native.exe

Native Application

Sophos Limited

This is installed with Sophos Virus Removal Tool.
Publisher:
Sophos Limited  (signed and verified)

Product:
Native Application

Version:
2.2

MD5:
3288c89a16424b919a776a013f0de18a

SHA-1:
c84cc7662b2f3941f4e787eaaa1d993e060c7ead

SHA-256:
95a0bf1b6ebc33d97d05f4de241955a39c3db815c27e5d89ded0ccd77e989be4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/3/2016 5:54:01 AM UTC  (today)

File size:
50.1 KB (51,264 bytes)

Product version:
2.2

Copyright:
Copyright (c) 2006-2011 Sophos Limited

Original file name:
native.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\Program Files\sophos\sophos virus removal tool\native.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
12/2/2010 4:00:00 PM

Valid to:
12/2/2013 3:59:59 PM

Subject:
CN=Sophos Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sophos Limited, L=Abingdon, S=Oxfordshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
03224E125DA6703112040AB66621435F

File PE Metadata
Compilation timestamp:
11/15/2012 4:18:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
768:6PnPTuwy3ijLJ+/hTZi7N5qZugYH+Jcis7dcgjrbCIILKZ2:6XTO3ijLJ+/hTZi7yZuneFUmgjXOw2

Entry address:
0x3260

Entry point:
4B, 68, 48, 85, C9, 74, 05, E8, 70, F5, FF, FF, 48, 8B, 4B, 78, 48, 85, C9, 74, 05, E8, 62, F5, FF, FF, 48, 8B, 8B, 80, 00, 00, 00, 48, 85, C9, 74, 05, E8, 51, F5, FF, FF, 48, 8B, 8B, 98, 00, 00, 00, 48, 8D, 05, C3, 77, 00, 00, 48, 3B, C8, 74, 05, E8, 39, F5, FF, FF, B9, 0D, 00, 00, 00, E8, 7F, 04, 00, 00, 90, 48, 8B, 8B, B0, 00, 00, 00, 48, 89, 4C, 24, 20, 48, 85, C9, 74, 13, 83, 01, FF, 75, 0E, 48, 3B, 0D, D9, 85, 00, 00, 74, 05, E8, 0A, F5, FF, FF, 48, 33, C9, 48, 8B, D4, E8, DF, 00, 00, 00, B9, 0C, 00...
 
[+]

Entropy:
5.9929

Code size:
24.5 KB (25,088 bytes)

The file native.exe has been discovered within the following program.

Sophos Virus Removal Tool  by Sophos Limited
Publisher's description - “We know all about viruses and they’re a pain. They can slow down your computer or try to steal your data and you might not even know you’ve got one. What you need is a quick and easy way to find and get rid of them.”
www.sophos.com
7% remove it
 
Powered by Should I Remove It?