Sophia.Script.for.Windows.10.LTSC.2021.v6.1.6.zip
- SHA256 7e5b523aab73839dfbb6fd6fd456320643ee2b033620a639acea5a47d3b4cdc0
Overview
overview
8Static
static
1Sophia_Scr...PO.exe
windows10-2004-x64
3Sophia_Scr...PO.exe
windows11-ltsc_2024-x64
3Sophia_Scr...on.ps1
windows10-2004-x64
8Sophia_Scr...on.ps1
windows11-ltsc_2024-x64
8Sophia_Scr...sh.ps1
windows10-2004-x64
3Sophia_Scr...sh.ps1
windows11-ltsc_2024-x64
3Sophia_Scr...ns.ps1
windows10-2004-x64
3Sophia_Scr...ns.ps1
windows11-ltsc_2024-x64
3Sophia_Scr...ns.ps1
windows10-2004-x64
3Sophia_Scr...ns.ps1
windows11-ltsc_2024-x64
3Sophia_Scr...th.ps1
windows10-2004-x64
6Sophia_Scr...th.ps1
windows11-ltsc_2024-x64
6Sophia_Scr...cy.ps1
windows10-2004-x64
6Sophia_Scr...cy.ps1
windows11-ltsc_2024-x64
6Sophia_Scr...er.ps1
windows10-2004-x64
6Sophia_Scr...er.ps1
windows11-ltsc_2024-x64
6Sophia_Scr...nu.ps1
windows10-2004-x64
3Sophia_Scr...nu.ps1
windows11-ltsc_2024-x64
3Sophia_Scr...ys.ps1
windows10-2004-x64
3Sophia_Scr...ys.ps1
windows11-ltsc_2024-x64
3Sophia_Scr...ys.ps1
windows10-2004-x64
3Sophia_Scr...ys.ps1
windows11-ltsc_2024-x64
3Sophia_Scr...ia.ps1
windows10-2004-x64
3Sophia_Scr...ia.ps1
windows11-ltsc_2024-x64
3Sophia_Scr...ia.ps1
windows10-2004-x64
8Sophia_Scr...ia.ps1
windows11-ltsc_2024-x64
8Static task
static1
Behavioral task
behavioral1
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Binaries/LGPO.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Binaries/LGPO.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Import-TabCompletion.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Import-TabCompletion.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Get-Hash.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Get-Hash.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/InitialActions.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/InitialActions.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/PostActions.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/PostActions.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-KnownFolderPath.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-KnownFolderPath.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-Policy.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-Policy.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-UserShellFolder.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-UserShellFolder.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Show-Menu.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Show-Menu.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Write-AdditionalKeys.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Write-AdditionalKeys.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Write-ExtensionKeys.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Write-ExtensionKeys.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Sophia.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Sophia.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Sophia.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral26
Sample
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Sophia.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target Sophia.Script.for.Windows.10.LTSC.2021.v6.1.6.zip
- Size 385KB
- Sample261029-2rn9batvft
- SHA256 7e5b523aab73839dfbb6fd6fd456320643ee2b033620a639acea5a47d3b4cdc0
- MD5 70559282496673db6087ac82b8817b7a
- SHA1 9ac2ba332eb1f2796e3412e6c2f0e0c0580dafcf
- SHA512 b7a223ca606bd3e815b4e5234ac16ed97e8347a668f4940972d51e7583bcb8c04e2a83a8e67a80b474aca9304b8fee6d4ba445cf62e052f47e1dd210f975d10f
- SSDEEP 12288:B9++o51gDrZJutQ1UjuZ6RPpz58OFgwIYLBn:B9++o52ZUtQOv9IYLF
- TLSH T1808423038DBBCC7ADE2F1DB9E922748155DB90BF411CEE442CD4989CFD933291E98298
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
Sophia.Script.for.Windows.10.LTSC.2021.v6.1.6.zip.zip 385KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Binaries/LGPO.exe.exe 469KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Import-TabCompletion.ps1.ps1 6KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/de-DE/Sophia.psd19KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/en-US/Sophia.psd17KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/es-ES/Sophia.psd18KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/fr-FR/Sophia.psd19KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/hu-HU/Sophia.psd19KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/it-IT/Sophia.psd18KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/pl-PL/Sophia.psd18KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/pt-BR/Sophia.psd18KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/ru-RU/Sophia.psd111KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/tr-TR/Sophia.psd19KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/uk-UA/Sophia.psd111KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/zh-CN/Sophia.psd17KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Manifest/SophiaScript.psd1881B
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Get-Hash.ps1.ps1 6KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/InitialActions.ps1.ps1 34KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/PostActions.ps1.ps1 8KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-KnownFolderPath.ps1.ps1 1KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-Policy.ps1.ps1 1KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-UserShellFolder.ps1.ps1 2KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Show-Menu.ps1.ps1 2KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Write-AdditionalKeys.ps1.ps1 5KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Write-ExtensionKeys.ps1.ps1 7KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Sophia.psm1.ps1 314KB
-
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Sophia.ps163KB
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Binaries/LGPO.exe
- IMPHASH 35ce6cd7b57f6aef60454bf39b0bb84e
- SHA256 0c97f29543418b30340c4ff5d930d31e6196dd59c2cc74b6b890fa7b90c910c7
- MD5 fdf6c1f114a0fd2a144a6a126206461c
- SHA1 bacfef8c102b1791ebe3229324cdf75da3171952
- SHA512 9d941f1bb73c999f7f3c54f20a673fc4bc0342ba1d5c43e271e70f67294a63253878f8ab412e5b6ec39468e556c37dadeff0c167b22dd1bb675eca93d4e2cbce
- SSDEEP 12288:km/Mfnx1+keV2XxPZ5OFV6h7+RHO8kyRpCX4DZVqFHdUk5xS8j0:KZEm+d2X4NVqc0xS8Y
- TLSH T1A6A47C1076A6C036E0F242301E79EF66557EB8254F7059CFB3D85A2E5A712C26A31F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:17:2a:fe:80:6d:c5:b5:86:67:67:78:a8:b1:ad:18:d4:6a:56:be:a2:07:77:f2:11:0b:90:00:8f:6a:ef:80
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:19:8c:bb:54:08:0a:5d:fe:65:00:00:00:00:01:19
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 13, 2019 - Feb 11, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
6
Entry point
177504
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\BA\343\b\Release\x86\LGPO.pdb
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
Sleep
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenW
GetSystemTime
CreateFileW
WriteFile
SetLastError
WritePrivateProfileStringW
DeleteFileW
WritePrivateProfileSectionW
GetTempPathW
GetTempFileNameW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
HeapFree
InitializeCriticalSectionEx
HeapSize
GetFileAttributesW
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
FormatMessageW
LocalFree
GetComputerNameW
GetCurrentProcess
LoadLibraryW
GetProcAddress
ExpandEnvironmentStringsW
LoadLibraryExW
FreeLibrary
GetModuleFileNameW
GetCommandLineW
GetCommandLineA
WriteConsoleW
SetStdHandle
ReadFile
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessW
SetHandleInformation
CreatePipe
GetLastError
CopyFileW
GetSystemDirectoryW
GetFileType
HeapReAlloc
GetFileSizeEx
GetConsoleMode
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
GetStdHandle
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
FlushFileBuffers
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetStringTypeW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
SetEnvironmentVariableW
user32
LoadStringW
advapi32
InitiateSystemShutdownExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertSidToStringSidW
LookupAccountNameW
RegDeleteValueW
RegCreateKeyExW
RegDeleteTreeW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
ord165
ole32
CoUninitialize
CoCreateGuid
StringFromGUID2
CLSIDFromString
CoCreateInstance
OleRun
CoInitializeEx
oleaut32
SysFreeString
VariantClear
SysAllocString
SysStringLen
shlwapi
PathCombineW
PathFileExistsW
Name
.text
Size
323KB
Virtual Size
322KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
113KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=26213,
count=181, id=261, version=26213,
count=21, id=259, version=26706,
count=33, id=260, version=26706,
count=23, id=260, version=26213,
count=73, id=261, version=26706,
count=17, id=257, version=26213,
count=170, id=1, productName=Unmarked objects,
count=15, id=265, version=27038,
count=1, id=255, version=27038,
count=2, id=151,
count=1, id=258, version=27038,
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Import-TabCompletion.ps1
- SHA256 a97a840b0aea93d359a8db09aae21ad3bd9a4b6f2c7d8f31ab366521fdafeb4b
- MD5 063fa323700f0da72bf9c05372d9a3e8
- SHA1 ac68cb90ef191c49ec662a4bad0e388555af2943
- SHA512 b54bf11ffb4492f326e1134b7c5fe62f36f879747fee9c0b2b7078ce6a78db15fe1efbfa97a3d8e0dc6f88546840e25b44a673a2add1bcc586e051a7c9aebb51
- SSDEEP 96:TF6eS9T7OMP1RZxV/ZcPqt3Sj7PKScjbVsHzTxz:a9T751Rl/Zcyt3g7H+bVsTJ
- TLSH T13BD18106B7DE9BE74687048BF737D4D83DACC2A031294415B0DAD191A526C7CAE1E7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/de-DE/Sophia.psd1
- SHA256 54b4fd7d31c16102acd5fd4874376244d824b5d7dffabb059a1d2219f556e572
- MD5 b807595afb454244aa320a18d2e00319
- SHA1 7a7830c984f1ce70d336f4527c22f4eaff727f93
- SHA512 95a16753eca4c0cb4ae935c423f871a8479aaf094b07eb3da5f2d58ca7a12a628f4e2b57f9bfc63b0afbbf29bf3a031e14ca203594219f83f9a689c8d268cb3d
- SSDEEP 192:ag19Q6MmSWtQYhsTPFTeYT29beJmOdZ/rriDwuIuSS2GI2OLP:vVX2S9QmOdZwToP
- TLSH T16712B73119B1A078769727ED4F018EB3BF6B6175A2837218BD9EC09507032698F3F796
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/en-US/Sophia.psd1
- SHA256 32aae9ad4d881eae79e0612a1a76294417a2b7fe5aa4298934dd365d6969dbed
- MD5 f63aa23ab402ba3838cd0ef25b6a69d5
- SHA1 e551f936e98cb54e3b20335f9b03adce5214898a
- SHA512 5986359d2cff7cdcac1e5553f849d346ae9b6e0430b47323016673c6d4a8c93e4d10c93188613c2ed747ba5d3f487f44e25356b7773cbfd9312e005d0c376914
- SSDEEP 192:ap2AdO6ENzCvJfbbwFrvES+0Xl1iBJk7DfPV:kZOkJffwW0X+UPV
- TLSH T14CF1B43F762061753AA343A7CE0B8B71FF26502D2682B21478ADC0DC2B5066883777E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/es-ES/Sophia.psd1
- SHA256 3479167c1413fb42ac0e78714fdb9b16696a4f0f6a06f9129a3d9f3555cbf902
- MD5 acfe6bf049493a4de34109e779609c9c
- SHA1 b3b44fad8d2fd1c9738ab7d95c8c6064cd43d0b0
- SHA512 36143a2320afae680ef03d5fb320df9d0124ebc4d6f29564a22f148d3074ccf0f36a6001bb4a3a7ce07e47221c58b1c24d5e67e94ac66c55c6783d62943af23d
- SSDEEP 192:a6x/GypVrGuxgEvrbdeHPiguEyLxON2VclD+:j/5ndqVlD+
- TLSH T1BC12A66AAA906671B9C3134BEE0AC763E9D045503952D291F4AFC1E68348FC8D337FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/fr-FR/Sophia.psd1
- SHA256 f47615ec65b6c35d1a48d7d3e6d1b2e907583f2fd0b0ccdbcd208fdc49bd512a
- MD5 8a9459ada830686947688e30a46f42e2
- SHA1 64152d22c4de724bb761c9d59278944804035f70
- SHA512 50e272b301e455ece4fbbe392e8c1ee2798dad25eca24ce4a55cf485105f4cb967bfbe8e6c8d70aa3eeb6c18dd5434015a68f6452aa3b6f61fc69590fc962d61
- SSDEEP 192:aPVQ7oaY2aGZA2iqzU7Qc9LWfFIBsBvavg6agxgXG1hkMLB:gVBFN/5gqYqzaAUjM1
- TLSH T18612946FA960207166C30267FB0396A3ED35C1587252F604B8CF82DA1759AECD77B3D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/hu-HU/Sophia.psd1
- SHA256 9f2a16089b8fac21efd180735b0341a7ad284a8c18532efdaccca3969d92db69
- MD5 a5ba3305090481e3529332d6bc1b6fba
- SHA1 7be8277c1d7b257c5188ce15cdc9c45d4d8325a6
- SHA512 7fc774b6e8bccf56a3d4fd493ae92f32ced6c9cc6ad6109db059c6294508fb616fb503e528396bd929ea2e0cb5b00a23f57b6cf0de9d0191ff7438ccd13be0d4
- SSDEEP 192:a9l5oGdN48NvUmJm/V9EqYRgrFUXa99EViFVQIagmNExNoWq7:Sf/ZUmJm/VOzRgU/wV2WM
- TLSH T1C112C6B5B271E176E937038AED014692DDBB5236266361373ECE84DC2740249AA33389
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/it-IT/Sophia.psd1
- SHA256 9fbf0b5cc0a430a1122c028584643b8f430424d76c6173488532b90e018d0853
- MD5 229bed1e70c5c47d8513bf21339452f1
- SHA1 28faf938ecc0ab3892fa8c56bb9a0ac71ae22534
- SHA512 9c8b697553772e918bec7374845ca4e8e724614934bcb582fd5de1c164764fa82a4cce810d652df631336194ad2ca7676d10cd27fbb54d50f074f4b681619d7c
- SSDEEP 192:aZpVaEsRON5GcKhUcR0bNWaLEptamyGUwpfGhz2LK5B:Oja1gc0JEptHy7wfIB
- TLSH T1B912A638A5A1A03539CB03AFDD2651D2EC77A898F95262247DCF80DE1349F44F63AF85
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/pl-PL/Sophia.psd1
- SHA256 7158e77528b8158712537e46f09a8728eebd84a347e26bd5f4e6e92a273d4b2b
- MD5 008927c7bf5694c10cdaa0571ac05a2f
- SHA1 3740ad8502b887f6000d61e99f011b3083493af5
- SHA512 822a01f31d5b04151d2e5063f029d11b5d92ef69f0b06cc2cdefafcc4efefdfdbc91063fc0923b9b7d8245d163cec77f137415821d34dbb5b434acdaabc46fdb
- SSDEEP 192:aOx9Fys2MRsUHE8baXLT5m3UP9HCNDwypJtz2FAQsGARUgw:xyYHEsaXBmdtGPsRUl
- TLSH T10602E8696230D2352F9307DEAE128FA45CBF642DB046534AB9CF40D99316388D77BBE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/pt-BR/Sophia.psd1
- SHA256 537d2f53e98a3df34363d45119ce1f78dc918b73e9ca7409a5ed6bbf9ce874a7
- MD5 79156e72f4b45208e7ed515bce9a1a6e
- SHA1 93efc5cf7742fb922a01aa4bf81c49fbe2b385cc
- SHA512 243099b0bd744a8c300783d7bb57d87db55a0abdcb942c1cba50e0995e47ce73df322f09e1dd160c44bcab874f45096ed767101e64fb8733b9ba489fea49785c
- SSDEEP 192:at9npkhMznyWCInHaF5aIhBSBew2MBeGSeQa:Gnpkiw55awja
- TLSH T1B902732D69A0233159470382BF168F63ACD612623D46D286FADFC681A7D4BC4CA377A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/ru-RU/Sophia.psd1
- SHA256 38e5ae1f9b44bc4823a3719a8192a7a5dc0d62f0c1d94e4efad8d225bc41e8a4
- MD5 038aa99d5192b0e5cf3ce862270ba927
- SHA1 39cf156f1db58805dac9c4bd27bbb7e8ae20ec03
- SHA512 3b571e756567dbd96156ca51c26f4026286120d957da31446a5798e30fbbdeb80e03447235ea3dd5704027ca3a1edc8bff7c6f440274ae598866d5f6bfd20d4b
- SSDEEP 192:a3WEX6llx6Vx5PRVx9tqeB4jeF4tPHA8OUneqvA2OeBcOnqVJR6IRVmf:itgLPlJn1Ixernajyf
- TLSH T178329A60166EA8FF1642B14BDD046E093CE711BF3F66935535AC2DBE37E2024827A35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/tr-TR/Sophia.psd1
- SHA256 59b2c871964a57faf93533bd84d710b65fc8f0341fce230e2fc8cd15426de810
- MD5 42957e9b2c9fc72aa05298afef851e62
- SHA1 6a181ba33f4a33efc613eb79c7d7630482955bac
- SHA512 25d29e32e13f8023ccfb9eefe5f5ffa6c918b08af4c0e9c2ac44311ae3cf556ee9808ad54ae3887ea3866b319e9206fcb8c6bc0701e814515fd708209c48438e
- SSDEEP 192:aw2hKHYsXX8vEXwMDX/eNfE9k3haf7qU3OUAFlQ:0KH+vEXw4SkXEQ
- TLSH T12312A54494A9683D6B6F138FDE46066AFC9E13527272E602B0EF8C7C775269243F6708
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/uk-UA/Sophia.psd1
- SHA256 7ceb1d3401e35c6948f80990c5c5774ca3887c6b7b9cc34fe20026c7383e7a43
- MD5 c0269765af53dcfee1e18d5ce2729c57
- SHA1 c8deb10d65fefbd8173a68f5e2e85a288e5ce88e
- SHA512 f3e4f50f065b2ad4919c5c7de3fed626dd95fb8e74934fec58fe0ae4ee5e815b7d11bbaaede46dc2ce3f59179f3dab089c002b97894a828476734af9e2a04d7e
- SSDEEP 192:a61FP0LFqGfY4RFoFMDV9FTkYHVkIXkVVn8tju9vOcZ1qEmkADfu6thKwgZFiPyw:7zP0h28AM5AYC1stu1lmkCuGsHFIU60w
- TLSH T1C8327865269D58FF0213A19BE9087A083CA741FE7BA6871636AD3DBE27F1010C63D365
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Localizations/zh-CN/Sophia.psd1
- SHA256 dd6605e45ab331db1858fbbf39d020a47aa4f8d8376aa9293e4f1cb789308b36
- MD5 c8f19588bf9f3b9eb3bb2a859a6d952d
- SHA1 0cc8e706bfd18ac55714b5eb71b89d57db0567b8
- SHA512 cb4f7f5cb388cc11605c40eddc8519da6994725e789f0d257f7e594bea178f5803a037230846236b4d6f85ab78381a5d55b7f809cf6b65500f55a5312ac8debe
- SSDEEP 192:acNh9IEqbsg6mKpAw6zrrhgSUY7PU3DMDfUHiErHuuG:fs4mK61wDTMD8Hi8OuG
- TLSH T16AF1B5751634A9B536C323886D5A0E35BCAA233632A273457EDF84C87FC1A194376F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Manifest/SophiaScript.psd1
- SHA256 c84de0223f5cd6aeb52878d36140c9513b158e1f98c4a36416cacd5be09b89cd
- MD5 e8b14f2f27dbf3decbbbc5c46d1d2857
- SHA1 f9a6f9ac2391f50792bad232d1467b91ad691cc9
- SHA512 0503c435d6bacedb6191de5c6a84ab6df96f1a1a8d8754ad9ee4f20f996f07934fdc5da10b423000c42290d16ad513f9fb5316acf01ab19d37572c247ad97625
- TLSH T17E11C25539BBA63E1B121FCB8C39990DE561B125B5D0A494B16C49C47F8113502F93E5
- MD5 SHA1 SHA512 TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Get-Hash.ps1
- SHA256 927d49b6fe13f21852097d106169509dff1fcdd316f0d61ebbc40624391ce715
- MD5 8a31832007cb2071a2519f00ca2a370e
- SHA1 60eef670fbe1c80f3a9043cb8d9f8c2142e55266
- SHA512 af48d6c8955636977f1e69c5bdabc619ff89f2f62dd6c66f133f9de25809f8cd0dc9c73acd78f85f0a6e1bc1be4288420599192fae7dac8aca4e5024e0d6c333
- SSDEEP 192:UxsImqLCzex0ACmJWWuGwI8ES4Z0vR07Jd:oJmqM2JWWuG/8ES4qvR07Jd
- TLSH T18CD165567F0BD2705D461251423EC84CDB2FF0145AF42AE87CAF0A909A13E26277EEEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/InitialActions.ps1
- SHA256 c20d949a5c1d693b20af31be2a01b21c42dde632289eab5e703800e4c152319d
- MD5 a2209eefd5a4025d4ad67f7e1b95be97
- SHA1 04e2c2325e9e153f5df86716d7778483f428a7e3
- SHA512 965ba6b1f5c3c54ce672087986558346fc53e82cbcfa1b73d6be805dae3ad682dd9fbd10dd1e4c0d1c4f32e221cf7d9efc015bfcdc9c888ae943ba0ea49cdf60
- SSDEEP 768:E7ru4HOrCeGezejUeoIelPeoKl+xIL9ww7CHWqLl:wrFHOmeGezeoepelPegIL9v7CHNLl
- TLSH T1DFF2A7B3F88768184241219EF476F046FF2841E965B167B7B9CCC485E7068BD632A3ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/PostActions.ps1
- SHA256 78154e25fd8f9b08f595c43bbcd48579f144a4c5a024b39b490d50dc85b94b46
- MD5 0652f5d2a103a0cfa7efeae0779a3b00
- SHA1 03b22a486d5b906ab5305fa96c8ada647bfb52d6
- SHA512 0568c89f44cec91925fb2162482ac33c90de8a4ba9035c1e3004209cf4c02f775f4ee0b9269e05d72656dd748d1399617e45f2c6a0b2766b0753f135b4476fae
- SSDEEP 96:BfS7aAevI6rqxO+v3w8ukEGz4qbCH8yB808+8TKikKdx+olr2e+BbM2ke4Fd3:47IvI6UJmm4qeT9Rke473
- TLSH T12602C686F1072165DBD3315BE9BBB597FE7350EE11B22064B28DC1267B02B78836A3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-KnownFolderPath.ps1
- SHA256 eb06d1821815a9448a1e6bafc2f5b492e03d5cef38a5f5003ff083e180f3b74f
- MD5 95e013e1b296bb46b6c02202d51be3f0
- SHA1 8bcd6f81bec6381946512a55bb63dd62d675b2cd
- SHA512 4d8789f9ee8d66a824bfaa203fcb069eb3163c88ac2ad42c835e7726c88007d47725cefc8ccdda4b68966733bb6b72b88f4b3ad0794cbfc4a032a95b84520e27
- TLSH T17E31530FB117A0278259D744693D9C5D8F92C1A128B804E4BCED83E54B3DEB8626D69B
- MD5 SHA1 SHA512 TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-Policy.ps1
- SHA256 1fdb59836824b79fd48886826d41047904856497878e5bfedf36ffe48f8b8fbd
- MD5 d78cabe9c354a3af2d6632448250497a
- SHA1 f411a2a966ff3f0d2e3644b3a2db415e78b78ede
- SHA512 0f5a96e0c5ed0668786c89531c8d4547cd3573153eb9ed85f59e0de0ca85117e114a297a83e1890dc8f52228879bc0fa570eb6e5e320693fd565f9d0cc72ffca
- TLSH T12C413269BF1FE316A923A6C1E532E7106F3EB2897AB0419475CC93117037631922F9C9
- MD5 SHA1 SHA512 TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Set-UserShellFolder.ps1
- SHA256 664fc536b672e23ad4829a130fdcf9ebaa5ec43e0b9faeec8c981b891958f004
- MD5 fa673cee1b566c01c132031d90b2fe14
- SHA1 c799eead907c6af8c9adc59acf481d2e24ff80b2
- SHA512 9e6e0c94fa32fcf17dcd09ebfdea7f28d3627b2e81e14b4caece0df1a0c4f6bc950138529335a34ba3facd7e488a4e0d15ee2018a6006feeb188c302eb711135
- TLSH T1E341551EF92542728411E34869BBED285B6F85DDB43011D0BD8C8AC111289E89F6978F
- MD5 SHA1 SHA512 TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Show-Menu.ps1
- SHA256 384ef5599038de5d6c9e53d498568b42e1dd51563312c2031f06ae31ce47a15c
- MD5 d151a159b3aa38697b8e89ef879a6856
- SHA1 0b38a1011fda54250c52ddba9e818416ec27ff03
- SHA512 edd7d7647d52d1747185659ed919229af38b5d3c1b661eb7eaec2786e607ac319cb2a28a28946454551b4acfb7b21089ced944ef6b880f0fba1656c229b2ff98
- TLSH T183414026F7CFE029158A24C3297598E6DF1DC1E86D6CA1E5B4C2404CF0A562C52FC39D
- MD5 SHA1 SHA512 TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Write-AdditionalKeys.ps1
- SHA256 1093fa352eef058b22bcf62538345e55fe9c517d67c5ef37c6a08ee62df473db
- MD5 4dab1f68e62bfc9b47d0783671456005
- SHA1 8a5f9c55402257ecfb43b68e333d5e8274f2b73b
- SHA512 7ce5e6c0484d516439a31f0c27997975dda091ed11dddd3776b2d1d524cd04794fcb3d743e071abab5a2e419aa4d143bb4d0f1901838c2a2ac4407fb2595a748
- SSDEEP 96:9fSBIxt3et0z0F0bwfus1AidQ0hBjheCecMYMpea1G8kecMbMVwKkO/6eB5TZwv0:cBIvQgOiwH1ArOvelBawKkO5TZwvwsw1
- TLSH T144B113C2FB1D113616A632094FF5D96C9BBEC1EE117861DC62CA93549031A2EC32D6EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Private/Write-ExtensionKeys.ps1
- SHA256 c19307ce0b2272ac0c4bb5b2f7f103bb7355ba017a98e623ccdd22b59d3aad58
- MD5 84c9a7ff5228205be2710aa2c4cdc0d1
- SHA1 a3359126dbbbbd1c1647b110e3262c60a96ddbda
- SHA512 d8ed3347f378f0d13006ab751c7ae1277e97e4295ba7920cdb3f25dd06d3560452d320849bdb0f45b102bcd54e31baa06c2eecef7c132334c345558cdeca09b8
- SSDEEP 96:SfSXIxyOel3whRet8U8C8YeayocB4yT6R8W8c88F84yzPQbKwQd8l8W8xRz5KTkW:ZXIkfgh6vnb6Rz/k1/cbQxcv+ZiWF
- TLSH T1CCF16486F5140271A5B17304DF7ABC385BBE869DA07071E963C967109026B7AC2FD3ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Module/Sophia.psm1
- SHA256 9891759f136a65df15cc2d87860f5d52b4ffca6185fa7e1b26999e2495b92c0a
- MD5 f11870a70416f9b33a9082fa887d4c18
- SHA1 c0ef0d5d89ad90bc593751b7a4dce4fdc91367d2
- SHA512 d976aa4ef4f87208c05c9a661fe546dd7c079f948d066498c9e0bda4de1abb4e2e916898e33d8c1d868ae07c77b48fb6a6a4d7d0685909640d46474ba891744e
- SSDEEP 3072:+eYeJele91QlFYe6tEOAz9eepcd3eoe6etvemeueHNGQepeOn9eUe9e4eueUeJel:vtEOAzTpcdAoX3XK9xt7ARImp
- TLSH T1ED64F712F70F5265D9A27256AA77FC986F3EC0DB307462F0B2C9C214D056936837A3DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Sophia_Script_for_Windows_10_LTSC_2021_v6.1.6/Sophia.ps1
- SHA256 5321b71cfbf902cc0b1314e986abe7d55571407d3d6c68ec05ccd5c81af382c9
- MD5 f4de83c1a63ed3f2ea470b713028397a
- SHA1 7d0fd2b900811b2616f6a1e5f1369a7c88653c26
- SHA512 7b3752e32818b5569cbaf96cd5320c8b7bb41043d1a2fbd1670d0e7d7699e329b5e5a8886590dd7fa5a82f49a726b7c0bce974c71c850583ed7a320990937bdb
- SSDEEP 1536:trci/sC6u0A5eKhFY4X5y+ypctqg4m4nYH9nTSISe01uy:th/sC6u0A3hFupctqVYHYxD1j
- TLSH T17F533261765B749A0122F05FD505AE0D7FAB44FE3B76A32218A42C7E35F3424833E76A
- MD5 SHA1 SHA512 SSDEEP TLSH