flyclient_3.3.0.6.exe

FlyVPN

FlyVPN INC

This is a setup program which is used to install the application. This is installed with FlyVPN. The file has been seen being downloaded from www.flyvpn.com and multiple other hosts.
Publisher:
www.flyvpn.com  (signed by FlyVPN INC)

Product:
FlyVPN

Version:
3.3.0.6

MD5:
6130ecbc60047db89c88a34ebe34ac2f

SHA-1:
be7140661ec96a1e49ccb0fab0b0cf738f25291a

SHA-256:
6b8f788d3a5acffb023793b643302c966cad1abed614acf8af2c509ecf15e488

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 3:35:00 AM UTC  (today)

File size:
1.5 MB (1,569,096 bytes)

Product version:
3.3.0.6

Copyright:
Copyright (C) 2007 - 2015 www.flyvpn.com. All rights reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\flyclient_3.3.0.6.exe

Digital Signature
Signed by:

Authority:
GlobalSign nv-sa

Valid from:
12/17/2014 11:52:42 PM

Valid to:
3/10/2018 9:16:43 PM

Subject:
CN=FlyVPN INC, O=FlyVPN INC, L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B7225F596FBEADC5B4D07694003A0917

File PE Metadata
Compilation timestamp:
9/7/2015 5:03:28 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:pQwwRJwQs+xRdWcmgLI0qZ1kTNzqM+F3DHwtYa8ol4hWYPo4R1nmQU:ps5s+Icmgi1kTNuM+NwJ8oGW0pRg

Entry address:
0x4CF150

Entry point:
60, BE, 00, 90, 76, 00, 8D, BE, 00, 80, C9, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, A0, D4, 4C, 00, 57, 83, C3, 04, 53, 68, 41, 61, 16, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9134  (probably packed)

Code size:
1.4 MB (1,470,464 bytes)

The file flyclient_3.3.0.6.exe has been discovered within the following program.

FlyVPN  by FlyVPN Inc.
Publisher's description - “VPN allows you to change your region, unlock online game limitation, Bypass Internet restrictions such as school, company and hotel, reduce lag for online game, unblock websites, anonymous web browsing, Anonymous surfing, hide & change IP.”
www.flyvpn.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file flyclient_3.3.0.6.exe has been seen being distributed by the following 4 URLs.

http://www.flyvpn.com/files/.../FlyClient_3.3.0.6.exe

http://www.flyvpn.com/files/.../FlyVPN_3.3.0.6.exe

Scan flyclient_3.3.0.6.exe - Powered by Reason Core Security