PUP.MSIL.Gamehack.BOD
The detection of PUP.MSIL.Gamehack.BOD on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It's essential to understand what this detection means and how to properly remove it to prevent any potential harm.
Table of Contents
What Is PUP.MSIL.Gamehack.BOD?
PUP.MSIL.Gamehack.BOD is a type of potentially unwanted program that may have been installed on your system without your knowledge or consent. The name suggests that it may be related to gaming, but its actual purpose and behavior can vary. PUPs are often bundled with other software or downloaded from untrusted sources, and they can cause a range of problems, including slowing down your computer, displaying unwanted ads, and potentially stealing personal data.
How PUP.MSIL.Gamehack.BOD Operates
PUPs like PUP.MSIL.Gamehack.BOD can operate in various ways, but they often use similar tactics to evade detection and persist on a system. They may use stealthy installation methods, such as bundling with other software or exploiting vulnerabilities in operating systems or applications. Once installed, they can collect user data, display unwanted ads, or even install additional malware. In some cases, PUPs can also interfere with system settings, causing performance issues or crashes.
Symptoms of Infection
If your system is infected with PUP.MSIL.Gamehack.BOD, you may notice various symptoms, including slow system performance, unwanted ads or pop-ups, and changes to your browser settings or homepage. You may also experience crashes or freezes, especially when running resource-intensive programs. In some cases, you may notice suspicious programs or processes running in the background, consuming system resources.
- Unwanted ads or pop-ups
- Changes to browser settings or homepage
- Slow system performance
- Crashes or freezes
- Suspicious programs or processes running in the background
How to Remove PUP.MSIL.Gamehack.BOD
- Boot your system in Safe Mode with Networking to prevent the PUP from loading and to allow for a clean removal process.
- Run a full scan with a reputable anti-malware tool, such as SpyHunter, to detect and remove PUP.MSIL.Gamehack.BOD and any related malware.
- Uninstall any suspicious programs or applications that may be related to the PUP.
- Reset your browser settings to their default values, including Chrome, Firefox, and Edge, to remove any changes made by the PUP.
- Reboot your system and run another scan to ensure that the PUP has been completely removed.
Conclusion
Removing PUP.MSIL.Gamehack.BOD from your system is crucial to prevent any potential harm and restore your computer's performance and security. By following the steps outlined above, you can effectively remove the PUP and prevent future infections. It's essential to remain vigilant and take proactive measures to protect your system, including keeping your operating system and software up to date, using reputable anti-malware tools, and being cautious when downloading software or clicking on links from untrusted sources.
Analysis Report
General information
| Family Name: | PUP.MSIL.Gamehack.BOD |
|---|---|
| Signature status: | No Signature |
Known Samples
Known Samples
This section lists other file samples believed to be associated with this family.|
MD5:
5f9f782f273c355ab40cabf29268a2f3
SHA1:
c573f1326ddb33885b334b63512eef512c63fc0d
SHA256:
764534F1EC005FDE0337096602E9820EA505BCA6AA8D9B9F2EDFEFC0E62C8F71
File Size:
968.19 KB, 968192 bytes
|
|
MD5:
8e571f47f390a946eb7dc0c967ce5ccb
SHA1:
6735861de0d02ca06ec975b35afba25da41cfbab
SHA256:
9B24583A4EDA6FC748B994FF161AEA9DAC7377BEE5E060C25F61E952B5D0CC13
File Size:
2.41 MB, 2409984 bytes
|
|
MD5:
9b5e9fca608a5dabdc93e0645af713c6
SHA1:
e5d0290f04d6e1bd5768934c3b1bad6c1aab73db
SHA256:
04DFD13A3F87A379345AA290CCA36950BBF04E8BECC69B242FB2DFDDEC3D9D70
File Size:
6.63 MB, 6633472 bytes
|
|
MD5:
8500b552d282e2cdf06f0eadc8cad77d
SHA1:
fc2386d896d90f0b6c96b4e100b0f96f2a789c25
SHA256:
3A3AD28EC7EC28F3347E0B7ED385E6BFAF770763CBC4138619D54217366CB13D
File Size:
1.12 MB, 1122304 bytes
|
|
MD5:
4460d97169c4960821f34257506df747
SHA1:
08c509cddd0b82f09f7c44f0fb82d3d50395c961
SHA256:
467932DED84E82130622D59FCE22DB2D9B8D5F991F6280FDFA831E0A0C63E88B
File Size:
56.32 KB, 56320 bytes
|
Windows Portable Executable Attributes
- File doesn't have "Rich" header
- File doesn't have debug information
- File doesn't have exports table
- File doesn't have relocations information
- File doesn't have security information
- File is .NET application
- File is 32-bit executable
- File is 64-bit executable
- File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
- File is either console or GUI application
Show More
- File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
- File is not packed
- IMAGE_FILE_DLL is not set inside PE header (Executable)
- IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)
File Icons
File Icons
This section displays icon resources found within family samples. Malware often replicates icons commonly associated with legitimate software to mislead users into believing the malware is safe.
Windows PE Version Information
Windows PE Version Information
This section displays values and attributes that have been set in the Windows file version information data structure for samples within this family. To mislead users, malware actors often add fake version information mimicking legitimate software.| Name | Value |
|---|---|
| Assembly Version |
|
| Comments |
|
| Company Name |
|
| File Description |
|
| File Version |
|
| Internal Name |
|
| Legal Copyright |
|
| Legal Trademarks |
|
| Original Filename |
|
| Product Name |
|
| Product Version |
|
File Traits
- .NET
- dll
- HighEntropy
- NewLateBinding
- Pastebin
- WriteProcessMemory
- x64
- x86
Block Information
Block Information
During analysis, EnigmaSoft breaks file samples into logical blocks for classification and comparison with other samples. Blocks can be used to generate malware detection rules and to group file samples into families based on shared source code, functionality and other distinguishing attributes and characteristics. This section lists a summary of this block data, as well as its classification by EnigmaSoft. A visual representation of the block data is also displayed, where available.| Total Blocks: | 305 |
|---|---|
| Potentially Malicious Blocks: | 101 |
| Whitelisted Blocks: | 204 |
| Unknown Blocks: | 0 |
Visual Map
0
0
0
0
x
0
0
0
0
0
0
0
0
0
x
x
0
0
0
0
0
0
x
x
0
0
0
0
0
0
0
x
x
x
0
0
0
0
0
0
0
0
0
0
0
0
0
0
x
x
x
0
0
0
0
0
0
0
0
0
0
0
x
x
x
0
0
0
0
0
0
0
0
0
x
x
0
0
0
0
0
0
x
0
0
0
0
x
0
x
x
x
x
0
0
x
x
x
0
x
0
0
0
x
0
0
x
0
x
x
x
x
x
x
x
x
0
0
0
0
0
x
0
0
x
x
0
0
0
0
0
x
0
0
x
x
0
0
0
0
0
0
0
0
x
x
0
0
0
x
x
x
0
x
0
x
0
0
0
0
0
0
0
x
x
x
0
0
0
0
0
x
x
x
x
0
0
0
0
x
0
0
0
0
x
x
x
0
0
0
x
x
x
0
0
0
0
0
0
0
0
0
0
0
0
0
0
x
x
0
0
x
0
0
0
x
x
0
x
x
x
0
0
0
0
0
0
0
0
0
x
x
x
x
x
x
0
0
0
0
0
0
0
x
0
x
0
x
0
x
0
x
x
x
x
x
x
0
0
0
0
0
x
x
0
x
0
x
x
0
x
x
x
x
0
0
0
0
0
x
0
0
0
0
0
0
x
x
x
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
x
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block
? - Unknown Block
x - Potentially Malicious Block
Similar Families
Similar Families
This section lists other families that share similarities with this family, based on EnigmaSoft’s analysis. Many malware families are created from the same malware toolkits and use the same packing and encryption techniques but uniquely extend functionality. Similar families may also share source code, attributes, icons, subcomponents, compromised and/or invalid digital signatures, and network characteristics. Researchers leverage these similarities to rapidly and effectively triage file samples and extend malware detection rules.- MSIL.Gamehack.BOD
Files Modified
Files Modified
This section lists files that were created, modified, moved and/or deleted by samples in this family. File system activity can provide valuable insight into how malware functions on the operating system.| File | Attributes |
|---|---|
| c:\users\user\vs_executions\c573f1326ddb33885b334b63512eef512c63fc0d_0000968192.html | Generic Write,Read Attributes |
Windows API Usage
Windows API Usage
This section lists Windows API calls that are used by the samples in this family. Windows API usage analysis is a valuable tool that can help identify malicious activity, such as keylogging, security privilege escalation, data encryption, data exfiltration, interference with antivirus software, and network request manipulation.| Category | API |
|---|---|
| User Data Access |
|
| Other Suspicious |
|
| Anti Debug |
|
| Encryption Used |
|
| Syscall Use |
Show More
|
