Gridinsoft Logo
File Icon

The cursor-vip_windows_386.exe File Analysis

Technical Analysis

File Name cursor-vip_windows_386.exe
File Type
PE32 executable (console) Intel 80386, for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-18 05:00:27 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
11,704,832
File Size (bytes)
2025-07-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ad1e6b24e704369e374b31e44afd3799
SHA1
64e91863423cf04eece12bebc57a5137adddc7c4
SHA256
70b6e6d664374dc8fac39cdb2e856bd322c56b9dbe85172ddb76c9a776945289
SHA512
f6c1bcb376d01801cb0b8f58150142c70e25a270992d38f2a903d8c51b23a076e0f494d1ae6a7daf166af2a2459871389a36ee7fb10d5b8ecfd9db3d378e8576
ImpHash
1aae8bf580c846f39c71c05898e57e88

PE Analysis

Basic Information

Icon
Hash: cc2780c150b1f47f5e0d3dd8d7132630
Fuzzy: a300de54a37ad851ae8172826da96042
dHash: 0000000018005858
Image Base 0x00400000
Entry Point 0x00473650
Compilation Time 1970-01-01 00:00:00
Checksum 0x00000000 (Actual: 0x00b2aafe)
OS Version 6.1
PEiD Signatures PE32 executable (console) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 1 libraries
kernel32
Exports 0 functions
Resources 4 Resources
Sections 7 Sections

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 5,999,932 bytes 6,000,128 bytes 6.05 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 43CA1B7C02250BF3D87157FB245F5DCB
.rdata 0x005ba000 4,967,912 bytes 4,967,936 bytes 5.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A8256DAA04DAA18127D093DF1BCEE997
.data 0x00a77000 685,740 bytes 473,600 bytes 5.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8F493FAE32CA227F606AE018CF4EEDAD
.idata 0x00b1f000 1,100 bytes 1,536 bytes 3.88 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 54D0C3D6A57D8DD31F5AF5118D9CB32D
.reloc 0x00b20000 243,760 bytes 244,224 bytes 6.66 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3BC568BB6BB284179C27C55B720E7310
.symtab 0x00b5c000 4 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 07B5472D347D42780469FB2654B7FC54
.rsrc 0x00b5d000 15,656 bytes 15,872 bytes 0.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AB91D5F888E40AE7073A1D6A38D21547
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 4 (15,400 bytes)
Resource Type Count Total Size Percentage
RT_ICON 3 15,352 bytes
99.7%
RT_GROUP_ICON 1 48 bytes
0.3%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware