How to remove RecorderHD64.dll
- File Details
- Overview
- Analysis
RecorderHD64.dll
The module RecorderHD64.dll has been detected as Ransom.Wacatac
File Details
MD5: |
0fd10af1971a2ad2196ffcd240cf4c12 |
Size: |
7 MB |
First Published: |
2020-02-18 00:31:22 (4 years ago) |
Latest Published: |
2021-01-12 21:48:57 (3 years ago) |
Status: |
Ransom.Wacatac (on last analysis) |
|
Analysis Date: |
2021-01-12 21:48:57 (3 years ago) |
%programfiles% |
%sysdrive%\programy |
%programfiles%\burning |
%programfiles% |
%desktop% |
%sysdrive%\$recycle.bin |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
|
34.4% |
|
|
15.6% |
|
|
12.5% |
|
|
9.4% |
|
|
6.3% |
|
|
3.1% |
|
|
3.1% |
|
|
3.1% |
|
|
3.1% |
|
|
3.1% |
|
|
3.1% |
|
|
3.1% |
|
Windows 10 |
90.6% |
|
Windows 7 |
6.3% |
|
Windows 8.1 |
3.1% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000180000000 |
Entry Address: |
0x00648ea2 |
Name |
Size of data |
MD5 |
.text |
1719808 |
f048fcfd2683f2494ef4c062d03e367e |
.rdata |
937472 |
17a939e703ddefdd40e90825648d0f8c |
.data |
66048 |
b14792bb123631e65e35d6b36dcec71d |
.pdata |
91136 |
e6ff9ad15eed718b1c6ff89b2ee90374 |
.detourc |
8704 |
2d724343ef49c9a4e9e308df4ec4919e |
.detourd |
512 |
083338860205efcc4d20e102cfe79c12 |
__CV0 |
3123200 |
07c597b53f553590ea29d824f4b80bcd |
__CV1 |
2178048 |
9a18a435a522f60f0348fc7ece6bdfeb |
.reloc |
25600 |
3e4b8ff64393f67aeb00cb68eaf6f4ce |
.rsrc |
512 |
244426d0d287954055f91757848a3301 |