home

savshellextx64.dll

Sophos Anti-Virus

Sophos Limited

Publisher:
Sophos Limited  (signed and verified)

Product:
Sophos Anti-Virus

Description:
Components for extending windows shell with SAV scan

Version:
10.7.4.58

MD5:
17001f4544dcb29b757e1e73c0650870

SHA-1:
2f651804bfc386fdcb9d37fe31a3181f5928b7da

SHA-256:
6b97482f34b7db2ee00845e7fe08419fe3abb16bbdf136e28601c6f78a34b399

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:35:39 AM UTC  (today)

File size:
533.7 KB (546,488 bytes)

Product version:
10.7.4

Copyright:
© 1989-2017 Sophos Limited, www.sophos.com

Original file name:
SAVShellExt.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\ProgramData\sophos\autoupdate\cache\sophos_autoupdate1.dir\decode\savxp\Program Files\sophos\sophos anti-virus\savshellextx64.dll

Digital Signature
Signed by:
Sophos Limited

Authority:
DigiCert Inc

Valid from:
11/27/2015 6:00:00 PM

Valid to:
1/30/2019 6:00:00 AM

Subject:
CN=Sophos Limited, O=Sophos Limited, L=Abingdon, S=Oxfordshire, C=GB

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0B1F13907996A4CD0A83A4A5DCE1505E

File PE Metadata
Compilation timestamp:
2/27/2017 12:31:53 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x31A60

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, E7, 6D, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 10, 57, 48, 83, EC, 60, 48, 8B, FA, 48, 8B, D9, 48, 8D, 4C, 24, 20, 48, 8D, 15, 04, 18, 02, 00, 41, B8, 40, 00, 00, 00, E8, E9, 0D, 00, 00, 48, 8D, 54, 24, 70, 48, 8B, CF, 48, 89, 5C, 24, 48, 48, 89, 7C, 24, 50, E8, 72, 0F, 01, 00, 4C, 8B...
 
[+]

Entropy:
6.1296

Code size:
322.5 KB (330,240 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.