Information about WdBoot.sys

WdBoot.sys

File Details

Product Name:

Microsoft Malware Protection
Company Name:

Microsoft Corporation
MD5: f5d4fa3e1f4879c361fff3855259d2c2
Size: 35 KB
First Published: 2018-11-12 18:15:52 (5 years ago)
Latest Published: 2018-11-12 18:15:52 (5 years ago)
Status: Clean (on last analysis)
Analysis Date: 2018-11-12 18:15:52 (5 years ago)

Overview

Signed By: Microsoft Windows Early Launch Anti-malware Publisher
Status: Trusted Publisher

Common Places:

%programfiles%\dll care\download\softwareupdate\system32

Geography:

100.0%

OS Version:

Windows 8.1 100.0%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x000025ac

PE Sections:

Name Size of data MD5
.text 7680 0428c6c4baaacc8061bb75b2c9e304bf
.rdata 2560 cb8ca4b19ce26bcf6ebe546dd3af2515
.data 512 3c576b8604024d8e46493bcad612d306
.pdata 1024 ddbc6fefd073712cfb757911a667df98
PAGE 7680 f704b638763762ce751392a8b6ab4ce6
INIT 4096 4af5ac9d9096be0142956db3ae49176a
.rsrc 2048 e1d115e1f8ce8f3faa4423bb84e83341
.reloc 512 66c2901361938e1f880c134c0f5dd6c9

More information:

Search on Virustotal
copyright for information about WdBoot.sys