home

fishesscreensaver_2_0.exe

ScreenTime for Flash

MacSourcery

Publisher:
MacSourcery

Product:
ScreenTime for Flash

Description:
32 Bit ScreenTime Screen Saver Engine

Version:
1.7.1

MD5:
b931a59c5924de8a6294e341fb268aec

SHA-1:
320ac16ff29b0fd4bf7487e8d4b80b91cdb25e0a

SHA-256:
7b97042185d47258af52e6c0db63162485ce9797a0b2282d771a58049799c91f

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/19/2024 9:50:18 PM UTC  (today)

Scan engine
Detection
Engine version

Quick Heal
Trojan.Scar.013919
11.15.14.00

File size:
963.2 KB (986,340 bytes)

Product version:
1.7.1

Copyright:
Copyright © 1995 - 2000 WhizBang, Ltd.

Trademarks:
ScreenTime is a trademark of WhizBang, Ltd. Flash is a trademark of Macromedia, Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\fishesscreensaver_2_0.exe

File PE Metadata
Compilation timestamp:
10/27/2000 8:53:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:dATTX3TYgO0/zSknQPmbFlXTPhvHA7azeJz6ACk:GTTUFqbFR9A7aCz5b

Entry address:
0xA8B3

Entry point:
55, 8B, EC, 6A, FF, 68, E8, 22, 41, 00, 68, 58, E9, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F8, 20, 41, 00, 33, D2, 8A, D4, 89, 15, 8C, 69, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 88, 69, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 84, 69, 41, 00, C1, E8, 10, A3, 80, 69, 41, 00, 33, F6, 56, E8, 8A, 21, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 8D, 3D, 00, 00, FF, 15, A0, 21, 41, 00, A3, 78, 80, 41, 00, E8...
 
[+]

Entropy:
6.0423

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
68 KB (69,632 bytes)

The file fishesscreensaver_2_0.exe has been seen being distributed by the following 4 URLs.

http://gsf-cf.softonic.com/320/ac1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=19070&instance=softonic_es&type=PROGRAM&Expires=1425741718&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ZJg9~aIQasi0y7snTqMGW7SP19Tfs0pT9vxwjkNQiur9IDchJK7RJHL8A3pvuLOhOHgXxfoHeGtzXoA5edVWFoU2ue0TJVZC~13FHmtHQ~H8ZpzJZVtDLGv5HVtXhnAq8ntJACZIJSgplP74nNiG4ilgGiNapu-yw3YNj~Dr3us_&filename=FishesScreensaver.exe

https://www.screensaversplanet.com/files/.../FishesScreensaver_2_0.exe

http://www.protectorespantalla.com.mx/download_file.php?file=Li4vYXJjaGl2b3MvaXRlbXMvMTI0NzM2MTIxM19lbC1nYXRvLXNpbHZlc3RyZS5leGU=

http://gsf-cf.softonic.com/320/ac1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=19070&instance=softonic_en&type=PROGRAM&Expires=1447304440&Signature=XvAbeIk4pAFq0YAhcn-4q039WR8aZP9mw~jsbg2Du-9d8YFCGJ5W8EASOu7wXpRH3Z3TpmI2UqXiPZ8f2m43La0da81KAl92nl3YuLDXK9s25NQeP9ogjfqb8D7iJdchcfioWv2P1GJhX1PVNpZ0uUcTinotOYxT9udjjbh~2s4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FishesScreensaver.exe

Scan fishesscreensaver_2_0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.