home

bootres.bkp

Boot Resource Library

sign

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The file bootres.bkp, “Boot Resource Library” has been detected as malware by 1 anti-virus scanner.
Publisher:
Microsoft Corporation  (signed by sign)

Product:
Microsoft® Windows® Operating System

Description:
Boot Resource Library

Version:
10.0.10586.0 (th2_release.151029-1700)

MD5:
32f48341b31c1422baaa973743c47a03

SHA-1:
39735457b163840c3d911f03e8f6f4c86e36410e

SHA-256:
b8375f0b477cf7a527a9a161d37a2f61214bbdd83c49f3b2f85dbb64c8b4bb80

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/23/2025 1:07:47 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.8.17.8

File size:
555.6 KB (568,888 bytes)

Product version:
10.0.10586.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
bootres

Language:
English (United States)

Common path:
C:\windows\bootres.bkp

Digital Signature
Signed by:
sign

Authority:
sign Certificate Authority

Valid from:
6/14/2016 2:14:06 AM

Valid to:
6/14/2046 2:14:06 AM

Subject:
CN=sign

Issuer:
CN=sign Certificate Authority

Serial number:
543E80CA9A34B1C03FC056024F6E12BF

File PE Metadata
Compilation timestamp:
10/29/2015 10:09:46 PM

OS version:
10.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
12.10

CTPH (ssdeep):
6144:g3Le60HH2BYRxeAmpkeRmRwe+PqYBxdXJ2Ld7T:at02BYGAwkeRmRwe6j1XJ25/

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C0, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0056

Remove bootres.bkp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.