PUP.Steganos Privacy Suite
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Popularity Rank: | 3,787 |
| Threat Level: | 10 % (Normal) |
| Infected Computers: | 3,403 |
| First Seen: | March 27, 2019 |
| Last Seen: | October 1, 2026 |
| OS(es) Affected: | Windows |
The detection of PUP.Steganos Privacy Suite on your system indicates the presence of a potentially unwanted program (PUP) that may compromise your privacy and security. It is essential to understand the nature of this threat and take immediate action to remove it from your computer to prevent any potential harm.
Table of Contents
What Is PUP.Steganos Privacy Suite?
PUP.Steganos Privacy Suite is a type of potentially unwanted program that may have been installed on your system without your knowledge or consent. It is often bundled with other software or downloaded from the internet, and its primary purpose is to collect and transmit user data to third-party servers. This data can include browsing history, search queries, and other sensitive information.
How PUP.Steganos Privacy Suite Operates
PUP.Steganos Privacy Suite operates by installing itself on your system and integrating with your web browser and other applications. It can collect user data by monitoring your browsing activity, tracking your search queries, and gathering information about your system configuration. This data is then transmitted to remote servers, where it can be used for various purposes, including targeted advertising and data mining.
In some cases, PUP.Steganos Privacy Suite may also display unwanted advertisements, such as pop-ups, banners, and sponsored search results. These ads can be intrusive and may compromise your browsing experience. Additionally, PUP.Steganos Privacy Suite may also slow down your system and consume system resources, leading to performance issues and crashes.
Symptoms of Infection
The symptoms of PUP.Steganos Privacy Suite infection can vary, but common indicators include unwanted advertisements, slow system performance, and suspicious browser behavior. You may also notice that your browser homepage or search engine has been changed without your consent. In some cases, you may receive alerts or warnings from your antivirus software or other security tools.
- Unwanted advertisements, such as pop-ups and banners
- Slow system performance and crashes
- Suspicious browser behavior, such as changed homepage or search engine
- Alerts or warnings from antivirus software or other security tools
How to Remove PUP.Steganos Privacy Suite
- Boot your system in Safe Mode with Networking to prevent PUP.Steganos Privacy Suite from loading
- Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all instances of PUP.Steganos Privacy Suite
- Uninstall any suspicious programs or applications that may be related to PUP.Steganos Privacy Suite
- Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any unwanted extensions or add-ons
- Reboot your system and perform a follow-up scan to ensure that PUP.Steganos Privacy Suite has been completely removed
Conclusion
In conclusion, PUP.Steganos Privacy Suite is a potentially unwanted program that can compromise your privacy and security. It is essential to remove this threat from your system as soon as possible to prevent any potential harm. By following the removal steps outlined above, you can ensure that your system is clean and secure. Remember to always be cautious when downloading software or clicking on links from unknown sources, and keep your antivirus software and other security tools up to date to protect against future threats.
SpyHunter Detects & Remove PUP.Steganos Privacy Suite
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | sss20intdle.exe | 06caa863d4760a10c44a7f9dc3e3f5e7 | 414 |
| 2. | 20.0.7_sss20intdl.exe | d0f8a58b72e02f8503a0ee712a0ed193 | 141 |
| 3. | sss20int.exe | a28d85ad75620254b0035eabb6a44810 | 131 |
| 4. | sss19int.exe | a96f572de907e86bdc1e7ed1b98c8173 | 66 |
| 5. | Suite.exe | 633f82e21d0e555e59b70047534870de | 46 |
Analysis Report
General information
| Family Name: | PUP.Steganos Privacy Suite |
|---|---|
| Signature status: | No Signature |
Known Samples
Known Samples
This section lists other file samples believed to be associated with this family.|
MD5:
57cdf8d548537c30576b5714e3b2eec5
SHA1:
e7466a9934b393860ccaf04c3861350b4d2dafe0
SHA256:
87B7719686E029A28ECBFC7017A070FBBE2BC83E79235B46164412483E58F597
File Size:
462.51 KB, 462506 bytes
|
|
MD5:
4347dd8982ebc39d6ab490a1d4594347
SHA1:
50494771a7372ef4c164e9e00c903b8b0e14af4b
SHA256:
CAAABEC471E2C7A9D68D9AE34CB50E72D11F074443585096D2977FC8892A3E58
File Size:
2.66 MB, 2658081 bytes
|
Windows Portable Executable Attributes
- File doesn't have "Rich" header
- File doesn't have debug information
- File doesn't have exports table
- File doesn't have relocations information
- File doesn't have security information
- File is 32-bit executable
- File is either console or GUI application
- File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
- File is Native application (NOT .NET application)
- File is not packed
Show More
- IMAGE_FILE_DLL is not set inside PE header (Executable)
- IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)
File Icons
File Icons
This section displays icon resources found within family samples. Malware often replicates icons commonly associated with legitimate software to mislead users into believing the malware is safe.
Windows PE Version Information
Windows PE Version Information
This section displays values and attributes that have been set in the Windows file version information data structure for samples within this family. To mislead users, malware actors often add fake version information mimicking legitimate software.| Name | Value |
|---|---|
| Comments | Steganos Installation Assistant. |
| Company Name | Steganos Software GmbH |
| File Description | Steganos Product Downloader 1 |
| File Version | 1.3.0 Rev 12419 |
| Internal Name | setupwrapper.exe |
| Legal Copyright | Copyright (c) 2018 Steganos Software GmbH |
| Original Filename | setupwrapper.exe |
| Product Name | Steganos Product Downloader 1 |
| Product Version | 1.3.0 Rev 12419 |
Files Modified
Files Modified
This section lists files that were created, modified, moved and/or deleted by samples in this family. File system activity can provide valuable insight into how malware functions on the operating system.| File | Attributes |
|---|---|
| c:\users\user\appdata\local\temp\tmp5.tmp\setup.exe | Generic Write,Read Attributes |
Registry Modifications
Registry Modifications
This section lists registry keys and values that were created, modified and/or deleted by samples in this family. Windows Registry activity can provide valuable insight into malware functionality. Additionally, malware often creates registry values to allow itself to automatically start and indefinitely persist after an initial infection has compromised the system.| Key::Value | Data | API Name |
|---|---|---|
| HKCU\software\steganos\products\spd1:: | (NULL) | RegNtPreCreateKey |
| HKLM\software\wow6432node\steganos\products\spd1:: | (NULL) | RegNtPreCreateKey |
| HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::proxybypass | RegNtPreCreateKey | |
| HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::intranetname | RegNtPreCreateKey | |
| HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::uncasintranet | RegNtPreCreateKey | |
| HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::autodetect | RegNtPreCreateKey | |
| HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 | 鴼 ȁ ਪˣ 鈯ˣ 遙̃ 豤̃ 偫~ অˣ 炑̃ 龡^ 濖̃ 賬̃ 獖} 偫~ 엦1 ˣ 邯̃ 뫯ʃe ꙥᐊ 엦1 ¶f ꙥi ꙥp ꙥr # ֢s | RegNtPreCreateKey |
Windows API Usage
Windows API Usage
This section lists Windows API calls that are used by the samples in this family. Windows API usage analysis is a valuable tool that can help identify malicious activity, such as keylogging, security privilege escalation, data encryption, data exfiltration, interference with antivirus software, and network request manipulation.| Category | API |
|---|---|
| Process Shell Execute |
|
Shell Command Execution
Shell Command Execution
This section lists Windows shell commands that are run by the samples in this family. Windows Shell commands are often leveraged by malware for nefarious purposes and can be used to elevate security privileges, download and launch other malware, exploit vulnerabilities, collect and exfiltrate data, and hide malicious activity.
open C:\Users\Teuwcwvn\AppData\Local\Temp\TMP5.tmp\setup.exe
|
