| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/ProgramData/Sophos/AutoUpdate/Cache/sed64/ |
Upload File : |
MZ @ !L!This program cannot be run in DOS mode.
$ ɕƟƟƖ/ƜƖ4ƝƟƗŦǜţǚŤǜtïǞtXƞtåǞRich PE d ۈL\ " " @
5 (b < p P . ! $ 0 T 0 0 P .text h.rdata 0 @ H.data H @ @ .pdata P @ HINIT x ` b.rsrc p $ @ B.reloc $ , @ B H(H
0 L< H/ H
< H( H(H< HtHH;tH(H\$Hl$Ht$WH 3HHH;u 3xO H
w< H
H< fC< Hr< f-3< H4< ~ L
?< L@/ H< H ; H
"/ 5 ;ŋ|m HHN ;ŋ|WH; @8h0t$H; H9ohHEGhH; HHGh"@t H{5 H; HHf5 3H\$0Hl$8Ht$@H _H\$WH HH{O HHH\$0H _H\$WH H. HH
u. H ~. H;tEH;w@HC@HtL ; H
LHH; LH HPH; >. vH\$0H _H\$Ht$WH H3H
. H5. H;sN;PuDHC8H - HtL: H
Z LHH: LH> x HP벸 H\$0Ht$8H _H\$WH H- H
- H;s<H+HH - HHHHHHHtHCH(HuH\$0H _HL$H(A8 3HL$0E HD$0 8 HD$0@ HD$0@ H(HT$HL$H(A 3HL$0 HD$0 HD$0HL$8HHH(LL$ LD$HT$HL$HH HktH
, HL$0HT$pHT$(HT$hHT$ LL$`LD$XHT$PH
9 LT$0AHH@VWH H+ H3H$ HD$@H
8 HH: 8 fD$ : fD$"HD$@HD$(H$ H
> HH> < fD$0> fD$2H$ HD$8H=: uHL$ s Hl: H=l: uHL$0W HX: H=H: t
H=F: u3 H$ H3Y H _^̉T$HL$H8HD$@HD$(D$
D$ D$ D$H9D$ sED$ uL 3ҹM D$ HL$(DLu 3ҹM Lo 3ҹM j H8̉L$H8D$@D$ |$ t|$ t |$ t.BL2 3ҹM @Ll 3ҹM *L 3ҹM L 3ҹM D$@8 H8HL$H(=8 uL 3ҹM 3=8 uL8 3ҹM Lr 3ҹM m HD$0HLL 3ҹM M HD$0Hx t HD$0HLL 3ҹM ! HD$0@tL 3ҹM HD$0HxH tRHD$0x` tGHD$0DHXL 3ҹM L 3ҹM HD$0P`HD$0HHHHD$0Hx0 HD$0H(LL 3ҹM p HD$0Hx@ t HD$0H8LL 3ҹM D HD$0HxP tRHD$0xd tGHD$0DH\L 3ҹM L 3ҹM HD$0PdHD$0HHPL 3ҹM L 3ҹM HD$0 H(LD$T$HL$H8H|$@ tL 3ҹM z D$HD$ |$ t |$ t$HD$PHD$(HD$( HL$PxL 3ҹM * H8HL$H(L 3ҹM H= 6 t"H=5 tH
5 5 H5 H(ff H;
& uHfuH H8Hd$ HL
d& LP& z %R %D %6 %( H(MA8HI
H(H(A LDLAtA@McPLHcL#IcNHBHHBTt LM3I H( ff HIr,IIIGs`MIIITIuIt D ATIufffffff fffffff fffffff كtL+HHMIMIIt IJ IIL O AHHQHQHQHQ HQ(HQ0HQ8H@IuIt
ATIuI o R e g i s t e r B o o t D r i v e r C a l l b a c k I o U n r e g i s t e r B o o t D r i v e r C a l l b a c k
SophosEL: %02x
SophosEL reports that Boot Start driver dependencies are being initialized.
SophosEL reports that Boot Start drivers are about to be initialized.
SophosEL reports that all Boot Start drivers have been initialized and that SophosEL is about to be unloaded
SophosEL reports an unknown status type.
SophosEL reports the following dependency is about to be initialized:
SophosEL reports the following Boot Start driver is about to be initialized:
SophosEL reports an invalid status type for image initialization:
SophosEL: Image name "%wZ"
SophosEL: Registry path "%wZ"
SophosEL: FAILED Code Integrity checks but boot policy allowed it to be loaded.
SophosEL: Image hash algorithm = 0x%08x.
SophosEL: Image hash: SophosEL: Image is signed by "%wZ".
SophosEL: Certificate issued by "%wZ".
SophosEL: Certificate thumb print algorithm = 0x%08x.
SophosEL: Certificate thumb print: SophosEL: Not signed.
SophosEL has been passed an unexpected callback context.
SophosEL has been passed an unknown boot driver callback type.
SophosEL is being unloaded.
Tc >c ,c c b b b c X @ p @ K m d f L i b r a r y ۈL\ R 1 ۈL\
42 4 ۈL\ @ @ P0 @ X0 @ RSDS[fyDZ c:\Build\build\win64\Release\Driver_ELAM\SED\SophosEL.pdb GCTL .text @ .text$mn ` .text$mn$00 .text$mn$21 .text$s 0 P .idata$5 P0 .00cfg `0 .rdata 1 ` .rdata$zzzdbg @4 .xdata @ @ .data @@ .kmdfclassbind$a P@ .kmdfclassbind$c X@ .kmdfclassbind$d `@ .kmdftypeinit$a p@ .kmdftypeinit$c @ .bss P .pdata ` INIT a INIT$s (b ( .idata$2 Pb .idata$3 hb P .idata$4 b .idata$6 p .rsrc$01 q .rsrc$02 B B
p`
b b b # b B d T 4 2p
4
2p d 4 2 p B 2-+ ] f0 `0 @ @ @ @@ @ . 4 8 _ 4 ` 4 4 ' 4 ( 4 4 c @4 p L4 X4 ! d4 0 |4 \ 4 ` | @4 4 ^ @4 p 4 4 5 W 5 p r 5 y 4 ` a 4 HT$HL$H HH3H$ LV 3ҹM uLi 3ҹM 3HL$8D$PD$PHHD$HHL$X蟲HD$ LL$8LD$XH$ H$ D$0|$0 }D$0@H=v t43H
eHVH=N uL 3ҹM 03H$ H3fHĨ HE3I2-+ HtI;u81H H
H H3HfD
HHu
IHHHSophosEL is being initialized.
SophosEL is not designed to run on this system.
Unsuccessfully registered for boot driver callbacks.
̐b b (0 hb lc 0 Tc >c ,c c b b b c Z DbgPrintEx MmGetSystemRoutineAddress KeBugCheckEx ntoskrnl.exe FRtlCopyUnicodeString WdfVersionUnbind WdfVersionBind WdfVersionBindClass WdfVersionUnbindClass WDFLDR.SYS 8 P h pu q p M S E L A M C E R T I N F O I D M I C R O S O F T E L A M C E R T I F I C A T E I N F O p4 V S _ V E R S I O N _ I N F O + ? S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 > C o m m e n t s S o p h o s E L A M D r i v e r > C o m p a n y N a m e S o p h o s L i m i t e d v ' F i l e D e s c r i p t i o n S o p h o s E a r l y L a u n c h A n t i M a l w a r e D r i v e r 2 F i l e V e r s i o n 2 . 1 . 1 . 4 3 ( I n t e r n a l N a m e S E L l $ L e g a l C o p y r i g h t C o p y r i g h t 1 9 8 9 - 2 0 1 9 S o p h o s L i m i t e d . t L e g a l T r a d e m a r k s S o p h o s E n d p o i n t D e f e n s e , t h e S o p h o s n a m e a n d S o p h o s l o g o a r e t r a d e m a r k s o r r e g i s t e r e d t r a d e m a r k s o f " S o p h o s L i m i t e d B
O r i g i n a l F i l e n a m e S o p h o s E L . s y s P P r o d u c t N a m e S o p h o s E n d p o i n t D e f e n s e 0 P r o d u c t V e r s i o n 2 . 1 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n D 5 1 9 E E 9 0 7 2 6 D C 2 F 5 F 3 7 D 5 3 A 3 1 5 A 5 B E 9 E E E B A F F A 1 E C 0 2 E 8 F E 5 D E 8 7 C E B 2 7 8 1 B 5 8 2 F D 0 4 7 2 0 2 5 1 B 1 A 5 B F F E 1 C B E D 1 1 9 3 4 D 7 F 1 E 1 8 E 5 3 8 9 E 2 4 5 6 B D 0 6 6 8 2 7 A 9 A 9 A 4 9 4 2 B 2 0 PX8PX @ 0X ! 0! *H
!0!10
`He 0\
+7N0L0
+70 010
`He 1%,D(GN3bן
bL 0'03 P,btk P0
*H
0~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100
180906205958Z
190906205958Z01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1>0<U5Microsoft Windows Early Launch Anti-malware Publisher0"0
*H
0
ir8b(/ d _?l{ee?(I -$8g(s!5N07DM8ګf"
S[kZoĚ
t9A !͟{&?6Z1g}3C X.BANFm$ev84;fn} `!i E+EKH8fe(zz
M\p {b7{@Xbˠo 00+U %$0"
+7
'
+7=+0 U O|Hq|tYo0PU I0GE0C1)0'U Microsoft Operations Puerto Rico10U
232841+4448500 U #0_{" XrN!t#20VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0 U 0 0
*H
pTNRcI6}&}5Ӌ^:#o(V t#1XnG߯h~:l݅>* /{/P>Q+ 9Uy?>aG|Bڣv\0S~Ӝ7:9"w~"08Ryø)_j
;cXl+0GwU :f.81 bS6/$iA1<` sVL)ycmD#u*!/~L0p0X
a RL 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
100706204017Z
250706205017Z0~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100"0
*H
0
dPyg LVhDXOv|mE9 eҏDe,U}.+A+KnILk q͵K̈k:&?4W ]I*.ՅY?+t+;FFIfT UbWrg% 4]^(ղcӲȊ&
Y5LR[ HwօGj-\`ƴ*[# _E o73jMjfcx0ϕ 00 +7 0 U _{" XrN!t#20 +7
S u b C A0 U 0U 00 U #0Vˏ\bh=[Κ0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0
*H
tWO){xP" 4*,Ͽ4ہ 5oywN aZ#bQEg?< 09@!)奡i"tGCS0i% moar ,iv=Qۦ9H7amS˧a¿⃫k}(QJQlȷ Ji~IprGc֢DciFz? !{#-A˿ Lﱜ"KInv[Sy=s5<TRGjҎڙg^27uZW¿
-'ӵ^i$gsMOVzRMwO B
v#Vx"&6ʱn G3bɑ3_q @e"B!% -`7A*a<h`RG@w>SP 8 f3'9x6N_=GS a=*ג,7Z>@B1 V$]Qjy{%qDj#u1u0q00~1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20103 P,btk P0
`He 0 *H
1
+70
+7 10
+70/ *H
1" nNQ9
X Svl3#YX$;0\
+7 1N0L S o p h o s L i m i t e d*(https://www.microsoft.com/en-us/windows 0
*H
f4j|ZV`]JX{R[)_iԵh" /R?\\wu0N|w):xw aՑ <jT ?9bpTyl `V8[|c)m:v]0Q8pq@3Uzc%'=;BwS[PJ&wGyYK3|X:pIDJU<}QL& [z`'iښn.>{b$
$ 0
+710 *H
010
`He 0Q *H
@<08
+Y
010
`He $7aJ9 tYnNr1\?V120190130072958.303Z0Ф01 0 UUS1 0 UWA10URedmond1 0 U
Microsoft Corporation1-0+U $Microsoft Ireland Operations Limited1&0$U Thales TSS ESN:0842-4BE6-C29A1%0#U Microsoft Time-Stamp service<00٠3 ?z 0
*H
0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
180823202651Z
191123202651Z01 0 UUS1 0 UWA10URedmond1 0 U
Microsoft Corporation1-0+U $Microsoft Ireland Operations Limited1&0$U Thales TSS ESN:0842-4BE6-C29A1%0#U Microsoft Time-Stamp service0"0
*H
0
0Zh0MRR-uC1T^$⚆@yqut{%&-='\z+!V?
%m6 v{R}2[4=
> 7Ш^^ȦCfY?Ouy9aǹy,t2M
:e~Qt u/Y`tWW6TlGK,S7zSxJyZ`7o,zhqE Ӂg]xo",2C 00 U VK ߊvzf0 U #0c:\1C{|F3hZmU0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U 0 0U % 0
+0
*H
Rpv? 4;2w|>R0wKxg?og鰠zBF*ܐ; .[R9+dƿEW Dާ "a* "R"bJo>-OJ[WӜ畊zj\&7uǽu2\]Џ? ,)Pbz^r#baۻ)wt3uTxR[fϜ0:F(K}Uڼ!4̐s>6+ƃIN0q0Y
a * 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100"0
*H
0
w: iktTե
|hK,_av>f+[S'1 A |a0Y0D`TC M8Bݓs0W&E
GͿ$`2X`FXG2 tag_TϓLĦ]an(aF' $gr!KdPb]w =WuBM@Q>gfD~Knʱz*
1N5x </Dd xD]^O"M 00 +7 0 U c:\1C{|F3hZmU0 +7
S u b C A0 U 0U 00 U #0Vˏ\bh=[Κ0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0
*H
Q
?q=!o1Wm0fjxǨ%kTW+QDS`v@@A\\^5$VKtBȯ7}Z? yJR 8/ye٩kz oK0D$"<Y)p2J'U/3b_W@ΙfjbJ &9Jqc{!mÜ<}jxm 8ؔƥ
B"8 %d~cY%z.9Wvqa˚Gͧ};q ]t"aڰP o 1:eGxHr~akow˧ 9r *T9[
Uzs;-3.)/T'!ȬN(ۖBAM*f0ӻt2Kc{/!YD<PqסUiW0M
]O 8/X.
P5 ' ճ~5 6_tI070Ф01 0 UUS1 0 UWA10URedmond1 0 U
Microsoft Corporation1-0+U $Microsoft Ireland Operations Limited1&0$U Thales TSS ESN:0842-4BE6-C29A1%0#U Microsoft Time-Stamp service#
0+ e1^ (IY`+"0~0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
*H
0"20190130120530Z20190131120530Z0w0=
+Y
1/0-0
0
*z0 j0
06
+Y
1(0&0
+Y
0
0 0
*H
pD.Ij N~$ ǝ|'(ʠ3h?X{dNG1bgЇ 5}l cPfS # <,O@ÚVϳZ5Bkٔ ?1
0 00|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 ?z 0
`He J0 *H
1
*H
0/ *H
1" :ȮU9? w,\oT,Kq0 *H
/1000 s;x\v)=)@o
kA.-00~0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 ?z 0" cBKel-<]J'bCr@F0
*H
b=Z j}e
|-yZ!$^lHL(|ac`5SjHfU8,
X;7C'"p |_85r9/A\T^)pIN7 NL&4q0+E?ikjH`ީVUU5BEm_ssj(B84Z?VͣPOW~y,dr4 PSO /}R21DP