home

1284389702-freeaquariumfishss.exe

Free Aquarium Fish Screensaver

OurScreensavers

The application 1284389702-freeaquariumfishss.exe, “Free Aquarium Fish Screensaver Setup ” has been detected as a potentially unwanted program by 19 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. Part of RelevantKnowledge, a program typically installed via a software bundle (with the user's knowledge should they read the EULA) and will run in the background collecting and monitoring information about the user's behavior in order to build an extensive profile.
Publisher:
OurScreensavers

Product:
Free Aquarium Fish Screensaver

Description:
Free Aquarium Fish Screensaver Setup

Version:
3.2.0.0

MD5:
fe309f780e02da07de9851306ec4f0ec

SHA-1:
cb0b0a3a985a6abaf68a2718c97b22e2d8d59158

SHA-256:
563fa49a78cd547398288d421dabad7c09e3c73a62a84921a5dc74c2fc061154

Scanner detections:
19 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 1:51:37 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/Relevant.G.1
7.11.92.12

avast!
Win32:Relevant-P [PUP]
2014.9-141126

AVG
RelevantKnowledge
2015.0.3279

Bitdefender
Dropped:Spyware.Relevantknowledge.A
1.0.20.1650

Dr.Web
Adware.Relevant.67
9.0.1.0330

Emsisoft Anti-Malware
Dropped:Spyware.Relevantknowledge
8.14.11.26.04

ESET NOD32
Win32/Adware.MarketScore
8.8601

Fortinet FortiGate
Adware/Relevant
11/26/2014

F-Prot
W32/AdSpy.A
v6.4.7.1.166

F-Secure
Dropped:Spyware.Relevantknowledge.A
11.2014-26-11_4

G Data
Dropped:Spyware.Relevantknowledge
14.11.22

K7 AntiVirus
Adware
13.170.9091

Kaspersky
not-a-virus:WebToolbar.Win32.RK
14.0.0.2889

NANO AntiVirus
Riskware.Win32.Relevant.usxby
0.24.0.53571

Panda Antivirus
Trj/CI.A
14.11.26.04

Rising Antivirus
Trojan.Win32.Generic.1261AC87
23.00.65.141124

Sophos
RelevantKnowledge
4.91

Vba32 AntiVirus
Signed-AdWare.Win32.Relevant
3.12.22.2

ViRobot
Backdoor.Win32.S.Bifrose.2147073
2011.4.7.4223

File size:
2 MB (2,147,073 bytes)

Product version:
3.2.0.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\1284389702-freeaquariumfishss.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:v2LyByV/n8MdBw2vg4R0+4f4WAMx7JFoig4IbZvaV:uLnaM42vzR0+4f4WAG7JFol4oG

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

Remove 1284389702-freeaquariumfishss.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.