Gridinsoft Logo
File Icon

The gimp-console-2.10.exe (GNU Image Manipulation Program) File Analysis

Updated 3 months ago
Checked by Malaware Check
gimp-console-2.10.exe

Technical Analysis

File Name gimp-console-2.10.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-05 20:00:37 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,692,360
File Size (bytes)
2025-03-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
caf415d1c48853afa6cffefc62645bfa
SHA1
0b215144887248e8e09e3846ecf92fa30c2a7c52
SHA256
58c07d8f13021cdd849c72614124a242748a8bf00f15905710cf5b1bdb393ed2
SHA512
e96dd82a7dfe3b23ec2b0a16556f5fe8e6528b0698c071b973ccff80419c0d00264cb2ebac5a22dd9ec9ea7090c124c6a55799b1e89167c4b8a8b2d030f737bf
ImpHash
1bf14b93470b8298c7ecf3819da36e72

PE Analysis

Basic Information

▼
Icon
Hash: cdd6aeef9d7ac0fda6d91c4b6307d1ef
Fuzzy: 0f3191bf1b758fbd88f20cb1e55c352a
dHash: 6c13713971938ef0
Image Base 0x140000000
Entry Point 0x1400013f0
Compilation Time 2023-11-06 19:59:12
Checksum 0x0038de7a (Actual: 0x0038de7a)
OS Version 4.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature OK
Imports 33 libraries
Exports 1 functions
Resources 25 Resources
Sections 13 Sections

Version Information

▼
CompanyName Spencer Kimball, Peter Mattis and the GIMP Development Team
FileDescription GNU Image Manipulation Program
FileVersion 2.10.36.0
InternalName gimp-console-2.10
OriginalFilename gimp-console-2.10.exe
ProductName GNU Image Manipulation Program
ProductVersion 2.10.36
LegalCopyright Copyright © 1995-2023
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,308,600 bytes 2,308,608 bytes 6.25 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7AD2EDAF6743ACDEF23255AEB1188F99
.data 0x00235000 2,080 bytes 2,560 bytes 4.76 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 58E2CA42FBD8D074928806064C273374
.rdata 0x00236000 792,992 bytes 793,088 bytes 5.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C2F6209A9D57DD351EA3F12AA4F5798D
.pdata 0x002f8000 79,560 bytes 79,872 bytes 6.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 43413481134B860B6B45DDC73EF1C3CB
.xdata 0x0030c000 94,312 bytes 94,720 bytes 4.69 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AC5C5DF7373BFC17AB1428FDE4E6C60C
.bss 0x00324000 42,496 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.edata 0x0032f000 103 bytes 512 bytes 1.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8DD2454DEA5FDD7E48DD262DFA41C7B1
.idata 0x00330000 63,676 bytes 64,000 bytes 4.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 71FCFED260AC9F307C8F545977DB3150
.CRT 0x00340000 96 bytes 512 bytes 0.32 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 18D21A82B794A9606B0D2BAC0FF0563D
.tls 0x00341000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x00342000 254,976 bytes 254,976 bytes 6.57 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5404F4011E9E2A26673305008649D2EB
.reloc 0x00381000 5,188 bytes 5,632 bytes 5.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 95239B0CE48C7AB655A2663894FD98A7
/4 0x00383000 32 bytes 512 bytes 0.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 6D77E4E0AFFC179D06253C6AA8C82A05
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 25 (252,391 bytes)
Resource Type Count Total Size Percentage
RT_ICON 21 249,975 bytes
99%
RT_GROUP_ICON 2 306 bytes
0.1%
RT_VERSION 1 912 bytes
0.4%
RT_MANIFEST 1 1,198 bytes
0.5%

Certificate Chain Analysis

▼
Certificate Information
Product GNU Image Manipulation Program
Description GNU Image Manipulation Program
File Version 2.10.36.0
Original Name gimp-console-2.10.exe
Signing Date 08:00 PM 11/06/2023 (578 days ago)
Verification Status Signed
Signers Jernej Simončič; Sectigo RSA Code Signing CA; USERTrust RSA Certification Authority; Sectigo (AAA)
Counter Signers Sectigo RSA Time Stamping Signer #4; Sectigo RSA Time Stamping CA; USERTrust RSA Certification Authority; Sectigo (AAA)
Internal Name gimp-console-2.10
Copyright Copyright © 1995-2023
Certificate Chain Summary
Jernej Simončič #1 Primary
Validity Period: 2021-02-24 00:00:00 → 2024-02-24 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 70 3F 38 4B E7 0A DD 9E 6A 17 5D F4 BE 6E 02 FE
USERTrust RSA Certification Authority #2 Chain
Validity Period: 2019-03-12 00:00:00 → 2028-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 39 72 44 3A F9 22 B7 51 D7 D3 6C 10 DD 31 35 95
Sectigo RSA Code Signing CA #3 Chain
Validity Period: 2018-11-02 00:00:00 → 2030-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 1D A2 48 30 6F 9B 26 18 D0 82 E0 96 7D 33 D3 6A
Sectigo RSA Time Stamping Signer #4 #4 Chain
Validity Period: 2023-05-03 00:00:00 → 2034-08-02 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 39 4C 25 E1 7C A0 6D 27 A8 65 E2 3B D9 1D 22 D4
Sectigo RSA Time Stamping CA #5 Chain
Validity Period: 2019-05-02 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 30 0F 6F AC DD 66 98 74 7C A9 46 36 A7 78 2D B9

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware