Gridinsoft Logo

The ffmpeg.exe File Analysis

Updated 1 minute ago
Checked by Malware Check
ffmpeg.exe

Technical Analysis

File Name ffmpeg.exe
File Type
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-19 02:00:24 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
87,429,632
File Size (bytes)
2025-07-19
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
3676e96633e8770dd626d7541e8dc4e8
SHA1
1c0a2361c01cb26f31781fcdecf2fd902c9c65db
SHA256
b90225987bdd042cca09a1efb5e34e9848f2d1dbf5fbcd388753a44145522997
SHA512
4b88a7d8926e22a08a4de9dc96a97b93f2fa48d91ea64961f27405faca5c6c62255b9b461bf59eef988cb55b0afad4a75f58602a53a38d354b0afef5e175c1de
ImpHash
6f9ceee7d1d748a24d97f8a032968412

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1400013e0
Compilation Time 2025-03-10 05:39:04
Checksum 0x0536a601 (Actual: 0x0536a601)
OS Version 4.0
PEiD Signatures PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 19 libraries
Exports 56 functions
Resources 1 Resources
Sections 13 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 71,166,136 bytes 71,166,464 bytes 6.69 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7A8D15A6A2E6816652329C55C89388C3
.data 0x043e0000 1,229,248 bytes 1,229,312 bytes 4.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 65D814F4DE695CD03E8AE48C1FE8D854
.rodata 0x0450d000 14,796 bytes 14,848 bytes 5.86 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A64F76B5697AD7B396A3EB484E6A487A
.rdata 0x04511000 12,370,176 bytes 12,370,432 bytes 6.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 520DCE04279B0E6CD653601A6B1135CA
.pdata 0x050de000 961,272 bytes 961,536 bytes 7.09 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 67FDD0C8FEB8B6EFBCDE8673235AF3B9
.xdata 0x051c9000 1,376,660 bytes 1,376,768 bytes 5.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DB7BC3058F9DD3D3E871F8687A4772DC
.bss 0x0531a000 25,220,736 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.edata 0x06b28000 1,489 bytes 1,536 bytes 5.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F159A124B93D2A8C3B6B29722B63F3A5
.idata 0x06b29000 29,112 bytes 29,184 bytes 5.13 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 791709A6C42FE67BB0479992452D0C60
.CRT 0x06b31000 112 bytes 512 bytes 0.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CF46531DBF5D86BA814E707FE2744F2E
.tls 0x06b32000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x06b33000 1,840 bytes 2,048 bytes 2.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7B817A02E5F59A17861DC35D325B3CBD
.reloc 0x06b34000 275,412 bytes 275,456 bytes 5.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 8DE64249D217C5F4DECCC586BEB8E1C8
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 1 (495 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 495 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware