home

Yaatra - Shreenija Travels.exe

Yaatra

Spidermoves Infotech Pvt. Ltd.

Publisher:
Spidermoves Infotech Pvt. Ltd.

Product:
Yaatra

Version:
1.00.0001

MD5:
6971a2e668869444d9b79ec17c3366aa

SHA-1:
b4d64502b154e90ab70287a6ef501bd8bd0fef09

SHA-256:
125bfe5ae8ee202480a14042df7f392c62950a49672380dd0ccb442995a86c01

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 8:28:25 PM UTC  (today)

File size:
30.6 MB (32,100,352 bytes)

Product version:
1.00.0001

Original file name:
Yaatra - Shreenija Travels.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\yaatra - shreenija travels.exe

File PE Metadata
Compilation timestamp:
1/23/2016 9:46:26 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:6G/QHmCr803MvP8aTk6jQrMEZTe06gvfhVOw/Yb718s0KngqBXXNdfQPg3DfUzYZ:6G/QHmCr803MvP8aTk6jQrMEZTe06gvS

Entry address:
0x2E25C

Entry point:
68, C8, 4D, 47, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, A8, CB, FD, 55, 1A, 2E, A2, 43, 94, 1F, 14, 36, 06, 8F, 8E, 54, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 59, 61, 61, 74, 72, 61, 00, 00, 43, 3A, 5C, 57, 49, 4E, 44, 4F, 57, 53, 5C, 44, 65, 73, 6B, 74, 6F, 70, 5C, 59, 41, 41, 54, 52, 41, 20, 54, 52, 41, 56, 45, 4C, 53, 5C, 59, 41, 41, 54, 52, 41, 48, 45, 4C, 50, 00, 00, 00, 00, FF, CC, 31, 00, 03, 46, 1F, CE, 90, 17, 04, 22...
 
[+]

Entropy:
5.8421

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
30.6 MB (32,088,064 bytes)

The file Yaatra - Shreenija Travels.exe has been seen being distributed by the following URL.

https://doc-08-50-docs.googleusercontent.com/docs/securesc/01f2fuce34gr0fbcdv7lv0j6la802ahg/j02m5bbe46dihc2oa4hilus73a0g181h/1453528800000/.../16716672935840462392/0B3BJX9RTGsDGV212Ri1KcDVpOEE?e=download

Scan Yaatra - Shreenija Travels.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.