» flyvpn.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

flyvpn.exe

FlyVPN

FlyVPN INC

This file is installed with the program FlyVPN.

File name:

flyvpn.exe

Publisher:

www.flyvpn.com (signed by FlyVPN INC)

Product:

FlyVPN

Version:

3.6.2.2

MD5:

fdb0b4a64b43e920ff202bdc3d0b1ee4

SHA-1:

6d267e3a6230500dd2e657e1b215a82078459d20

SHA-256:

2e479a2b676e28063fec58f9e3eba6687cacfa231aa1b6518278ec5f088dbb63

Scanner detections:

1 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

11/15/2024 4:51:14 PM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

Win.Malware.Mischa-1

0.98/22442

File size:

5.1 MB (5,314,376 bytes)

Product version:

3.6.2.2

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

FlyVPN INC

Authority:

GlobalSign nv-sa

Valid from:

12/17/2014 10:52:42 PM

Valid to:

3/10/2018 8:16:43 PM

Subject:

CN=FlyVPN INC, O=FlyVPN INC, L=Shanghai, S=Shanghai, C=CN

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121B7225F596FBEADC5B4D07694003A0917

File PE Metadata

Compilation timestamp:

10/28/2016 4:13:22 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

14.0

CTPH (ssdeep):

49152:g+F+jF3tIvnnnDoVNa2TWvetCvcpvUd1/zPLwuCmO2sMZZKsEXQXWWXNcxRR8mC0:gxFivnnmaBeg0KNfCmO2tZZHEXQmWYb7

Entry address:

0x180E3F

Entry point:

E8, D8, 0A, 00, 00, E9, 8E, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 18, 8B, 44, 24, 14, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 10, F7, F1, 8B, D3, EB, 41, 8B, D8, 8B, 4C, 24, 18, 8B, 54, 24, 14, 8B, 44, 24, 10, D1, EB, D1, D9, D1, EA, D1, D8... 
[+]

Code size:

3.3 MB (3,501,568 bytes)

Windows Firewall Allowed Program

Name:

flyvpn

The file flyvpn.exe has been discovered within the following program.

FlyVPN by FlyVPN Inc.

Publisher's description - “VPN allows you to change your region, unlock online game limitation, Bypass Internet restrictions such as school, company and hotel, reduce lag for online game, unblock websites, anonymous web browsing, Anonymous surfing, hide & change IP.”

www.flyvpn.com

About 1% of users remove it

Scan flyvpn.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.