Native.exe
by Various
Application
Summary
Native process - generic native application executable.
Native.exe is the 890th most commonly executed Windows program in EchoTrail's dataset, observed 2,919 times across enterprise environments. It typically runs from C:\Program Files (x86)\Sophos\Sophos Anti-Virus and it is most often launched by msiexec.exe.
890th
most commonly executed Windows program
2,919
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\Sophos\Sophos Anti-Virus100%
Top Hashes (SHA256)
- 310183b3a46a380e9eee638ecd5fa3a0c39f4a8be9129286a4ec260e3c41430029.09%
- 6d35a4a2704532357dc73e836a4fd2e0a430ca33ee956a25e682a0f45dd4caa922.32%
- 8b319aa8835268865778a704f96fbee8bd5804da52e65cd81ff602212dc0483616.11%
- 9c049645d7828b0f25d6e51a8222e141d8d60808a55dca9b35323b56810124858.49%
- dd17cf6efa83f9712b2ff4e9398778654a4d773d1fe16162fb31381c31d375408.21%
- 8b6a8ee6beb332b804140aefd07a88c66a084a2e27dc23ae989ab4988ed2c4476.63%
- f8179e97448eb12aacf41184f52fc10fccc71a0a9b8c7c4f353c909d5adbc49f4.49%
- fa1a1e47b52319c0fb181b91e0dbcd887d71fe4dd3f4f04e80430f96ff5bacf23.51%
- 54bb81f34e1c21a1d65f351ed3e888d89afd47aca44ad7aa62f5319c38addf0f0.84%
- 17746dfbb76655da7f767cce9e1b61d34d6e47d3e686d55000f1b9f9e976a7610.32%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- msiexec.exe100%
Top Children
- regsvr32.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about Native.exe
Rocky answers questions about Native.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.