» sophia.exe._old
Overview
Analysis
File Details
Downloads (2)

sophia.exe._old

Sophia

Cytotrade, spol. s r.o.

File name:

sophia.exe._old

Publisher:

Cytotrade (signed by Cytotrade, spol. s r.o.)

Product:

Sophia

Version:

3.13.0.0

MD5:

4d7d348171e7ea2410a44569685b4d04

SHA-1:

137fc78349fd45026bc839428221e5c2028d7c5e

SHA-256:

551746f5f59a905b61c11a1ff07000bf0f9fa6e6f0dd4f007e276c9bb806881b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 10:16:28 AM UTC (today)

File size:

31.6 MB (33,113,600 bytes)

Product version:

3.13.0.0

Original file name:

Sophia.exe

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\sophia.exe._old

Digital Signature

Signed by:

Cytotrade, spol. s r.o.

Authority:

COMODO CA Limited

Valid from:

8/28/2013 2:00:00 AM

Valid to:

8/29/2018 1:59:59 AM

Subject:

CN="Cytotrade, spol. s r.o.", O="Cytotrade, spol. s r.o.", STREET=Revova 20, L=Bratislava, S=Bratislava, PostalCode=81102, C=SK

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00FF920D8F34B2E5F882E57430B05440C6

File PE Metadata

Compilation timestamp:

3/12/2015 9:49:16 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

786432:1RTJIJ+STN71IEYn32N2H672ALXQpFbmUlBns8l:1RTqJfNJIE22N2H42AlKnFl

Entry address:

0x1DF1F8

Entry point:

FF, 25, E8, F1, 5D, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, 68, 38, A2, 01, 7B, 7A, 7D, 01, 00, 68, A5, 01, 90, B1, 1C, 00, FF, FF, 1F, 00, EC, 7D, 05, 5C, 15, DD, DA, EF, 10, D2, 20, 8D, A4, B4, 88, A0, 80, 80, 08, 4A, D7, 06, 69, 44, 10, 05, 91, EE, 06, 05, 44, 40, A4, 94, EE, 6E, A4, BB, BB, 43, 40, BA, 1B, 94, 2E, 69, 90, B8, B3, 31, 8E, E7, 3D, BE, BE, E7, 3B, E7, DE, FB, 9D, EF, FB, ED, 3F, 33, 7B, D6, AC, 78, E6, 79, D6, 7A, 66, D6... 
[+]

Code size:

31.6 MB (33,102,848 bytes)

The file sophia.exe._old has been seen being distributed by the following 2 URLs.

http://www.sophiatesting.com/.../Sophia.exe

http://www.ecdl.at/member/.../download_certificate.php

Scan sophia.exe._old - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.