The curl exe (The curl executable) curl, https://curl se/ File Malware Analysis
Gridinsoft Logo

The curl.exe (The curl executable) File Analysis

Technical Analysis

File Name curl.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-29 19:00:32 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
742,960
File Size (bytes)
2025-11-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2538c12b71f10c2fccb45cb7200db15b
SHA1
ff0ce9debd2797037ceec037c0202258aa9d8f97
SHA256
bec2b15c2fb3e24314c72c69b00e3253ba47e12d6058ab6df043cecfe7db3beb
SHA512
62ac52ecc87a317b640f234960f363a4aed690cb8d040b932b0100baf259da0ee3fcf277c6a544de6a966884df47fa4e23003b66870fc6dc5c4125505b377704
ImpHash
9ef66f1aa11a2e01d985e49f0ef7c39a

PE Analysis

Basic Information

Image Base 0x140000000
Entry Point 0x140004950
Compilation Time 2025-09-10 14:48:40
Checksum 0x000b97a0 (Actual: 0x000b97a0)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path C:\__w\1\s\_build\src\RelWithDebInfo\curl.pdb
Digital Signature OK
Imports 42 libraries
Exports 0 functions
Resources 2 Resources
Sections 6 Sections

Version Information

CompanyName curl, https://curl.se/
FileDescription The curl executable
FileVersion 8.16.0
InternalName curl
OriginalFilename curl.exe
ProductName The curl executable
ProductVersion 8.16.0
LegalCopyright Copyright (C) Daniel Stenberg, <[email protected]>.
License https://curl.se/docs/copyright.html
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 519,040 bytes 519,168 bytes 6.41 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 97A61824EB5558A2797D58FBB563C64E
.rdata 0x00080000 185,294 bytes 185,344 bytes 5.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9EFA7707F08464D5F8824C4A4F87BEBD
.data 0x000ae000 7,904 bytes 3,072 bytes 2.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FBE8E3FB7B60D261B04FC946D689ADEB
.pdata 0x000b0000 17,004 bytes 17,408 bytes 5.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F1E1BEE8F14BACF63A7AA2167A42D45F
.rsrc 0x000b5000 1,432 bytes 1,536 bytes 3.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DD951AE642CF9A744E26B5D30C424054
.reloc 0x000b6000 5,120 bytes 5,120 bytes 5.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ F6CB0B7E88CD12F5D5418A1933D2A0AF

Resource Analysis

Total Resources: 2 (1,269 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 888 bytes
70%
RT_MANIFEST 1 381 bytes
30%

Certificate Chain Analysis

Certificate Information
Product The curl executable
Description The curl executable
File Version 8.16.0
Original Name curl.exe
Signing Date 02:48 PM 09/10/2025 (120 days ago)
Verification Status Signed
Signers Microsoft 3rd Party Application Component; Microsoft Code Signing PCA 2011; Microsoft Root Certificate Authority 2011
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name curl
Copyright Copyright (C) Daniel Stenberg, <[email protected]>.
Certificate Chain Summary
Microsoft 3rd Party Application Component #1 Primary
Validity Period: 2025-05-15 18:48:31 → 2026-07-07 18:48:31
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 04 6D 55 C0 D4 3B 28 9C 0B DE 00 00 00 00 04 6D
Microsoft Code Signing PCA 2011 #2 Chain
Validity Period: 2011-07-08 20:59:09 → 2026-07-08 21:09:09
Signature Algorithm: sha256RSA
Serial Number: 61 0E 90 D2 00 00 00 00 00 03
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2025-01-30 19:42:49 → 2026-04-22 19:42:49
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 02 05 3C 75 6C 82 44 87 CD FE 00 01 00 00 02 05
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware