cartoon.exe

  • File Path: C:\program files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\cartoon.exe
  • Description: GNU Image Manipulation Program Plug-In

Hashes

Type Hash
MD5 DD89714A8D7D99636C5C7EBAD8D25C87
SHA1 CC774F73AF8678C0FB9262D53AAF5F4A1327671D
SHA256 9A587336EDF1BF14A1F84758C4978F248B1DACFA51A9200A0EBB57A79E9FE90B
SHA384 6747754F5B00EC2021CEEDA5FCFAC41FB3AC19DFD6A429C7DC52EFD91421B52C96652F2088C8E9053B49239BF1DE1F5D
SHA512 948D2FF10A231E275D0E65E35F078333B98BC82F89F2A4C3080B1B8734EBFEBA8FA3361D7B0B55311B36ED28B8BADBA3A7D815C6CAEB4FF75FBA3E47BEA3E94E
SSDEEP 1536:uTj1V/PlJ0QsZxxbBCOGJAC6vyaipiPWPaiaWWXiz/:gjTLsdGJAC6vyfmQMWgg/

Runtime Data

Open Handles:

Path Type
(RW-) C:\Users\user\Documents File
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\program files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\cartoon.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 00E7E6FE263192D15EAC485B4198E64488
  • Thumbprint: 3A427356A24983C1C8211C07CF766D4726A33E4F
  • Issuer: CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
  • Subject: CN=Jernej Simoni, O=Jernej Simoni, STREET=Herbersteinova 29, L=Ljubljana, S=-, PostalCode=1000, C=SI

File Metadata

  • Original Filename: cartoon.exe
  • Product Name: GNU Image Manipulation Program
  • Company Name: Spencer Kimball, Peter Mattis and the GIMP Development Team
  • File Version: 2.10.20.0
  • Product Version: 2.10.20
  • Language: English (United States)
  • Legal Copyright: Copyright 1995-2020

File Similarity (ssdeep match)

File Score
C:\program files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard\checkerboard.exe 47
C:\program files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\colormap-remap.exe 47
C:\program files\GIMP 2\lib\gimp\2.0\plug-ins\file-pix\file-pix.exe 47
C:\program files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\photocopy.exe 43
C:\program files\GIMP 2\lib\gimp\2.0\plug-ins\twain\twain.exe 43

Possible Misuse

The following table contains possible examples of cartoon.exe being misused. While cartoon.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nouns.txt cartoon © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.