Gridinsoft Logo
File Icon

The ImageCutout.exe (ImageCutout) File Analysis

Updated 28 days ago
Checked by Malaware Check
ImageCutout.exe

Technical Analysis

File Name ImageCutout.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
98304:1JyPnL1NldMTUABhstJ1wPCNhf8O+Y473PwmV9ZcvQSDw:yPLbXMTUhtJKCTX+Y49V9+vQ8
Scanner Version 1.0.216.174
Database Version 2025-05-08 06:00:17 UTC
⚠

Suspicious File Detected

Detected by 40 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
56%
Detection Rate
6,160,384
File Size (bytes)
40/71
Engines Detected
2025-05-08
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
8b82cbdd453d6f79d494cd66b94899a1
SHA1
44683234e59030544de9d8edd867dfc77594d14d
SHA256
86725ab1210a5a29b93572b3a0bdbd0b7975d895d979286817413152611e9f03
SHA512
562d6ec261ec2a605ceb6b9e3ebd45cfbfaa211bc103f01f8901574eea018b13ef9e7e643b045525e9da68037e69064685507adddb9c6781dd7c20623d4832cd
ImpHash
f93bb4205a36a26f137087f03d79e6f7

Security Engines with Detections (40 of 71)

Bkav
W32.AIDetectMalware Malicious
Lionic
Trojan.Win32.VMProtect.4!c Malicious
Elastic
malicious (high confidence) Malicious
FireEye
Generic.mg.8b82cbdd453d6f79 Malicious
CAT-QuickHeal
Trojan.Ghanarava.17237468834899a1 Malicious
Skyhigh
BehavesLike.Win32.PUPXAR.tc Malicious
ALYac
Trojan.Generic.36682995 Malicious
Cylance
Unsafe Malicious
Zillya
Trojan.VMProtect.Win32.96863 Malicious
Sangfor
Trojan.Win32.Packed.V321 Malicious
K7AntiVirus
Trojan ( 0059f3ca1 ) Malicious
Alibaba
Packed:Win32/VMProtect.dcd7952a Malicious
K7GW
Trojan ( 0059f3ca1 ) Malicious
CrowdStrike
win/malicious_confidence_90% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
a variant of Win32/Packed.VMProtect.AU suspicious Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09H824 Malicious
Paloalto
generic.ml Malicious
BitDefender
Trojan.Generic.36682995 Malicious
MicroWorld-eScan
Trojan.Generic.36682995 Malicious
Avast
Win32:MalwareX-gen [Trj] Malicious
Emsisoft
Trojan.Generic.36682995 (B) Malicious
VIPRE
Trojan.Generic.36682995 Malicious
McAfeeD
ti!86725AB1210A Malicious
SentinelOne
Static AI - Malicious PE Malicious
Trapmine
malicious.moderate.ml.score Malicious
Sophos
Mal/Generic-S Malicious
Ikarus
PUA.VMProtect Malicious
Varist
W32/ABApplication.YXNH-9010 Malicious
Antiy-AVL
Trojan[Packed]/Win32.VMProtect Malicious
Microsoft
Trojan:Win32/Wacatac.A!ml Malicious
Arcabit
Trojan.Generic.D22FBCF3 Malicious
GData
Trojan.Generic.36682995 Malicious
Google
Detected Malicious
VBA32
BScope.TrojanPSW.Coins Malicious
CTX
exe.trojan.vmprotect Malicious
MaxSecure
Trojan.Malware.274685274.susgen Malicious
Fortinet
Riskware/Application Malicious
AVG
Win32:MalwareX-gen [Trj] Malicious
DeepInstinct
MALICIOUS Malicious
31 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: b107502dbfc692c9b97e1c07d8992837
Fuzzy: eb8c3d2cb43662509e544716e083072d
dHash: 80c85851d4464200
Image Base 0x00400000
Entry Point 0x00b04384
Compilation Time 2024-07-27 14:49:01
Checksum 0x005e67f2 (Actual: 0x005e67f2)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 20 libraries
Exports 3 functions
Resources 140 Resources
Sections 13 Sections

Version Information

▼
FileDescription ImageCutout
FileVersion 1.0.0.0
ProgramID com.embarcadero.ImageCutout
ProductName ImageCutout
ProductVersion 1.0.0.0
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,972,824 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.itext 0x004c0000 15,392 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.data 0x004c4000 71,660 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.bss 0x004d6000 29,624 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x004de000 16,592 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.didata 0x004e3000 24,472 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.edata 0x004e9000 157 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.tls 0x004ea000 84 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x004eb000 93 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.is_ 0x004ec000 1,731,141 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.xgc 0x00693000 3,020 bytes 3,072 bytes 5.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 918C2DC2F3422497C16F36F39D305A93
.whb 0x00694000 5,840,512 bytes 5,840,896 bytes 7.95 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 4CB77B738B30440BC5DFA44048B0E465
.rsrc 0x00c26000 2,289,464 bytes 315,392 bytes 6.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A08C69466644815AC0C6EF2BC3103134
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 140 (2,281,203 bytes)
Resource Type Count Total Size Percentage
FILE 1 595,960 bytes
26.1%
RT_CURSOR 8 2,464 bytes
0.1%
RT_BITMAP 29 15,556 bytes
0.7%
RT_ICON 6 304,784 bytes
13.4%
RT_DIALOG 2 164 bytes
0%
RT_STRING 54 54,018 bytes
2.4%
RT_RCDATA 29 1,305,978 bytes
57.2%
RT_GROUP_CURSOR 8 160 bytes
0%
RT_GROUP_ICON 1 90 bytes
0%
RT_VERSION 1 524 bytes
0%
RT_MANIFEST 1 1,505 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product ImageCutout
Description ImageCutout
File Version 1.0.0.0

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
40 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware