| Current Path : C:/ProgramData/Microsoft/Windows Defender/Platform/4.18.25050.5-0/Drivers/ |
| Current File : C:/ProgramData/Microsoft/Windows Defender/Platform/4.18.25050.5-0/Drivers/WdBoot.sys |
MZ @ !L!This program cannot be run in DOS mode.
$ [p: : : E : E: E : : : S: S: S : Rich: PE d ' " * ` @
`A ` ( p @ l ( @& $ ! p P @ .text h.rdata @ H.data 0 @ .pdata l @ @ HPAGE P `INIT ` b.rsrc p @ B.reloc \ $ @ B H8Hd$ HL
L H D ff H;
uHfuHff ff %r ` 0 @ @ 0 @ @ @ 0 P ` @ 0 @ @ @ @ @ E $ @ ( @ 0 @ 8 @ ' # "
'
P $" $
' $ # ' # RSDSuۖ?P奦 WdBoot.pdb GCTL @ .text$mn @ f .text$mn$00 .idata$5 0 .00cfg @ .gfids P .rdata " .rdata$zzzdbg # , .xdata 0 .data @ l .pdata P PAGE ` INIT ` .idata$2 ` .idata$3 ` .idata$4 ` .idata$6 p .rsrc$01 q .rsrc$02 uۖ?P奦WgQ}®.'
4
2p b 2-+ ] f - # 0 4 # P n # # # P P # ` ` # ` <` # <` ` # HHAh3H\$WH HH HHH\$0H _HE3I2-+ HtI;u81H H
H H3HfD
H}Hu
IHnHHl` ` ` KeBugCheckEx ntoskrnl.exe 8 P h 0u q , M S E L A M C E R T I N F O I D M I C R O S O F T E L A M C E R T I F I C A T E I N F O ,4 V S _ V E R S I O N _ I N F O a a? S t r i n g F i l e I n f o h 0 4 0 9 0 4 b 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n l " F i l e D e s c r i p t i o n M i c r o s o f t a n t i m a l w a r e b o o t d r i v e r . I n t e r n a l N a m e W d B o o t . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . > O r i g i n a l F i l e n a m e W d B o o t . s y s j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m 8 F i l e V e r s i o n 4 . 1 8 . 2 5 0 5 0 . 5 ( b c f 5 1 a b 7 7 3 b e 2 1 9 5 7 c 5 7 1 3 c a e 9 c b 3 a d f 2 f d 7 5 b f 5 ) >
P r o d u c t V e r s i o n 4 . 1 8 . 2 5 0 5 0 . 5 l & P r i v a t e B u i l d G i t E n l i s t m e n t ( C o n t a i n e r A d m i n i s t r a t o r ) D V a r F i l e I n f o $ T r a n s l a t i o n f 6 f 7 1 7 a 4 3 a d 9 a b d d c 8 c e f d d e 1 c 5 0 5 4 6 2 5 3 5 e 7 d 1 3 0 7 e 6 3 0 f 9 5 4 4 a 2 d 1 4 f e 8 b f 2 6 e 1 . 3 . 6 . 1 . 4 . 1 . 3 1 1 . 7 6 . 8 . 1 ; 1 . 3 . 6 . 1 . 4 . 1 . 3 1 1 . 7 6 . 1 1 . 1 4 e 8 0 b e 1 0 7 c 8 6 0 d e 8 9 6 3 8 4 b 3 e f f 5 0 5 0 4 d c 2 d 7 6 a c 7 1 5 1 d f 3 1 0 2 a 4 4 5 0 6 3 7 a 0 3 2 1 4 6 1 . 3 . 6 . 1 . 4 . 1 . 3 1 1 . 7 6 . 8 . 1 ; 1 . 3 . 6 . 1 . 4 . 1 . 3 1 1 . 7 6 . 1 1 . 1 $ (0ȠРhpx 0 @ @& 0&- *H
& 0&10
`He 0\
+7N0L0
+70 010
`He zJl|{6yNS1wv#Xꠂ 0 03 ֢{ ꉱ 0
*H
0~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100
250220195105Z
250705195105Z01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1>0<U5Microsoft Windows Early Launch Anti-malware Publisher0"0
*H
0
8~
*iWZ 0!eL =y2`јۡP8otH8k +%2U/=]dy{qIF3la5f68 f5^s Q-,4\i9qI>qd4hHܲ03~ђL۲=H^Gf58l0 @UɄb!eWVȍ9xeكb_u hC _0iP m%y02LQ }0y0 U %0
+7=+0 U o#nZ6jp0TU M0KI0G1-0+U $Microsoft Ireland Operations Limited10U
229895+5037320 U #0_{" XrN!t#20VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0 U 0 0
*H
s`,MJ8 ڇ嫄)X%bf1 :)11SBZ$ag\C\.N Z_8BLZhBCv{.%X& Ld
LŐ"U>}~O5ARNҋ0
Gcj*5bB6`z
*xcWv)ykܶ$HT`Vt ܟ2 ["#ZT
AzK4l3HI@nB
L0p0X
a RL 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
100706204017Z
250706205017Z0~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100"0
*H
0
dPyg LVhDXOv|mE9 eҏDe,U}.+A+KnILk q͵K̈k:&?4W ]I*.ՅY?+t+;FFIfT UbWrg% 4]^(ղcӲȊ&
Y5LR[ HwօGj-\`ƴ*[# _E o73jMjfcx0ϕ 00 +7 0 U _{" XrN!t#20 +7
S u b C A0 U 0U 00 U #0Vˏ\bh=[Κ0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0
*H
tWO){xP" 4*,Ͽ4ہ 5oywN aZ#bQEg?< 09@!)奡i"tGCS0i% moar ,iv=Qۦ9H7amS˧a¿⃫k}(QJQlȷ Ji~IprGc֢DciFz? !{#-A˿ Lﱜ"KInv[Sy=s5<TRGjҎڙg^27uZW¿
-'ӵ^i$gsMOVzRMwO B
v#Vx"&6ʱn G3bɑ3_q @e"B!% -`7A*a<h`RG@w>SP 8 f3'9x6N_=GS a=*ג,7Z>@B1 V$]Qjy{%qDj#u1 000~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20103 ֢{ ꉱ 0
`He 0 *H
1
+70
+7 10
+70/ *H
1" ģ(&lbS&" d?
0i9Z 570B
+7 1402 M i c r o s o f thttp://www.microsoft.com0
*H
B(@Qh<6X~
cag-T[V`ͧ5=۷j`e56S`Lʼn)15Օ}-6vfIcΦ E5U=$SXWГvf0ʊiBp7IL-K/1DC., 0\(cPn-0Ej_:*7 `zL LAS~!e Q|&fl6dC0
+710{ *H
l0h10
`He 0Q *H
@<08
+Y
010
`He $3p <c 1ޔ '8ˬh&8"20250520061924.61Z0Ѥ01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:8900-05E0-D9471%0#U Microsoft Time-Stamp Service0 03 ,(} uc 0
*H
0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
250130194303Z
260422194303Z01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:8900-05E0-D9471%0#U Microsoft Time-Stamp Service0"0
*H
0
FޣX7.XEC衄@3ښ qL'A]N
W堫e@}^z+9dA j Zu
^m]=cqZz~x)qc1as9a-*i|!u5
[ > "c3xm@`IӫbB\t<tM ֩/PƲdϱ:| 0 E :D$Ψi@ڧ= y9쯀r ~pE\ӓduNxAY
C,ᅑO} w"سrQ,_] }3}N
Ney lVtyxaL,& [܁vn~"l$nh4-FzV3C ?G,Y#>vF :>&ϑReL] wws`+o"GF;֍gǖ1>0|z5Oq .
3`;DR I0E0 U qDiR>DA\0 U #0] ^b]eS5r0_U X0V0TRPNhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0 U 0 0U % 0
+0U 0
*H
uན/9rdhwf{EENcNE=5n|@XJM7-}XC<Jt3 h2ݍcYAtfbᑝF}7 bid4i{*;b}lA0m k.5˔ /o-ИJD/P/:y(F *s˳xZ@=/8Bɋ
qpyF{'5%~{G'Zİ>^.BG. ~\)CTWM~~OGeQgc? *IŸ^l$rq䪅wJjCUM`nsЪ(_ioA x
r8},!8+tiVX*
vL|cN+aR(*L$JF:KLPZ6R\3o^ĪW ' L`
j#ag19ZOG9]m.ɪza5s_2#0q0Y3 kI 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100"0
*H
0
Lr! y$yՂҩlNu5WlJ⽹>`3\OfSqZ~JZ6gF# w2`}jRDFkvPDq\Q17
8n&S|9azĪri 65&dژ;{3[~ Rb%j]SVMݼ㑏9,Qpi
6-p15(㴇$ɏ~TUmh;Fz)7EFn20\O,b⍈䖬Jq[g` = s}AFu_4 }~ٞE߶r/}_۪~66L+nQsM7t 4G|?Lۯ^s=CN39LBh.QFѽjZasg^(v3rק
co 6d[!]_0tعP a65G k\RQ]%Pzl rRą<7?xE ^ڏriƮ{>j. 00 +7 0# +7*RdĚ<F5)/0 U ] ^b]eS5r0\U U0S0Q +7L}0A0?+3http://www.microsoft.com/pkiops/Docs/Repository.htm0U % 0
+0 +7
S u b C A0 U 0U 00 U #0Vˏ\bh=[Κ0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
*H
U}*, g1$[rKo\>NGdx=139q6?dl|u9m1lѡ"fg:SMݘ x6.V i {jo)n?Hum m#TxSu$Wݟ=heV(U'$@]='@8)üTB jBRu6 as.,k{n?, x鑲[It 쑀=J>f;O2ٖtLrou04zP
X@<TmctH,NG-qd$smʎ WITds [DZk
(g($8Kn!TkjEG^OLvWT iD~|als
Af=iAI~~;>1Q{ p( 6ںL
4$5g+
挙"'B=%tt[jў>~13}{8pDѐȫ::bpcSMmqj U3XpfM050Ѥ01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:8900-05E0-D9471%0#U Microsoft Time-Stamp Service#
0+ Jv?eb9B
V0~0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
*H
W0"20250519185207Z20250520185207Z0t0:
+Y
1,0*0
W 0 0 0
M 06
+Y
1(0&0
+Y
0
0 0
*H
rL ^ yx[m,]ނ?*w8:e(R }\Ӡ~ /pb% vO %*^:(A}鋜|>W$ҺfG fR.I< 6_y 18yR^ks
(YM=bf@2%I5ގΠmnf_v J\l=B/."l 2? xa Ә._n>np:+1
0 00|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 ,(} uc 0
`He J0 *H
1
*H
0/ *H
1" 1T%+ſN
1%L?w;0 *H
/1000 t s%遐lhl?G5t ʓO00~0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 ,(} uc 0" T:CUT@QfA8S<ȳA0
*H
iNx"9rwL;ĵ}2-(sҷXh$H * *t_ |6ӕo)i%G^(Uٱ? 4İFmW@F_ KaH`舵[F6?19QKGa{A
%A+6Z6 baQ!'M{U}xlACEl<q n%s 02W o=rE= Cϕ9UNZX !W%Bc7~!Tcr yj>>GڀW<v5gPzpJak@ʹp(sS$.=6E|y>Y]дx!bG mr)hДh
xa^КzO cjw̙~Z
=ا&6JȌcH 1tV\'! MV9YqoЗyÇ[ngn
>\n#2ENYNSݱ4|)CO
'+6