winload.exe

  • File Path: C:\WINDOWS\system32\winload.exe
  • Description: OS Loader

Hashes

Type Hash
MD5 A951A551F5A2BF8BECE46AE070F8E7F5
SHA1 25D52D11767A891DE5878DCC06A90D8B74AC4FD0
SHA256 64FE4E3FCFEB427BC76CBA9C1E58990C607F280A10BE253787D7665E0B3E7975
SHA384 174ED69A3DC045B85623AB1CBB588C1A95B1E9633C87BCA0EE6E42EA2E19BE21B50311483258C34E03061B4E395B866A
SHA512 41301B9FC5B2AB8363D63920CF1B77776649F5CD88C6997CBFFF4E9C185960D8F2AE19BE009A821E70D6729D7EB58950D2A3943F1DF908B3F517A30413FDDCF2
SSDEEP 24576:7/xav0PB6NVJcks/NTwwvmBab0Eg8UMppQkVuHYp4A1ZGZEFC6JbsKX:7/xaveB9TkWRg8UMp7LpAEFCEX
PESHA1 57ED9D26D1A9070C2194C9598D8D35F6D036CF3B
PE256 DFEEA0D244418CEDC5DF11DCC0E774639A23FA6962F6826F7DE5C863515AB067

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: osloader.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.282 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.282
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\Boot\winload.exe 100

MIT License. Copyright (c) 2020-2021 Strontic.