Gridinsoft Logo
File Icon

HYVideoDesktop.exe PUP FlySvr Analysis

Updated 24 minutes ago
Checked by Malware Check
HYVideoDesktop.exe

Technical Analysis

File Name HYVideoDesktop.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.259.174
Database Version 2026-11-05 11:07:07 UTC
⚠

PUP.Win32.FlySvr.bot!c

Malware family: FlySvr

N/A
Detection Rate
6,411,600
File Size (bytes)
2026-11-05
Analysis Date

Scan Another File

The uploaded file itself is not retained or shared with third parties. File names, hashes, and analysis results may appear in public reports. For confidential material, contact Support before uploading. How we use your data.

File Identification

Hash Type Value Action
MD5
f616668bcbced89eb7a6a52db5407caf
SHA1
66e0efe0fceef38dbb962b38feba49cb2b0741f7
SHA256
0f3fa26d7d29c750731c935313676f779687e7eee303e99bde78a1536e269bcd
SHA512
4e2bf2ade9d4f650eac2e2690930e194864593ebf971bb2e130a71544acc408fd136663602c157cd35569e85d788c7628d3aa158038c7fdc4c4800a402c21ec7
ImpHash
98a0252413bae0ef8797999b343f321d

PE Analysis

Basic Information

▼
Icon
Hash: 3d2539c87fcc3ba9fa198469c0753951
Fuzzy: 7d791609106e9d4fdbf5cfa69958e1ed
dHash: b2b269d4b2cc69b2
Image Base 0x00400000
Entry Point 0x005ae1aa
Compilation Time 2020-12-08 08:18:06
Checksum 0x006256e8 (Actual: 0x006256e8)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\Qt\HY_VideoDesktop_Windows\Win32\Release_5.9_HyLite\HYVideoDesktop.pdb
Digital Signature OK
Imports 34 libraries
Exports 0 functions
Resources 12 Resources
Sections 7 Sections

Version Information

▼
CompanyName 北京众纳鑫海网络技术有限公司
FileDescription 火萤视频桌面主程序
FileVersion 5.2.2.2
InternalName HYVideoDesktop.exe
LegalCopyright Copyright (C) 2019 北京众纳鑫海网络技术有限公司
OriginalFilename HYVideoDesktop.exe
ProductName 火萤视频桌面
ProductVersion 5.2.2.2
Translation 0x0804 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,132,261 bytes 2,132,480 bytes 6.28 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ BFF33E23B644E4D0779861E623A91AA1
.rdata 0x0020a000 3,971,646 bytes 3,972,096 bytes 7.42 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B532BEC6B30D67F3AF6FB1091CACE2DF
.data 0x005d4000 32,928 bytes 13,824 bytes 4.85 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 27A199DAD35C4149503C3FD2B644BD4F
.gfids 0x005dd000 80 bytes 512 bytes 0.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 60F4DA4CD7BC227446A98C964104F8D9
.tls 0x005de000 9 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1F354D76203061BFDD5A53DAE48D5435
.rsrc 0x005df000 48,680 bytes 49,152 bytes 5.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9B8522FD28A8D04E3966CD50761E8C63
.reloc 0x005eb000 221,828 bytes 222,208 bytes 6.74 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 8ED4965FC2509DA7AB4A386597F1C624
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 12 (47,981 bytes)
Resource Type Count Total Size Percentage
RT_ICON 9 46,381 bytes
96.7%
RT_GROUP_ICON 1 132 bytes
0.3%
RT_VERSION 1 748 bytes
1.6%
RT_MANIFEST 1 720 bytes
1.5%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

PUP.Win32.FlySvr.bot!c Removal

Gridinsoft has the capability to identify and eliminate PUP.Win32.FlySvr.bot!c without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. 1
    Get Gridinsoft Anti-Malware — it's a quick 2 MB download that won't slow down your PC.
  2. 2
    Run the installer gsam-en-install.exe. The setup takes about 2 minutes and doesn't require a restart.
  3. 3
    The app launches right after installation. You'll see the main dashboard with the scan button front and center.
  4. 4
    Hit "Standard Scan" — this checks all the spots where malware typically hides: temp folders, browser data, startup programs, and system directories.
  5. 5
    Once the scan finds this threat, click "Clean Now". The removal usually happens instantly, though some stubborn infections may need a reboot.
  6. 6
    If you see a restart prompt, go ahead and reboot. This clears any malware that was running in memory and ensures your system starts fresh.
Important: Before You Start
Quick tip: unplug from the internet before scanning. Some malware phones home for instructions or downloads extra payloads when it senses trouble. If the infection is severe, boot into Safe Mode first — it limits what can run and makes cleanup easier.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware