Multi-License Discount Quote

Change Region

English
Threat Database Hacktool PUP.GameHack.GAA

PUP.GameHack.GAA

By CagedTech in Hacktool, Potentially Unwanted Programs

The detection of PUP.GameHack.GAA on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It's essential to understand the nature of this threat and take immediate action to remove it and prevent further damage.

What Is PUP.GameHack.GAA?

PUP.GameHack.GAA is a type of potentially unwanted program that may have been installed on your system without your knowledge or consent. PUPs are software applications that may not be malicious in nature but can still cause problems with your computer's performance, stability, and security. They often come bundled with other software or are downloaded from untrusted sources, and can be difficult to remove without proper guidance.

How PUP.GameHack.GAA Operates

PUPs like PUP.GameHack.GAA typically operate by installing themselves on your system and then modifying system settings, registry entries, or other configuration files to achieve their goals. They may also communicate with remote servers to send or receive data, which can compromise your privacy and security. In some cases, PUPs may also display unwanted advertisements, collect user data, or install additional software without your consent.

Symptoms of Infection

If your system is infected with PUP.GameHack.GAA, you may experience a range of symptoms, including slow system performance, unwanted pop-ups or advertisements, unexpected crashes or freezes, and changes to your browser settings or homepage. You may also notice that your system is running more slowly than usual, or that your browser is redirecting you to unfamiliar websites. In some cases, you may not notice any symptoms at all, which is why it's essential to run regular virus scans and monitor your system for suspicious activity.

  • Unwanted changes to your browser settings or homepage
  • Slow system performance or crashes
  • Unwanted pop-ups or advertisements
  • Unexpected changes to your system settings or configuration files

How to Remove PUP.GameHack.GAA

  1. Boot your system in Safe Mode with Networking to prevent the PUP from loading and to allow you to download and install removal tools
  2. Run a full scan with a reputable anti-malware tool, such as SpyHunter, to detect and remove the PUP and any associated files or registry entries
  3. Uninstall any suspicious programs or applications that may be associated with the PUP
  4. Reset your browser settings to their default values, including Chrome, Firefox, and Edge, to remove any unwanted changes or extensions
  5. Reboot your system and run a follow-up scan to ensure that the PUP has been completely removed and that your system is clean

Conclusion

Removing PUP.GameHack.GAA from your system requires careful attention to detail and a thorough understanding of the removal process. By following the steps outlined above, you can help to ensure that your system is clean and free from the effects of this potentially unwanted program. Remember to always be cautious when downloading software or clicking on links from untrusted sources, and to run regular virus scans to protect your system from future infections.

Analysis Report

General information

Family Name: PUP.GameHack.GAA
Signature status: No Signature

Known Samples

MD5: 5c2b7f5814fe54c88eaadf9f5f2384f6
SHA1: ea0743cde56aad896a5c76568d4067dc89b04cf3
SHA256: 966B844F116D828B9605125429E3170594705C9A4F9A998EB375B8DFEA122355
File Size: 385.02 KB, 385024 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File doesn't have security information
  • File has TLS information
  • File is 64-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
Show More
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Traits

  • imgui
  • No Version Info
  • x64

Block Information

Total Blocks: 1,236
Potentially Malicious Blocks: 47
Whitelisted Blocks: 1,029
Unknown Blocks: 160

Visual Map

0 0 0 0 0 0 0 ? ? ? ? ? 0 0 ? ? ? 0 ? ? ? ? ? ? ? 0 ? 0 ? 0 0 ? ? 0 0 0 ? 0 ? ? ? ? ? 0 0 ? ? ? 0 ? ? 0 ? ? 0 0 0 0 ? ? ? 0 ? 0 ? ? ? ? 0 0 ? 0 0 ? 0 ? ? ? 0 0 ? ? ? ? ? ? ? 0 ? 0 ? ? ? ? ? ? ? ? 0 ? ? ? 0 ? ? ? 0 0 ? ? 0 ? ? 0 ? 0 ? ? 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 x 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 ? 0 0 ? ? x 0 0 0 0 0 0 0 0 1 ? 0 1 0 0 0 0 0 x 0 0 1 ? 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? ? ? ? 0 0 ? 0 ? ? x ? 0 0 0 0 ? 0 ? 0 0 1 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 x 0 ? 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 x 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 x x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 x 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 x 1 x 0 0 0 ? 0 0 0 x 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 ? 0 0 ? x ? ? ? ? 0 x 0 x 0 ? 0 0 0 ? ? ? ? 0 ? ? ? 0 x 0 x ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 x 0 x 0 0 x 0 0 0 0 x 0 x 0 x 0 0 x 0 0 0 0 x 0 x 0 x 0 0 x 0 x 0 0 x 0 x 0 x 0 0 x 0 x 0 0 x ? 0 0 x 0 x x x 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 1 ? ? ? 0 ? ? ? 0 ? ? 0 0 0 ? 0 0 0 0 0 ? ? 0 ? ? ? ? ? ? ? ? ? ? ? ? 0 ? ? ? ? 0 0 ? 0 0 0 ? ? ? ? ? ? ? ? ? 0 0 0 0 0 0 ? ? ? ? ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAlertThreadByThreadId
  • ntdll.dll!NtAlpcConnectPort
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcCreateSecurityContext
  • ntdll.dll!NtAlpcDeleteSecurityContext
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtClearEvent
  • ntdll.dll!NtClose
Show More
  • ntdll.dll!NtConnectPort
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryLicenseValue
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseSemaphore
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtRequestWaitReplyPort
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationKey
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtWaitForAlertByThreadId
  • ntdll.dll!NtWaitForMultipleObjects
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWaitLowEventPair
  • ntdll.dll!NtWorkerFactoryWorkerReady
  • ntdll.dll!NtWriteFile
  • UNKNOWN

Related Posts

Trending

Most Viewed

Loading...