Gridinsoft Logo
File Icon

The crackasui.exe File Analysis

Updated 13 days ago
Checked by Malaware Check
crackasui.exe

Technical Analysis

File Name crackasui.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (console) x86-64, for MS Windows
SSDEEP Hash
786432:RSSgZ3/6Vl8ZJx0gUTLJT1QtIJPVFfdoeUEHuuAi8yZL/tbM86j1n:rg1/9JtUTdxiIJPDfJOZIZJ6
Scanner Version 1.0.217.174
Database Version 2025-05-25 10:00:14 UTC
⚠

Suspicious File Detected

Detected by 15 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
22%
Detection Rate
36,645,386
File Size (bytes)
15/67
Engines Detected
2025-05-25
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
28f996c08de99dbb61ee6af8612ab180
SHA1
ef6f3277f31b4937619018b6919a65505ed7f382
SHA256
e68dbc576609f2ac3c8904f2e608c16ddc22581f8487eac98b258da9346e21c0
SHA512
d59b35e8f8b7741b616b8cdf803cfaa63b5f6455c3d40024516b112cb85013c6ac54b59e03bcacbc63e38da4246ee5ec7e53e04773063fcfd6f536e698bed102
ImpHash
a06f302f71edd380da3d5bf4a6d94ebd

Security Engines with Detections (15 of 67)

MicroWorld-eScan
Generic.PySpy.B.0E45BF1E Malicious
ALYac
Generic.PySpy.B.0E45BF1E Malicious
VIPRE
Generic.PySpy.B.0E45BF1E Malicious
BitDefender
Generic.PySpy.B.0E45BF1E Malicious
CrowdStrike
win/malicious_confidence_100% (D) Malicious
ESET-NOD32
Python/Spy.Agent.BIL Malicious
APEX
Malicious Malicious
Emsisoft
Generic.PySpy.B.0E45BF1E (B) Malicious
CTX
exe.unknown.pyspy Malicious
Antiy-AVL
RiskWare/Win32.Kryptik.a Malicious
Arcabit
Generic.PySpy.B.0E45BF1E Malicious
GData
Generic.PySpy.B.0E45BF1E Malicious
Avast
MacOS:KeyLogger-DC [Trj] Malicious
AVG
MacOS:KeyLogger-DC [Trj] Malicious
DeepInstinct
MALICIOUS Malicious
52 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: fb460346f66714e824fcadddffea7970
Fuzzy: 7f94b7761e18b4762a1a263f78b90141
dHash: aebc385ccce0e8f8
Image Base 0x140000000
Entry Point 0x14000c380
Compilation Time 2025-05-25 07:01:56
Checksum 0x022fd108 (Actual: 0x022fd108)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 3 libraries
USER32, KERNEL32, ADVAPI32
Exports 0 functions
Resources 9 Resources
Sections 6 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 176,496 bytes 176,640 bytes 6.50 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 420661550C659F884DB561712E500AAE
.rdata 0x0002d000 75,778 bytes 76,288 bytes 5.77 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 190B7A9405B9430C7433D94B1B42BB04
.data 0x00040000 21,512 bytes 3,584 bytes 1.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE AFF56347F897785154C53727472C548D
.pdata 0x00046000 8,892 bytes 9,216 bytes 5.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2411A276649FC67A0A93227155911735
.rsrc 0x00049000 61,324 bytes 61,440 bytes 7.35 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5D72E0338B034862F777C781AB7D2219
.reloc 0x00058000 1,896 bytes 2,048 bytes 5.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 42D6242177DBAE8E11ED5D64B87D0D48
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 9 (60,800 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 59,403 bytes
97.7%
RT_GROUP_ICON 1 104 bytes
0.2%
RT_MANIFEST 1 1,293 bytes
2.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
15 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware