home

bootres.dll

Boot Resource Library

sign

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The library bootres.dll, “Boot Resource Library” has been detected as malware by 1 anti-virus scanner.
Publisher:
Microsoft Corporation  (signed by sign)

Product:
Microsoft® Windows® Operating System

Description:
Boot Resource Library

Version:
6.3.9600.16384 (winblue_rtm.130821-1623)

MD5:
b0f8d31ea9ee17d02cf22a5b48dd881e

SHA-1:
4f668c2c5189f44cb9d83fb7083b770eeaa586cc

SHA-256:
23f0b6f9cc77064a4c673c75aa6d1e1ec36add6fdd7aa4bd79653b918295ae25

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
8/5/2025 3:33:54 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.12.9.20

File size:
549.6 KB (562,744 bytes)

Product version:
6.3.9600.16384

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
bootres

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\8oot logo changer\bin\bootres.dll

Digital Signature
Signed by:
sign

Authority:
sign Certificate Authority

Valid from:
12/7/2014 11:03:27 AM

Valid to:
12/7/2044 11:03:27 AM

Subject:
CN=sign

Issuer:
CN=sign Certificate Authority

Serial number:
0AA249F51599636CA0D37BF9FF99C91A

File PE Metadata
Compilation timestamp:
8/22/2013 7:46:00 PM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
11.0

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B8, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Remove bootres.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.