[Gimp-web] Website gimp.org is marked as Malicious

[Shimon Shore <ShimonS most gov il>]

Hello,

I am interested in using Gimp in our organization. In order to get approval from our cyber security unit they 
tested your website on Hybrid Analysis which marks it as Malicious - 
https://www.hybrid-analysis.com/sample/4d31ab35224693e07ef33b7c97ffa09962ec205a86fd16af03e246ebd374da1e

One of the main problems is that many of the files on your server failed virus scans as seen below.

Can you look into/fix the problem with infected files on your server?

Thank you,

Shimon Shore
shimons most gov il


---------------------------------------------------------------------------------------------

Found malicious artifacts related to "209.132.180.179": ...

URL: http://download.gimp.org/pub/gimp/help/windows/2.8/2.8.2/gimp-help-2-2.8.2-ja-setup.exe (AV positives: 
1/67 scanned on 07/17/2018 23:36:19)
URL: http://gtk.org/ (AV positives: 1/65 scanned on 04/05/2017 23:26:58)
URL: http://download.gimp.org/pub/gimp/v2.8/windows/gimp-2.8.14-setup-1.exe (AV positives: 1/68 scanned on 
07/13/2016 03:54:27)
URL: http://www.gimp.org/ (AV positives: 1/66 scanned on 11/08/2015 17:46:36)
URL: http://download.gimp.org/pub/gimp/v2.8/windows/gimp-2.8.14-setup-1.exe.torrent (AV positives: 1/65 
scanned on 10/03/2015 18:45:18)
File SHA256: ba475a7068b9e9b05eea8c214f59561bc6901419e46b50eaa3ce1d34dccde239 (AV positives: 4/68 scanned on 
07/22/2019 09:24:29)
File SHA256: f73335b86f19fab9d29e4d7a3a3f06f167d1b8bf59b159c3ce1dddec31f6d7e2 (AV positives: 16/66 scanned on 
07/11/2019 18:13:19)
File SHA256: ddee9c73440e890a68bdf8ce36fb30a35a0987f215acddbc2e24af3dee254282 (AV positives: 13/71 scanned on 
04/29/2019 18:46:10)
File SHA256: 3dc912c14260a57f98b47b0d881ff2ad2e74b9f7d0f490111de2a5bd312a11f8 (AV positives: 7/71 scanned on 
04/14/2018 18:19:33)
File SHA256: db343f42b4b92443328b8f8fb19026a72357d57c65cfe9371a46f2ecf8b411e6 (AV positives: 6/68 scanned on 
02/20/2018 13:05:40)
Found malicious artifacts related to "205.185.216.10": ...

URL: 
http://api.ning.com/files/t3kfhrogsXxP*5TJEszEiBcrLCjUBZ1bYgX-kGDpu4zg*C9TdqrNX0W88GAY0rO0nWatHL-ypL4-lPYcP7mb3wqgBBUWmMoL/
 (AV positives: 5/71 scanned on 08/07/2019 05:38:19)
URL: http://download.gamezone.com/uploads/download/file/848515/ (AV positives: 2/71 scanned on 08/07/2019 
02:37:15)
URL: 
http://api.ning.com/files/4OenSrzOrWNakWnusVjqZJia*AdxeLcT90xMFuJvJ7bfxMxgCa5WkjDBPRQ5H-E2wYSFliAAZAO-RQv3ZbFSKvntQggEIiRD/
 (AV positives: 4/71 scanned on 08/07/2019 02:37:09)
URL: http://images.neopets.com/glophone/ (AV positives: 1/71 scanned on 08/07/2019 01:37:16)
URL: http://static.exdynsrv.com/library/358224/f5b5e52484f49be33b7ada0d5c88d518c49ea948.gif (AV positives: 
1/71 scanned on 08/06/2019 18:52:16)
File SHA256: 53adb65768bce0a007c5ec54c4120b0b45e27a3bf28e60894d09b5c3ca9b2ba0 (AV positives: 45/70 scanned on 
08/07/2019 04:51:07)
File SHA256: 2149e4e46987399a8dfd77502d65d602c5960628c5369fee5dc70cf42a74295e (AV positives: 16/68 scanned on 
08/07/2019 04:42:08)
File SHA256: 9d270cd2507f8f4160eea3e0649295121757b7feb50525b8b30a6f338672a780 (AV positives: 40/71 scanned on 
08/07/2019 04:26:16)
File SHA256: d0ada49a95ca229bde94cd850b573fe867104b6ae95979ed61d79517d783a003 (AV positives: 36/72 scanned on 
08/07/2019 04:22:46)
File SHA256: f923f22e65ede3746663ddca1de1cc65875fd3f72d86ea1b64972c2f674c0725 (AV positives: 32/71 scanned on 
08/07/2019 04:10:17)
Found malicious artifacts related to "23.63.252.187": ...

File SHA256: 760813af05fedb5214810b8bf40757a216622a34447c2c377990bcd0a51a2ce2 (AV positives: 53/71 scanned on 
07/16/2019 23:50:17)
File SHA256: 2cefbbffcff4ca6104810945f906a03a507660aca3e8666ff7c36fb88f984b1d (AV positives: 30/71 scanned on 
12/31/2018 23:46:20)
File SHA256: ba8f013c9ee8464c8f89101e4a88c29507c3a640245490c87e343b7677920f80 (AV positives: 19/71 scanned on 
12/16/2018 23:50:20)
File SHA256: f0c9ba3a324aa94b5a90cd0a57811f7af328452da7db22c8c07bce7b1c949a9c (AV positives: 35/69 scanned on 
12/14/2018 23:38:27)
Found malicious artifacts related to "184.84.66.166": ...

File SHA256: 02c141f158bb9fa0e79bdd6b87c553a19562d747780d7093f2339ee14a3b99ef (AV positives: 42/72 scanned on 
07/08/2019 22:23:51)
File SHA256: 346810c00b6fdb38c47defd45a9ce91a61a3c033451726115678b710b4b93556 (AV positives: 42/71 scanned on 
07/08/2019 21:37:22)
File SHA256: 2fd7d9fcd5a9cca2720e1739f8cbf0a2193a0939fa7d8f9fcf826ddb3ee629d9 (AV positives: 43/73 scanned on 
07/05/2019 03:35:28)
File SHA256: 0ee3c3bf907eb09a1315b88f7daa9f5d2c975e74faf7e03d106fc200a9d371f2 (AV positives: 63/73 scanned on 
07/04/2019 14:42:00)
File SHA256: 0d17bc73ec257c9f437515af06ca7143afb563c563715be362b4a9e527a2d106 (AV positives: 55/70 scanned on 
06/29/2019 02:56:36)