» unins000.exe
Overview
Analysis
File Details
Behaviors (1)

unins000.exe

flyfishrili2

Shanghai Quxiu Network Technology Co., Ltd.

This is the uninstaller utility registered in the Windows Control Panel for the program flyfishrili2 2.0 by KoreaWea Network Technology Co., Ltd..

File name:

unins000.exe

Publisher:

KoreaWea Network Technology Co., Ltd. (signed by Shanghai Quxiu Network Technology Co., Ltd.)

Product:

flyfishrili2

Description:

flyfishrili2 Uninstaller

Version:

2016.0926.1715.5

MD5:

fa5957d4d43d4bb151bbcc1fca711095

SHA-1:

1b0639eafeab339fde9e8eab094e77fa6be8daa2

SHA-256:

3ab5d3c29843d9e67e55209f5f33cffee89360ab20076dc1bd30d37bdfb75471

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 3:52:01 AM UTC (today)

File size:

1.6 MB (1,655,928 bytes)

Product version:

2.0

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\flyfishcdr\uninsfiles\unins000.exe

Digital Signature

Signed by:

Shanghai Quxiu Network Technology Co., Ltd.

Authority:

WoSign CA Limited

Valid from:

11/3/2015 1:48:47 PM

Valid to:

11/3/2016 1:48:47 PM

Subject:

CN="Shanghai Quxiu Network Technology Co., Ltd.", O="Shanghai Quxiu Network Technology Co., Ltd.", L=Shanghai, S=Shanghai, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

1A10980D0D4433FACBFFB8D11EBEDE30

File PE Metadata

Compilation timestamp:

8/21/2016 8:23:24 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:h6NPMwBYquz7LoqXbmSBeSNdVfqtcoFPupuZ1VRwsxEvT4ne+CalOD/kx996:h6WxwSktjFzisaT4e+Sge

Entry address:

0x156A24

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 78, ED, 54, 00, E8, 85, 49, EB, FF, 90, 6A, EC, A1, 94, A2, 55, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 5B, 66, EB, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, 94, A2, 55, 00, 53, E8, CC, 68, EB, FF, 33, C0, 55, 68, A0, 6A, 55, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, 4B, 5F, EB, FF, E8, 62, 80, FF, FF, A1, A8, E9, 54, 00, 50, 68, 34, EA, 54, 00, A1, 94, A2, 55, 00, 8B, 00, E8, 73, 2C, F6, FF, E8, BA, 80, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, A7, EF, EA... 
[+]

Entropy:

6.3837

Developed / compiled with:

Microsoft Visual C++

Code size:

1.3 MB (1,398,784 bytes)

Program Uninstaller

Program name:

flyfishrili2 2.0

Display publisher:

KoreaWea Network Technology Co., Ltd.

Display version:

2.0

Uninstall string:

"C:\Program Files (x86)\FlyFishCdr\UninsFiles\unins000.exe"

Scan unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.