home

airline.exe

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from s7681.chomikuj.pl and multiple other hosts.
MD5:
1671cbe9b267c105604ad6c9d328f21a

SHA-1:
1d975faf182fefd408496c97656b327eb64156cd

SHA-256:
9a898156925175ed602391f728f79f5b8b2561f5c6d243b70e103fb650093937

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:11:51 PM UTC  (today)

File size:
330.9 MB (347,013,802 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

File PE Metadata
Compilation timestamp:
10/25/2001 9:47:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:SeKFp3F956CjrzksnOcV7K7Uxwa4hDSUuRM4WUvl9ey0UI9yWbP9VFrEB:3KjF956OvnOWWOeEZ30U2PHV2

Entry address:
0x21AF

Entry point:
55, 8B, EC, 81, EC, 2C, 05, 00, 00, 53, 56, 57, 6A, 01, 5E, 6A, 04, 89, 75, E8, FF, 15, 54, 40, 40, 00, FF, 15, 50, 40, 40, 00, 8B, F8, 89, 7D, F4, 8A, 07, 3C, 22, 0F, 85, CC, 00, 00, 00, 8A, 47, 01, 47, 89, 7D, F4, 33, DB, 3A, C3, 74, 0D, 3C, 22, 74, 09, 8A, 47, 01, 47, 89, 7D, F4, EB, EF, 80, 3F, 22, 75, 04, 47, 89, 7D, F4, 80, 3F, 20, 75, 09, 47, 80, 3F, 20, 74, FA, 89, 7D, F4, 53, FF, 15, 6C, 40, 40, 00, 80, 3F, 2F, 89, 45, F8, 75, 64, 8A, 47, 01, 3C, 53, 74, 04, 3C, 73, 75, 06, 89, 35, 58, 53, 40, 00...
 
[+]

Packer / compiler:
Wise Installer Stub

Code size:
8.5 KB (8,704 bytes)

The file airline.exe has been seen being distributed by the following 11 URLs.

http://s7681.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbnZcrLVKQqxvbrgtVST6sJYRAcyF0w_W1PqcbxkLjKQphHk2wYDxQE1MD531nT0VA_sINIkgmRTYo3p4zmu4uvpWHnDcQNowPAsCsaH2QcBQIjMX202yUO8p0u8-VPbXcc9IS8O4_FMZJMJnO9EHGAJo&pv=2

http://s7681.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbnQNU6Jgx_L3w99jnLe9Ms9glHWp3p_pvFWAl4XY2Stmo1W-Sg2A-BN0BBoFWv3RD9UiGSjROY9A54IgRulrpDpMiU2c4K2z1FxKRu9lqCPu9TT_wkQTCjDnTiFM5p3rc6q141dnmOafLB0EcJq_Ef88&pv=2

http://s7681.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbnWk53EXiT8YZbHVWXotxtdJYh7xKRPPccQHeYfU4BDrR7qDVFqXhT5Q3RIPNd1AmxO0E7z7tcL1txY_pneqIQwb4Qh6HeO3iwzCfUkodpErvU2gLhAayZpdShwVBAe2pfY_cfPCwDShdexcDuo8oCQo&pv=2

http://s7681.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbna2zzwMH-E71ksfoxLRSPJZs6A9Ykivdz3Iwey-wREisMaU3Qtr7IkYSWOCt2fHdadM3Rbl_1UdHQDL28mB7M3ZbjR0ABo1rUNXKzfYVg2KisvkNyRtzuTWW_iFpMiS-jrYuMTRNQRiQB9Ju5Lp3iDQ&pv=2

http://s7930.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbna2zzwMH-E71ksfoxLRSPJZQZpMzJM8n4_cEOTK8zwTj7e9t9RhXWOoPK0x5IalKWQnj2C1LmnIIrvm51XBxhj_YTJ1yISrD2v6H_1rFDHFxHFPoEtcSHdD8VgZjsKyvWUmO7LjwO9hexH_THbu9F5c&pv=2

http://s7930.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbnRnXDRfR3bAKBVI2kHnKVnXwc28NRtCsPfDrh_U1KjYKBVF1jsGcZSJGmbKd7DT4yR3krh6aIG1RGTzeXvGDbM3ZrkAtHF2gLqvIpbRM2Oy0pqpKfr_QSetwvBIUyERCNXPwYMDVgffaVqvcw5BIcJc&pv=2

http://s448.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbnX9N2OMJVJTF9R3HQugLQNriqgF4ExTmBG0g2jaOZzCpJhOpIL8DrCW1HiXgmcFtco2i9VPa_jp0G8U1fbEyczWNa4L6xCtaICERXWaaz5IYkbev96CnxSTbDjb2vvmDwy09CM42qcHIK9jp8b8KR7I&pv=2

http://s7681.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbnRnXDRfR3bAKBVI2kHnKVnUz1HJNkIDE5eO2pQ_tKkcGlfP9j8116ZeyVWpIZlxNlyuYnrdf2kBkc7ydi6_8dpED4VfHcqGft0OOur8Upc38NUXhEzxZTRIT-c3hGXPp8MlMEDW2XYd_TzSnkuW7ql0&pv=2

http://s7930.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbnao-xowY0wDhBc6MdHyXNqE1Me_m_TINILDIyDfjtkD_IgY4FVHP-kwDenYs3HaJb4636gDAMhJGouY1eMlH4mkKLS3PKd1nRL7zGqkpL8xFcFPayFzd0aGnK3tWmrrovwTClhKQYpTFWRwb_sRRHds&pv=2

http://s7681.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbna2zzwMH-E71ksfoxLRSPJY25eHtXjNne5wwZY7oqqFFSyQ7zX5EZRL8z9MFHCkydPy75YYLb3wQqP5FYN5fgZ7D-KSQ0sImaPTDOqWwQY05f-iSkHV0H3iwlFLmJcWmO8aFUK_4-Pqzc4BEIZ4XNWU&pv=2

http://s7930.chomikuj.pl/File.aspx?e=QWqho-dzql0w_CPSRKNbna2zzwMH-E71ksfoxLRSPJaW5rlKHC9FRvqy0kiEtLNQm2ygXn3gNBDHGqhXz8Ok7pbjFIBF5CePy5YbaHWBYrtXDIr77ueD4fZVmfh0ARR4mMAd7YvlnpOFNqhrdzq_5sGEyCIA_DA-dro1n0LhPIo&pv=2

Scan airline.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.