home

TravelportAirlineInsight.exe

TravelportAirlineInsight

Travelport

Publisher:
Travelport  (signed and verified)

Product:
TravelportAirlineInsight

Version:
16.12.308.3021

MD5:
9ebbc791267199a072cdc60f25d3d27b

SHA-1:
f59b2a0fe84f786d337ccc7b40b9310a1280530f

SHA-256:
77e32b2d097827e0a55b5795a44c8aafc208b39ccf07df007093f6a1301c9bce

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 6:29:34 PM UTC  (today)

File size:
2.6 MB (2,717,064 bytes)

Product version:
16.12.308.3021

Copyright:
Copyright © Travelport 2015

Original file name:
TravelportAirlineInsight.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\apps\2.0\nxc0gemz.0p1\b3enwgwv.rrv\trav..tion_0f5860b108e98abd_0010.000c_2fc75af41515d40e\travelportairlineinsight.exe

Digital Signature
Signed by:
Travelport

Authority:
Symantec Corporation

Valid from:
11/9/2015 8:00:00 AM

Valid to:
11/9/2017 7:59:59 AM

Subject:
CN=Travelport, O=Travelport, L=Atlanta, S=Georgia, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
0CAF90C549FB65143257A02B5A9D0F2E

File PE Metadata
Compilation timestamp:
10/29/2016 12:42:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:eustXxtChKIJS9DcMG3D16Eg+zLv82nmECteRPy5fR045IfPM6BqR5z9:eustXxtChKIJS9DcMG3D16Eg+ntRNp29

Entry address:
0x2758DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.5240

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.5 MB (2,570,752 bytes)

Scan TravelportAirlineInsight.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.