home

CRWizarda.efi

Sophos SafeGuard

Sophos Limited

Publisher:
Sophos Limited  (signed and verified)

Product:
Sophos SafeGuard(R)

Description:
CRWizarda.efi

Version:
6.10.0.372

MD5:
6007ca64c871c8459568900589013cfb

SHA-1:
5fbb86ec5b948739da1a5f04c03e012416f0286b

SHA-256:
54d7cd4a6f86177337c6fcfbf5e1483dcc5e10ef4e4c1b86cdee6e83f8479a01

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 12:26:19 AM UTC  (today)

File size:
1.2 MB (1,221,248 bytes)

Product version:
6.10.0.372

Copyright:
Copyright © 1996 - 2014 Sophos Group. All rights reserved. SafeGuard is a registered trademark of Sophos Group

Original file name:
CRWizarda.efi

Language:
Language Neutral

Common path:
C:\ProgramData\globalclient\sources\sg_de_6.1_mui_p02\programfilesfolder\sophos\safeguard enterprise\client\efi\sophos\boot\crwizarda.efi

Digital Signature
Signed by:
Sophos Limited

Authority:
Sophos Limited

Valid from:
4/3/2013 9:01:31 AM

Valid to:
3/10/2113 9:01:31 AM

Subject:
CN=Sophos Limited (self signed), OU=DPG, O=Sophos Limited, L=Abingdon, S=Oxfordshire, C=GB

Issuer:
CN=Sophos Limited (self signed), OU=DPG, O=Sophos Limited, L=Abingdon, S=Oxfordshire, C=GB

Serial number:
53414D01

File PE Metadata
Compilation timestamp:
1/31/2014 12:03:59 AM

OS bitness:
Win64

Subsystem:

Linker version:
10.0

CTPH (ssdeep):
24576:PHTN0jH/CxsaIjSoLQqz2tsfZbcL2MqZSduq:PHJ0z/CxsvLQqzdlMb

Entry address:
0x1A8A0

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 2B, 37, 00, 00, 85, C0, 74, 15, 48, B8, 09, 00, 00, 00, 00, 00, 00, 80, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, C3, 48, 8B, D3, 48, 8B, CF, E8, 57, 42, 00, 00, 48, 8B, D8, E8, DF, 3F, 00, 00, 48, 8B, C3, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, C3, CC, 48, 8D, 05, 21, 27, 0D, 00, 48, 89, 01, 33, C0, 48, 89, 41, 08, 48, 89, 41, 10, 48, 89, 41, 18, 48, 89, 41, 20, 48, 89, 41, 28, 48, 8B, C1, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC...
 
[+]

Code size:
930.5 KB (952,832 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.