Gridinsoft Logo
File Icon

FREEZEpUtil.exe PUP Snackarcin Analysis

Updated 1 year ago
Checked by Malware Check
FREEZEpUtil.exe

Technical Analysis

File Name FREEZEpUtil.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.161.174
Database Version 2024-02-13 23:00:17 UTC
⚠

PUP.Win32.Snackarcin.st!c

Malware family: Snackarcin

N/A
Detection Rate
7,984,504
File Size (bytes)
2024-02-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
b566bcf2147fe834709342faf50bca5c
SHA1
bf27601dcbcbaf9ce118b830e6f9ae9bd27773fe
SHA256
8ac6074745f423c9fed7d85502b0af285e5215a1dcfa0c61d8802f092e872085
SHA512
6384d864ecf722dff5b14af961708b36a982c2531ce744722c0aa27ce4d38a515320deca73adae9e8e2606de05def6b7e2f052c44cec26f08876ee5890520ba7
ImpHash
918b83f737807a553d2f5b0cbcde8e2a

PE Analysis

Basic Information

▼
Icon
Hash: 22eb20f8f96a861b93e66eadb9a85bb2
Fuzzy: 7066b055fff61ae6979f58dc65171ad8
dHash: b269f08e8ef069b2
Image Base 0x00400000
Entry Point 0x00401000
Compilation Time 2023-10-30 10:16:50
Checksum 0x0079f179 (Actual: 0x0079f179)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 23 libraries
Exports 0 functions
Resources 21 Resources
Sections 7 Sections

Version Information

▼
CompanyName Secret Digestion decision
FileDescription Secret Digestion
FileVersion 11.15.1.13
LegalCopyright Copyright (c) 2022 Secret Digestion decision
OriginalFilename SecretDigestionApplication.exe
ProductName Secret Digestion
ProductVersion 11.15.1.13
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00001000 41,021,440 bytes 6,939,136 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 026E066D7B27DCC966EEBB3B3B5084A0
0x02720000 1,007,616 bytes 335,872 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 79A83F1ABD175D87D62E79A8291A8A85
0x02816000 73,728 bytes 5,632 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 2AE9169ECA028F2271AC0DACB8EF4F1F
.rsrc 0x02828000 1,421,312 bytes 194,048 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C65EC9B89C35DA1DF24C44839B102499
0x02983000 172,032 bytes 74,752 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BB291569E94FE90BA3A1E51CB94055BB
.data 0x029ad000 417,792 bytes 415,744 bytes 7.33 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 916287FE9790D998165C4F95FCE06348
.adata 0x02a13000 4,096 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
Entropy Analysis Alert

5 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 21 (1,418,596 bytes)
Resource Type Count Total Size Percentage
BIN 3 94,516 bytes
6.7%
RT_BITMAP 4 1,219,624 bytes
86%
RT_ICON 4 89,952 bytes
6.3%
RT_STRING 6 2,662 bytes
0.2%
RT_MESSAGETABLE 1 9,652 bytes
0.7%
RT_GROUP_ICON 1 62 bytes
0%
RT_VERSION 1 796 bytes
0.1%
RT_MANIFEST 1 1,332 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

PUP.Win32.Snackarcin.st!c Removal

Gridinsoft has the capability to identify and eliminate PUP.Win32.Snackarcin.st!c without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware