home

flyvpninstaller.exe

FlyVPN INC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with FlyVPN. The file has been seen being downloaded from mega.nz and multiple other hosts.
Publisher:
FlyVPN  (signed by FlyVPN INC)

Product:
FlyVPN

Version:
3.3.0.7

MD5:
ada2798c51c449bc27aa04cc8bc75de6

SHA-1:
f196fb9503c5ac658808cb0b44987653974ef350

SHA-256:
cd1fcc2b8e3081c61d0c4226a70d18ac695e6cb7f4901f2c47cd203963f50835

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 5:20:08 PM UTC  (today)

File size:
2.6 MB (2,712,104 bytes)

Copyright:
FlyVPN

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\ProgramData\flyvpn\flyvpninstaller.exe

Digital Signature
Signed by:
FlyVPN INC

Authority:
GlobalSign nv-sa

Valid from:
12/17/2014 11:52:42 PM

Valid to:
3/10/2018 9:16:43 PM

Subject:
CN=FlyVPN INC, O=FlyVPN INC, L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B7225F596FBEADC5B4D07694003A0917

File PE Metadata
Compilation timestamp:
2/25/2012 3:20:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:ugv39wSQJGdFIqVgveLGuzvPDZGJLkEc9ZOwCR4TRQMqH:VwqGqWvetDZGJLkEiOwY4TRQM

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.9923

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file flyvpninstaller.exe has been discovered within the following program.

FlyVPN  by FlyVPN Inc.
Publisher's description - “VPN allows you to change your region, unlock online game limitation, Bypass Internet restrictions such as school, company and hotel, reduce lag for online game, unblock websites, anonymous web browsing, Anonymous surfing, hide & change IP.”
www.flyvpn.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file flyvpninstaller.exe has been seen being distributed by the following 5 URLs.

https://mega.nz/temporary/.../MllCmIyC

https://mega.nz/persistent/.../MllCmIyC

http://www.flyvpn.net/files/.../FlyVPNInstaller_3.3.0.7.exe

http://www.flyvpn.com/files/.../FlyVPNInstaller_3.3.0.7.exe

https://www.flyvpn.com/files/.../FlyVPNInstaller_3.3.0.7.exe

Scan flyvpninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.