winload.exe
- File Path:
C:\Windows\system32\winload.exe
- Description: OS Loader
Hashes
Type |
Hash |
MD5 |
EF12F554C0A52C9E4663C75148E8E47D |
SHA1 |
F5131C79B736B756C6CD6A0FC13D165B2BE9A45F |
SHA256 |
892FA34D5E304C7F23BFBD1A89A1DFCEDD3C80C4282DA406D4009456920FF450 |
SHA384 |
57D044B01D146520A7023A5C600027FD9CA3CA5BA9FEB9C4FC77089805153384A0E5C342AC87F6C5EE60E843CB85D5D6 |
SHA512 |
755021DCFC5B32A6469C9D5DF34F00253F9C5FD9FB01B40EFD272EDB87F8D80F87EED86846F50D57C3DECB81DCECC626D718C351B102321D894474D09951696F |
SSDEEP |
24576:AaOVkhh9sW+UFPNeG1gtzR+1Ap4qiXlPmVHl2nOiFcRnMX6JCEyb/:AaOAnfzWpQmV1RMXv |
PESHA1 |
B41DFCE6B851EBDB32F61901A095D095D67C80E5 |
PE256 |
D0CCFBF33D2CEC74F5344BC94290DA10629911EBF288E073845BF056BF3A1AD8 |
Signature
- Status: Signature verified.
- Serial:
33000002EC6579AD1E670890130000000002EC
- Thumbprint:
F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: osloader.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1320 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1320
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/892fa34d5e304c7f23bfbd1a89a1dfcedd3c80c4282da406d4009456920ff450/detection
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.