home

sophialite.exe

MD5:
a87332f7f5be355791827236f8fef835

SHA-1:
7e697348ddb17b8f45d4cc0d4c49b5b7e209cb42

SHA-256:
382df18e6cf832a438af6e6382f3a25b6a8e0965b1c36f81994ec363724c2043

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:40:21 PM UTC  (today)

File size:
7 KB (7,146 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\sophialite.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
96:rb+ReKtBMIidKDrT+cdMeWuTE2MIBt6aU7RJgaCuYipT5K9oKvn+mg0m8+DKbfWm:+1qIidKDn+hB2RtSRJZCuYipahtmhq

Entry point:
2D, 2D, 3D, 3D, 3D, 3D, 3D, 20, 54, 68, 69, 73, 20, 69, 73, 20, 74, 68, 65, 20, 6D, 75, 6C, 74, 69, 70, 61, 72, 74, 20, 6D, 69, 6D, 65, 20, 62, 6F, 75, 6E, 64, 61, 3D, 3D, 3D, 3D, 3D, 31, 38, 34, 35, 33, 32, 31, 37, 38, 0A, 43, 6F, 6E, 74, 65, 6E, 74, 2D, 74, 79, 70, 65, 3A, 20, 61, 70, 70, 6C, 69, 63, 61, 74, 69, 6F, 6E, 2F, 78, 2D, 78, 35, 30, 39, 2D, 75, 73, 65, 72, 2D, 63, 65, 72, 74, 0A, 0A, 30, 80, 06, 09, 2A, 86, 48, 86, F7, 0D, 01, 07, 02, A0, 80, 30, 80, 02, 01, 01, 31, 00, 30, 0B, 06, 09, 2A, 86...
 
[+]

Entropy:
6.5399

The file sophialite.exe has been seen being distributed by the following URL.

https://eca2048.pki.symantec.com/.../sophialite.exe

Scan sophialite.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.