home

bootres.bkp

Boot Resource Library

sign

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The file bootres.bkp, “Boot Resource Library” has been detected as malware by 1 anti-virus scanner.
Publisher:
Microsoft Corporation  (signed by sign)

Product:
Microsoft® Windows® Operating System

Description:
Boot Resource Library

Version:
6.3.9600.16384 (winblue_rtm.130821-1623)

MD5:
fb288e5354c50f3ce6a702e5128f3d0f

SHA-1:
b0458bea00e4616879e702a3cda07c4e83799990

SHA-256:
410a09cf8759709802e467b2ec03c92826832317d72a7f4571f1a9f325d4cebb

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
8/5/2025 2:42:27 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.2.5

File size:
549.6 KB (562,744 bytes)

Product version:
6.3.9600.16384

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
bootres

Language:
English (United States)

Common path:
C:\windows\bootres.bkp

Digital Signature
Signed by:
sign

Authority:
sign Certificate Authority

Valid from:
7/20/2014 1:29:06 PM

Valid to:
7/20/2044 1:29:06 PM

Subject:
CN=sign

Issuer:
CN=sign Certificate Authority

Serial number:
F676A5EB15C82B2CB7C0A57F337ADC06

File PE Metadata
Compilation timestamp:
8/22/2013 8:46:00 AM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
11.0

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B8, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Remove bootres.bkp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.