PUP.Gamehack.PSD

The detection of PUP.Gamehack.PSD on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It's essential to understand the nature of this threat and take appropriate steps to remove it and prevent future infections.

What Is PUP.Gamehack.PSD?

PUP.Gamehack.PSD is a type of malware that is classified as a potentially unwanted program. This means that it is not necessarily a virus or a Trojan, but rather a program that may be installed on your system without your knowledge or consent. PUPs can be bundled with other software, downloaded from the internet, or installed through exploited vulnerabilities. They often exhibit behaviors that are annoying, disruptive, or even malicious, such as displaying unwanted ads, collecting personal data, or modifying system settings.

How PUP.Gamehack.PSD Operates

Once installed, PUP.Gamehack.PSD may operate in various ways to achieve its goals. It may display unwanted advertisements, such as pop-ups, banners, or redirects to suspicious websites. It may also collect personal data, such as browsing history, search queries, or sensitive information like passwords or credit card numbers. Additionally, PUP.Gamehack.PSD may modify system settings, such as changing the default search engine, homepage, or browser extensions. It may also consume system resources, slowing down your computer's performance and causing frustration.

Symptoms of Infection

If your system is infected with PUP.Gamehack.PSD, you may notice various symptoms. Your browser may be redirected to unwanted websites, or you may see unwanted ads or pop-ups. Your system may also become slower, or you may experience crashes or freezes. You may also notice that your browser settings have been changed, or that new, unfamiliar programs have been installed. These symptoms can be annoying and disruptive, and it's essential to address them promptly to prevent further damage.

How to Remove PUP.Gamehack.PSD

  1. Boot your computer in Safe Mode with Networking to prevent the malware from loading and to allow for a more effective removal process.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect any malicious components.
  3. Uninstall any suspicious programs or applications that may be related to the PUP.Gamehack.PSD infection.
  4. Reset your browser settings to their default values, including Chrome, Firefox, and Edge, to remove any unwanted extensions or add-ons.
  5. Reboot your computer and perform a follow-up scan to ensure that the malware has been completely removed.

Conclusion

Removing PUP.Gamehack.PSD from your system requires a combination of technical knowledge and caution. By following the steps outlined above, you can effectively remove the malware and prevent future infections. It's essential to be vigilant when downloading software, browsing the internet, or clicking on links, as these can be common sources of PUP infections. By staying informed and taking proactive measures, you can protect your system and your personal data from the risks associated with PUP.Gamehack.PSD and other types of malware.

Analysis Report

General information

Family Name: PUP.Gamehack.PSD
Signature status: No Signature

Known Samples

MD5: 8a2cfed92a960d91977ed54e3420d8c2
SHA1: 8f25e3d4c193191abc648516de78786e2e5ea8c1
SHA256: 3C7C25F319DD3577CA4D7763A8537ED208BB9CCAE728CD59D7AFB6AA884D36C4
File Size: 644.61 KB, 644608 bytes
MD5: 62d30698434731f5fcbf2ea7777c8f22
SHA1: 5bcce96655082becc983710a66b7752d5f5279cc
SHA256: D24CC3E79350C41FB8C5C25BBCC5C1241831BB7C17D8DF7714794717BBCB05F4
File Size: 548.86 KB, 548864 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File doesn't have security information
  • File has TLS information
  • File is 64-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
Show More
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

File Traits

  • imgui
  • No Version Info
  • WriteProcessMemory
  • x64

Block Information

Total Blocks: 394
Potentially Malicious Blocks: 82
Whitelisted Blocks: 296
Unknown Blocks: 16

Visual Map

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 x 0 0 0 x 0 0 0 x 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 x 0 0 1 x 1 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 x 0 0 0 0 0 x 0 0 0 0 x 0 0 0 0 0 0 x 0 0 0 x 0 0 0 0 x x 0 x 0 x x 0 0 x 0 0 0 0 x 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 x 0 0 x x 0 0 0 0 0 x 0 x x 0 x x 0 0 x 0 0 x 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 x 0 0 0 0 0 x x x x 0 0 0 0 0 x 0 0 x 0 0 0 0 x 0 ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 x x ? 0 x x 0 x 0 0 0 0 0 x 0 0 0 0 x 0 ? ? 0 x 0 0 0 x x 0 0 x x ? ? x 0 0 0 0 0 0 0 x 0 ? 0 0 x x x x x 0 x 0 x 0 0 0 x x 0 0 x x x ? 0 ? ? 0 0 0 0 0 x 0 0 ? 0 0 x x 0 x 0 x 0 0 ? ? ? 2 0 0 0 0 0 0 0 0 0 1 0 1 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAccessCheck
  • ntdll.dll!NtAddAtomEx
  • ntdll.dll!NtAlertThreadByThreadId
  • ntdll.dll!NtAllocateLocallyUniqueId
  • ntdll.dll!NtAllocateReserveObject
  • ntdll.dll!NtAlpcAcceptConnectPort
  • ntdll.dll!NtAlpcConnectPort
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcCreatePort
  • ntdll.dll!NtAlpcCreateSecurityContext
Show More
  • ntdll.dll!NtAlpcDeleteSecurityContext
  • ntdll.dll!NtAlpcOpenSenderProcess
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtAssociateWaitCompletionPacket
  • ntdll.dll!NtClearEvent
  • ntdll.dll!NtClose
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateIoCompletion
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtCreateSemaphore
  • ntdll.dll!NtCreateThreadEx
  • ntdll.dll!NtCreateTimer
  • ntdll.dll!NtCreateTimer2
  • ntdll.dll!NtCreateWaitCompletionPacket
  • ntdll.dll!NtCreateWorkerFactory
  • ntdll.dll!NtDeleteValueKey
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtDuplicateToken
  • ntdll.dll!NtEnumerateKey
  • ntdll.dll!NtEnumerateValueKey
  • ntdll.dll!NtFindAtom
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtNotifyChangeKey
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenMutant
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenProcessTokenEx
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtOpenThreadTokenEx
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryLicenseValue
  • ntdll.dll!NtQueryObject
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryVolumeInformationFile
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadRequestData
  • ntdll.dll!NtReadVirtualMemory
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseSemaphore
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtRemoveIoCompletionEx
  • ntdll.dll!NtResumeThread
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationKey
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSetIoCompletionEx
  • ntdll.dll!NtSetTimer2
  • ntdll.dll!NtSubscribeWnfStateChange
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtUnsubscribeWnfStateChange
  • ntdll.dll!NtWaitForAlertByThreadId
  • ntdll.dll!NtWaitForMultipleObjects
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWaitLowEventPair
  • ntdll.dll!NtWorkerFactoryWorkerReady
  • ntdll.dll!NtWriteFile
  • UNKNOWN