Gridinsoft Logo
File Icon

The SketchUp.exe (SketchUp Application) File Analysis

Updated 1 day ago
Checked by Malware Check
SketchUp.exe

Technical Analysis

File Name SketchUp.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.218.174
Database Version 2025-06-20 13:00:26 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
40,375,432
File Size (bytes)
2025-06-20
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e7815c5d21509105e9aea3cde5ffdfc8
SHA1
a5e5e6e8cfb629065442d3f951b1b3ddc3437d33
SHA256
659ebcb383753eb3cd74b567f8a428774359fd633a3e8f7e04e8805516b7c104
SHA512
6a573298d4342c64fdd47ac923c03c3e60eb35cacf85a103d3e25ef8aff49f0772274c890caddfdeac56262e79daacbd8957b4cbd2b486f31a6139084d779c10
ImpHash
e5e32df682ce6f4419788ec7678998f6

PE Analysis

Basic Information

▼
Icon
Hash: d6dd3f577a9a44741166faad5ce534fd
Fuzzy: 331e5aadfe7e102734662ad03844dd6b
dHash: e88e272f16178ee8
Image Base 0x140000000
Entry Point 0x140cdbc40
Compilation Time 2025-02-18 20:34:53
Checksum 0x026835aa (Actual: 0x0268a45e)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\bamboo\xml-data\build-dir\SU-SCR25-WCB\sketchup\products\Release_x64\bin\sketchup\sketchup.pdb
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 28 libraries
Exports 1198 functions
Resources 100 Resources
Sections 9 Sections

Version Information

▼
Comments Release-Unicode version
CompanyName Trimble, Inc.
FileDescription SketchUp Application
FileVersion 25.0.571
InternalName SketchUp
LegalCopyright (c) 2025 Trimble, Inc.
OriginalFilename SketchUp.EXE
ProductName SketchUp Application
ProductVersion 25.0.571
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 23,615,020 bytes 23,615,488 bytes 6.39 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 9BDE15CB79C837BEA68B0659550D0924
.rdata 0x01687000 12,598,664 bytes 12,598,784 bytes 6.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 57C7C77B113DAFDCB72232737C6A764F
.data 0x0228b000 2,392,832 bytes 1,930,752 bytes 6.77 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE AB5F02F2A89BB8276347DBD6AEE4D294
.pdata 0x024d4000 1,171,704 bytes 1,171,968 bytes 6.93 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ ADEABAA79A4EFE7B36899047476E0FFE
.qtversi 0x025f3000 16 bytes 512 bytes 0.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 5FC4962F2BA670643115D4EFF0074332
_RDATA 0x025f4000 48 bytes 512 bytes 0.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 83C991EB2F9CC11EA1EEE9E805059F7B
.rsrc 0x025f5000 843,128 bytes 843,264 bytes 4.51 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 501299ACAE092A9F8C0CCA9617F6A92A
.reloc 0x026c3000 203,140 bytes 203,264 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C182745C64BA4E41C52E67F433C43D31
.crdata 0x026f5000 19 bytes 512 bytes 1.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 75AF29227ECB26DD3106E1AC13FBE2F7
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 100 (832,749 bytes)
Resource Type Count Total Size Percentage
FILE_DATA 88 402,246 bytes
48.3%
RT_ICON 9 428,229 bytes
51.4%
RT_GROUP_ICON 1 132 bytes
0%
RT_VERSION 1 824 bytes
0.1%
RT_MANIFEST 1 1,318 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product SketchUp Application
Description SketchUp Application
File Version 25.0.571
Original Name SketchUp.EXE
Signing Date 01:50 AM 02/20/2025 (122 days ago)
Verification Status The digital signature of the object did not verify.
Signers Trimble Inc.; DigiCert Global G3 Code Signing ECC SHA384 2021 CA1; DigiCert Global Root G3
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name SketchUp
Copyright (c) 2025 Trimble, Inc.
Certificate Chain Summary
DigiCert Global G3 Code Signing ECC SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: SHA384ECDSA
Serial Number: 0F B8 A7 40 B9 15 8D 03 51 43 BC 59 D9 F0 40 29
Trimble Inc. #2 Chain
Validity Period: 2025-01-23 00:00:00 → 2028-03-16 23:59:59
Signature Algorithm: SHA384ECDSA
Serial Number: 0B 53 A7 D4 40 30 90 87 97 25 86 41 2D A7 FD 82
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware