| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /ProgramData/Sophos/AutoUpdate/data/warehouse/ |
Upload File : |
MZ @ !L!This program cannot be run in DOS mode.
$ ƶ逨逨逨 ꀨ;뀨逩䀨ꀨ쀨ꀨ{耨{W耨{耨Rich逨 PE d XI] " $ @
A `b < p P , 4 " ( 1 T 1 0 x .text h.rdata 0 @ H.data T @ @ .pdata , P " @ HINIT , ` $ b.rsrc p * @ B.reloc ( 2 @ B H(H
0 L= H/ H
< H( H(H< HtHH;tH(H\$Hl$Ht$WH 3HHH;u 3hO H
w< H
H< fC< Hr< f-3< H4< n L
?< L0/ H< HQ ; H
/ M ;ŋ|m HHN ;ŋ|WH; @8h0t$H; H9ohHEGhH; HHGh"@t H{5 H; HHf5 3H\$0Hl$8Ht$@H _H\$WH HHO HHH\$0H _H\$WH H. HH
e. H n. H;tEH;w@HC@HtL ; H
M
LHH: LH1
HPH; .. vH\$0H _H\$Ht$WH H3H - H5- H;sN;PuDHC8H - HtL: H
LHHm: LH x HP벸 H\$0Ht$8H _H\$WH H- H
- H;s<H+HH - HHHHHHHtHCH(HuH\$0H _HL$H(A8 3HL$0 HD$0 8 HD$0@ HD$0@ H(HT$HL$H(A 3HL$0 HD$0 HD$0HL$8HHH(LL$ LD$HT$HL$HX HktH
, HHD$@H$ HD$(HD$xHD$ LL$pLD$hHT$`H
8 HD$@7 HXLD$T$L$H(=+ sLD$@T$8L$0 3H(@VWH H_+ H3H$ HD$@H
x HH: 8 fD$ : fD$"HD$@HD$(H$ H
~ HH> < fD$0> fD$2H$ HD$8H=: uHL$ H9 H=9 uHL$0 H9 H=9 t
H=9 u3 H$ H3Y H _^̉T$HL$H8=* HD$@HD$(D$
D$ D$ D$H9D$ sHD$ uL 3ҹM d D$ HL$(DL 3ҹM @ L 3ҹM * H8̉L$H8D$@D$ |$ t|$ t |$ t,?Lb 3ҹM =L 3ҹM (L 3ҹM LC 3ҹM D$@}8 H8HL$H(=`8 uL7 3ҹM KB=B8 uLi 3ҹM -$=) sD
8 L 3ҹM H|$0 uL 3ҹM =( HD$0HLL 3ҹM HD$0Hx t)=( s HD$0HLL 3ҹM HD$0@tL 3ҹM z HD$0HxH tRHD$0x` tGHD$0DHXL 3ҹM F L
3ҹM 2 HD$0P`HD$0HHHTHD$0Hx0 HD$0H(LL 3ҹM HD$0Hx@ t HD$0H8LL 3ҹM HD$0HxP tRHD$0xd tGHD$0DH\L 3ҹM L
3ҹM x HD$0PdHD$0HHPL
3ҹM L L 3ҹM !HD$0 H(LD$T$HL$H8H|$@ tL 3ҹM D$HD$ |$ t |$ t$HD$PHD$(HD$( HL$P9L 3ҹM H8HL$H8L 3ҹM { H=K5 t3H=I5 t)H85 HD$ H
45 HD$ a H 5 H8HL$H H% H3H$ HD$H HD$0 D$8 D$8ASg05й HD$0H|$0 u2! D$8D3HL$0 D$P0 HD$X D$h@ H$ HD$`HD$p HD$x LD$P? HL$He D$<|$< D$@ DŽ$ H$ HD$(D$8D$ LL$0A H HL$H D$<|$< |;HD$0xu0HD$0@Hu"HD$0x rHD$0x w HD$0@ D$@D$@$ HL$H Sg05HL$0v H$ H3 HĘ ff H;
$ uHfuH H8Hd$ HL
# L# H D % % % % H(MA8HI
H(H(A LDLAtA@McPLHcL#IcNHBHHBTt LM3IH(ff HIrGIIIOsPMIIf D JTIuItJTf It
BT Iufffffff fHnLHHL+MIt/))AH )A)AI)A)A)A)AuIMItf D HIuItBDI o R e g i s t e r B o o t D r i v e r C a l l b a c k I o U n r e g i s t e r B o o t D r i v e r C a l l b a c k
SophosEL: %02x
SophosEL reports that Boot Start driver dependencies are being initialized.
SophosEL reports that Boot Start drivers are about to be initialized.
SophosEL reports that all Boot Start drivers have been initialized and that SophosEL is about to be unloaded
SophosEL reports an unknown status type.
SophosEL reports the following dependency is about to be initialized:
SophosEL reports the following Boot Start driver is about to be initialized:
SophosEL reports an invalid status type for image initialization (Type %d):
ImageInformation provided was NULL
SophosEL: Image name "%wZ"
SophosEL: Registry path "%wZ"
SophosEL: FAILED Code Integrity checks but boot policy allowed it to be loaded.
SophosEL: Image hash algorithm = 0x%08x.
SophosEL: Image hash: SophosEL: Image is signed by "%wZ".
SophosEL: Certificate issued by "%wZ".
SophosEL: Certificate thumb print algorithm = 0x%08x.
SophosEL: Certificate thumb print: SophosEL: Not signed.
SophosEL has been passed an unexpected callback context.
SophosEL has been passed an unknown boot driver callback type.
SophosEL is being unloaded.
c c d c lc c Zc c Bc &c c c c p @ @ 0 @ p P @ 0 @ P ` p ` @a K m d f L i b r a r y D e b u g L e v e l 0 @ XI] j 2 XI]
2 XI] @ @ x0 @ 0 @ 0 @ E RSDS8 SUfOЩNQ
C:\ForJenkins\BaseFolder\sed\sed\build\win64\Release\Driver_ELAM\SED\SophosEL.pdb GCTL P .text P .text$mn @ .text$mn$00 @ .text$mn$21 0 .text$s 0 x .idata$5 x0 .00cfg 0 X .gfids 0 .rdata 2 .rdata$zzzdbg 5 .xdata @ P .data P@ .kmdfclassbind$a `@ .kmdfclassbind$c h@ .kmdfclassbind$d p@ .kmdftypeinit$a @ .kmdftypeinit$c @ .bss P , .pdata ` INIT a INIT$s `b ( .idata$2 b .idata$3 b x .idata$4 c .idata$6 p .rsrc$01 q .rsrc$02 B B B
p`
b b b b # b B d T 4 2p
4
2p d 4 2 p B 2-+ ] f0 0 @ @ @ P@ @ . 5 @ g 5 p 5 5 G 5 P 5 D 5 P 5 5 N (5 P 45 @5 C X5 P d5 ? 5 @ p5 / |5 0 5 5 - 5 6 6 6 @ ) 5 ` 2a 5 HT$HL$H HH3H$ L 3ҹM 1TuL 3ҹM
H$ 3HL$@1D$XD$XHOHD$PHL$`HD$ LL$@LD$`H$ H$ (D$0|$0 }D$0QH=g tEH^HD$83H
XHD$8HNH=F uL 3ҹM P3H$ H3趺HĨ HE3I2-+ HtI;u81H H
H H3HfD
HyHu
IHjHHhSophosEL is being initialized.
SophosEL is not designed to run on this system.
SophosEL unsuccessfully registered for boot driver callbacks.
b c (0 b d 0 c c d c lc c Zc c Bc &c c c c Z DbgPrintEx MmGetSystemRoutineAddress ExAllocatePoolWithTag o
ZwQueryValueKey ExFreePoolWithTag ZwClose 1
ZwOpenKey KeBugCheckEx ntoskrnl.exe `RtlCopyUnicodeString WdfVersionUnbind WdfVersionBind WdfVersionBindClass WdfVersionUnbindClass WDFLDR.SYS 8 P h xu q t M S E L A M C E R T I N F O I D M I C R O S O F T E L A M C E R T I F I C A T E I N F O t4 V S _ V E R S I O N _ I N F O
? S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 > C o m m e n t s S o p h o s E L A M D r i v e r > C o m p a n y N a m e S o p h o s L i m i t e d v ' F i l e D e s c r i p t i o n S o p h o s E a r l y L a u n c h A n t i M a l w a r e D r i v e r 6 F i l e V e r s i o n 2 . 2 . 0 . 2 7 3 6 ( I n t e r n a l N a m e S E L l $ L e g a l C o p y r i g h t C o p y r i g h t 1 9 8 9 - 2 0 1 9 S o p h o s L i m i t e d . t L e g a l T r a d e m a r k s S o p h o s E n d p o i n t D e f e n s e , t h e S o p h o s n a m e a n d S o p h o s l o g o a r e t r a d e m a r k s o r r e g i s t e r e d t r a d e m a r k s o f " S o p h o s L i m i t e d B
O r i g i n a l F i l e n a m e S o p h o s E L . s y s P P r o d u c t N a m e S o p h o s E n d p o i n t D e f e n s e 0 P r o d u c t V e r s i o n 2 . 2 . 0 D V a r F i l e I n f o $ T r a n s l a t i o n D 5 1 9 E E 9 0 7 2 6 D C 2 F 5 F 3 7 D 5 3 A 3 1 5 A 5 B E 9 E E E B A F F A 1 E C 0 2 E 8 F E 5 D E 8 7 C E B 2 7 8 1 B 5 8 2 F D 0 4 7 2 0 2 5 1 B 1 A 5 B F F E 1 C B E D 1 1 9 3 4 D 7 F 1 E 1 8 E 5 3 8 9 E 2 4 5 6 B D 0 6 6 8 2 7 A 9 A 9 A 4 9 4 2 B 2 0 xء @ 0h " 0"v *H
"g0"c10
`He 0\
+7N0L0
+70 010
`He JM* N \x 'IZ 0'03 K24Q 0
*H
0~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100
190605173633Z
200603173633Z01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1>0<U5Microsoft Windows Early Launch Anti-malware Publisher0"0
*H
0
KF DU\M;
By
<hy,wV6i@/&Y j =:>X㝓33M=n o'L籇&FHhm|;ю3XHq.yf0@I_W)IT@>#͈/sܓe; \+ޱsj)]f!'v$ [F+ĴV".GTtgOpdY 00+U %$0"
+7
'
+7=+0 U 5d?'[.+<U$P*Q0PU I0GE0C1)0'U Microsoft Operations Puerto Rico10U
232841+4554640 U #0_{" XrN!t#20VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0 U 0 0
*H
-1튨\u骉0OCQ-vaC,'bo}kkc amqiQ }>r- ~(vO ^-OB3Cwy8qOrNRbF8` FKž&, q 5v^|u7ģ۷ i~. `ŧ FIƤ% ؑG E&b!GW|-=k R"g}0p0X
a RL 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
100706204017Z
250706205017Z0~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100"0
*H
0
dPyg LVhDXOv|mE9 eҏDe,U}.+A+KnILk q͵K̈k:&?4W ]I*.ՅY?+t+;FFIfT UbWrg% 4]^(ղcӲȊ&
Y5LR[ HwօGj-\`ƴ*[# _E o73jMjfcx0ϕ 00 +7 0 U _{" XrN!t#20 +7
S u b C A0 U 0U 00 U #0Vˏ\bh=[Κ0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0
*H
tWO){xP" 4*,Ͽ4ہ 5oywN aZ#bQEg?< 09@!)奡i"tGCS0i% moar ,iv=Qۦ9H7amS˧a¿⃫k}(QJQlȷ Ji~IprGc֢DciFz? !{#-A˿ Lﱜ"KInv[Sy=s5<TRGjҎڙg^27uZW¿
-'ӵ^i$gsMOVzRMwO B
v#Vx"&6ʱn G3bɑ3_q @e"B!% -`7A*a<h`RG@w>SP 8 f3'9x6N_=GS a=*ג,7Z>@B1 V$]Qjy{%qDj#u1J0F00~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20103 K24Q 0
`He 0 *H
1
+70
+7 10
+70/ *H
1" H>f=c#C)'uN?AJ *0\
+7 1N0L S o p h o s L i m i t e d*(https://www.microsoft.com/en-us/windows 0
*H
0p ]K懿2=˙bfXI1T`y*_D(`3nMv|S6Ƒ1 KvU낖 xE)*49iabC=C| \\=^yhX銰RTt6`Sæ} "7Da*FokI`:BqMl|CR}i xM>6(Ey b@,bdF<[jҳ])Υ"R0
+710 *H
010
`He 0X *H
GC0?
+Y
010
`He 3 }ӣ&NYȿQٰ8Ju]?2^`t20190809085545.251Z0Ԥ01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1)0'U Microsoft Operations Puerto Rico1&0$U Thales TSS ESN:B8EC-30A4-71441%0#U Microsoft Time-Stamp Service"0q0Y
a * 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100"0
*H
0
w: iktTե
|hK,_av>f+[S'1 A |a0Y0D`TC M8Bݓs0W&E
GͿ$`2X`FXG2 tag_TϓLĦ]an(aF' $gr!KdPb]w =WuBM@Q>gfD~Knʱz*
1N5x </Dd xD]^O"M 00 +7 0 U c:\1C{|F3hZmU0 +7
S u b C A0 U 0U 00 U #0Vˏ\bh=[Κ0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0
*H
Q
?q=!o1Wm0fjxǨ%kTW+QDS`v@@A\\^5$VKtBȯ7}Z? yJR 8/ye٩kz oK0D$"<Y)p2J'U/3b_W@ΙfjbJ &9Jqc{!mÜ<}jxm 8ؔƥ
B"8 %d~cY%z.9Wvqa˚Gͧ};q ]t"aڰP o 1:eGxHr~akow˧ 9r *T9[
Uzs;-3.)/T'!ȬN(ۖBAM*f0ӻt2Kc{/!YD<PqסUiW0M
]O 8/X.
P5 ' ճ~5 6_tI00ݠ3 :;r8 0
*H
0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
180823202625Z
191123202625Z01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1)0'U Microsoft Operations Puerto Rico1&0$U Thales TSS ESN:B8EC-30A4-71441%0#U Microsoft Time-Stamp Service0"0
*H
0
U&kwSKq1'd=/#yQ(h [Ӻ
Us_:|S厕́XLǷpWd: #O$ R-ۯ/+ך1w7Yֆ:PN稇؇Jv:$@Hإb!r~} 0$i܄A{~*jҼTVWD]XOǩ"z-dbw63ftxB{mWb[S Pq ^`r" 00 U MJeO{ !13H0 U #0c:\1C{|F3hZmU0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U 0 0U % 0
+0
*H
=]]jeQ5R `VrCx!p)I<c(L&.#@x`d` @pw*R z˨ 5@rI~R&9K D_4@MK՝ CIL31c{31t` ]/Axر SK:8KQ Jo;_\S6'i
|MLɧ 㱇[r5[+~X4)W݀{P^~J"k.ߡ00Ԥ01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1)0'U Microsoft Operations Puerto Rico1&0$U Thales TSS ESN:B8EC-30A4-71441%0#U Microsoft Time-Stamp Service%
0 + sڇ1.<hFsDM0ۤ01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1)0'U Microsoft Operations Puerto Rico1'0%U nCipher NTS ESN:57F6-C1E0-554C1+0)U"Microsoft Time Source Master Clock0
*H
;0"20190809002332Z20190810002332Z0w0=
+Y
1/0-0
; 0
0 0
06
+Y
1(0&0
+Y
0 `
0 0
*H
{*RphF̝V_|-T22 j %__2 d d[W ^Qld3
cH]˝yޜ?+K(e Dc ȃ [Sپt_ҌL$3Z(}qН3l+(`SAٝuA+No+AA~kiSڥ0?Wl͓)~( ;h4&ֺiP:J]r-PL
a'Er2 tnn]k\J/ה~1000|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 :;r8 0
`He 20 *H
1
*H
0/ *H
1" n:FbzV)ƊFOSX휞@Vv0 *H
1000sڇ1.<hFsDM00~0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 :;r8 0f$W}6\ 0
*H
CP<tb~;e¤
Iq+ud=Y6^z\KQ'&)
|vH9KyL0]qĕ=_h>]_^ox?I|BK$?s\aA Y8 PR
2|"A4, "|k.BU;\0'uAX u
PD!-zWU>XaH4N_ebT~_RH' |zy`