WdBoot.sys
Microsoft Malware Protection
Microsoft Corporation
It runs as a Windows 64-bit kernel mode device driver named “Windows Defender Boot Driver”.
Product:
Microsoft Malware Protection
Description:
Microsoft antimalware boot driver
Part of the Windows Operating System
MD5:
3772ff85f0098686b0dcd77076ae0786
SHA-1:
634b45b3f1b36c79bce4da2a962c9646995dc7e4
SHA-256:
8b0221f6003c53856676ffd9cdcff43df29b410ab2f340c10bb858f0e6ec14ce
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Whitelisted (by digital signature)
Analysis date:
4/25/2024 11:23:49 AM UTC (today)
File size:
35 KB (35,856 bytes)
Product version:
4.5.0218.0
Copyright:
© Microsoft Corporation. All rights reserved.
Original file name:
WdBoot.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\wdboot.sys
Authority:
Microsoft Corporation
Valid from:
9/24/2013 11:05:59 PM
Valid to:
12/24/2014 11:05:59 PM
Subject:
CN=Microsoft Windows Early Launch Anti-malware Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial number:
33000000353AFBBA2861C70171000000000035
CTPH (ssdeep):
768:7mgFsEkxTuUs64EtOaGUPbaR0yqFLtpKtF:6UQ4E77bSi2tF
Driver
Display name:
Windows Defender Boot Driver
Type:
Kernel device driver (KernelDriver)
