home

Sophia.exe

Sophia

Cytotrade, spol. s r.o.

Publisher:
Cytotrade  (signed by Cytotrade, spol. s r.o.)

Product:
Sophia

Version:
3.20.0.0

MD5:
bfafc761bc4854405741538f86d8213a

SHA-1:
a508b3091ce9b44798000859e8e94078dfe1f04e

SHA-256:
aa63eefea26d7e02e5b906cb63fe21d1519fa36c48e34f79153ae5e316dcbe56

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 9:12:07 PM UTC  (today)

File size:
33.4 MB (34,977,088 bytes)

Product version:
3.20.0.0

Copyright:
Copyright © 2016 Cytotrade

Original file name:
Sophia.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\sophia.exe

Digital Signature
Signed by:
Cytotrade, spol. s r.o.

Authority:
COMODO CA Limited

Valid from:
8/28/2013 3:00:00 AM

Valid to:
8/29/2018 2:59:59 AM

Subject:
CN="Cytotrade, spol. s r.o.", O="Cytotrade, spol. s r.o.", STREET=Revova 20, L=Bratislava, S=Bratislava, PostalCode=81102, C=SK

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FF920D8F34B2E5F882E57430B05440C6

File PE Metadata
Compilation timestamp:
11/29/2016 3:24:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
786432:4ZrJPEqwyq4SOQsoCr9Ogpy4c17ZKmsHkLj4KDn:4Z9wyqT27c1FKmsELkyn

Entry address:
0x201258

Entry point:
FF, 25, 48, 12, 60, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, 80, 18, AE, 01, 7B, 7A, 7D, 01, 00, 4C, B1, 01, BD, AC, 1C, 00, FF, FF, 1F, 00, EC, BD, 05, 40, 15, DD, D6, 3F, 3C, 74, 23, 29, 92, 1E, 52, 44, 54, 40, 40, 04, 95, 8E, 03, D2, 88, 20, 0A, D2, 1C, E9, 56, 54, A4, A4, 94, 6E, A4, 4B, BA, BB, BB, 91, EE, 06, A5, 4B, 42, 42, E2, 9B, 83, 71, BD, CF, F5, F1, B9, EF, BD, EF, FF, AD, EF, FC, 98, 39, B3, CF, 8E, 35, 6B, ED, BD, 66, F6, FE...
 
[+]

Entropy:
7.7169  (probably packed)

Code size:
33.3 MB (34,959,360 bytes)

Scan Sophia.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.