home

grubx64.efi

Oracle Corporation

Publisher:
Oracle Corporation  (signed and verified)

MD5:
4fe25d076aaabbd1e610e3354823dfb3

SHA-1:
c3d37c39ce60771d1c024b473e199d77388d8729

SHA-256:
046b6e7f1caac5333b7011586ddaaf1bfccfce89c386f3bbc4faed0218d7c188

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:08:59 AM UTC  (today)

File size:
985.9 KB (1,009,568 bytes)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\grubx64.efi

Digital Signature
Signed by:
Oracle Corporation

Authority:
DigiCert Inc

Valid from:
6/25/2014 9:00:00 PM

Valid to:
6/30/2017 9:00:00 AM

Subject:
CN=Oracle Corporation, OU=Oracle Linux, O=Oracle Corporation, L=Redwood Shores, S=California, C=US, PostalCode=94065, STREET=500 Oracle Parkway, SERIALNUMBER=4028125, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0747FC211C3C5F885149DF26AA6B68DC

File PE Metadata
Compilation timestamp:
11/20/2015 6:05:38 AM

OS bitness:
Win64

Subsystem:

CTPH (ssdeep):
12288:sMB5Y8gkMCkzBBp3+dVyu8yMXIC90SbbZFhqP/T5:dDFMCkBKmXIC90qbZFA3l

Entry address:
0x400

Entry point:
48, 89, 0D, 21, E2, 00, 00, 48, 89, 15, 12, E2, 00, 00, 48, 83, E4, F0, E8, 54, 70, 00, 00, 90, 48, 83, EC, 28, FF, D7, 48, 83, C4, 28, C3, 48, 83, EC, 28, 48, 89, F1, FF, D7, 48, 83, C4, 28, C3, 48, 83, EC, 28, 48, 89, F1, FF, D7, 48, 83, C4, 28, C3, 48, 83, EC, 28, 49, 89, C8, 48, 89, F1, FF, D7, 48, 83, C4, 28, C3, 48, 83, EC, 28, 4D, 89, C1, 49, 89, C8, 48, 89, F1, FF, D7, 48, 83, C4, 28, C3, 48, 83, EC, 28, 4C, 89, 4C, 24, 20, 4D, 89, C1, 49, 89, C8, 48, 89, F1, FF, D7, 48, 83, C4, 28, C3, 48, 83, EC...
 
[+]

Code size:
38 KB (38,912 bytes)

Scan grubx64.efi - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.