home

TripNC.exe

North Carolina Trip Ticket

Bluefin Data LLC

It runs as a scheduled task under the Windows Task Scheduler.
Publisher:
Bluefin Data LLC  (signed and verified)

Product:
North Carolina Trip Ticket

Version:
6.00.0023

MD5:
68bd8a62827466f2cf20f5d195a600e6

SHA-1:
666dfe630ec0dcd5512f695870060fc39651c854

SHA-256:
c8762696589e15142246f77100a8604746459cdba78975a03bd375967f3b5969

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/4/2025 9:24:50 PM UTC  (today)

File size:
3.2 MB (3,310,800 bytes)

Product version:
6.00.0023

Original file name:
TripNC.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\tripticket\tripnc.exe

Digital Signature
Signed by:
Bluefin Data LLC

Authority:
COMODO CA Limited

Valid from:
2/21/2016 7:00:00 PM

Valid to:
7/11/2017 7:59:59 PM

Subject:
CN=Bluefin Data LLC, O=Bluefin Data LLC, STREET=16175 Feliciana Ave., L=Prairieville, S=Louisiana, PostalCode=70769, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7266E03475B4DCF48CCABE63EC0CEEE3

File PE Metadata
Compilation timestamp:
5/6/2016 3:51:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:rNK2oghQAB9KVZ5V1mfBwqcRc6I9InQZTRc3GV8to012VkpYC0dqcvDpX8cWctCr:rNLoghQAB9KVZ5V1mfBwqcRc6I9InQZI

Entry address:
0x1CEAC

Entry point:
68, 80, CF, 41, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 2C, 53, DF, D7, 97, 57, D4, 40, 90, BB, 3E, 49, 1B, 77, D5, E9, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 70, 72, 6A, 4E, 43, 5F, 77, 69, 74, 68, 48, 4D, 53, 00, 00, 00, 00, 00, 00, 00, 06, 00, 00, 00, B0, 75, 44, 00, 07, 00, 00, 00, 2C, 11, 44, 00, 01, 00, 0D, 00, 90, F4, 43, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 54, F7, 43, 00, 94, 50, 72, 00...
 
[+]

Entropy:
5.7269

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
3.1 MB (3,293,184 bytes)

Scheduled Task
Task name:
{0835BA28-E50E-4FEE-9F3B-EF07814A43F2}

Trigger:
Registration (Runs on registration)


Scan TripNC.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.