home

Sophia.exe

Sophia

Cytotrade, spol. s r.o.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.sophiatesting.com.
Publisher:
Cytotrade  (signed by Cytotrade, spol. s r.o.)

Product:
Sophia

Version:
3.20.0.0

MD5:
e5396550eba4db1776fb5cecd7de6405

SHA-1:
61ecabb20f40fe383f1c0375e55a12ab1b5c6ad0

SHA-256:
82e9d96ece2e7568278c7fba2e77ea8f35c36d90c5e3f9e243ba7f61bb478fa4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:35:29 AM UTC  (today)

File size:
33.2 MB (34,765,120 bytes)

Product version:
3.20.0.0

Copyright:
Copyright © 2016 Cytotrade

Original file name:
Sophia.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\sophia.exe

Digital Signature
Signed by:
Cytotrade, spol. s r.o.

Authority:
COMODO CA Limited

Valid from:
8/28/2013 3:00:00 AM

Valid to:
8/29/2018 2:59:59 AM

Subject:
CN="Cytotrade, spol. s r.o.", O="Cytotrade, spol. s r.o.", STREET=Revova 20, L=Bratislava, S=Bratislava, PostalCode=81102, C=SK

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FF920D8F34B2E5F882E57430B05440C6

File PE Metadata
Compilation timestamp:
8/31/2016 7:59:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
393216:NNSvfz2nsZKtIgmonxsFyEfiD6GDbu7z7WLvhQqYt6cco6aui92k45wr0jq33TQE:NNS3zDKRmPY2ReuSW7thcC2b+NjA6nd

Entry address:
0x1FECCC

Entry point:
FF, 25, BC, EC, 5F, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, DA, 55, AD, 01, 7B, 7A, 7D, 01, 00, 8A, B0, 01, 21, AC, 1C, 00, FF, FF, 1F, 00, EC, 7D, 05, 5C, 15, DD, DA, EF, D0, 8D, 34, 92, D2, 22, 82, 02, 02, 22, 28, 5D, 1B, A4, 11, 41, 14, 44, 40, 40, BA, 15, 10, 29, 29, A5, BB, 1B, E9, EE, EE, 46, BA, 1B, 94, 2E, 09, 09, 89, 3B, 1B, E3, 78, DE, E3, EB, 7B, BE, 73, EE, BD, DF, F9, BE, DF, FE, 33, B3, 67, CD, 8A, 67, 9E, 67, AD, 67, 66, AD...
 
[+]

Entropy:
7.7250  (probably packed)

Code size:
33.1 MB (34,747,392 bytes)

The file Sophia.exe has been seen being distributed by the following URL.

http://www.sophiatesting.com/.../Sophia.exe

Scan Sophia.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.