home

3dfishd.exe

3D Fish School 4 Screen Saver

Gelios Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.geliosoft.com.
Publisher:
Gelios Software

Product:
3D Fish School 4 Screen Saver

Description:
3D Fish School 4 Screen Saver Setup

MD5:
5c0f565fd567b4ffbfad53c2bb4e706a

SHA-1:
a1bccc0aa4ab6496c95307c52ba998ad33206562

SHA-256:
9d508c2cc48997a75b16b678eb0cc71403672eb43cb58402f7c4c2ca5dec14d0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:24:13 AM UTC  (today)

File size:
3.9 MB (4,082,841 bytes)

Product version:
4.994

Copyright:
Copyright © 1999-2013 Gelios Software.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\3dfishd.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:3DuOLzGDEJfsblWIK0T87C/MPK13UwHQ1KRML/GG0jM:zuOLzLmblWYA7hu3UkmLd0jM

Entry address:
0xA5F8

Entry point:
60, 86, D9, 00, CA, 85, F1, 69, FD, 89, 93, 56, 17, F7, C2, 84, 77, CB, 16, 8D, 35, DE, 4B, DD, CA, 81, F9, 86, A1, 00, 00, 72, 05, 80, E5, C5, 87, D8, 8D, 35, C9, 63, 9D, E3, 0F, BE, CB, 84, F5, 81, FA, C8, A5, 00, 00, 81, FE, 80, 65, 00, 00, 72, 09, 49, 69, D8, 33, DF, C6, 0D, 87, DA, 53, 69, EE, B5, 4A, 51, 32, 85, DB, 0F, AF, D5, F7, C5, 66, C2, F2, DB, 3B, E8, 70, 06, 69, D5, BA, 44, 91, BD, E8, 1E, 00, 00, 00, F2, 8B, F7, EB, 03, 0F, AF, D9, 0F, B7, C7, F3, 81, FE, 99, 5E, 97, 35, 81, F1, 8E, 0B, 00...
 
[+]

Code size:
39.5 KB (40,448 bytes)

The file 3dfishd.exe has been seen being distributed by the following URL.

http://www.geliosoft.com/3dfishschool.exe

Scan 3dfishd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.