home

bootmgfw.efi

Boot Manager

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Boot Manager

Version:
6.0.6001.18000 (longhorn_rtm.080118-1840)

MD5:
8f98a9f9867fb1400d0f25690c7748e4

SHA-1:
7bb99ae38b41ba11520b7b486f617ac6f859aef5

SHA-256:
b0f51dc4a8c8ade9088cf6f9b994c9a05843cb27237680dc32353bc7b3ea5f09

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/23/2024 5:23:24 AM UTC  (today)

File size:
537.5 KB (550,376 bytes)

Product version:
6.0.6001.18000

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
bootmgr.exe.mui

Language:
English (United States)

Common path:
C:\users\{user}\downloads\johns rv\windows.old\windows\boot\efi\bootmgfw.efi

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/12/2008 4:12:30 PM

Valid to:
3/12/2010 4:22:30 PM

Subject:
CN=Microsoft Windows, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101E1A1000000000008

File PE Metadata
Compilation timestamp:
4/10/2009 11:53:49 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:

Linker version:
8.0

CTPH (ssdeep):
6144:xP1oA3EYEvHUL2VfLpT/oYMPQKSsepzRZkIt/BAhhegFD5nt6ELCoxzrWIbqqDL3:xNxEvlL/bMKFZk8BAhhJH8Em8/mqn6e

Entry address:
0x1000

Entry point:
48, 83, EC, 28, 45, 33, C0, E8, 04, B1, 00, 00, 48, 85, C0, 75, 07, B8, 0D, 00, 00, C0, EB, 08, 48, 8B, C8, E8, 08, 00, 00, 00, 48, 83, C4, 28, C3, CC, CC, CC, 48, 8B, C4, 48, 89, 48, 08, 53, 55, 56, 57, 41, 54, 41, 55, 41, 56, 41, 57, 48, 81, EC, D8, 00, 00, 00, 45, 33, F6, 48, 8B, F1, 48, 8D, 50, 90, 41, 8D, 7E, 01, 48, 8D, 88, 68, FF, FF, FF, 45, 8D, 46, 28, 49, 8B, EE, 4C, 89, 74, 24, 48, 4C, 89, 74, 24, 58, 89, 78, 94, 4C, 89, 74, 24, 30, 45, 8A, EE, 44, 88, B4, 24, 28, 01, 00, 00, 4C, 89, 74, 24, 68...
 
[+]

Entropy:
6.3962

Code size:
383.5 KB (392,704 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.