About “PUP.Optional.ProudBrowser” infection

The PUP.Optional.ProudBrowser is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.ProudBrowser virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing

How to determine PUP.Optional.ProudBrowser?


File Info:
name: 0FDCEC6DA95361A33736.mlw
path: /opt/CAPEv2/storage/binaries/47d730871e8090df4c462cfeb11412183b763bf9cf8d7ec77f901fe6e7804528
crc32: 51A0BCBB
md5: 0fdcec6da95361a33736119ee49e4823
sha1: bd69bf72c9ebcb06e617ebc417996e62509afbb1
sha256: 47d730871e8090df4c462cfeb11412183b763bf9cf8d7ec77f901fe6e7804528
sha512: d648763989455ce37548b9b45aa3423380c96971fc7f7a41502e3b3d3e044fa21807453778d640e66adbbc043f8247e2b28926b27e898fc3b28b19fd8b9c36e2
ssdeep: 6144:vv1YU+VxKX7yG6r7AOTNfAea/6HLnVx0AOiHTUQDu7rjqAE:vv1YQ7yG6rkGGA4QDEr2z
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D8847C00B6D1A431F4FB19394EB9495A9D6CBD500BA89CEBA3C8091F4F74AD17A30E77
sha3_384: ffe1435b3506de8da2ab234cab42fe9400bc091992727b0bae9289a279012febc1ef363cd44463530fb2b8aea0394119
ep_bytes: 558bec837d0c017505e803050000ff75
timestamp: 2021-08-09 15:07:15

Version Info:
CompanyName: Ramadutha Software Services
FileDescription: Proud Browser Plugin
FileVersion: 1.0.1.0
InternalName: Proud Browser Plugin
LegalCopyright: Ramadutha Software Services © 2021
OriginalFilename: ProudBrowserPlugin.dll
ProductName: Proud Browser
ProductVersion: 1.0.1.0
Translation: 0x0409 0x04b0

PUP.Optional.ProudBrowser also known as:

Bkav	W32.Common.D63A88D7
Skyhigh	GenericRXQB-KP!0FDCEC6DA953
McAfee	GenericRXQB-KP!0FDCEC6DA953
Malwarebytes	PUP.Optional.ProudBrowser
CrowdStrike	win/grayware_confidence_90% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Avast	Win32:DangerousSig [Trj]
SentinelOne	Static AI – Suspicious PE
Google	Detected
AhnLab-V3	Trojan/Win.KP.R474233
Ikarus	PUA.ProudBrows
Fortinet	W32/PossibleThreat
AVG	Win32:DangerousSig [Trj]
DeepInstinct	MALICIOUS

How to remove PUP.Optional.ProudBrowser?

PUP.Optional.ProudBrowser removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X