\System32\en-US\shell32.dll.mui | File |
(R-D) C:\Windows\System32\en-US\winver.exe.mui | File |
(R-D) C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_6b887e04d8b70b4e\comctl32.dll.mui | File |
(RW-) C:\Windows\System32 | File |
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_6b887e04d8b70b4e | File |
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467 | File |
\BaseNamedObjects__ComCatalogCache__ | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro | Section |
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
\Sessions\2\Windows\Theme1077709572 | Section |
\Windows\Theme3461253685 | Section |
Loaded Modules:
Path |
---|
C:\WINDOWS\System32\KERNEL32.DLL |
C:\WINDOWS\System32\KERNELBASE.dll |
C:\WINDOWS\SYSTEM32\ntdll.dll |
C:\WINDOWS\System32\USER32.dll |
C:\WINDOWS\system32\winver.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: WINVER.EXE.MUI
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/74
- VirusTotal Link: https://www.virustotal.com/gui/file/9d3b7af75ad2cea3ed7b41b9bb68b795c44e06b0a2a755e215a3a53893c9bc5c/detection
MIT License. Copyright (c) 2020-2021 Strontic.