home

gvsig-desktop-1.12.0-1417-final-win-x86-standard.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from downloads.gvsig.org.
MD5:
7e63bab75352a44fea40a9c93f39d053

SHA-1:
16e4fca4f2a0fac3005a4abfa56716e1fce27b29

SHA-256:
037d1afe033f3a93f6a1283a1b8b20cf89879f49af6b849f5c5ed363d00f58a5

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/28/2024 10:40:52 AM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/SuspPack.N.gen!Eldorado (generic, damaged, not disinfectable)
4.6.5.141

File size:
32 KB (32,768 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\gvsig-desktop-1.12.0-1417-final-win-x86-standard.exe

File PE Metadata
Compilation timestamp:
10/11/2010 12:24:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
768:plgaeq4bLVr3N0ABEG84/6aZshdE8LHGuzVdUpG4m712CDIMnb3zSnyr:pyaW0G845ZshdEnIrP7nDbcs

Entry address:
0x12A0

Entry point:
B8, 74, D9, 60, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 02, 15, CB, 7B, 5F, 3F, 61, 20, E2, 5B, 3B, D1, A0, B6, EB, 27, B4, 25, 12, D1, D5, 5F, 2F, 8B, 69, 8D, AD, 87, FB, 30, 55, C2, C6, 6D, B7, 88, 2E, 7A, 22, C2, 0A, 3A, 4B, 74, 38, 3B, CE, 81, 95, FF, 46, 6F, 99, 11, 89, 87, E7, B2, CA, B4, 73, 4E, EF, A0, EB, 40, 01, AC, 8F, CA, 56, 2E, DB, E9, 1B, 33, C2, 4C, E5, A9, AF, 74, 7C, BF, 1D, FE, C8, B0, F7, 28, F0, C8, 50...
 
[+]

Entropy:
7.9802

Packer / compiler:
PECompact v2

Code size:
1.6 MB (1,686,016 bytes)

The file gvsig-desktop-1.12.0-1417-final-win-x86-standard.exe has been seen being distributed by the following URL.

http://downloads.gvsig.org/download/gvsig-desktop/dists/1.12.0/builds/.../gvSIG-desktop-1.12.0-1417-final-win-x86-standard.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.