home

CRStartera.efi

Sophos SafeGuard

Sophos Limited

Publisher:
Sophos Limited  (signed and verified)

Product:
Sophos SafeGuard(R)

Description:
CRStartera.efi

Version:
6.10.0.372

MD5:
a9efccb5ccfa516583dc808f1b863f39

SHA-1:
7501b35ec60346407b75cd662bef9a2d3071c4e0

SHA-256:
02f5e4b154a2bf4c617743772849cc3f58127ddc5481b232f69e094609372f89

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 2:29:35 AM UTC  (today)

File size:
531.1 KB (543,872 bytes)

Product version:
6.10.0.372

Copyright:
Copyright © 1996 - 2014 Sophos Group. All rights reserved. SafeGuard is a registered trademark of Sophos Group

Original file name:
CRStartera.efi

Language:
Language Neutral

Common path:
C:\ProgramData\globalclient\sources\sg_de_6.1_mui_p02\programfilesfolder\sophos\safeguard enterprise\client\efi\sophos\boot\crstartera.efi

Digital Signature
Signed by:
Sophos Limited

Authority:
Sophos Limited

Valid from:
4/3/2013 9:01:31 AM

Valid to:
3/10/2113 9:01:31 AM

Subject:
CN=Sophos Limited (self signed), OU=DPG, O=Sophos Limited, L=Abingdon, S=Oxfordshire, C=GB

Issuer:
CN=Sophos Limited (self signed), OU=DPG, O=Sophos Limited, L=Abingdon, S=Oxfordshire, C=GB

Serial number:
53414D01

File PE Metadata
Compilation timestamp:
1/31/2014 12:04:18 AM

OS bitness:
Win64

Subsystem:

Linker version:
10.0

CTPH (ssdeep):
6144:1ZsoyFaHcWsfrSFHF9ZOhD552W9jGFeEw0oC3QvglYxlkR1zKd91kroSagLob5c:1ZsETa+nZ252W9qFCbC3dS369LobW

Entry address:
0x3B890

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, DB, 2A, 00, 00, 85, C0, 74, 15, 48, B8, 09, 00, 00, 00, 00, 00, 00, 80, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, C3, 48, 8B, D3, 48, 8B, CF, E8, B7, 35, 00, 00, 48, 8B, D8, E8, 3F, 33, 00, 00, 48, 8B, C3, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, C3, CC, 48, 8D, 05, 09, 1F, 01, 00, 48, 89, 01, 33, C0, 48, 89, 41, 08, 48, 89, 41, 10, 48, 89, 41, 18, 48, 89, 41, 20, 48, 89, 41, 28, 48, 8B, C1, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC...
 
[+]

Code size:
300.5 KB (307,712 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.