home

Yaatra - Shreenija Travels.exe

Yaatra

Spidermoves Infotech Pvt. Ltd.

Publisher:
Spidermoves Infotech Pvt. Ltd.

Product:
Yaatra

Version:
1.00.0001

MD5:
37ea01a045ce5a343b1fe70e95c4d064

SHA-1:
0aef5b229fb268f84bc614b8932656c0ae92c6e2

SHA-256:
722f7d0a44ea2dd68e5f11348128b39537a13c7ca38206c996917e10619b21ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 6:13:34 AM UTC  (today)

File size:
30.6 MB (32,043,008 bytes)

Product version:
1.00.0001

Original file name:
Yaatra - Shreenija Travels.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\yaatra - shreenija travels.exe

File PE Metadata
Compilation timestamp:
11/5/2015 1:58:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:fP4UNaxZy1JWgziu49eA/p+MuUIpvna9O97Iz94aVwP3qW3IkTs1t7qrlKE1NJGd:fP4UNaxZy1JWgziu49eA/p+MuUIpvnar

Entry address:
0x2E25C

Entry point:
68, C8, 4D, 47, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, B1, D7, A5, 91, DB, 58, E6, 46, 8B, 62, 14, 3C, C3, 3C, F9, D2, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 6D, 65, 6E, 74, 6F, 72, 59, 61, 61, 74, 72, 61, 00, 2E, 43, 3A, 5C, 57, 49, 4E, 44, 4F, 57, 53, 5C, 44, 65, 73, 6B, 74, 6F, 70, 5C, 59, 41, 41, 54, 52, 41, 20, 54, 52, 41, 56, 45, 4C, 53, 5C, 59, 41, 41, 54, 52, 41, 48, 45, 4C, 50, 00, 00, 00, 00, FF, CC, 31, 00, 03, B0, 8F, 1E, 30, 11, 0B, BD...
 
[+]

Entropy:
5.8303

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
30.5 MB (32,030,720 bytes)

The file Yaatra - Shreenija Travels.exe has been seen being distributed by the following URL.

https://doc-0s-50-docs.googleusercontent.com/docs/securesc/01f2fuce34gr0fbcdv7lv0j6la802ahg/73cdpmvqikkv4qvu3kehgjv4itrrhdfl/1453528800000/.../16716672935840462392/0B3BJX9RTGsDGSXh4SkdxTmNxVnM?e=download

Scan Yaatra - Shreenija Travels.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.