I didn't see you freaking out about the python script posted a few days ago. So, there are other malicious versions of Fish.exe circulating with exactly the same File Version Information (Copyright, Product, Decription, File Version) as the Fish.exe which OP posted.įrankly, you'd have to be a complete idiot to download one of the executables the OP has posted on this forum. That was a different, malicious version of Fish.exe on virustotal's report For both dlls, they check out fine on Virustotal but, on the Relations tab under Execution parent, I noticed Fish.exe scanned 9 August 2020. rar, I checked sslea圓2.dll and libea圓2.dll because, although they are needed for https, they could be used for C&C. Taking a look at the other files in the OP's. Virustotal report on the OP's Fish.exe looks fine - it looks like it might export pdfs and pngs, as you'd expect. No hits on malware checks so far, but it would be cool if we were the first to spot some new malware. However the file posted by OP has a Fish.exe which claims to be the same product version (3.2.0.0) and the same file version (3.2.3.0) but the OP's Fish.exe is slightly larger and has a different MD5, of course. That site didn't work for me but his site seems to list it Īlso this site has a similar file fish.exe with MD5 listed and that matches when I downloaded and checked. Seems like the guy who makes it has a little website ) It looks like Baidu are attempting to monetize someone's document content.

There is a copyright notice at the end of the htmlĭiv 京ICP证030173号京网文0934-983号 Copyright ©span id='copyright-date'2020/span Baidu由百度云提供计算服务/div If you try to scroll down, you can click to see more and then have to pay to view the rest of the document of download to another format. This is all wrapped in a div class='reader-container' and a div class='reader-page with some javascript to render the text. It looks like to Baidu have scanned various documents from other sources and then, rather than post as pdf, they post this html with precise positioning of each sentence, or often for each individual character in a table. Yes, looking at this page I reached the same conclusion. Looks like they've gone to great lengths to mangle the formatting when it's pasted into other programs.

Upon browsing some files I can see how copying is an issue.

How to download from baidu