Gridinsoft Logo

The freedom.dll File Analysis

Technical Analysis

File Name freedom.dll
File Type
Win32 DLL
Magic Bytes PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
SSDEEP Hash
12288:ab+Azqyc+GYIvPc/90guuCPzhDAQuoBmbW65dH580JAy0J7IRdwhS4O04htM1D5:ab5Wyc+GYmc0guuEtMQxmbW0dH580xY/
Scanner Version 1.0.210.174
Database Version 2025-03-11 21:00:49 UTC

Suspicious File Detected

Detected by 39 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
55%
Detection Rate
757,760
File Size (bytes)
39/71
Engines Detected
2025-03-11
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
f643e6ddd7afeed1c03ca69a8e71b66a
SHA1
a2c6655ead23c3c4dea9171c5aff4adfeb15ea47
SHA256
5733dc037491e1fbbd639131ee462afb69a8fe10680e72a240eed268878bdac4
SHA512
ad599fbeac0fdbd86ab6e2395c3d82a589e66bdfbef24870122580da4aaf534d610425da8cc82181b326b0fcb65972957c2e74430f6f950c1bc3cdc0da93671f
ImpHash
121cde6d75e4ec93f689fa0e0c5acf93

Security Engines with Detections (39 of 71)

Lionic
Trojan.Win32.GameHack.4!c Malicious
Elastic
malicious (moderate confidence) Malicious
MicroWorld-eScan
Gen:Variant.Fragtor.677213 Malicious
CTX
dll.trojan.generic Malicious
CAT-QuickHeal
Trojan.Ghanarava.171814062071b66a Malicious
Skyhigh
Artemis!Trojan Malicious
McAfee
Artemis!F643E6DDD7AF Malicious
Cylance
Unsafe Malicious
Zillya
Trojan.GameHackAGen.Win32.175 Malicious
Sangfor
PUP.Win32.Gamehack.Vfm4 Malicious
K7AntiVirus
Unwanted-Program ( 005b8a981 ) Malicious
K7GW
Unwanted-Program ( 005b8a981 ) Malicious
CrowdStrike
win/malicious_confidence_70% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
a variant of Win32/GameHack_AGen.AFL potentially unsafe Malicious
APEX
Malicious Malicious
Paloalto
generic.ml Malicious
Cynet
Malicious (score: 100) Malicious
GData
Gen:Variant.Fragtor.677213 Malicious
BitDefender
Gen:Variant.Fragtor.677213 Malicious
Rising
PUA.GameHack!8.223 (CLOUD) Malicious
Emsisoft
Gen:Variant.Fragtor.677213 (B) Malicious
VIPRE
Gen:Variant.Fragtor.677213 Malicious
McAfeeD
Real Protect-LS!F643E6DDD7AF Malicious
SentinelOne
Static AI - Malicious PE Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
FireEye
Generic.mg.f643e6ddd7afeed1 Malicious
Webroot
W32.Trojan.Gen Malicious
Varist
W32/ABApplication.GGPV-5271 Malicious
Antiy-AVL
RiskWare/Win32.Gamehack Malicious
Arcabit
Trojan.Fragtor.DA555D Malicious
Microsoft
PUA:Win32/GameHack Malicious
Google
Detected Malicious
ALYac
Gen:Variant.Fragtor.677213 Malicious
Malwarebytes
Malware.AI.1368040364 Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09EN24 Malicious
Yandex
Riskware.Agent!HTzr49w4NXo Malicious
Fortinet
Malicious_Behavior.SB Malicious
DeepInstinct
MALICIOUS Malicious
32 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Image Base 0x10000000
Entry Point 0x1005543b
Compilation Time 2024-05-10 22:37:19
Checksum 0x00000000 (Actual: 0x000be459)
OS Version 6.0
PEiD Signatures PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 6 libraries
WINHTTP, OPENGL32, USER32, OLEAUT32, KERNEL32, IMM32
Exports 0 functions
Resources 0 Resources
Sections 4 Sections

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 474,200 bytes 474,624 bytes 6.68 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 68764EB186630D00BBAEA0EAE1A71D26
.rdata 0x00075000 250,728 bytes 250,880 bytes 6.72 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5061F20512DD222C15FB4541BA229533
.data 0x000b3000 22,656 bytes 11,264 bytes 4.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C9BC63A30A9CBFD13C16C08A2EB6B509
.reloc 0x000b9000 19,716 bytes 19,968 bytes 6.70 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C2C8BF72306F8C9F53B02EC069001B42
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
39 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware