home

qgis-osgeo4w-1.7.4-d211b16-setup.exe

The executable qgis-osgeo4w-1.7.4-d211b16-setup.exe has been detected as malware by 2 anti-virus scanners. The program is a setup application that uses the Nullsoft Install System installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
94c0ceddf9d1a34807724bd9d3ddf792

SHA-1:
1790a61e7df7a9f5f73ab416a603553304d64103

Scanner detections:
2 / 68

Status:
Malware

Explanation:
This is part of the Crossrider Internet browser extension framework which may modify the user's web browser settings including changing the home and search pages.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:
11/17/2024 9:45:02 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Dual.Extensions
18206

Reason Heuristics
Threat.Win.Reputation.IMP
16.11.30.21

File size:
111.5 MB (116,888,148 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Common path:
C:\Documents and Settings\{user}\My documents\qgis-osgeo4w-1.7.4-d211b16-setup.exe

File PE Metadata
Compilation timestamp:
9/5/2008 1:59:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
1572864:/o0Rcpsnu+cGukU10tvOnHT7p+dsH9/rXLv0w1y1IgygAXOmQ1Die51ohmZ4ECwX:QoPcWtv2HXp+ujX01MOlf51zZ4LCj

Entry address:
0x3987

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, 7C, 01, 00, 00, E8, D8, 49, 00, 00, 83, EC, 0C, 68, 01, 80, 00, 00, E8, 3B, 43, 00, 00, 6A, 00, E8, 14, 4A, 00, 00, A3, 78, 4C, 42, 00, 6A, 08, E8, 37, 27, 00, 00, A3, 28, 4D, 42, 00, 8D, 85, 90, FE, FF, FF, 6A, 00, 68, 60, 01, 00, 00, 50, 6A, 00, 68, A4, A2, 40, 00, E8, C9, 48, 00, 00, 83, EC, 0C, 68, A5, A2, 40, 00, 68, 58, 4D, 42, 00, E8, 57, 29, 00, 00, 83, C4, 18, E8, FF, 42, 00, 00, 52, 52, 50, 68, 00, D0, 42, 00, E8, 42, 29, 00, 00, 57, 6A, 00, E8, BA, 41, 00, 00, 83...
 
[+]

Entropy:
8.0000  (probably packed)

Code size:
29.5 KB (30,208 bytes)

The file qgis-osgeo4w-1.7.4-d211b16-setup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_br&type=PROGRAM&Expires=1484807717&Signature=isdRGcaET0E8AZii8bnDUiHP5K27wOE07FsEpigEH5D8U~pPWmsLlgp2CowwA31enqlSl62is1lZ93bt~8D-wK6xAbmNwZJTb5zlNSkFrLt1jX9geOpjIpxI3g4VXUd7X7jFObUXFmOc80Onfwb8teEHpr7f6bEB17IuVpKTVJc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_es&type=PROGRAM&Expires=1476178243&Signature=DuGqohwPStVXKvvj4AUwOrGg~Vr5yToPveLeih~QhfXXp2Ed8Vmpual42wka3WQLiPO6~lHh71zyNAoR0Bv2e0-anuGhYz5QtiNE2cojaefF1tGIYCXQ-OJk1zVVV6irhME~dLFC7~fPbfDTSPuDLlkoWh21Ms3uzHv~QvmqHPM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_es&type=PROGRAM&Expires=1430015849&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NgpNe3hEPG-CR1gfydFH-WYh5z~vSO1vNXXrTdbpS5W47u~8YI0UfwyBBM84FSm6iemGJSNiAzZHtkauvIWOEDJAW5FhIBh~QNXjBNHOzS~WK7UQi8NtdoVqEQaVz~37tjHm8PNMdL9qN0yJDFF22a3y7A5XUR9RKZ6v0spoWEQ_&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1478796051&Signature=c2heJdphZDAx1SyqR2J1dr-FijJTyCfAlNTtjOnqaDgdEYsonrJ7-zex2dVLhcI4kzNQQFl~gylmwhsEJtFN0EsMzDKhGjohCkB37Vv~XqTOcTkSBBgz00GEwtpmTGTi10c41oZol5Hgw3rkFdLzbcc7gr6nh0ClXpYjxWwGdPU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1478433292&Signature=c~iWhWByTe8pa7zNb1EB8Ic~ReN6FF7mkiY~-RpaQAf8mp4bbN4bggOLEVdYCl-YSrmP9CTepD4~ESUiaoODSfi6sKBeET~wmAoKXoTECw4XVOoWGOnjDYX-obgKDqEG~3BSn~B7p44ZxccNLAOVAhFLlTm6vyYKTkDSELOlTl0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_es&type=PROGRAM&Expires=1459222324&Signature=TQjvxaqxTk4YPRg1bZP7j8JBbspUQ0c-Y0dvJF9FHPNPgykHo9W~98tmaj~uSwmyW9bJjnazKbWpfCv5-~zJjRqq~FwmSqw2~Cv2Tvv2mr8pBf5unFTYdYfMRoqg7L9F0ei~UpW08OVz2u-LmyqPsMfulrtMDGPdRC~CBR4p7-Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1478817252&Signature=TCWKZaRM8yFmjX7lNbOk0eYtOmD9rWlDTNE80P9MdDzdCgtnnW~h1F5Tr-jfYqo4Uo-fGkkr3du7JZ4mW4vtfYIBzyMS2uBM1r7ICWgEfQ6xYNynzs-H14l7ZRkRE69LPSvd34024Xol1j8BlsG6UH4ShvnI7ENRvtBI6eNdmBk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_br&type=PROGRAM&Expires=1458619658&Signature=dRA02yg-7ntkrzVKT2s7M9RzghsYCQvy~SZhE5HDvQLwrRXY62D99kwTp2RZEG24xUeP~9nIUqMs7pj21uHp6v~jNLbNxl3ounyDHvAK6Kr1MH4~XsfgfLIbXtuDAru59H4bP-ebdETcMj7YtED6YrIsx7Gv6n7a9aaoaAyxFM8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

https://quantum-gis.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAP8H3OMTgXJzFu/.../XUSwfUcECTOzwcQF5thPe5qAZqNZqzSdwcaHvbA5QpxMHShV1Eip6bkKdmhyXD6A1QSIu32i8DGKjEv0HjVss9FHckTWBJf7sy9b0iUa7gWBzvostJ8fcB4E8IFAsYtQ3OA==

https://quantum-gis.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../okASULwndnfpr5PhDW ycwj j5jo7UvU59lG7iFpLLUma HEzSD059i4Dx1bkT28tKVMCFWeMP9MCY1SSk77UbgKhktqZdnY AQHDen6hAufbNxRQ4hRSuxeN7r oNHnggfXBHupYLgHRA==

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1476834610&Signature=E4sOQvSObYstT72PM-j4PbrKM5fLszEaCLCS9~TZt8~-u5CJJsjebCfP8hvKlvlauXFCThahkSULxXmu9ARUzvJgQxn-B8iLDxvJpaJfX~5VdA1aNf0a334xRLLu1VOoxTYGf-jvCT~p~OajO2uMszlXXZQ0cNQJxjbdTIGsr6Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_es&type=PROGRAM&Expires=1465356909&Signature=Qgc6mek4V5mytLYb9A71U6k~Jr5Sl-NIxIcZwG7-s77pNpoAr3AcgngXMBarQudv2Lo2VtRN0f4YXLGZYqUf8JIIvWP3WMWu9Ph5DekUPbinC~hzayPgndrNaIHdPTqI~WJK4UrhWEK0n06X2d7m7tRn8pMY3kCt4Vdf~ngVPto_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1427438889&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JsLzCxNwEueSYw--k8CL7YC8J3uVjPNxekspMbd6PlgTellhBDiqiT-ttfhYumwgNjdDLQj8P4mUh9Wn3Zp-j-8b~cYAtYQlyQjWE62FaU7VU85fqwG1kGtpTR0FRUG0ykyomjoqYF7ktMDB7qqn0l2wNRYxGQephuhDEnXeMWk_&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_br&type=PROGRAM&Expires=1475043885&Signature=FuD79oGrK9TSTVptcB4FZfDO6D6rGAFKqXZv24bfKn2OpUeilxP-3PRE9qe9RQg9Xa8G1kxejhyDEBJX3UDrvx6zP6a7apznVNdpcH~HudQ5UxsUXqd8Wle86s34RJpdguBeMaoI0DXH04Ns7QDA46n2YTABan6g0urIfgtazrg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_fr&type=PROGRAM&Expires=1444696472&Signature=B3H8uOQAAzMaKbRV7aJchr69ntiba5JBBWq5hFZZakN0zhGCYuTdQPehNmlU8Vw7~5HyItfeynGskDnomEsIHut1dGvKPPvQ8b8tTctzQACnvSmF66yXWcx8cXLTzPcGHsVyXSMi-nHEu~y-jJ36DE-E7diXxDCJoU5A17Q~6gg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_es&type=PROGRAM&Expires=1477723901&Signature=XvA2C6EzDsXacobNPq6DLK3QcQ22iT1Ag8C3XF6F8MHHK-3jGVzyBMLyTZCg86pTBYd3n07I-4BZNN00Nk~MoJZDX~x2ujivO9V~YVr1Xok-aTktZjf53zd65oKrQTnHsN4I0sKt5nX~B5b4C54QzKv-7tCp4Asf6rmLLzFsK4A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1473856777&Signature=gx7FwqC10BNhVhPuBxBkPitv0Kts-HEDi7mjb3cpGxOzXlR-bWwU4tantm~CKsGJ5j2TkStmiIqOvT7W9mZ6vijl7UfPhpZ4P95uL9M2BPwCADuhnrxNUh0IA-JzCoDwuJd0o7sOdZZTFvtiqkG4o0ch9mEAJe0LuM4B2RkeNTs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1475842179&Signature=KWUdQ5VInPC92vuSvQy~hsJeGCLpKHabeN9Ryocg7uyKdFsZpd-pNVHZgL~eb769fZSjS8jvw3q83Hz5hpadaOWQumqzKyl5Sf-dld6noXhSiDD3rVUcJ8ykZeyq86Q29aPgs~Mifom8uhlygemUNI4-LGBn6VGLw5mKYzLGJg8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_fr&type=PROGRAM&Expires=1473733219&Signature=LhESwoapQlbSgovbKhzys3UrIoK036fo4wPTfCeBcvEPMFzpIWxjJsO9~yIybTWvfm2l1mHWrg5eLXXox6mVWMh~ep5WxAMqq~DckPle-up5COH~qH8m~TnTZM-gxiqswAifvZcXfqqOJ~DOa2iB29nPtgzxRbFY5vWpQVdTgJE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1476764261&Signature=PSDf5JccAL186trED8biUZ9G0mGBQbShXGtwG0MbAsHWL5XFzqbYUSVyisEAI5XwjAipX~GrlxV~I8BE9lM5PVsoVgmeiB9Wa7mc-8ucVle2Mp5Dtv00XZaJ3~1u78W-anbFCdrXfWpC-jdjjLRQ~4R~vkzcF7hNOJQ1ofgEQeQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_br&type=PROGRAM&Expires=1423043779&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=d5mnhjXFVLP8zouTEzbAXt3W78EmMhLNQ0zjrtIVyV-RXslUT-AJLzDKbR0SDpJhH5DMDhCbY8jIrY9X54x1g9HZXAy1tiBOtAtoTtj0xr7E6D5PNBUrTMwdcyt7ipgZTUqP6q1sK8ZYzw8hg1da74UTPGsF1M65fdhfhNe0OHY_&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1478573297&Signature=TOGXohGd2tgHz0jMYFOnuVpJBWJWvY-SJ1GrORnVgqABRDP85mr50WaIXHJvXncjSW~0eRYbDD0pRrE7EpSVAlc2cbl5n1NTj5Q4xEmYoXx3PJ-9MYMGGORX5B9DO0UWLLZMr7bZisJc~d2OM77IRJeLQqXb3UtLw9sJggb0W5A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://qgis.org/.../QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_br&type=PROGRAM&Expires=1478755453&Signature=NgUhQl7Ww47GnGTSkTeBtdTnDx9RLXHfKe2OvTVmz6ZuzNoqcf4BP96Yoci1pnjyHUTxZB8EKndjsTyblkX8tgrrNbYsRb4BRN5H5qSOIbox-3swy3NdGAFxk2QKU4nSatrZQqcu9f2CGD9-Lq1vvMLZzENSgqsqydkQ3zT9RaQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1476025272&Signature=bQEJLhuf~BqH~eqL4Kaoi1xIQbKTxNCccYYUUkcZpuMhjaGDHF0WINn3PpfzxUSO-Rt5Jl58Ah3aIMgfJYBtGB8qo3XX~gBcrsGpsmim6MFiPe~KlQlsJPj6NZto91F-BwWDTNvHCueZIvC6vm03HxVEh5kEtoVcFAiX4lyjFl8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_fr&type=PROGRAM&Expires=1473990128&Signature=H1z8DtDqP9oV9wYwj3EdtZXhinJKlTJoJo6LSn-7qB1vifFY~PBGhd5k0luiiOyvTMswiLZdv45~qJhUsKMv8LE~g-04nl2PnY2o9H7Qp0jlnD9f~kIAoi5Ctqq5JxuZ15RYgcM2x21cLfnaSWIWETiYNDr0qb5YejbQhDkVRw8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://quantum-gis.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAP8H3OMTgXJzFu/.../XUSwfUcECTOzwcQF5thPe5qAZqNZqzSdwcaHvbA5QpxMHShV1Eip6bkKdmhyXD6A1QSIu32i8DGKjEv0HjVss9FHckTWBJf7sy9b0iUa7gWBzvostJ8fcB4E8IFAsYtQ3OA==

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_fr&type=PROGRAM&Expires=1470116493&Signature=gPkOBtykWjv6TCe9X15QQR2S85Z~LZ9-8NbZ1rYm9qac0OS-Q60cB5obUhn1-Y4IgKDh67JkbAHayGMolHirUbx-XW19YpEgnKFzqRdCtJEjss~SltP55ZIspDs2Vb8vXQ0FUSrsqrTMMg8-i2cQADh6Nwb7sXfJQN4HJI7a550_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_en&type=PROGRAM&Expires=1432443030&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ZKkwRDELPqOyV6cYQVg1aItbapUxAL1L2UcujENUp9liCkS9nJ~s7o2NGpAnAVlyJjqpVyBaiTAr-ndpvvG6eW-7bD-90IJ6q9yAso~OcfzITpXslZx4fv3lLyjdLMJtx9RU~RCkTmIdV-sr0dwKD8VtWl~aBG3VFWFqmd-kvmc_&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

http://gsf-cf.softonic.com/179/0a6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342434&instance=softonic_br&type=PROGRAM&Expires=1462581284&Signature=DCg5686wrG5qXrQYx8YSIU18Y9tJ~RhfJKJhdtA~3Ulrnobejgxk8Fz2APDqySjht-Om63MtoIsUVge0B8DZy-Redzqv5bU1rsYpTaHIbM7MRCx0K4yAjTMjeUR4JW2e-40nX0L-swu-YM9Bga3atT9AByVzm6MW-eDXhLr6SNM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QGIS-OSGeo4W-1.7.4-d211b16-Setup.exe

Latest 30 of 53 download URLs

Remove qgis-osgeo4w-1.7.4-d211b16-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.