How to remove wtsapi32.dll

wtsapi32.dll

The module wtsapi32.dll has been detected as Ransom.Wacatac

wtsapi32.dll
Product Name:

Advanced PDF Password Recovery

Company Name:

ElcomSoft Co. Ltd.

MD5: 4d7762c73705f12459b6b70b9ac25893
Size: 257 KB
First Published: 2024-08-29 23:01:40 (11 months ago)
Latest Published: 2024-08-29 23:01:40 (11 months ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2024-08-29 23:01:40 (11 months ago)
%programfiles%
100.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00014000

PE Sections:

Name Size of data MD5
0 d41d8cd98f00b204e9800998ecf8427e
512 dea1986ed3510849115d8911ef9a4af4
512 0377d838b907799025b05a4401c7cc94
512 ccdf018fe218b502cc87fae3d090d1bd
.rsrc 1280 2aa194d6f6887e61ebe3ff7d682cb681
96376 62ac6423890e0f0f314b1a4cbfa86632

More information:

Download GridinSoft Anti-Malware - Removal tool for wtsapi32.dll