| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/ProgramData/Sophos/AutoUpdate/Cache/savxp/drivers/boottasks/wnet_amd64/ |
Upload File : |
MZ @ !L!This program cannot be run in DOS mode.
$ L99XWXWXW~, XWXV:XW Ԩ
XW ¨ XW~:
XW ݨXW è XW ƨ XWRichXW PE d G\ " d
pf @ m ( r : 8 x .text Fb d `.data h @ .pdata j @ @.rsrc l @ B.reloc p @ B n n n n
o "o ,o No ho ~o o o o o o p p &p 6p Hp Vp hp tp p p p p p p p p q q (q :q Pq nq q q q q q q r $r <r G\ { 4, 4 @ R e n a m e F i l e D e l e t e D i r D e l e t e F i l e S e t K e y V a l u e S t r i n g D e l e t e K e y D e l e t e K e y V a l u e D e l e t i n g r e g i s t r y v a l u e % Z f r o m k e y % Z
E r r o r d e l e t i n g r e g i s t r y k e y v a l u e ( 0 x % x )
D e l e t i n g r e g i s t r y k e y % Z
E r r o r d e l e t i n g r e g i s t r y k e y ( 0 x % x )
[ b l a n k ] { 5 3 6 1 6 6 8 3 - B 8 7 7 - 4 4 7 b - B 7 3 B - 4 0 D C 0 6 7 0 C 5 8 A } [ b l a n k ] S e t t i n g r e g i s t r y v a l u e % Z i n k e y % Z t o % Z
E r r o r s e t t i n g r e g i s t r y k e y v a l u e ( 0 x % x )
D e l e t i n g f i l e % Z
D e l e t i n g d i r e c t o r y % Z
I n v a l i d n e w n a m e % Z f o r f i l e % Z
R e n a m i n g f i l e % Z t o % Z
\ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ S A V S e r v i c e \ C o n f i g u r a t i o n D a t F i l e N a m e \ D o s D e v i c e s \ . b a k P r o c e s s i n g d r i v e r s t a t u s v a l u e s
S t o r e c o p y r e t u r n e d 0 x % x
O p e n i n g s o u r c e s t o r e r e t u r n e d 0 x % x
O p e n i n g t a r g e t s t o r e r e t u r n e d 0 x % x
C a t a s t r o p h i c f a i l u r e r e a d i n g d a t a f i l e - t a s k % d
C o u l d n o t a l l o c a t e m e m o r y f o r t a s k ( % d b y t e s r e q u i r e d )
F a i l u r e d e c o d i n g t a s k % d
M i s s i n g I D p a r a m e t e r
M i s s i n g r e f p a r a m e t e r
M i s s i n g s t a t u s p a r a m e t e r
C o u l d n o t r e a d s t a t u s f r o m t a s k l i s t ( 0 x % x )
I n s u f f i c i e n t m e m o r y f o r d r i v e r s t a t u s e s ( % d b y t e s r e q u i r e d ) . S t a t u s c o n v e r s i o n f a i l e d
C o u l d n o t a l l o c a t e m e m o r y f o r r e s u l t s t r i n g ( % d b y t e s r e q u i r e d )
T a s k t o b e u p d a t e d a l r e a d y h a s s t a t u s 0 x % x
C o u l d n o t w r i t e r e s u l t s t r i n g
% d o u t o f % d d r i v e r s t a t u s v a l u e s u p d a t e d .
P r o c e s s D r i v e r R e s u l t s d i d n o t c o m p l e t e .
P r o c e s s i n g t a s k s
A c t i o n B o o t T a s k s c o m p l e t e d
R e a d i n g i n f o r m a t i o n f o r t a s k % d
C o u l d n o t a l l o c a t e m e m o r y f o r v a l u e
M i s s i n g c o m m a n d p a r a m e t e r
C o u l d n o t r e a d s t a t u s
T a s k a l r e a d y c o m p l e t e d
M i s s i n g p a r a m e t e r % d
T o o m a n y p a r a m e t e r s
U N K N O W N T a s k l e f t f o r l a t e r p r o c e s s i n g
C o u l d n o t a l l o c a t e m e m o r y f o r r e s u l t s t r i n g
A c t i o n B o o t T a s k s d i d n o t c o m p l e t e
U p d a t i n g b o o t e x e c u t e r e g i s t r y k e y
\ R E G I S T R Y \ M a c h i n e \ S Y S T E M \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ S e s s i o n M a n a g e r B o o t E x e c u t e C o u l d n o t a l l o c a t e m e m o r y f o r r e g i s t r y v a l u e
S o p h o s B o o t T a s k s C o u l d w r i t e r e g i s t r y v a l u e
C o u l d n o t o p e n p r o c e s s t o k e n ( 0 x % x )
C o u l d n o t a d j u s t p r i v i l e g e s ( 0 x % x )
S o p h o s B o o t T a s k s i n i t i a l i s i n g
S o p h o s B o o t T a s k s f a i l e d t o i n i t i a l i s e
S o p h o s B o o t T a s k s c o m p l e t e d
< n u l l > < e r r o r > \ S y s t e m R o o t \ S y s t e m 3 2 \ S o p h o s B o o t T a s k s . t x t L o g F i l e N a m e \ # r e a d l e n g t h f a i l e d 0 x % x
r e a d s t r e a m f a i l e d 0 x % x
o u t o f m e m o r y
r e a d f a i l e d @ 1
- o d d l e n g t h r e a d f a i l e d @ 2 % s
w r i t e f a i l e d @ 1
w r i t e f a i l e d @ 2
w r i t e f a i l e d @ 3
w r i t e l e n g t h f a i l e d 0 x % x
w r i t e s t r e a m f a i l e d 0 x % x
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/E r r o r r e s e t t i n g r e a d o n l y a t t r i b u t e ( 0 x % x )
E r r o r o p e n i n g i t e m f o r d e l e t e ( 0 x % x )
F a i l e d t o c l o s e h a n d l e a f t e r d e l e t e ( 0 x % x )
I t e m s t i l l p r e s e n t a f t e r d e l e t e
E r r o r r e n a m i n g f i l e % Z ( 0 x % x )
\ R E G I S T R Y \ M a c h i n e \ S Y S T E M \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ S A V S e r v i c e \ C o n f i g u r a t i o n \ B o o t D r i v e r S t a t u s T h e r e a r e n o d r i v e r s t a t u s v a l u e s .
C o u l d n o t o p e n d r i v e r s t a t u s k e y ( 0 x % x )
C o u l d n o t q u e r y d r i v e r s t a t u s k e y ( 0 x % x )
T h e d r i v e r s t a t u s k e y h a s n o v a l u e s .
I n s u f f i c i e n t m e m o r y f o r a r e g i s t r y v a l u e ( % d b y t e s r e q u i r e d ) . I n v a l i d n a m e " % Z " f o r d r i v e r s t a t u s v a l u e .
I n v a l i d v a l u e t y p e % d f o r d r i v e r s t a t u s v a l u e .
C o u l d n o t r e a d a d r i v e r s t a t u s v a l u e f r o m r e g i s t r y ( 0 x % x )
% d d r i v e r s t a t u s v a l u e s r e t r i e v e d o u t o f % d
C o u l d n o t d e l e t e d r i v e r s t a t u s k e y ( 0 x % x )
F o u n d t w o o r m o r e d r i v e r s t a t u s v a l u e s f o r t a s k % d
E x c e p t i o n O c c u r r e d
E x i t i n g
RSDSp]@?N c:\build\build\threatdetectionsubsystem\modules\boottasks\fre_wnet_amd64\amd64\SophosBootTasks.pdb H\$WHPHyHLH
H Hd$( Hd$@ Hd$H LD$ HL$` D$ 0 D$8@ H\$0x)HL$`HUHL$`y3ۅy"4 t: tH
O8 3H\$hHP_@SH HHH
u H y =4 t=: tH
3H [H\$Hl$VWATHpHHiHY HL$0HHL$0E3H$E3H5jA;H
LHEHLf LD$@H$ D$@0 Ld$HD$X@ H|$PLd$`Ld$h2A;ċ H
X 3҃LcoHI;u YDHVH; D A IE3HfF$_H$ D$(H|$ H
X L3ҋH$ A;|3H
Qz L\$pI[(Ik0IA\_^@SH HHH
qD @ HH [b* @SH HHH
i HH [2* H\$Hl$VWATAUAVH HE3UAtHEf8\ H;rLEH
wH LL$@LD$PH$ D$(`@ D$P0 Lt$XD$h@ Hl$`Lt$pLt$xDt$ A A;Ƌ|:]HuuIAH$ I;tH
V L3oA;}H
DH A4 A; HUH
_L 0 H
6V D3#HI;pD0LpMHDEHUHH8 H$ HT$@DLD$
+DE AI;~ HEHTxf:\t/HHI;3 L$ I[8Ik@IA^A]A\_^A;tA;toE ED$0f|$0 vA# aHfHH#uI*H
5U D3"HI;tHHfD0fxHHL9su A;tH
U L3AIHT$0HHUHA;|dLL$@LD$PH$ D$(`@ D$P0 Lt$XD$h@ H\$`Lt$pLt$xDt$ A;D|H$ H
bT L3?AH\$Hl$Ht$ WHpHH
*T H3A 3HH;u
HHL$0H HL$ L$ HT$ HL$0LDŽ$ :ts9$ tjHL$PHHHL$@HHL$`uHT$@HHT$PHHHHT$`Hg H
9S L3L\$pI[IkIs(I_H\$UVWATAUAVAWH E3LH
lLAD$ Ef HL$H+ D9t$h D9t$` HIIHD$(HD$ ( A;Av@} H
U=HT$(A I$ A;} H
l HT$ E3I$ A;}H
AHL$(L$ 3D$ g A:l $ A;
I; H
Q D3HI; HL$(L$ H A:n HL$pHD\$pfE;G HD$xAHHTHH$ nD$ fE; H$ AHHTHHL$0<fD9t$0 HL$PI;t?D$d;D$`s594u0|HT$@HL$0D$d( A; H
F D$ HL$ H @A:` H
P L3Ɓ o@$ @ HL$(HtHL$ HtA:b DD$`H
A ` eT$@;u)D$ HL$ Hv @A: AK H
P 3DBPHI;p HOfD0@ HOPLNjfGA;6 D$0/+$ I; H
O D3LH LD$8HHL+IM52 HD$8DHWH+HI F2 HL$8D\$0D$ IMIH+I HH+HHHL+HHI F1 HL$ DIH @tAH
N M3H
N L3E3E3H
8Q H
N L3H
N L3H
ɺP H
. H
pH
H
qH
8H
ދH
뼋H
A yH
@nH
IIy# I HL$H}* LD$PLt$XLt$PM;tH
M 3H$ HĐ A_A^A]A\_^]H\$UVWATAUAVAWH HvG H3H$ HLHL$xH
E3LHT$pHD$0HD$HI II" A;tH
A;|RHT$0A IG A;tH
A;|%HT$HE3I A;tH
+d A;ADl$ AL%F HL$0LD$$3Dl$$ A: \$$A;
H
$ I;tH
aL L3>H
OL D3<HI; HL$0LD$$Hj A:n H$ HD$ fE;A H$ AHHTHH$ D$ fE; H$ AHHTHHL$8D\$8fE; HD$@AHHTHHL$`qfD9l$` LD$(HL$8
A;s D9l$(uH
_ IIHH$ HT$`H$ A2A;tHE HHH;|H L$`HD$hLdm HH-D LlH3ɋB9Lv_H$ E3L=D IHH fD9u t M HEHHLlHC;\rLt$pL|$x3H-`D BD;D fA9M % E3F8l tFA;vAHzH$ H$ H$ A3A;uH
_ H$ BTD$(L%C L$( LD$PfD$RH$
HD$XfDl$PA; \$PD$8H
I +3\$$DtHI; LD$@HHL+IM, HD$@DD$PHT$XH+HHLE + HL$@D\$8D$$IMML+I LH+IHMkLD$PHHHLM + HL$HDH H
H L3ҊA: Ɓ @t$ HL$0HtHL$HHtA:uH
II @ I% I;tH
YH L36H$ H3& H$ HĠ A_A^A]A\_^]H
4
E3ZH
H
P
9H
H
H
]H
H
H
H
iH
(1
H
H
,H
@H\$Ht$WH H
HHL$@8HaHL$P&L$ HT$PHL$@3E3$ @: D$ D; H
F 3HH;uH
^ L$ HT$PHL$@L @:u H
j H7HL$`HL$0HvD\$0fD;? D$`fD;r-(D$0HT$`HL$pfD$pAfD$phfD\$0;t(HD$8AHHTHHL$0fD\$0fD;ufD; D$ HL$8AA+AHHTAHH+HD+$ HD$@L$ H$ H$ DŽ$ 0 H$ DŽ$ @ H$ H$ ;|7H$ HT$PA E3|$(H\$ H$ ;}9SH
H
(E L3L$ I[Is I_H\$Hl$Ht$WHpH> H3HD$hH
fY ( LL$8AH=| uLD$8H3;}H
y D$0 t$4HD$0L$@L$LHD$DL$XHL$8D$0 t$4HD$0LD$@E33Ht$(HD$PHt$ s;}H
h HL$8 H
C 3DoHH;tHHf0fhHHH
C D3HH;tHHf0fhHHH;tOH;tJHHO;|HHxHHH
H
eC L3B(H
1 H;tH
@C L3 H;tH
)C L33HL$hH3 L\$pI[IkIs I_LD$HT$HL$SVWATAUAVAWH ILHE3fD!AE|$
El$%DCD; HcAFfA; A; A;tIHHCfHf Ɖ$ HcA FA;v A+X 5 D tWi HHHfDd$ Cf+fD$"HHCHPHT$(LD$ D\$ fD HHHPI;uHHL$0 HL$0HT$0HLHHL$0iHT$0H$ H{E3E|$
El$%H$ L$ $ HHHHfDd$@Cf+fD$BHHCHPHT$HLD$@ JD\$@fD< HHHfDd$PCf+fD$RHHCHPHT$XLD$PAD\$PfD HHHHK@fQf HHHPI;u"HHL$`KHT$`He HZLHHL$p HT$pH$ H0E3E|$
El$%H$ L$ $ CIHHCfD,Hf.*IHHC
fHf HHCfD<HfHĀ A_A^A]A\_^[H\$Hl$Ht$ WH H
f? 3A P3 HH;tHHf0fhHHH
3? D3 HH;] H;k HH$ H$ H%HvH$ HH$ L$ H$ H$ Llj$ @:tQ9$ tHH$ HuHH$ `H$ HH$ Hft$PHt$HD$@` t$8D$0 L$ LD$`H
> D$( D$`0 Ht$hHt$ D$x@ H\$pH$ H$ 3H
= L3 H;tH
= L3H;tH
= L3yL$ I[Ik Is(I_LIKISMCMK SH H>7 H3H$ 3H9 B= tt HLD$`fD$RIHL$PHD$XICf\$PHD$`HD$XD\$PH
< H\$@H\$8D\$0HD$(HD$hE3E33HD$ ,H$ H3 HĐ [HHXHhHp WHpH` H` H` IHHHL@HH I@0 @@ HL$8E3H$ HD$(d$ EAH=# tHL$8* D$ H
; 3HL$8HHtHD$0LA HD$($ HӉD$ BHL$8xNuHO W
;$ w6;w0Ht+LHH< D_ H
w; L3D QH
\; L392L\$pI[Ik Is(I_HHXHhHp WHpH` H` H` IHHHL@HH I@0 @@ w HL$8E3H$ HD$(d$ EAH0=# tHL$8 D$ H
: 3zHL$8HHtHD$0LA HD$($ HӉD$ HL$8YxNuHO W
;$ w6;w0Ht+LHH D_ H
: L3D H
9 L32L\$pI[Ik Is(I_HHXUVWH 3HHHHHL@ @0 HX@@ HXHX
; H$ H$ H$ E3HD$(E33HΉ\$ =# ; D$ H
!9 3H3H; $ H$ LHD$(T$ E33Hr3;}H
8 L33H; O ] HGffL$@fL$BH
8 f3DHD$HzH3H;u ]HL$0HfD$0f\$2Ht$8HUHL$0bHT$@HL$0RHL$0lH
!8 L3ҋH
8 L33;HH$ oH$ H$ HĀ _^]LI[IkIs WATAUAVAWHp3E3IIkIkLH;u\AICD$0 ICICE33ICL$`;|;|$ _ u+P H
I= A E3D$0HT$(HD$`3HD$ ;
9l$` D#H
6 3EHH;uH
]` IL+B HL$PDD$PHT$X3 HH H
6 D@3yLH;q HT$XLHe H
^6 B,/|$P3$ DG8HHt%u@8 L$ LI $ H
6 M3H @ 3Dt 4(CHI;rMHI H
5 GCD= L3B8 D\$P3fD;t*HD$XAEd<HHTHOGLD;DHAHA,0@,1AH DI
H
I5 L3&T@HHH
HEH
5 L3 H
H
?x2L\$pI[0Ik@IsHIA_A^A]A\_H\$UVWATAUAVAWH E3LMAHL$PT$PHt$XIHI;v41CHH;rHt$XfT$PDI; AVUUUVUUU A ЍR+kA ЋDBkL+t+t +H
3 B<G3DG$ սHA;uD8'L$ LAH u Hc$ D<I;9 H3HHIHLA3u HHt/H
q3 DD 3\HI;tLHHB fD<~H
B3 L3 I; HL$`HT$`H
3 Lc3AHI;g M;tLcIHI DD$`HT$hHcIH T$`lM;tH
2 M3H
2 L3LyT$PfA;tHD$XHHTHL|$@L|$8HcHD$0 fD<CH$ E3HD$(HD$pE33IΉ$ HD$ |$p #;DA;tH
A;|NL|$@L|$8HD$pl$0E3E33IH\$(HD$ 2|$p#;DA;tH
y:H
1 L3A;7H
H
}1 L3ZH
H
x2H$ HĀ A_A^A]A\_^]HHXHhHpLH WATAUAVAWH MM؋LM M DҹVUUUAkA ADҋA D v+ADA ADBkL+t+t+DCBA9E 9 DA3AE3L%lsADAA D L-IE;uAAkL+4~>D3ҍJAI HuLB)AIIuIuA
AAC
IE;Ѝ\~Ll$hL%tItDEE3EtW33;} A I|E~ EȋB!AIIuA+A~
DDz=I( A] 3H\$PHl$XHt$`H A_A^A]A\_HHXHhHpHx ATAUAVE3IILI; M; LcAELI;I; ErEEAM;saA AwA0AwA#AЃ wA+uA /x@DMރuA+ AD AAփ|A;uAřA;AOAŹ HcA+̓AA;~ DI;u AE IAI+uM;0A;D&AA3H\$ Hl$(Ht$0H|$8A^A]A\LH D$p0 H3҉T$PISD$@` ECT$0T$(HT$ ISIKISISMKMCȺ HAC@ ƶ D؋D$`#;ADHĨ HHXHhVWATH E3HDd$PLd$HHH @ LL$`l$@D$8 Dd$0L@HH D$( @0 L`Ld$ @@ L`L` A;ċ|H$ EL$(LD$pHT$`D$ PA;ċ|@$ t2EL$(LD$p#HT$`D$ $ H$ H$ SA;}H
oDd$PLd$H P |$@D$8 Dd$0 LL$`L$ H$ |$(Ld$ DŽ$ 0 L$ DŽ$ @ H$ L$ L$ A;ċ}+=4 =: H
H$ {A;}H
GDd$PLd$Hl$@D$8 Dd$0LL$`L$ H$ |$(DŽ$ 0 L$ Ld$ DŽ$ @ H$ L$ L$ 6A;ċ|H$ ٳ4 tH
= 3L$ I[(Ik0IA\_^HHXHhVWAVH HHHH HH
Z* HA @ 3A3HH;u
l$PHl$HD$@` D$8 l$0LL$`L$ H$ l$(DŽ$ 0 H$ Hl$ DŽ$ @ H$ H$ H$ \$`A A#A;D;: l$PHl$HD$@` l$8l$0LL$`L$ H$ l$(DŽ$ 0 H$ Hl$ DŽ$ @ H$ H$ H$ \$`A#A;D; H$ Hl$@Hl$8HD$`D$0 @ E3E33H|$(HD$ v\$`A#A;D;|aHD$hH;tGH$ Hl$@Hl$8D$0HD$pE3E33H|$(HD$ \$pA#A;DHD$h;| H= @ UH$ HtfH$ HtRH
3( L3L$ I[ Ik(IA^_^HHXHhHpHx 3L҉:H; DfA LIfDAw+t -u
DދffA;s|½0 fA9,Au ffA;r3efA9,ArVfA<A9wNHA Af+f w7H +H HH; ffA;rD:t
H;HA
뜸
H\$Hl$Ht$H|$ LI[IkIs WATAUAVAWH H H3H$ E3D$p@ fD$HL|$` fD$JHHH9LyLyHD$PHD$Hw1t$XLD$X ICHDyDy Dy M{M{A;ljC }/=4 uH
D{ H
1H; H HD$0L$ Dκ HD$ C = uD{ S A;}H
B}A $ CA;uH
]HY HHI;uIH
% D3HLCM;tH
% 3jH{HsI;uH
$ $ H H
F% D33HI;s $ fD|$8EfD$:HGEEHD$@D9{ IH HD$0LHD$(A A։t$ fD|$8DxtWuXGHT$4HL$8fD$8Dx&L$4wHCWAĉ (HK:D)KHT$8H
#H
FA$ S H
HCE (HCL(AHA D;s!SHKL
A DCE;t,H
A}E;u A #;ADʼnC H
# L3H
>C HH$ H3d L$ I[8Ik@IsHIA_A^A]A\_H\$WH 3H9Ht*H ֬yH
aHIHH\$0H _H(9s v 9tH
r}3H(Hh3DB0HL$0 D$00 HD$0HD$(Hd$ 3ҍJA A }H"
H
kH
H
r" HtwH%_" H
P" :3Hhff H;
uHfu H @SVWHPHH5& H6 H= HT$pHE3 Ht=Hd$8 HT$pHL$xHL$0H$ LHL$(3LHt$ L L\$hHD$hHL HA Hb H L H
ޫ HD$@H4 HD$HV H? HP_^[%%%%%%ު%ڪ%֪%ҪHHxHXHhHpHx L`LhLHI LpLxH@ LHL$(HD$83 3MHL$0Lt$(D$ I9GxIwpHtf9uI9GhIW`` f9W HL$@D5DP HL$Ht4fffft* QHutfffH9 uHL$@שI Ht f9)tffffHfuf9)ueH%0 Ao DD;ǀP IL$0I3HHHu$eH%0 DP Ec A X H H~ HD$0tf> uIh Iw`0 f> & HL$@AHD
eH%0 DD$@H\$H3A3҉P IL$0HLu.eH%0 A P AIDHL$@ tQD< CHÄu4t0L HA< ~fffHAIÊ< A3IÄuD|$ L|$8H7HL$@H9I LHt+f91t&fffHHffffffHfuf91uH7tq Ex D$ HL$0HDMƋDAHL|$XLt$`Ll$hLd$pH$ H$ H$ H$ Hx%t%%%@SH EHLAA LtA@McPLHcL#IcJHCHHKAt AHLL3IH [H(MA8HI H( p`0. . *
t d T 4 t d T 4 T 4
p `
d T 4 p ! !p`0i NE E E F F F t d T 4 d T 4
2 p 4
p `P- 0 \j d 4 p d T 4 p T 4 p ` 20
4
p
4
2p1
d! T 4 p \j T 4
p `
4
p`P d T 4 p d# T" 4! p ) 4> 4
p`P \j 4
p`P # d T 4 p\j h
T 4 p ` i 4d d d B @m q n n n n
o "o ,o No ho ~o o o o o o p p &p 6p Hp Vp hp tp p p p p p p p p q q (q :q Pq nq q q q q q q r $r <r 0memmove RtlInitUnicodeString RtlIntegerToUnicodeString NtOpenThreadToken RtlNtStatusToDosError ZwClose RtlAppendUnicodeStringToString RtlCompareUnicodeString NtOpenProcessToken RtlCopyUnicodeString ~RtlUnicodeStringToInteger 5ZwOpenFile NtAdjustPrivilegesToken RtlInt64ToUnicodeString ZwCreateFile ZwWriteFile ZwDeleteValueKey ZwSetValueKey vZwQueryValueKey ZwDeleteKey ZwEnumerateKey 8ZwOpenKey |ZwReadFile ,mbstowcs ^wcstombs ZwSetInformationFile ZZwQueryInformationFile 3qsort ZwEnumerateValueKey cZwQueryKey RtlCreateHeap oRtlFreeHeap .RtlDestroyHeap RtlAllocateHeap NtTerminateProcess yRtlUnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext ntdll.dll DbgBreakPoint mRtlFreeAnsiString |RtlUnicodeStringToAnsiString RtlNormalizeProcessParams /memcpy __C_specific_handler 1memset 2-+ ] f8 , - - D/ t/ / , y- k - - k - =/ k D/ n/ k t/ / k / 2 l 2 3 k 4 e9 l l9 ? xl ? B k B D l D G j G I `l I eJ |k lJ K j K KM j TM NO lk TO HR Dl PR U ,l U W Pk W >Y 4k DY Y j Y \ l \ _ j _ _ j ` c k c c k c *d m 0d d l e e |j pf i j i Sj k \j yj m 0 H X H H4 V S _ V E R S I O N _ I N F O
? S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 > C o m p a n y N a m e S o p h o s L i m i t e d ^ F i l e D e s c r i p t i o n S o p h o s b o o t t a s k p r o c e s s o r < F i l e V e r s i o n 1 0 . 8 . 4 . 2 2 7 H I n t e r n a l N a m e S o p h o s B o o t T a s k s . e x e z + L e g a l C o p y r i g h t 1 9 8 9 - 2 0 1 9 S o p h o s L i m i t e d , w w w . s o p h o s . c o m P O r i g i n a l F i l e n a m e S o p h o s B o o t T a s k s . e x e D P r o d u c t N a m e S o p h o s A n t i - V i r u s 6 P r o d u c t V e r s i o n 1 0 . 8 . 4 D V a r F i l e I n f o $ T r a n s l a t i o n PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING (8@PXhp : 0: *H
:v0:r1 0 + 0
+700
+70u njմ$fڎ`T1P0L
+71<8 Uu' 0N{-<Z
@[
Zngd3k㳞 $ hȽnl^rh']% 4 Ҡ+7ƠցD D iD D3
,>]G>z T B }~
~Fi]$
d nl
&0
IykX h 5%.7> j VYEs;нkke l ^)\[8+ p 9FJ;=l*2 C r 0!0 + ?4jXJ&xjYն6砂P00W~|NYKw;0
*H
01 0 UZA10U Western Cape10U Durbanville10
U
Thawte1 0U Thawte Certification1 0 UThawte Timestamping CA0
121221000000Z
201230235959Z0^1 0 UUS1 0U
Symantec Corporation100.U'Symantec Time Stamping Services CA - G20"0
*H
0
ITK
%y"W*oܸ&Csk¿.PZvC%CE{t"״ MD$k_E;DCsi+˙ r&Mq 1QaSI,xE/W?=ƒJ{3y
uAQlie)`;
tޒ"t|'JÞ-'}aqPK],e ؖ|NHDD h]jxdE`F~T|yq 00 U _n\t}?L.02+&0$0"+0http://ocsp.thawte.com0U 0 0?U 8060420.http://crl.thawte.com/ThawteTimestampingCA.crl0U % 0
+0U 0(U !0 010UTimeStamp-2048-10
*H
yY0h O]7_R DnmX|0i#s oG9*ÎY M1\*zz WLey@b%n7j!AW? wI*^8j"Q~0085njP0
*H
0^1 0 UUS1 0U
Symantec Corporation100.U'Symantec Time Stamping Services CA - G20
121018000000Z
201229235959Z0b1 0 UUS1 0U
Symantec Corporation1402U+Symantec Time Stamping Services Signer - G40"0
*H
0
c 9D#DIa
Sۭ,Jn<SU?+پay [LvCK"+Ch@O8#dX2oNW* Kc2[^Z(Pa;EQ V Gf=Gpr_ăd%"кzw[etA*L-wD h֨tw[2V3cI:3 ٳW;z"$.pžN& O(r W0S0 U 0 0U % 0
+0U 0s+g0e0*+0 http://ts-ocsp.ws.symantec.com07+0+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<U 50301/-+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(U !0 010UTimeStamp-2048-20 U FiJ LRc?^6
0 U #0_n\t}?L.0
*H
x;* Lb07x'o%ܠԔN%@ y!hڶ2m,&c3Idm
g5l|߲ q͕tܶ\7 Cxx( KĈ)\vnO^EFAn
8: q y{i +[ =[m .8
),Z,/I"xQÆ]=Qy3+.{ qj[0W,I?ɿ>"hcSit <ü u0 0vRUӅ90
*H
0o1 0 UUS10U
DigiCert Inc10U www.digicert.com1.0,U%DigiCert Assured ID Code Signing CA-10
181107000000Z
200305120000Z0X1 0 UGB10UAbingdon10U
Sophos Ltd1 0
U ESG10U
Sophos Ltd0"0
*H
0
1l./Ixyb6;4}zǡPTƜ!:[ :+
OU@^}.\є)X 0M|̯SӇ''% CaY)hYM jFTmMzwLcL%þG(ۡꦘp.
l牬LOX?cog z no ^%Om0ڠs2 K33: [+=qNeU 00 U #0{h)Iz?֧E520 U tʵ`A&M0U 0U % 0
+0mU f0d00.,*http://crl3.digicert.com/assured-cs-g1.crl00.,*http://crl4.digicert.com/assured-cs-g1.crl0LU E0C07 `Hl0*0(+ https://www.digicert.com/CPS0g 0+v0t0$+0http://ocsp.digicert.com0L+0@http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0 U 0 0
*H
m-_G$yH. arGV@3
kQDHSv$z| 33q rD^ ~[)yh?:Ŋ I2gIPע0Um% )sEk*5@@Kά(x- rP#bm@8ݩJ6 ;^rǢ9X:";!
GTRV'|v ?L*5ֻ1ʒT7 Yt\X( p4KF$yO00I !vm0
*H
0e1 0 UUS10U
DigiCert Inc10U www.digicert.com1$0"UDigiCert Assured ID Root CA0
110211120000Z
260210120000Z0o1 0 UUS10U
DigiCert Inc10U www.digicert.com1.0,U%DigiCert Assured ID Code Signing CA-10"0
*H
0
|
ʉKS<" HD?"nO$RrFūxz& |S/j(̠K ˸@E O9;oi\.f馸ޮbD'& Iq8mN\gwofdkIh~! K1jZBG}`+١]Vr>2*,2F^cиL5P_CD|DP*=t zrKVc?NI#%(Ad;] C0?0U 0U % 0
+0U 00`Hl00:+.http://www.digicert.com/ssl-cps-repository.htm0d+0V R A n y u s e o f t h i s C e r t i f i c a t e c o n s t i t u t e s a c c e p t a n c e o f t h e D i g i C e r t C P / C P S a n d t h e R e l y i n g P a r t y A g r e e m e n t w h i c h l i m i t l i a b i l i t y a n d a r e i n c o r p o r a t e d h e r e i n b y r e f e r e n c e .0U 0 0y+m0k0$+0http://ocsp.digicert.com0C+07http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0U z0x0:864http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:864http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0 U {h)Iz?֧E520 U #0E뢯˂1-Q!m0
*H
{r d:ć۔אY3+ި[%?|C9>;!%{$r]GF?jQ8%(TyF$8&aM(?Ī5SO=l#Mg :=<6Lv:V5/Leȑj-#O7;՜<ձ kx͜Q[B&rZ
J#@":ԛh)<ĆGBq2 r yKqiA9wd }h 1$F0$B00o1 0 UUS10U
DigiCert Inc10U www.digicert.com1.0,U%DigiCert Assured ID Code Signing CA-1vRUӅ90 + p0
+7 10 0 *H
1
+70
+7 10
+70# *H
1E Q#Z\ <k
)0
*H
G>^ܸZu8}?|g(/G>˞:lաBׁ ޯksEfuf~Mp>QaZxU^& 9S oxg\
OcuD-H.6EK Zm (] c y2ncVЄEM
+vxbp9'+4CA^M[Xe9.)7L Jz>G_z,nq!PdIך*z7 njPz0Z"%0 *H
100r0^1 0 UUS1 0U
Symantec Corporation100.U'Symantec Time Stamping Services CA - G285njP0 + ]0 *H
1 *H
0 *H
1
190414151942Z0# *H
1jipխYs\A0
*H
7iERPz1p{P]c&"Tt==`(X- 0|k&xYB (Cؽ MG$,`߂hP0W":ָMڢ"}![cEwf T@/GY\δ?(ƽZŜdn{+kr]%XVz^6L%'"Ė:&~&i+ĚFP XlD&0
+71 0 *H
0 10
`He 0l
+7\0X0!
+70
մ$fڎ`10
+71 |n*Q-rGѩ &n 9
4 2}Lz#sNyV$-`,Qn \Oh |֕)r;<_?#`?}/p $ Ȍ2SH n h Dd
ۡA 4 )m,> /#"-ZisY D FmD,8ZQLJr2%炶 T !
tU@2y q 9DɇMcm d C ?l\}EA
J)CKM ލ< h FZM+4 ˧P :r j
at+H#ve`|I忙 l =@؞mp(qb/ lWhZ p MlX1LXg <̟q öq r 010
`He 'kEݛɒu/WxD_flpŠ Y00} E%YRvDP0
*H
0l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert EV Code Signing CA (SHA2)0
181107000000Z
220204120000Z010 +7<GB1 0U Private Organization10U020965201 0 UGB10UAbingdon10U
Sophos Ltd1 0 U Endpoint Security Group10U
Sophos Ltd0"0
*H
0
_0l)V$K"0PD y?O"3ɼY[v ~Q=~͖̼hP:8IQٟ qO? uSspK̉p|ߏg l;?}Hh3 n>
J6Cۜ(jg5zį0?fxtG
a1P[4V&d"=x;(ZUNODD\qo4ladE| dx6
{}_`&^v 00 U #0~m2j #pj:k0 U V(GbH 6*0&U 0 +0
GB-020965200U 0U % 0
+0{U t0r07531http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07531http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0KU D0B07 `Hl0*0(+ https://www.digicert.com/CPS0g 0~+r0p0$+0http://ocsp.digicert.com0H+0<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0 U 0 0
*H
" *`41Xqex"@.1˘d߉h#̃҉g
JZ-!cCk1Vo)b㿭ȝ$g'|]ONa oӦ*tod!LaCT FAaa]^iesA*2zOb{l[2o"3دT]gu(|`q=W&m=GF- #CW
+*0Ӈ.a[jg4 Xn="4n00_:xG\0
*H
0l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert EV Code Signing CA (SHA2)0"0
*H
0
Sdτ5Ѷǣ,,:5:W/H<nܗ"QyaC/
I1DX>O#~le$U>#|BzbE}ct˞c%EO} u >Ez X64+.+1Xf2R>v@Zj=Kv\60L *XA "v^T8bp$ pd - !lس{P6
\J9yݿ=: % X0T0U 0 0U 0U % 0
+0+s0q0$+0http://ocsp.digicert.com0I+0=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0U 00@><:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@><:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0U 00 `Hl00:+.http://www.digicert.com/ssl-cps-repository.htm0d+0V R A n y u s e o f t h i s C e r t i f i c a t e c o n s t i t u t e s a c c e p t a n c e o f t h e D i g i C e r t C P / C P S a n d t h e R e l y i n g P a r t y A g r e e m e n t w h i c h l i m i t l i a b i l i t y a n d a r e i n c o r p o r a t e d h e r e i n b y r e f e r e n c e .0 U ~m2j #pj:k0 U #0>iGԘ&cd+0
*H
3J 37ۭ6:.zCBNMݟ !]Cw+ב3lղ;.ɓO@~YVrjA F|If8pwɍ1 )3͉?|mƲ:fk{ئ4XSW`#dM|%d!BC7M&MaKFAeθy ;Ǚ*nm^aƖa-Cbԙjd1
000l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert EV Code Signing CA (SHA2) E%YRvDP0
`He 0
+7 10 0
*H
10 *H
1
+70
+7 10
+70/ *H
1" Rgz ǐ` g{
!bg "0
*H
7= [%A__IE Yo
|<W~8~[{<|PrP}
ޒd9 RBx''M ?iC;U͘dnjϊA1vz+
*s9hIW/N4bi K_o3 av͉R^rzS!Zjj&"2e=e!a)+_I"N%j `2o&\(dwIӹU -wr ¡0
+710 *H
010
`He 0w *H
hf0d `Hl010
`He u8G"a{eQ_V^nfN"^tm`7!20190414151950Z 00j FBY(ONA0
*H
0r1 0 UUS10U
DigiCert Inc10U www.digicert.com110/U(DigiCert SHA2 Assured ID Timestamping CA0
170104000000Z
280118000000Z0L1 0 UUS10U
DigiCert1*0(U!DigiCert SHA2 Timestamp Responder0"0
*H
0
j4;s~Ǿ)ih&F_=bs[$7ZYv'f
+1gXJY+E dYfM#^
gRRn,{>x2P@LWOElBB|
h_)W 2"Sˢ X!Q+?,"C;;?GVE7ktYxWi xS`ĝꮯ~J\Xa^t(hrNRpfHӎ$e 8040U 0 U 0 0U % 0
+0U 00 `Hl00(+ https://www.digicert.com/CPS0d+0V R A n y u s e o f t h i s C e r t i f i c a t e c o n s t i t u t e s a c c e p t a n c e o f t h e D i g i C e r t C P / C P S a n d t h e R e l y i n g P a r t y A g r e e m e n t w h i c h l i m i t l i a b i l i t y a n d a r e i n c o r p o r a t e d h e r e i n b y r e f e r e n c e .0 `Hl0 U #0 )a%5n0 U 2J!(}Tn=0qU j0h020.,http://crl3.digicert.com/sha2-assured-ts.crl020.,http://crl4.digicert.com/sha2-assured-ts.crl0+y0w0$+0http://ocsp.digicert.com0O+0Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
*H
A25P""3L|oe"\"ȉRks\^?2`L61
&VGG[8j#E 2Fҷ"x Dmp̟S '*Hړene@sXOE(弜(`]-%]s.
[QښNP(xXxD: xid]*L,݂ҳUVjG?3C5xZ:i"Coh56z>Ed &J010
%2~A60
*H
0e1 0 UUS10U
DigiCert Inc10U www.digicert.com1$0"UDigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1 0 UUS10U
DigiCert Inc10U www.digicert.com110/U(DigiCert SHA2 Assured ID Timestamping CA0"0
*H
0
2K͏ݩ9T(W#JE3Q}}Mh~綠䗿c!W~j 8. ;̦2Y_e?FGU~ '~"?~">m;| ]Ț T qk"uqrN
@:\QyM$#0]<`j/GوP^fnVa')QFP*,u>1֭d{ Єr=MBS*O <ڬݬV 00 U )a%5n0 U #0E뢯˂1-Q!m0U 0 0U 0U % 0
+0y+m0k0$+0http://ocsp.digicert.com0C+07http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0U z0x0:864http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:864http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0PU I0G08
`Hl 0*0(+ https://www.digicert.com/CPS0 `Hl0
*H
qQVi|czx7@Kŧ B,w+ !Z*4 j'f `v:|b^% ĺ {,![,5Churǘ<d H_8aMbF$cR,)x GpuՓ~gSakXi
|(uc"ay~Yo&lQ!X` -+m~%+G|I|BB(VA4f]t{V3"/"6KJR1M0I00r1 0 UUS10U
DigiCert Inc10U www.digicert.com110/U(DigiCert SHA2 Assured ID Timestamping CA FBY(ONA0
`He 0 *H
1
*H
0 *H
1
190414151950Z0+ *H
1 000@G\ G ^0/ *H
1" .҆<u>keFW=wqA7Q2na0
*H
8bP ]ᚉw_7? }Ș9HMɱj*3d$6)Pby+F1(!{V <b9{S|{C ;q Ջ_tH)xҧ842ĺoE]kN$rvZՕCw|$>dC3LSʖ'?o֫0Fڡ<XLe<@'ѸƜFi
IҰT`ղqC[:&
hw[ۼd