home

flyclient_3.2.0.7.exe

FlyVPN

FlyVPN INC

This is a setup program which is used to install the application. This file is installed with the program FlyVPN. The file has been seen being downloaded from www.flyvpn.com and multiple other hosts.
Publisher:
www.flyvpn.com  (signed by FlyVPN INC)

Product:
FlyVPN

Version:
3.2.0.7

MD5:
c09c58d15bec5a4bcc630958fc0ee89f

SHA-1:
93abb8d22cfdbad3edad344407e68f5fcf968071

SHA-256:
77e93931670152035240edd15303c09521cbbf1f48d3ec207b5c1c40c368ef50

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 12:29:29 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM18.1.Malware.Gen
1.0.0.1015

File size:
1.5 MB (1,593,160 bytes)

Product version:
3.2.0.7

Copyright:
Copyright (C) 2007 - 2015 www.flyvpn.com. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\flyclient_3.2.0.7.exe

Digital Signature
Signed by:
FlyVPN INC

Authority:
GlobalSign nv-sa

Valid from:
12/17/2014 10:52:42 PM

Valid to:
3/10/2018 8:16:43 PM

Subject:
CN=FlyVPN INC, O=FlyVPN INC, L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B7225F596FBEADC5B4D07694003A0917

File PE Metadata
Compilation timestamp:
5/23/2015 10:41:00 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:ETG1fUKGZyl0KDcqmH/gv2p2TznGOTzZBuQDdVK29Xo0DwmhS2+TQw/Sdw:ETG2Ktl0KxK/gv2MVRVK29XoWMTj/SO

Entry address:
0x4D0E00

Entry point:
60, BE, 00, 50, 76, 00, 8D, BE, 00, C0, C9, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, A8, E4, 4C, 00, 57, 83, C3, 04, 53, 68, F4, BD, 16, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9148  (probably packed)

Code size:
1.4 MB (1,495,040 bytes)

The file flyclient_3.2.0.7.exe has been discovered within the following program.

FlyVPN  by FlyVPN Inc.
Publisher's description - “VPN allows you to change your region, unlock online game limitation, Bypass Internet restrictions such as school, company and hotel, reduce lag for online game, unblock websites, anonymous web browsing, Anonymous surfing, hide & change IP.”
www.flyvpn.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file flyclient_3.2.0.7.exe has been seen being distributed by the following 2 URLs.

http://www.flyvpn.com/files/.../FlyClient_3.2.0.7.exe

https://www.flyvpn.com/files/.../FlyClient_3.2.0.7.exe

Scan flyclient_3.2.0.7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.