home

sonicstage-4.3.exe

MD5:
0dc2053bee7d2d4bee71ac8ee91ad066

SHA-1:
0fe82e9453ed9f43072dd876980cbe20687d5355

SHA-256:
63910214d2c1b979165e4016e36f527c65b1f04bdda45b72e37d3ce464281679

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:09:54 AM UTC  (today)

File size:
72.2 KB (73,901 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\sonicstage-4.3.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1536:aqC0YdfufcLVYvH6AqATjZsTPP+epbWEC8r:aIOcpsTKs

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 3E, 0A, 3C, 68, 74, 6D, 6C, 20, 6C, 61, 6E, 67, 3D, 22, 65, 6E, 22, 3E, 0A, 20, 20, 20, 20, 3C, 21, 2D, 2D, 20, 74, 63, 20, 31, 34, 36, 39, 30, 36, 39, 34, 38, 36, 20, 2D, 2D, 3E, 0A, 20, 20, 20, 20, 3C, 68, 65, 61, 64, 3E, 0A, 20, 20, 20, 20, 0A, 20, 20, 20, 20, 3C, 6D, 65, 74, 61, 20, 63, 68, 61, 72, 73, 65, 74, 3D, 22, 75, 74, 66, 2D, 38, 22, 20, 2F, 3E, 0A, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 3C, 74, 69, 74, 6C, 65, 3E, 53, 6F, 6E, 69...
 
[+]

Entropy:
3.8936

The file sonicstage-4.3.exe has been seen being distributed by the following URL.

http://www.sharetourscity.com/WVl6OTRQVkZrTWpoMlVFVndXaVV5Um5GamQwUlFTR1ZyWlVrMWJGUXpka2RYYkZSQlUxSlpObTlQUjFoTlVsbDVNQ1V6UkNaalBYVnFRMWhrUVVKbVpFSlJSM2hXUmxwek1tSmxaWGRZUldFbE1rSnVOV05ZVkVKc0pUSkdkbU14TVRWR1psWnJWV1JVV1ZSWGNXRnZWM3BsZERnNGEwcGxUV0YxYTFoUWVuTnpXRE5TYVd0aU5HYzRSRWhJZW01VFNWaERWMjFsY1dveGFYRmljemgyTjJoQk5UbEdjVlJQWWxveVltTjZhMGMxU0RocFNWWkxXSGxUY1dGbGFXRTJUV2t6V0VSaWMzaFFRa2xGUmxaeFNFRWxNMFFsTTBRbVpUMHdKbVJ2ZDI1c2IyRmtRWE05YzI5dWFXTnpkR0ZuWlMwMExqTXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHY0dZdVltVnVhbUZ0YVc1emRISmhhSE11WTI5dEpUSkdjeVV5UmpFME5qUTRNVFUxTVRrbE1rWmxiaVV5UmpNbE1rWTJKVEpHTXpZME5EZ3ROamd3TVRNNExYTnZibWxqYzNSaFoyVXVaWGhs

Scan sonicstage-4.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.