home

SOBOTTA.EXE

MD5:
c29220a009a882ce1b8aeb7381177eb6

SHA-1:
ed7be2c12f837bb340e744851f0cf6a41ab5bf2e

SHA-256:
69d6c0e37a606ff3109834280233d285ea7f1e2ee013c56cd3b70d59e0839587

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:45:33 AM UTC  (today)

File size:
584.3 KB (598,288 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS version:
13510.16261

OS bitness:
Win64

Linker version:
23.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:7LR/a9faI9ir6bAojlgsq3CXz4KdSe9CJIWJucJ6mnEPoZ6:7LG9bbAojlgsq3FKdSe9CJIWJucJO4

Entry address:
0x9710955

Code size:
896 KB (917,527 bytes)

The file SOBOTTA.EXE has been seen being distributed by the following URL.

http://s10065.chomikuj.pl/File.aspx?e=jtwSdjUi87V0PLoCsea_V9PihTLjvplwOrTVCD_a49d7ps2tBpQRYhVMV1NK5ilqKahJnN2Hyytr9oaWlSOoRkJXOPF6ZNU5T1Thqnrpu68xCJ_m6ODnBWqKWEr2lm1PXi-Ie7tsoWto1qW9pxLbEQ&pv=2

Scan SOBOTTA.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.