» flyvpnbind-x86.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

flyvpnbind-x86.dll

FlyVPN

FlyVPN INC

It is installed as a Winsock Layered Service Provider (LSP) named “FlyVPN Bind UDP Filter” as a layered chain entry (32). This is installed with FlyVPN.

File name:

flyvpnbind-x86.dll

Publisher:

www.flyvpn.com (signed by FlyVPN INC)

Product:

FlyVPN

Description:

FlyVPN Windows Socket Provider

Version:

3.0.1.6

MD5:

13642ef4d04632f8cd8b535c83b57fb9

SHA-1:

13b523054fb550324098ac1c4d851f3e2f84bb45

SHA-256:

acdde519faf89009cbc88ec4597218752cfde1d17344ad5289f72ae95d24884a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 12:17:09 PM UTC (today)

File size:

192.1 KB (196,728 bytes)

Product version:

3.0.1.6

Original file name:

FlyVPNBind.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\flyvpn\flyvpnbind-x86.dll

Digital Signature

Signed by:

FlyVPN INC

Authority:

GlobalSign nv-sa

Valid from:

2/8/2012 9:16:43 PM

Valid to:

2/8/2015 9:16:43 PM

Subject:

CN=FlyVPN INC, O=FlyVPN INC, L=Shanghai, S=Shanghai, C=CN

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11214C547F499517FD0797F799C5A1C553CB

File PE Metadata

Compilation timestamp:

5/19/2013 12:21:27 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:s5I4Tr51J4SQbJyRem5tI2htbWqeyqtvdB5Zk9hiiS:sHr51JMy5tIWtky+mfS

Entry address:

0x13C24

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, BC, 8C, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, 68, B0, 3C, 01, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 5C, C1, 02, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC... 
[+]

Entropy:

6.4648

Code size:

145.5 KB (148,992 bytes)

Winsock2 LSP

Name:

FlyVPN Bind UDP Filter

Type:

Layered Chain Entry (32)

Provider ID:

{4DE028BC-6CDD-462E-A8A5-6DDF42D4D404}

Service flags:

0x20609

The file flyvpnbind-x86.dll has been discovered within the following program.

FlyVPN by FlyVPN Inc.

Publisher's description - “VPN allows you to change your region, unlock online game limitation, Bypass Internet restrictions such as school, company and hotel, reduce lag for online game, unblock websites, anonymous web browsing, Anonymous surfing, hide & change IP.”

www.flyvpn.com

About 1% of users remove it

Scan flyvpnbind-x86.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.