home

Sophia.exe

Sophia

Cytotrade, spol. s r.o.

Publisher:
Cytotrade  (signed by Cytotrade, spol. s r.o.)

Product:
Sophia

Version:
3.23.0.0

MD5:
482fafdfb317ccdbfa02abd16b42b2f3

SHA-1:
b2c2930731e61decc8faefda4e2f361dd6d814e3

SHA-256:
e8847eb179da0898023e685b20f02a3d6f69bb19f654e60332758e7023ac7451

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 12:35:00 AM UTC  (today)

File size:
33.4 MB (35,036,480 bytes)

Product version:
3.23.0.0

Copyright:
Copyright © 2016 Cytotrade

Original file name:
Sophia.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\2bjj4t0l.gab\vejhxhgn.8hd\sophia.exe

Digital Signature
Signed by:
Cytotrade, spol. s r.o.

Authority:
COMODO CA Limited

Valid from:
8/28/2013 2:00:00 AM

Valid to:
8/29/2018 1:59:59 AM

Subject:
CN="Cytotrade, spol. s r.o.", O="Cytotrade, spol. s r.o.", STREET=Revova 20, L=Bratislava, S=Bratislava, PostalCode=81102, C=SK

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FF920D8F34B2E5F882E57430B05440C6

File PE Metadata
Compilation timestamp:
2/9/2017 2:59:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x2047C4

Entry point:
FF, 25, B4, 47, 60, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, 42, DF, AD, 01, 7B, 7A, 7D, 01, 00, 14, B1, 01, 89, AB, 1C, 00, FF, FF, 1F, 00, EC, 7D, 07, 40, 13, CB, D6, F0, 66, 93, 6C, 2A, 90, 25, B0, 01, 69, 41, 05, 23, A1, 06, 54, EC, 60, 07, 1B, 96, AB, 80, 8D, 22, 02, 8A, A0, 80, 15, B1, 60, EF, 20, A8, 88, 80, 15, 7B, 17, 15, 15, 3B, B6, AB, 28, 82, 05, 1B, 62, 17, 7B, BB, 76, E5, 3F, B3, BB, 81, 58, EF, 7D, F7, BD, EF, 7D, EF, 7D, 7F...
 
[+]

Entropy:
7.7119  (probably packed)

Code size:
33.4 MB (35,018,752 bytes)

Scan Sophia.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.