flyvpn.exe

FlyVPN

FlyVPN INC

This is a setup program which is used to install the application. This is installed with FlyVPN. The file has been seen being downloaded from www.flyvpn.com and multiple other hosts.
Publisher:
www.flyvpn.com  (signed by FlyVPN INC)

Product:
FlyVPN

Version:
3.3.0.7

MD5:
bf161726ae37a86e3f2d49e9b554d636

SHA-1:
4a3d0ee9e7b0ccd84cbaf8e0c2472c4e6350f1b7

SHA-256:
ca607e0e37de08d26d4a9f8df704a0ab77840e1a130b8158a4e57207e7ad0255

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/22/2024 7:42:09 AM UTC  (today)

File size:
1.5 MB (1,569,608 bytes)

Product version:
3.3.0.7

Copyright:
Copyright (C) 2007 - 2015 www.flyvpn.com. All rights reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\flyvpn\flyvpn.exe

Digital Signature
Signed by:

Authority:
GlobalSign nv-sa

Valid from:
12/17/2014 11:52:42 PM

Valid to:
3/10/2018 9:16:43 PM

Subject:
CN=FlyVPN INC, O=FlyVPN INC, L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B7225F596FBEADC5B4D07694003A0917

File PE Metadata
Compilation timestamp:
10/16/2015 7:26:21 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:gi6Sqo3+SuxvJXy+nvbxOipPVT1UeYItcgkzEz1yfO65NF0+wCpyePp:Xd9OSGJX3ttPVJUeYSWzETkwC4ePp

Entry address:
0x4CF230

Entry point:
60, BE, 00, 90, 76, 00, 8D, BE, 00, 80, C9, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, AA, D4, 4C, 00, 57, 83, C3, 04, 53, 68, 1F, 62, 16, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9128  (probably packed)

Code size:
1.4 MB (1,470,464 bytes)

The file flyvpn.exe has been discovered within the following program.

FlyVPN  by FlyVPN Inc.
Publisher's description - “VPN allows you to change your region, unlock online game limitation, Bypass Internet restrictions such as school, company and hotel, reduce lag for online game, unblock websites, anonymous web browsing, Anonymous surfing, hide & change IP.”
www.flyvpn.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file flyvpn.exe has been seen being distributed by the following 3 URLs.

https://www.flyvpn.com/files/.../FlyClient_3.3.0.5.exe

http://www.flyvpn.com/files/.../FlyVPN_3.3.0.7.exe

Scan flyvpn.exe - Powered by Reason Core Security