GIMPPortable_2.8.14-fix.paf.exe

GIMP Portable

Rare Ideas, LLC

This is a portable setup version of the software. The portable version is a open source and free platform that has been modified so that a full setup/installation is not required. This is typically downloaded through the portableapps.com website. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
PortableApps.com  (signed by Rare Ideas, LLC)

Product:
GIMP Portable

Version:
2.8.14.1

MD5:
999561d13fce31708fa3d8472729f778

SHA-1:
a27ef95eedbff7bcc2a6ce07b0db84174712902f

SHA-256:
05a71eec52987f5221cfb2e68367045a7340f3048a36356a74b76a8bd8ecf511

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:21:22 PM UTC  (today)

File size:
60.4 MB (63,291,928 bytes)

Product version:
2.8.14.1

Copyright:
PortableApps.com Installer Copyright 2007-2014 PortableApps.com.

Trademarks:
PortableApps.com is a registered trademark of Rare Ideas, LLC.

Original file name:
GIMPPortable_2.8.14-fix.paf.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\gimpportable_2.8.14-fix.paf.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
2/19/2014 1:00:00 AM

Valid to:
2/20/2015 12:59:59 AM

Subject:
CN="Rare Ideas, LLC", O="Rare Ideas, LLC", STREET=PO Box 227, L=New York, S=NY, PostalCode=10009, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
47B7C800D703CD79B6A796AF5A705523

File PE Metadata
Compilation timestamp:
2/24/2012 8:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1572864:yJL6DM9xB/zvjyyXMQihuFnUw3HDWYIbVZrT/TpB/F4:yJLJ9xdRA8nUw3jSb/tZG

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file GIMPPortable_2.8.14-fix.paf.exe has been seen being distributed by the following 23 URLs.

https://dw.uptodown.com/dwn/78dAtAOe5lU0oT6o4vte8ePbsT0nT-MxkwuzIb0CR1zjmLwpslR7AtkHmy85hq_tJwlc3HCpHYBo4xUMc2SIhv_OKYnRl64924MGB7guTS1jCJHOUCMJb4gOGMPIAKSg/2QwYoYTXvfClbgFWXEQApH3-la5WiiVXFY5XCGWigFlToEU-DK98IIofbPqL6L2-N7GqQ70VHKfAxGDX0TJ8IDJEhiHBPLiNTr029HKhIQNsfQuafBO5CSYZR3IwlP1D/rLupJU3fZTEQUpnlr0S4UEGGg7naCZcE2k75zniyF4ueSszXxI8uxeq_HWjH2MKd9KFt9of4IFDi-UXhzNnbSi-iorTQIxrpbg3qbobOPSBO3qGVwo0MGvaFWlaEb74j/.../

https://www.dropbox.com/pri/get/.../GIMPPortable_2.8.14-fix.paf.exe

http://dw.uptodown.com/dwn/rjba4hxYTna7-DWjQmrI7tOMsEjN4e0hm_JAKEu2037d_j3Cy_GSC_LOR2N8xlDU5Ep-_W13Lpl6jrLn8_1PF9ruNyybXIgeqbVIUOj2ScfT59Cgxvtv70rEw5EYvlCw/x_PyUNbCby33-E4TLKrIyEJnOrhGgx5gMDK6cM4t4b6rV8Nn2EWBPTSqkdYgO74FEtISbTXmv01LkcC_HX9EdaWAC3SPfuKIY0VLjgup_9HEuXcQkLqHqUxiq7DOJc_k/1XiofbDtTns7HpCiZ3WgrJBuPnD2UeZl7RbSgClDiXg9_D9jrRVe0R3HGICKqQt_A61_b_V4kADWv8tPja0fuHI1bBZ0KVF97mSL3OqIji-aAWjb8tOoe4x930Kf-x1C/.../

http://dw.uptodown.com/dwn/GZyt-p-a9iIhXxEI2u5PfLoNfJzZMurLYZHg98WLHj4m4eJZQVtoCwbG48phvlpsfnbH-SRyUnf0Pb9k3RApSrfEucI-l0-XNRgsc6Kk5tfIO1jnCtmdzl0altTJTAH-/vpeUFwaDNKys1bx4GstVva3UaVctUMwnIiBRsTnwcVzNe9wchVzMIKIXzjT9VzG4g3KVFm-wem7h7NPFoC1FDheyatW8YCDt_qHqHqrzMLxMYJ50r55bkLKLY--ausj4/.../

http://dw.uptodown.com/dwn/TFg7iAV3J1PTiqaUPgYqHpFHqd65s_27O28uTbcellUkOeStBIen5rwfNKwqHIFAMw-N7PqIIDInADnZUPa_6pm-51AYaSs2b7_ePOH6DhOqm_aAn0tAfArQdx6Ot9W8/cwy9KA0at84il3E7yF2FdnQXx7dyyXUDlykYYN2wy6yyHVVeCUDk52qmEUxo8akpBb3zFyWP5UMz1aqR83EKF9N_xa4porqVpi3s9vyVyGjo06Xme7INGu-OyL40Phd_/Ih6BlFYyIy95Ub05Xa25SD_3sCt8rd-8GchB8D5PoO3eFjnvB8YP3W9hR41J_Kn1ryS3CXrEtVzU3fcK2GoDreDiDNRYNVPOWc1bQwj6loN-FC5JXU_qzPDBFAGT-qtB/.../

https://dw.uptodown.com/dwn/_ZOZzSLDXjojITGfocsBL2XiVGnnvRdcJQIPJysxXGQfFHBRw4C8sfCgmE7aMwqGV8uZ2qzSq7GFxcmwuSWMFUNpVj9Wyv9IkuLXTGdMShI619E5I3XiJMhxm5Pq_D0h/HP_mOOOYmvmDvF0CRl2gqcYNmkrJ2D3RB8xaj5DaZBiEYmBDyFurLch-77R8DwbdIGd7rfKlQMW5bRLiLpx_qDmzu1_4c3lsJpvh7aAvSolIaMPABwyRFazQWpwULdJ1/gD4e93kYzJZDvTXwV0vSdGBDx2CY-lDVIy2scgagDumK3mXYkfYylSEaB0Yueyb78aQWUEsrc-AncqOsTisVp2e9_NH4gnqG-BWwRVWKLex9cQ0JmNpstLQa7llq_16O/.../

https://dw.uptodown.com/dwn/lt-INfJMF-yhVsjekGosy2IiAuPVom5K4DIUWe0YG8s9r-JQCskIQvfGX59gaDvxjeNUh8txpldHQM_OqFgnedBj-a13JsXzDwMa-VT1UX1Lf5SrJoU5e8HcuuhMvoIo/WOkAWJVq3HGmzZM0n_IFZyEguFOQ1I1aS4fOcgRJ0q53LLONK9hmVdCGyAMyzxqwhbovgRxy8nXcas7ct5J6D3doKEgu3GlzN98b4-2LsTWBTNRC2eppo-p82Xc6buF3/PELtlQk_oQnKO99ndMO90fyTKeF9oh2gexJiuRMco-Yr5S7wLbSht1C9TiKHJyi129JwatWqBob3M6uWQq-5cv2SIfuW4gn7sn5CP_nTriw8PJEZWmTjT8xK-b31iqho/.../

http://dw.uptodown.com/dwn/tq9YQ8dju7lJOgIUvOCvMGnDLbDgK61dGxO5QlL2wchvCY5Pa2awYcAcRwJ54nN8CHCJqwsFpX4wyk1rzT3fSxzbFt6MU7QCa2bO8GDNJ37JnoAIMwOKF3-dOVuMpDHn/nHwry7ZC8mZi80cf0ELnPM78gQTV4LHUxmjlSUVY7vgOjFzbqOHLoIEppIJSEcao09gHq3sC9D1Msra63V34Yb3qB2wvfY81Otk0IGRPMW22hOvjxH8EpQjsrtjqYd7j/ego-wgdY3xktS8BtiB4IdKMBCuhLJzyKsEPyAnzHvk9O9D81Ie-oyhAjSOHs-PrlbSw8FgJeMHjvzDtY6hhzTops9rS-Bgdj7ScbPxdfTCAMoGfw0X9B8I_iXSdVDriM/.../

http://dw.uptodown.com/dwn/IUcQZgYNbLxMAKH0uyw6Sek-Ivn9HXrXEC4V0FqMU5It4fjQMc6Zq623P4rehhTKQaB5bZRdJoI9-5Ka1DM0Q0zbtPMlv70IZTVcxmwagWRk-fjpQrt0jPXi9pa3m_qa/.../

http://cdn.portalprogramas-download.com/d/.../gimp

http://dw.uptodown.com/dwn/QbL1qesjI-KTHF5OLXwgofb9Zp5CHpAXO3rsg_szWQK5In9YN71o7-smy0A2WcP-96j63n3tWswjcC50hwaI2GqaK677hpBpYxbY7sBFAXxszo7uZuu-2-1qKWU5_XeW/WSjETgI28VPV3wBo_OjEHW9HTb-TCDd9lo7nUsM5HFj0b6j9C8XbgRDm__HewOYHhJKafGXpYJImDEY8-MDbyRuSX4DgF6VdHEc-ynIrzm3MYrrlbaJZrThrrvfR8lrp/.../

http://192.168.1.1:8181/http://hivelocity.dl.sourceforge.net/project/portableapps/.../GIMPPortable_2.8.14-fix.paf.exe

Scan GIMPPortable_2.8.14-fix.paf.exe - Powered by Reason Core Security