» unins000.exe
Overview
Analysis
File Details
Behaviors (1)

unins000.exe

flyfishrili3

Shanghai Quxiu Network Technology Co., Ltd.

The application unins000.exe, “flyfishrili3 Uninstaller ” by Shanghai Quxiu Network Technology Co. has been detected as a potentially unwanted program by 13 anti-malware scanners. This is the uninstaller utility registered in the Windows Control Panel for the program flyfishrili3 3.0 by KoreaWea Network Technology Co., Ltd..

File name:

unins000.exe

Publisher:

KoreaWea Network Technology Co., Ltd. (signed by Shanghai Quxiu Network Technology Co., Ltd.)

Product:

flyfishrili3

Description:

flyfishrili3 Uninstaller

Version:

2016.0923.1808.35

MD5:

da0614b98c9726a6ad56e9761d51e4b6

SHA-1:

a8d9d2c24caad4d2ff654abf7ca4477b6cdab951

SHA-256:

a65dea212315895181ec5d1c3011183c3ad267b2056d5ade4ca6d7c86a2d63e3

Scanner detections:

13 / 68

Status:

Potentially unwanted

Analysis date:

11/24/2024 4:04:55 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Agent.imxhq

8.3.3.4

AVG

AdPlugin

2017.0.2549

Dr.Web

Adware.Softcnapp.22

9.0.1.0329

ESET NOD32

Win32/Packed.INNOmod.B suspicious (variant)

10.14356

Fortinet FortiGate

PossibleThreat

11/24/2016

G Data

Win32.Trojan.Agent.PLOKFR

16.11.25

IKARUS anti.virus

AdWare.AdPlugin

t3scan.2.1.16.0

K7 AntiVirus

Riskware

13.244.21345

McAfee

Artemis!DA0614B98C97

5600.6205

NANO AntiVirus

Riskware.Win32.Softcnapp.egqnsr

1.0.46.12730

Sophos

Generic PUA KI (PUA)

4.98

VIPRE Antivirus

Trojan.Win32.Generic

53376

Zillya! Antivirus

Adware.SoftcnappCRTD.Win32.4345

2.0.0.3102

File size:

1.6 MB (1,657,328 bytes)

Product version:

3.0

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\fyrl\uninsfiles\unins000.exe

Digital Signature

Signed by:

Shanghai Quxiu Network Technology Co., Ltd.

Authority:

WoSign CA Limited

Valid from:

11/3/2015 1:48:47 PM

Valid to:

11/3/2016 1:48:47 PM

Subject:

CN="Shanghai Quxiu Network Technology Co., Ltd.", O="Shanghai Quxiu Network Technology Co., Ltd.", L=Shanghai, S=Shanghai, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

1A10980D0D4433FACBFFB8D11EBEDE30

File PE Metadata

Compilation timestamp:

8/21/2016 8:23:24 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:56NPMwBYquz7LoqXbmSBeSNdVfqtcoFPupuZ1VRwsxEvT4ne+CalOD/kx9bf:56WxwSktjFzisaT4e+SgV

Entry address:

0x156A24

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 78, ED, 54, 00, E8, 85, 49, EB, FF, 90, 6A, EC, A1, 94, A2, 55, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 5B, 66, EB, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, 94, A2, 55, 00, 53, E8, CC, 68, EB, FF, 33, C0, 55, 68, A0, 6A, 55, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, 4B, 5F, EB, FF, E8, 62, 80, FF, FF, A1, A8, E9, 54, 00, 50, 68, 34, EA, 54, 00, A1, 94, A2, 55, 00, 8B, 00, E8, 73, 2C, F6, FF, E8, BA, 80, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, A7, EF, EA... 
[+]

Entropy:

6.3857

Developed / compiled with:

Microsoft Visual C++

Code size:

1.3 MB (1,398,784 bytes)

Program Uninstaller

Program name:

flyfishrili3 3.0

Display publisher:

KoreaWea Network Technology Co., Ltd.

Display version:

3.0

Uninstall string:

"C:\Program Files (x86)\fyrl\UninsFiles\unins000.exe"

Remove unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.