home

sophia.exe

MD5:
7fac0d3f56d38f8c9809a21360b4e41c

SHA-1:
6a2b78e3a4e5dde9d4c968d386e700486761af00

SHA-256:
e06bcc4a2a3b9960382a75febdf80f21c4aaf8e3c7ee43865b758bc49aaeca02

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 11:28:20 PM UTC  (a few moments ago)

File size:
9 KB (9,214 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\sophia.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:tUYeVp5hmpU7d3CEQZV0Pt1g9UAUT/3kPnEEHMz59IvsaQKBiep:DehhmpMwZV2g9UnN8

Entry point:
2D, 2D, 3D, 3D, 3D, 3D, 3D, 20, 54, 68, 69, 73, 20, 69, 73, 20, 74, 68, 65, 20, 6D, 75, 6C, 74, 69, 70, 61, 72, 74, 20, 6D, 69, 6D, 65, 20, 62, 6F, 75, 6E, 64, 61, 3D, 3D, 3D, 3D, 3D, 31, 38, 34, 35, 33, 32, 31, 37, 38, 0A, 4D, 49, 41, 47, 43, 53, 71, 47, 53, 49, 62, 33, 44, 51, 45, 48, 41, 71, 43, 41, 4D, 49, 41, 43, 41, 51, 45, 78, 41, 44, 41, 4C, 42, 67, 6B, 71, 68, 6B, 69, 47, 39, 77, 30, 42, 42, 77, 47, 67, 67, 44, 43, 43, 42, 54, 6F, 77, 67, 67, 51, 69, 6F, 41, 4D, 43, 0D, 0A, 41, 51, 49, 43, 45, 48...
 
[+]

Entropy:
5.9780

The file sophia.exe has been seen being distributed by the following URL.

https://onsite.verisign.com/services/WorldIntellectualPropertyOrganizationWIPOCustomerCAV2/.../sophia.exe

Scan sophia.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.