MS15-015: Vulnerability in Microsoft Windows could allow elevation of privilege: February 10, 2015

View products that this article applies to.

Summary

This security update resolves a vulnerability in Microsoft Windows that could allow an attacker to take advantage of the lack of impersonation-level security checks to elevate privileges during process creation. An authenticated attacker who successfully exploited this vulnerability could obtain administrator credentials and use them to elevate privileges. An attacker could then do the following:

Install programs
View, change, or delete data
Create new accounts that have full administrative rights

↑ Back to the top

Introduction

Microsoft has released security bulletin MS15-015. To learn more about this security bulletin:

Home users:
https://www.microsoft.com/security/pc-security/updates.aspx
Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:
https://update.microsoft.com/microsoftupdate/
IT professionals:
https://technet.microsoft.com/library/security/MS15-015

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top

More Information

Known issues with this security update

This security update may cause some programs or games to fail if they rely on undocumented APIs or if they access operating system components in unsupported ways. Please contact the manufacturer of your program or game for more information.

For information about how to contact the manufacturer, click the appropriate article number in the following list to view the article in the Microsoft Knowledge Base:

65416
Hardware and software vendor contact information, A-K

60781
Hardware and software vendor contact information, L-P

60782
Hardware and software vendor contact information, Q-Z

Child package behavior

Customers who install this security update may face a known issue in which error 1108 is generated in the Security event log instead of the usual 4688 audit event. To address this issue, update 3004375 must be installed together with this update (update 3031432).

Note This issue was first encountered in security update 3023266 (MS15-001).

For Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 customers

On Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012, update package 3004375 is installed together with update 3031432.

For Windows Update, Windows Server Update Services (WSUS), and Microsoft Catalog customers

Update 3004375 is installed automatically and transparently together with security update 3031432. Update 3004375 will appear separately in the list of installed updates when it is viewed in the Add or Remove Programs item in Control Panel. Installing both packages together requires only one restart.

For Download Center customers

To address the known issue, if you download and then install this security update from the Microsoft Download Center for Windows 7, Windows Server 2008 R2, Windows 8, or Windows Server 2012, you should select both update 3004375 and update 3031432. You must install both of these updates to address the known issue.

Security update deployment information

Windows 7 (all editions)

Reference Table

The following table contains the security update information for this software.

Security update file name	For all supported 32-bit editions of Windows 7: Windows6.1-KB3031432-x86.msu
	For all supported x64-based editions of Windows 7: Windows6.1-KB3031432-x64.msu
Installation switches	See Microsoft Knowledge Base Article 934307
Restart requirement	You must restart your system after you apply this security update.
Removal information	To uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, and under Windows Update, click View installed updates, and then select from the list of updates.
File information	See the file information section.
Registry key verification	Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 R2 (all editions)

Reference Table

The following table contains the security update information for this software.

Security update file name	For all supported x64-based editions of Windows Server 2008 R2: Windows6.1-KB3031432-x64.msu
	For all supported Itanium-based editions of Windows Server 2008 R2: Windows6.1-KB3031432-ia64.msu
Installation switches	See Microsoft Knowledge Base Article 934307
Restart requirement	You must restart your system after you apply this security update.
Removal information	To uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, and under Windows Update, click View installed updates, and then select from the list of updates.
File information	See the file information section.
Registry key verification	Note A registry key does not exist to validate the presence of this update.

Windows 8 and Windows 8.1 (all editions)

Reference Table

The following table contains the security update information for this software.

Security update file name	For all supported 32-bit editions of Windows 8: Windows8-RT-KB3031432-x86.msu
	For all supported x64-based editions of Windows 8: Windows8-RT-KB3031432-x64.msu
	For all supported 32-bit editions of Windows 8.1: Windows8.1-KB3031432-x86.msu
	For all supported x64-based editions of Windows 8.1: Windows8.1-KB3031432-x64.msu
Installation switches	See Microsoft Knowledge Base Article 934307
Restart requirement	You must restart your system after you apply this security update.
Removal information	To uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, click Windows Update, and under See also, click Installed updates, and then select from the list of updates.
File information	See the file information section.
Registry key verification	Note A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)

Reference Table

The following table contains the security update information for this software.

Security update file name	For all supported editions of Windows Server 2012: Windows8-RT-KB3031432-x64.msu
	For all supported editions of Windows Server 2012 R2: Windows8.1-KB3031432-x64.msu
Installation switches	See Microsoft Knowledge Base Article 934307
Restart requirement	You must restart your system after you apply this security update.
Removal information	To uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, click Windows Update, and under See also, click Installed updates, and then select from the list of updates.
File information	See the file information section.
Registry key verification	Note A registry key does not exist to validate the presence of this update.

Windows RT and Windows RT 8.1 (all editions)

Reference Table

The following table contains the security update information for this software.

Deployment	These updates are available only through Windows Update.
Restart Requirement	Yes, you must restart your system after you apply this security update.
Removal Information	Click Control Panel, click System and Security, click Windows Update, and under See also, click Installed updates, and then select from the list of updates.
File Information	See the file information section.

↑ Back to the top

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information

The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version Product Milestone Service branch
6.1.7601.18xxx Windows 7 and Windows Server 2008 R2 SP1 GDR
6.1.7601.22xxx Windows 7 and Windows Server 2008 R2 SP1 LDR
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Version	Product	Milestone	Service branch
6.1.7601.18xxx	Windows 7 and Windows Server 2008 R2	SP1	GDR
6.1.7601.22xxx	Windows 7 and Windows Server 2008 R2	SP1	LDR

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File name	File version	File size	Date	Time	Platform
Appid-ppdlic.xrm-ms	Not Applicable	3,013	12-Jan-2015	03:26	Not Applicable
Appid.sys	6.1.7601.22736	50,688	07-Jul-2014	00:45	x86
Appidapi.dll	6.1.7601.22736	50,688	07-Jul-2014	01:40	x86
Appidcertstorecheck.exe	6.1.7601.22653	16,896	12-Apr-2014	02:06	x86
Appidpolicyconverter.exe	6.1.7601.22653	97,792	12-Apr-2014	02:06	x86
Appidsvc.dll	6.1.7601.22736	29,696	07-Jul-2014	01:40	x86
Setbcdlocale.dll	6.1.7601.22780	50,176	19-Aug-2014	02:48	x86
Winload.exe	6.1.7601.22854	521,384	29-Oct-2014	02:16	x86
Winresume.exe	6.1.7601.22730	456,776	28-Jun-2014	00:22	x86
Winload.exe.mui	6.1.7600.16385	34,896	14-Jul-2009	01:49	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,384	14-Jul-2009	01:49	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,920	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	36,944	14-Jul-2009	01:46	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,344	14-Jul-2009	01:11	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,136	07-Jul-2014	01:33	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	01:49	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,880	14-Jul-2009	01:46	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:46	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,904	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,392	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	01:48	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,680	07-Jul-2014	02:48	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,264	14-Jul-2009	03:45	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,576	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,776	14-Jul-2009	03:02	Not Applicable
Winresume.exe.mui	6.1.7601.22736	28,088	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,384	14-Jul-2009	01:46	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,392	14-Jul-2009	01:52	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:47	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,904	14-Jul-2009	01:52	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:51	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	01:53	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,920	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,896	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,384	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:45	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,872	14-Jul-2009	01:53	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	03:02	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,072	07-Jul-2014	02:52	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	01:43	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	02:47	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	03:02	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	02:56	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,896	14-Jul-2009	01:49	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,384	14-Jul-2009	01:49	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,920	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	36,944	14-Jul-2009	01:46	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,344	14-Jul-2009	01:11	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,136	07-Jul-2014	01:33	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	01:49	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,880	14-Jul-2009	01:46	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:46	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,904	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,392	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	01:48	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,680	07-Jul-2014	02:48	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,264	14-Jul-2009	03:45	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,576	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,776	14-Jul-2009	03:02	Not Applicable
Winresume.exe.mui	6.1.7601.22736	28,088	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,384	14-Jul-2009	01:46	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,392	14-Jul-2009	01:52	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:47	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,904	14-Jul-2009	01:52	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:51	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	01:53	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,920	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,896	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,384	14-Jul-2009	01:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:45	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,872	14-Jul-2009	01:53	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	03:02	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,072	07-Jul-2014	02:52	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	01:43	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	02:47	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	03:02	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	02:56	Not Applicable
Winload.exe	6.1.7601.22854	521,384	29-Oct-2014	02:16	x86
Winresume.exe	6.1.7601.22730	456,776	28-Jun-2014	00:22	x86
Ci.dll.mui	6.1.7601.22736	10,752	07-Jul-2014	02:24	Not Applicable
Ci.dll.mui	6.1.7601.22736	9,728	07-Jul-2014	01:35	Not Applicable
Ci.dll.mui	6.1.7601.22736	10,752	07-Jul-2014	02:24	Not Applicable
Ci.dll.mui	6.1.7601.22736	10,752	07-Jul-2014	02:25	Not Applicable
Ci.dll.mui	6.1.7601.22736	11,264	07-Jul-2014	02:24	Not Applicable
Ci.dll.mui	6.1.7601.22736	6,656	07-Jul-2014	02:24	Not Applicable
Ci.dll.mui	6.1.7601.22736	9,728	07-Jul-2014	02:21	Not Applicable
Ci.dll	6.1.7601.22730	409,272	28-Jun-2014	00:22	x86
Driver.stl	Not Applicable	4,186	26-Jun-2014	22:21	Not Applicable
Csrsrv.dll	6.1.7601.18113	38,912	19-Mar-2013	04:48	x86
Csrsrv.dll	6.1.7601.22653	38,912	12-Apr-2014	02:06	x86
Setbcdlocale.dll	6.1.7601.22780	50,176	19-Aug-2014	02:48	x86
Winload.exe	6.1.7601.22854	521,384	29-Oct-2014	02:16	x86
Winresume.exe	6.1.7601.22921	456,784	12-Jan-2015	03:15	x86
Winload.exe.mui	6.1.7601.17514	34,688	20-Nov-2010	12:50	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,176	20-Nov-2010	12:50	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,720	02-Apr-2010	04:13	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7601.17514	36,736	20-Nov-2010	12:50	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,168	02-Apr-2010	04:09	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,136	07-Jul-2014	01:33	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	02-Apr-2010	04:10	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,688	20-Nov-2010	12:50	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:46	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,728	02-Apr-2010	04:10	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7601.17514	35,200	20-Nov-2010	12:58	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	02-Apr-2010	04:08	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,680	07-Jul-2014	02:48	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,072	02-Apr-2010	05:06	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,576	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7601.17514	29,568	20-Nov-2010	13:45	Not Applicable
Winresume.exe.mui	6.1.7601.22736	28,088	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,176	20-Nov-2010	12:49	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	07-Apr-2010	09:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:47	Not Applicable
Winload.exe.mui	6.1.7601.17514	35,712	20-Nov-2010	12:59	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:51	Not Applicable
Winload.exe.mui	6.1.7601.17514	35,200	20-Nov-2010	13:01	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7601.17514	35,712	20-Nov-2010	12:59	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,688	20-Nov-2010	12:58	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:50	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,176	20-Nov-2010	12:58	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:45	Not Applicable
Winload.exe.mui	6.1.7601.17514	33,664	20-Nov-2010	13:01	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7601.17514	28,032	20-Nov-2010	13:45	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,072	07-Jul-2014	02:52	Not Applicable
Winload.exe.mui	6.1.7601.17514	28,032	20-Nov-2010	12:45	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	02:47	Not Applicable
Winload.exe.mui	6.1.7601.17514	28,032	20-Nov-2010	13:46	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	02:56	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,720	02-Apr-2010	04:13	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,168	02-Apr-2010	04:09	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,136	07-Jul-2014	01:33	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	02-Apr-2010	04:10	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:53	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,728	02-Apr-2010	04:10	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	02:54	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	02-Apr-2010	04:08	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,680	07-Jul-2014	02:48	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,072	02-Apr-2010	05:06	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,576	07-Jul-2014	02:57	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	07-Apr-2010	09:51	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	02:47	Not Applicable
Winload.exe	6.1.7601.22854	521,384	29-Oct-2014	02:16	x86
Winresume.exe	6.1.7601.22921	456,784	12-Jan-2015	03:15	x86
Ntkrnlpa.exe	6.1.7601.18715	3,972,544	12-Jan-2015	02:47	Not Applicable
Ntoskrnl.exe	6.1.7601.18715	3,917,760	12-Jan-2015	02:47	Not Applicable
Ntkrnlpa.exe	6.1.7601.22921	3,977,664	12-Jan-2015	03:18	Not Applicable
Ntoskrnl.exe	6.1.7601.22921	3,921,856	12-Jan-2015	03:17	Not Applicable
Apisetschema.dll	6.1.7600.16385	6,656	14-Jul-2009	01:03	x86
Smss.exe	6.1.7601.18113	69,632	19-Mar-2013	02:49	x86
Apisetschema.dll	6.1.7601.22653	6,656	12-Apr-2014	02:03	x86
Smss.exe	6.1.7601.22653	69,632	12-Apr-2014	02:06	x86
Apisetschema.dll	6.1.7600.16385	12,648	02-Apr-2010	03:07	x86
Smss.exe	6.1.7601.18113	69,632	19-Mar-2013	02:49	x86
Apisetschema.dll	6.1.7601.22653	6,656	12-Apr-2014	02:03	x86
Smss.exe	6.1.7601.22653	69,632	12-Apr-2014	02:06	x86
Rstrui.exe	6.1.7601.21988	262,656	05-May-2012	07:29	x86
Srclient.dll	6.1.7601.21988	43,008	05-May-2012	07:33	x86
Srcore.dll	6.1.7601.22780	400,896	19-Aug-2014	02:48	x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name	File version	File size	Date	Time	Platform
Appid-ppdlic.xrm-ms	Not Applicable	3,013	12-Jan-2015	03:44	Not Applicable
Appid.sys	6.1.7601.22736	62,464	07-Jul-2014	01:04	x64
Appidapi.dll	6.1.7601.22736	58,880	07-Jul-2014	02:06	x64
Appidcertstorecheck.exe	6.1.7601.22653	17,920	12-Apr-2014	02:31	x64
Appidpolicyconverter.exe	6.1.7601.22653	148,480	12-Apr-2014	02:31	x64
Appidsvc.dll	6.1.7601.22736	34,304	07-Jul-2014	02:06	x64
Setbcdlocale.dll	6.1.7601.22780	63,488	19-Aug-2014	03:05	x64
Winload.efi	6.1.7601.22921	693,176	12-Jan-2015	03:33	Not Applicable
Winload.exe	6.1.7601.22854	619,056	29-Oct-2014	02:16	x64
Winresume.efi	6.1.7601.22921	617,376	12-Jan-2015	03:30	Not Applicable
Winresume.exe	6.1.7601.22730	533,200	28-Jun-2014	00:21	x64
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,896	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:06	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,368	14-Jul-2009	02:06	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:43	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:43	Not Applicable
Winload.efi.mui	6.1.7600.16385	35,920	14-Jul-2009	02:10	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,904	14-Jul-2009	02:10	Not Applicable
Winresume.efi.mui	6.1.7601.22736	31,160	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:06	Not Applicable
Winload.exe.mui	6.1.7600.16385	36,944	14-Jul-2009	02:06	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	01:31	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,344	14-Jul-2009	01:31	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	01:59	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,136	07-Jul-2014	01:59	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:06	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,896	14-Jul-2009	02:06	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:31	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:31	Not Applicable
Winload.efi.mui	6.1.7600.16385	35,920	14-Jul-2009	02:10	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,920	14-Jul-2009	02:10	Not Applicable
Winresume.efi.mui	6.1.7601.22736	31,680	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,680	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,392	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:35	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	03:35	Not Applicable
Winload.efi.mui	6.1.7600.16385	29,264	14-Jul-2009	02:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,264	14-Jul-2009	02:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,576	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,576	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	29,776	14-Jul-2009	03:17	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,776	14-Jul-2009	03:17	Not Applicable
Winresume.efi.mui	6.1.7601.22736	28,088	07-Jul-2014	03:41	Not Applicable
Winresume.exe.mui	6.1.7601.22736	28,088	07-Jul-2014	03:41	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:06	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,368	14-Jul-2009	02:06	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:31	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:31	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:00	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	02:00	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:41	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:41	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:00	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,904	14-Jul-2009	02:00	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:00	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,392	14-Jul-2009	02:00	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,920	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:32	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:32	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:10	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,880	14-Jul-2009	02:10	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,368	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:00	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,856	14-Jul-2009	02:00	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	28,224	14-Jul-2009	03:17	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	03:17	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,072	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	28,224	14-Jul-2009	02:03	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,240	14-Jul-2009	02:03	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,072	07-Jul-2014	03:29	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,072	07-Jul-2014	03:29	Not Applicable
Winload.efi.mui	6.1.7600.16385	28,240	14-Jul-2009	03:17	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	03:17	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,064	07-Jul-2014	03:35	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	03:35	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,896	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:06	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,368	14-Jul-2009	02:06	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:43	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:43	Not Applicable
Winload.efi.mui	6.1.7600.16385	35,920	14-Jul-2009	02:10	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,904	14-Jul-2009	02:10	Not Applicable
Winresume.efi.mui	6.1.7601.22736	31,160	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:06	Not Applicable
Winload.exe.mui	6.1.7600.16385	36,944	14-Jul-2009	02:06	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	01:31	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,344	14-Jul-2009	01:31	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	01:59	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,136	07-Jul-2014	01:59	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:06	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,896	14-Jul-2009	02:06	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:31	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:31	Not Applicable
Winload.efi.mui	6.1.7600.16385	35,920	14-Jul-2009	02:10	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,920	14-Jul-2009	02:10	Not Applicable
Winresume.efi.mui	6.1.7601.22736	31,680	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,680	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,392	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:35	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	03:35	Not Applicable
Winload.efi.mui	6.1.7600.16385	29,264	14-Jul-2009	02:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,264	14-Jul-2009	02:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,576	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,576	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	29,776	14-Jul-2009	03:17	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,776	14-Jul-2009	03:17	Not Applicable
Winresume.efi.mui	6.1.7601.22736	28,088	07-Jul-2014	03:41	Not Applicable
Winresume.exe.mui	6.1.7601.22736	28,088	07-Jul-2014	03:41	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:06	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,368	14-Jul-2009	02:06	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:31	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:31	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:00	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,408	14-Jul-2009	02:00	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:41	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:41	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:00	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,904	14-Jul-2009	02:00	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:00	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,392	14-Jul-2009	02:00	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,920	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:32	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:32	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:10	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,880	14-Jul-2009	02:10	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,360	14-Jul-2009	02:09	Not Applicable
Winload.exe.mui	6.1.7600.16385	34,368	14-Jul-2009	02:09	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,344	14-Jul-2009	02:00	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,856	14-Jul-2009	02:00	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	28,224	14-Jul-2009	03:17	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	03:17	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,072	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	28,224	14-Jul-2009	02:03	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,240	14-Jul-2009	02:03	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,072	07-Jul-2014	03:29	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,072	07-Jul-2014	03:29	Not Applicable
Winload.efi.mui	6.1.7600.16385	28,240	14-Jul-2009	03:17	Not Applicable
Winload.exe.mui	6.1.7600.16385	28,224	14-Jul-2009	03:17	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,064	07-Jul-2014	03:35	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	03:35	Not Applicable
Winload.efi	6.1.7601.22921	693,176	12-Jan-2015	03:33	Not Applicable
Winload.exe	6.1.7601.22854	619,056	29-Oct-2014	02:16	x64
Winresume.efi	6.1.7601.22921	617,376	12-Jan-2015	03:30	Not Applicable
Winresume.exe	6.1.7601.22730	533,200	28-Jun-2014	00:21	x64
Ci.dll.mui	6.1.7601.22736	10,752	07-Jul-2014	03:16	Not Applicable
Ci.dll.mui	6.1.7601.22736	9,728	07-Jul-2014	02:01	Not Applicable
Ci.dll.mui	6.1.7601.22736	10,752	07-Jul-2014	03:15	Not Applicable
Ci.dll.mui	6.1.7601.22736	10,752	07-Jul-2014	03:16	Not Applicable
Ci.dll.mui	6.1.7601.22736	11,264	07-Jul-2014	03:15	Not Applicable
Ci.dll.mui	6.1.7601.22736	6,656	07-Jul-2014	03:14	Not Applicable
Ci.dll.mui	6.1.7601.22736	9,728	07-Jul-2014	03:15	Not Applicable
Ci.dll	6.1.7601.22730	457,400	28-Jun-2014	00:21	x64
Driver.stl	Not Applicable	4,186	26-Jun-2014	22:22	Not Applicable
Csrsrv.dll	6.1.7601.18229	43,520	02-Aug-2013	02:12	x64
Csrsrv.dll	6.1.7601.22653	43,520	12-Apr-2014	02:31	x64
Setbcdlocale.dll	6.1.7601.22780	63,488	19-Aug-2014	03:05	x64
Winload.efi	6.1.7601.22921	693,176	12-Jan-2015	03:33	Not Applicable
Winload.exe	6.1.7601.22854	619,056	29-Oct-2014	02:16	x64
Winresume.efi	6.1.7601.22921	571,320	12-Jan-2015	03:33	Not Applicable
Winresume.exe	6.1.7601.22921	533,200	12-Jan-2015	03:30	x64
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:38	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,688	20-Nov-2010	13:38	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:40	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,176	20-Nov-2010	13:40	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:43	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:43	Not Applicable
Winload.efi.mui	6.1.7600.16385	35,728	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,728	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	31,160	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:40	Not Applicable
Winload.exe.mui	6.1.7601.17514	36,736	20-Nov-2010	13:40	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,168	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,160	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	01:59	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,136	07-Jul-2014	01:59	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,160	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:36	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,688	20-Nov-2010	13:36	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:31	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:31	Not Applicable
Winload.efi.mui	6.1.7600.16385	35,728	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,728	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	31,680	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,680	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:47	Not Applicable
Winload.exe.mui	6.1.7601.17514	35,200	20-Nov-2010	13:47	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,160	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:35	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	03:35	Not Applicable
Winload.efi.mui	6.1.7600.16385	29,064	02-Apr-2010	05:17	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,064	02-Apr-2010	05:17	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,576	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,576	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7601.17514	29,568	20-Nov-2010	14:34	Not Applicable
Winload.exe.mui	6.1.7601.17514	29,568	20-Nov-2010	14:34	Not Applicable
Winresume.efi.mui	6.1.7601.22736	28,088	07-Jul-2014	03:41	Not Applicable
Winresume.exe.mui	6.1.7601.22736	28,088	07-Jul-2014	03:41	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:42	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,176	20-Nov-2010	13:42	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:31	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:31	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,160	07-Apr-2010	17:47	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,208	07-Apr-2010	17:47	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:41	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:41	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:48	Not Applicable
Winload.exe.mui	6.1.7601.17514	35,712	20-Nov-2010	13:48	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:49	Not Applicable
Winload.exe.mui	6.1.7601.17514	35,200	20-Nov-2010	13:49	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,656	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:47	Not Applicable
Winload.exe.mui	6.1.7601.17514	35,712	20-Nov-2010	13:47	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:32	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:32	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:48	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,688	20-Nov-2010	13:48	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:48	Not Applicable
Winload.exe.mui	6.1.7601.17514	34,176	20-Nov-2010	13:48	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:37	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:37	Not Applicable
Winload.efi.mui	6.1.7601.17514	33,152	20-Nov-2010	13:49	Not Applicable
Winload.exe.mui	6.1.7601.17514	33,664	20-Nov-2010	13:49	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,144	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,648	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7601.17514	28,032	20-Nov-2010	14:34	Not Applicable
Winload.exe.mui	6.1.7601.17514	28,032	20-Nov-2010	14:34	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,072	07-Jul-2014	03:33	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	03:33	Not Applicable
Winload.efi.mui	6.1.7601.17514	28,032	20-Nov-2010	13:38	Not Applicable
Winload.exe.mui	6.1.7601.17514	28,032	20-Nov-2010	13:38	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,072	07-Jul-2014	03:29	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,072	07-Jul-2014	03:29	Not Applicable
Winload.efi.mui	6.1.7601.17514	28,032	20-Nov-2010	14:34	Not Applicable
Winload.exe.mui	6.1.7601.17514	28,032	20-Nov-2010	14:34	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,064	07-Jul-2014	03:35	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,064	07-Jul-2014	03:35	Not Applicable
Winload.efi.mui	6.1.7600.16385	35,728	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,728	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	31,160	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,168	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	33,160	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	01:59	Not Applicable
Winresume.exe.mui	6.1.7601.22736	30,136	07-Jul-2014	01:59	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,160	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:36	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,160	07-Jul-2014	03:36	Not Applicable
Winload.efi.mui	6.1.7600.16385	35,728	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,728	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	31,680	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,680	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,160	02-Apr-2010	04:22	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,216	02-Apr-2010	04:22	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:35	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,672	07-Jul-2014	03:35	Not Applicable
Winload.efi.mui	6.1.7600.16385	29,064	02-Apr-2010	05:17	Not Applicable
Winload.exe.mui	6.1.7600.16385	29,064	02-Apr-2010	05:17	Not Applicable
Winresume.efi.mui	6.1.7601.22736	27,576	07-Jul-2014	03:40	Not Applicable
Winresume.exe.mui	6.1.7601.22736	27,576	07-Jul-2014	03:40	Not Applicable
Winload.efi.mui	6.1.7600.16385	33,160	07-Apr-2010	17:47	Not Applicable
Winload.exe.mui	6.1.7600.16385	35,208	07-Apr-2010	17:47	Not Applicable
Winresume.efi.mui	6.1.7601.22736	30,136	07-Jul-2014	03:41	Not Applicable
Winresume.exe.mui	6.1.7601.22736	31,168	07-Jul-2014	03:41	Not Applicable
Winload.efi	6.1.7601.22921	693,176	12-Jan-2015	03:33	Not Applicable
Winload.exe	6.1.7601.22854	619,056	29-Oct-2014	02:16	x64
Winresume.efi	6.1.7601.22921	571,320	12-Jan-2015	03:33	Not Applicable
Winresume.exe	6.1.7601.22921	533,200	12-Jan-2015	03:30	x64
Ntoskrnl.exe	6.1.7601.18715	5,554,104	12-Jan-2015	03:13	x64
Ntoskrnl.exe	6.1.7601.22921	5,553,080	12-Jan-2015	03:33	x64
Apisetschema.dll	6.1.7601.18229	6,656	02-Aug-2013	02:12	x64
Smss.exe	6.1.7601.18229	112,640	02-Aug-2013	00:59	x64
Apisetschema.dll	6.1.7601.22653	6,656	12-Apr-2014	02:28	x64
Smss.exe	6.1.7601.22653	112,640	12-Apr-2014	02:31	x64
Apisetschema.dll	6.1.7601.18229	6,656	02-Aug-2013	02:12	x64
Smss.exe	6.1.7601.18229	112,640	02-Aug-2013	00:59	x64
Apisetschema.dll	6.1.7601.22653	6,656	12-Apr-2014	02:28	x64
Smss.exe	6.1.7601.22653	112,640	12-Apr-2014	02:31	x64
Rstrui.exe	6.1.7601.18715	296,960	12-Jan-2015	03:10	x64
Srclient.dll	6.1.7601.18715	50,176	12-Jan-2015	03:10	x64
Srcore.dll	6.1.7601.18715	503,808	12-Jan-2015	03:10	x64
Rstrui.exe	6.1.7601.21988	296,960	05-May-2012	08:17	x64
Srclient.dll	6.1.7601.21988	50,176	05-May-2012	08:18	x64
Srcore.dll	6.1.7601.22780	503,808	19-Aug-2014	03:05	x64
Appidapi.dll	6.1.7601.22736	50,688	07-Jul-2014	01:40	x86
Apisetschema.dll	6.1.7601.18229	6,656	02-Aug-2013	01:48	x86
Apisetschema.dll	6.1.7601.22653	6,656	12-Apr-2014	02:03	x86
Apisetschema.dll	6.1.7601.18229	6,656	02-Aug-2013	01:48	x86
Apisetschema.dll	6.1.7601.22653	6,656	12-Apr-2014	02:03	x86
Srclient.dll	6.1.7601.18715	43,008	12-Jan-2015	02:45	x86
Srclient.dll	6.1.7601.21988	43,008	05-May-2012	07:33	x86
Ntkrnlpa.exe	6.1.7601.18715	3,972,544	12-Jan-2015	02:47	Not Applicable
Ntoskrnl.exe	6.1.7601.18715	3,917,760	12-Jan-2015	02:47	Not Applicable
Ntkrnlpa.exe	6.1.7601.22921	3,977,664	12-Jan-2015	03:18	Not Applicable
Ntoskrnl.exe	6.1.7601.22921	3,921,856	12-Jan-2015	03:17	Not Applicable

For all supported IA-64-based versions of Windows Server 2008 R2

File name	File version	File size	Date	Time	Platform
Appid-ppdlic.xrm-ms	Not Applicable	3,013	12-Jan-2015	02:47	Not Applicable
Appid.sys	6.1.7601.22736	131,584	07-Jul-2014	00:41	IA-64
Appidapi.dll	6.1.7601.22736	116,736	07-Jul-2014	01:25	IA-64
Appidcertstorecheck.exe	6.1.7601.22921	39,424	12-Jan-2015	02:32	IA-64
Appidpolicyconverter.exe	6.1.7601.22653	282,624	12-Apr-2014	01:35	IA-64
Appidsvc.dll	6.1.7601.22921	74,240	12-Jan-2015	02:32	IA-64
Setbcdlocale.dll	6.1.7601.22780	154,112	19-Aug-2014	02:13	IA-64
Winload.efi	6.1.7601.22921	1,840,576	12-Jan-2015	02:37	Not Applicable
Winload.efi.mui	6.1.7601.22780	35,776	19-Aug-2014	04:00	Not Applicable
Winload.efi.mui	6.1.7601.22780	33,208	19-Aug-2014	02:12	Not Applicable
Winload.efi.mui	6.1.7601.22780	35,768	19-Aug-2014	04:00	Not Applicable
Winload.efi.mui	6.1.7601.22780	29,112	19-Aug-2014	03:59	Not Applicable
Winload.efi.mui	6.1.7601.22780	29,624	19-Aug-2014	03:59	Not Applicable
Winload.efi.mui	6.1.7601.22780	28,088	19-Aug-2014	03:59	Not Applicable
Winload.efi.mui	6.1.7601.22780	28,088	19-Aug-2014	03:59	Not Applicable
Winload.efi.mui	6.1.7601.22780	35,776	19-Aug-2014	04:00	Not Applicable
Winload.efi.mui	6.1.7601.22780	33,208	19-Aug-2014	02:12	Not Applicable
Winload.efi.mui	6.1.7601.22780	35,768	19-Aug-2014	04:00	Not Applicable
Winload.efi.mui	6.1.7601.22780	29,112	19-Aug-2014	03:59	Not Applicable
Winload.efi.mui	6.1.7601.22780	29,624	19-Aug-2014	03:59	Not Applicable
Winload.efi.mui	6.1.7601.22780	28,088	19-Aug-2014	03:59	Not Applicable
Winload.efi.mui	6.1.7601.22780	28,088	19-Aug-2014	03:59	Not Applicable
Winload.efi	6.1.7601.22921	1,840,576	12-Jan-2015	02:37	Not Applicable
Ci.dll.mui	6.1.7601.22736	10,752	07-Jul-2014	02:35	Not Applicable
Ci.dll.mui	6.1.7601.22736	9,728	07-Jul-2014	01:20	Not Applicable
Ci.dll.mui	6.1.7601.22736	10,752	07-Jul-2014	02:40	Not Applicable
Ci.dll.mui	6.1.7601.22736	6,656	07-Jul-2014	02:37	Not Applicable
Ci.dll	6.1.7601.22730	218,856	28-Jun-2014	00:19	IA-64
Driver.stl	Not Applicable	4,186	26-Jun-2014	22:20	Not Applicable
Csrsrv.dll	6.1.7601.18229	94,720	02-Aug-2013	01:25	IA-64
Csrsrv.dll	6.1.7601.22653	94,720	12-Apr-2014	01:36	IA-64
Ntoskrnl.exe	6.1.7601.18715	11,121,592	12-Jan-2015	02:32	IA-64
Ntoskrnl.exe	6.1.7601.22921	11,125,184	12-Jan-2015	02:37	IA-64
Apisetschema.dll	6.1.7601.18229	6,656	02-Aug-2013	01:25	IA-64
Smss.exe	6.1.7601.18229	207,872	02-Aug-2013	00:34	IA-64
Apisetschema.dll	6.1.7601.22653	6,656	12-Apr-2014	01:32	IA-64
Smss.exe	6.1.7601.22653	207,872	12-Apr-2014	01:36	IA-64
Appidapi.dll	6.1.7601.22736	50,688	07-Jul-2014	01:40	x86
Apisetschema.dll	6.1.7601.18229	6,656	02-Aug-2013	01:48	x86
Apisetschema.dll	6.1.7601.22653	6,656	12-Apr-2014	02:03	x86
Ntkrnlpa.exe	6.1.7601.18715	3,972,544	12-Jan-2015	02:47	Not Applicable
Ntoskrnl.exe	6.1.7601.18715	3,917,760	12-Jan-2015	02:47	Not Applicable
Ntkrnlpa.exe	6.1.7601.22921	3,977,664	12-Jan-2015	03:18	Not Applicable
Ntoskrnl.exe	6.1.7601.22921	3,921,856	12-Jan-2015	03:17	Not Applicable

Windows 8 and Windows Server 2012 file information

The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version Product Milestone Service branch
6.2.920 0.16 xxx Windows 8 and Windows Server 2012 RTM GDR
6.2.920 0.20 xxx Windows 8 and Windows Server 2012 RTM LDR
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Version	Product	Milestone	Service branch
6.2.920 0.16 xxx	Windows 8 and Windows Server 2012	RTM	GDR
6.2.920 0.20 xxx	Windows 8 and Windows Server 2012	RTM	LDR

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File name	File version	File size	Date	Time	Platform
Ntoskrnl.exe	6.2.9200.17231	5,578,560	15-Jan-2015	10:18	Not Applicable
Ntoskrnl.exe	6.2.9200.21347	5,557,568	15-Jan-2015	21:39	Not Applicable

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name	File version	File size	Date	Time	Platform
Ntoskrnl.exe	6.2.9200.17231	6,973,248	15-Jan-2015	21:45	x64
Ntoskrnl.exe	6.2.9200.21347	6,942,016	15-Jan-2015	23:45	x64

Windows 8.1 and Windows Server 2012 R2 file information

For all supported x86-based versions of Windows 8.1

File name	File version	File size	Date	Time	Platform
Ntdll.dll	6.3.9600.17630	1,468,408	10-Jan-2015	08:28	x86
Ntoskrnl.exe	6.3.9600.17630	5,769,024	10-Jan-2015	08:28	Not Applicable

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File name	File version	File size	Date	Time	Platform	Service branch
Acwow64.dll	6.3.9600.17475	37,376	29-Oct-2014	01:02	x86	WOW64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_636ACFC4DF821A3D
Instnm.exe	6.3.9600.17475	8,704	29-Oct-2014	01:13	x86	WOW64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_636ACFC4DF821A3D
Ntdll.dll	6.3.9600.17630	1,498,360	10-Jan-2015	08:28	x86	Not Applicable
Ntdll.dll	6.3.9600.17630	1,733,440	10-Jan-2015	09:10	x64	Not Applicable
Ntoskrnl.exe	6.3.9600.17630	7,472,960	10-Jan-2015	09:10	x64	Not Applicable
Ntvdm64.dll	6.3.9600.17475	14,336	29-Oct-2014	01:15	x86	WOW64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_636ACFC4DF821A3D
Ntvdm64.dll	6.3.9600.17475	16,896	29-Oct-2014	01:57	x64	AMD64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_59162572AB215842
Setup16.exe	3.1.0.1918	25,600	29-Oct-2014	01:13	x86	WOW64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_636ACFC4DF821A3D
User.exe	6.3.9600.17475	4,096	29-Oct-2014	01:14	x86	WOW64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_636ACFC4DF821A3D
Wow32.dll	6.3.9600.17475	5,632	29-Oct-2014	01:15	x86	WOW64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_636ACFC4DF821A3D
Wow64.dll	6.3.9600.17475	285,184	29-Oct-2014	02:02	x64	AMD64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_59162572AB215842
Wow64cpu.dll	6.3.9600.17475	13,312	29-Oct-2014	02:02	x64	AMD64_MICROSOFT-WINDOWS-WOW64_31BF3856AD364E35_6.3.9600.17630_NONE_59162572AB215842

File hash information

File name	SHA1 hash	SHA256 hash
Windows6.1-KB3004375-v3-ia64.msu	5CFC417B852EAED389B5FA19A32BD943BBD64B08	8B69356D65DF62CBA59B21071FBA03EE275A208E6CF64A197311D7F6194EE50F
Windows6.1-KB3004375-v3-x64.msu	C4F55F4D06CE51E923BD0E269AF11126C5E7196A	900526DD3154E35453DB568B5AADA2ABF7CF5468D6D63B2F0B5C534C2DA90018
Windows6.1-KB3004375-v3-x86.msu	822F779B87D3CD4EF4DE004C344ABCE202A8AAC6	D4A46833B1948919A1D1D2F506716544B6093BB5999EB8AA78ED5D5561FE85E0
Windows6.1-KB3031432-ia64.msu	C9961B93787B2FC0753E5724ABCBBCD37E60695B	B1AD6F2CA8EA68F9F8EF8E8A5C3064BDA06886E95E9B1491D0AC394518B04EE5
Windows6.1-KB3031432-x64.msu	E648ABE279C8B0095A57271FFBAB5D5D376DA558	49E0BD1E8175FF4963A16A6AB3DFDB8992E48B8826FC27CF242CD80061B19BFF
Windows6.1-KB3031432-x86.msu	6BA33EBA05EC8FE744E2786F6B72965D119274D8	A4F82199F05BFF08E7C4A9A4DF7E0AE3439BE40305266DCB48C0321A808485C7
Windows8.1-KB3031432-x64.msu	937176441180EE51EB3CF06B47E04A26A17BD2B8	02061AF949783C031458506C0A47C63B5CD642CDEF02C32819040FC6E2B58A9F
Windows8.1-KB3031432-x86.msu	43748E7A1CE83999BF243DD77DBD1D6505B2C103	475D729001F1BF6896AD6C5C8021E255E3D25D5740EF34A2DC2B071E307FD08A
Windows8-RT-KB3004375-v5-x64.msu	35F1913C9D5752CD810F3E2586D08B9269574658	75C9FE58E9CBE68BFAAD2383922778CDBCD74F3D2444B5FAA2DB07121F9A3A9D
Windows8-RT-KB3004375-v5-x86.msu	97E05C5294FFA53888D4D0B08FEA701307A777ED	FBA0B25F7EBF3B71A3D66D6D4925C844BC6F02839C3CFB3A8CBAFD6E831B58ED
Windows8-RT-KB3031432-x64.msu	54F33A3A3E22BE0B534787D2E8C2FDDE80B22EAC	92F024753633F2E549A2419372A5996D02F764EDCC3C584D352E73FE3ED08D6F
Windows8-RT-KB3031432-x86.msu	625A7EFC4F0514F7A1DF45021D8BC84AD344751E	E7297BFBF757DF2B0056DE7FC82FB5C4307AA41769531097595F1CE7E195530C

↑ Back to the top

Applies to:

↑ Back to the top

Keywords: kb, atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbmustloc, kbsecbulletin, kbsecreview, kbsecurity, kbsecvulnerability, kbsurveynew

↑ Back to the top

Article Info

Article ID	:	3031432
Revision	:	1
Created on	:	1/7/2017
Published on	:	2/10/2015
Exists online	:	False
Views	:	1423

Microsoft KB Archive Search

MS15-015: Vulnerability in Microsoft Windows could allow elevation of privilege: February 10, 2015

Summary

Introduction

How to obtain help and support for this security update

More Information

Known issues with this security update

Child package behavior

For Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 customers

For Windows Update, Windows Server Update Services (WSUS), and Microsoft Catalog customers

For Download Center customers

File information

For all supported x86-based versions of Windows 7

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

For all supported IA-64-based versions of Windows Server 2008 R2

For all supported x86-based versions of Windows 8

For all supported x64-based versions of Windows 8 and Windows Server 2012

For all supported x86-based versions of Windows 8.1

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

Applies to: