» unins000.exe
Overview
Analysis
File Details
Behaviors (1)

unins000.exe

flyfishrili2

Shanghai Quxiu Network Technology Co., Ltd.

This is the uninstaller utility registered in the Windows Control Panel for the program flyfishrili2 2.0 by Popapd Network Technology Co., Ltd..

File name:

unins000.exe

Publisher:

Popapd Network Technology Co., Ltd. (signed by Shanghai Quxiu Network Technology Co., Ltd.)

Product:

flyfishrili2

Description:

flyfishrili2 Uninstaller

Version:

2016.0926.1716.25

MD5:

3fc5e5099a48db0b6d4c16e999e1012f

SHA-1:

25e85c60f6bf1f30ea6045abc88d977ca20b2030

SHA-256:

8ba0270ab3cd503d9f53ac3049ca80f525311f92e1e4b6223688ee3b64e24869

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 4:05:05 AM UTC (today)

File size:

1.8 MB (1,842,296 bytes)

Product version:

2.0

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\flyfishcdr\uninsfiles\unins000.exe

Digital Signature

Signed by:

Shanghai Quxiu Network Technology Co., Ltd.

Authority:

WoSign CA Limited

Valid from:

11/3/2015 1:48:47 PM

Valid to:

11/3/2016 1:48:47 PM

Subject:

CN="Shanghai Quxiu Network Technology Co., Ltd.", O="Shanghai Quxiu Network Technology Co., Ltd.", L=Shanghai, S=Shanghai, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

1A10980D0D4433FACBFFB8D11EBEDE30

File PE Metadata

Compilation timestamp:

8/21/2016 8:23:24 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:I6NPMwBYquz7LoqXbmSBeSNdVfqtcoFPupuZ1VRwsxEvT4ne+CalOD1WcP1vmdJT:I6WxwSktjFzisaT4e+S1WcP1vmdLh

Entry address:

0x156A24

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 78, ED, 54, 00, E8, 85, 49, EB, FF, 90, 6A, EC, A1, 94, A2, 55, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 5B, 66, EB, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, 94, A2, 55, 00, 53, E8, CC, 68, EB, FF, 33, C0, 55, 68, A0, 6A, 55, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, 4B, 5F, EB, FF, E8, 62, 80, FF, FF, A1, A8, E9, 54, 00, 50, 68, 34, EA, 54, 00, A1, 94, A2, 55, 00, 8B, 00, E8, 73, 2C, F6, FF, E8, BA, 80, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, A7, EF, EA... 
[+]

Entropy:

6.3716

Developed / compiled with:

Microsoft Visual C++

Code size:

1.3 MB (1,398,784 bytes)

Program Uninstaller

Program name:

flyfishrili2 2.0

Display publisher:

Popapd Network Technology Co., Ltd.

Display version:

2.0

Uninstall string:

"C:\Program Files (x86)\FlyFishCdr\UninsFiles\unins000.exe"

Scan unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.