PUP.Gamehack.GLB

The detection of PUP.Gamehack.GLB on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It is essential to understand the nature of this threat and take immediate action to remove it and prevent further damage.

What Is PUP.Gamehack.GLB?

PUP.Gamehack.GLB is a type of potentially unwanted program that may have been installed on your system without your knowledge or consent. PUPs are software applications that may not be malicious in nature but can still cause problems with your computer's performance, stability, and security. They often bundled with other software or downloaded from the internet, and can be difficult to remove without proper guidance.

How PUP.Gamehack.GLB Operates

PUPs like PUP.Gamehack.GLB typically operate by installing themselves on your system and then proceeding to perform various unwanted actions. These actions can include displaying unwanted advertisements, collecting your personal data, and modifying your system settings. They may also install additional software or components that can further compromise your system's security and performance.

In some cases, PUPs may also attempt to manipulate your system's configuration to gain elevated privileges or to evade detection by security software. This can make it challenging to remove the PUP and restore your system to its normal state.

Symptoms of Infection

If your system is infected with PUP.Gamehack.GLB, you may experience a range of symptoms, including slow system performance, unwanted advertisements, and unexpected changes to your system settings. You may also notice that your browser is being redirected to unwanted websites or that your search results are being manipulated. Additionally, you may receive alerts or warnings from your security software indicating that a PUP has been detected.

  • Unwanted advertisements or pop-ups
  • Slow system performance or crashes
  • Unexpected changes to system settings
  • Browser redirects or manipulated search results
  • Alerts or warnings from security software

How to Remove PUP.Gamehack.GLB

  1. Boot your system in Safe Mode with Networking to prevent the PUP from loading and to allow for easier removal.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all components of the PUP.
  3. Uninstall any suspicious programs or applications that may be related to the PUP.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any unwanted extensions or add-ons.
  5. Reboot your system and perform a follow-up scan to ensure that all components of the PUP have been removed.

Conclusion

Removing PUP.Gamehack.GLB from your system requires careful attention to detail and a thorough understanding of the removal process. By following the steps outlined above, you can help to ensure that your system is restored to its normal state and that the PUP is completely removed. It is also essential to take proactive steps to prevent future infections, including keeping your operating system and security software up to date, avoiding suspicious downloads, and being cautious when installing new software.

Analysis Report

General information

Family Name: PUP.Gamehack.GLB
Signature status: No Signature

Known Samples

MD5: a476040d2dec43a2095ccd17dcfd3f8f
SHA1: 411694f470b1a1945a912eb9dca7786f940ff31a
SHA256: 6F53216B77127802520A96C7813CAA1561BDF6310EE12E2282B0D4089CF7A766
File Size: 2.45 MB, 2447360 bytes
MD5: 579150959d85f69faa921bb5c784e87f
SHA1: adac66fdc70430a5d90d45e2573f4887a051676f
SHA256: D34C56F63B363514D8E6A9E86D8343684398EA783CC4CA54CDD6AFA9B8423D71
File Size: 2.44 MB, 2441216 bytes
MD5: 779662aaa21c8ab9ba620070f7299cfc
SHA1: f19b869912503af2dd7b9301fcba400c4ac5647e
SHA256: 9611FCC75E057C6C0FA2CABD4B010323F17B89932C82F9A40DE83F5F0406670E
File Size: 1.85 MB, 1849344 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File doesn't have security information
  • File has TLS information
  • File is 64-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
Show More
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

File Traits

  • 2+ executable sections
  • GetConsoleWindow
  • imgui
  • JMC
  • No Version Info
  • x64

Block Information

Total Blocks: 3,071
Potentially Malicious Blocks: 296
Whitelisted Blocks: 2,523
Unknown Blocks: 252

Visual Map

0 0 0 0 x ? 0 0 0 0 0 x 0 ? 0 0 ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 ? 0 ? ? x ? 0 0 0 x 0 0 x 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 x 0 0 0 0 0 0 0 0 0 0 x ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x ? x x ? ? 0 x ? ? 0 0 0 ? 0 ? ? ? ? 0 0 0 0 0 0 0 x ? 0 0 0 0 0 0 0 x 0 0 x 0 x 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 x x ? 0 0 0 0 0 0 0 0 0 0 x ? 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 ? 0 ? ? 0 ? x 0 x x x 0 ? 0 0 ? ? x ? x x x x 0 0 x ? ? x x ? ? x ? x 0 ? x 0 x ? ? ? ? ? ? ? ? ? ? ? x ? ? x ? ? x ? ? x x 0 x ? x x 0 x ? x ? x x ? ? ? x ? x x x ? ? ? ? x ? ? ? ? ? ? ? x x ? ? x ? ? ? ? ? 0 ? 0 0 0 x 0 0 0 ? ? ? 0 0 x 0 ? 0 0 ? 0 0 0 0 ? ? ? ? 0 ? 0 ? ? 0 0 ? ? 0 0 ? 0 0 ? 0 ? ? 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x ? 0 0 0 ? x x 0 0 0 0 x 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 ? x 0 x 0 0 0 x x x 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 x 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 ? ? 0 0 0 0 0 0 0 x 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 x x 0 ? 0 ? ? x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 x ? 0 0 0 0 ? x ? 0 0 0 ? ? 0 ? ? ? ? 0 0 ? 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x x x x 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 ? 0 0 0 0 0 x ? 0 x 0 ? ? 0 ? 0 0 0 0 0 x ? ? ? 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 x 0 0 x 0 x 0 0 0 x 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 x 0 0 0 0 0 0 0 x ? ? x ? 0 x x 0 0 0 0 0 0 x 0 0 0 0 ? ? 0 0 0 0 ? x ? ? ? ? ? 0 ? ? ? x ? ? x 0 x 0 ? 0 0 x 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x x x 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 ? x 0 ? x 0 0 0 0 ? ? 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 x 0 ? 0 0 ? 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 ? 0 0 0 0 x 0 0 x ? 0 0 0 0 0 0 0 ? 0 x x 0 ? ? ? ? 0 0 x ? 0 0 0 x ? 0 0 x x 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 ? x ? x x x 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 x 0 0 0 0 0 0 ? 0 0 0 x x 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 ? x 0 0 0 0 0 0 0 0 0 x 0 0 0 x 0 0 0 0 0 0 0 0 0 0 x ? 0 0 ? x 0 x 0 ? 0 0 0 0 0 0 0 0 0 x 0 0 0 0 ? 0 0 x 0 0 0 0 0 x 0 x x 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 ? ? ? 0 0 0 0 0 0 0 0 ? ? 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 x ? ? x x x x ? ? 0 ? 0 x 0 x 0 ? ? x 0 x x 0 ? 0 0 0 x 0 x 0 x x x ? 0 x x x x x x x ? x x 0 x x x x x x x x ? x x 0 ? x 0 0 0 0 ? x x 0 0 0 x 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 ? 0 0 0 x 0 0 0 x 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 x x x x 0 x x x x 0 0 0 x x 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? x x ? 0 0 0 x x 0 0 x x x 0 x 0 0 x 0 0 0 x x x x 0 0 0 0 0 0 0 0 0 0 0 x x 0 x 0 ? x x 0 x 0 0 0 0 0 0
... Data truncated
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Similar Families

  • Agent.KFF
  • Clipbanker.DO
  • DllInject.LF
  • Downloader.Agent.LH
  • Gamehack.GLB
Show More
  • Gamehack.SBG
  • MSIL.CsgoHack.PA
  • Trojan.ShellcodeRunner.Gen.AN

Related Posts

Trending

Most Viewed

Loading...