WDFMGR.EXE – Unclassified Malware removal

WDFMGR.EXE size: 8704 bytes
WDFMGR.EXE hash: 2C1D59933077BA0D8A64CB1FB9EF8638

Created files:

C:\c419f45af00f31f1364ea7a428\audiodev.dll
C:\c419f45af00f31f1364ea7a428\blackbox.dll
C:\c419f45af00f31f1364ea7a428\cewmdm.dll
C:\c419f45af00f31f1364ea7a428\drmupgds.exe
C:\c419f45af00f31f1364ea7a428\drmv2clt.dll
C:\c419f45af00f31f1364ea7a428\laprxy.dll
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.401
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.404
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.405
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.406
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.407
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.408
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.409
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.40b
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.40c
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.40d
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.40e
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.410
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.411
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.412
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.413
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.414
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.415
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.416
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.419
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.41b
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.41d
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.41f
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.424
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.804
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.816
C:\c419f45af00f31f1364ea7a428\locbin\wpdshextres.dll.c0a
C:\c419f45af00f31f1364ea7a428\logagent.exe
C:\c419f45af00f31f1364ea7a428\mfplat.dll
C:\c419f45af00f31f1364ea7a428\mp43decd.dll
C:\c419f45af00f31f1364ea7a428\mp43dmod.dll
C:\c419f45af00f31f1364ea7a428\mp4sdecd.dll
C:\c419f45af00f31f1364ea7a428\mp4sdmod.dll
C:\c419f45af00f31f1364ea7a428\mpg4decd.dll
C:\c419f45af00f31f1364ea7a428\mpg4dmod.dll
C:\c419f45af00f31f1364ea7a428\msnetobj.dll
C:\c419f45af00f31f1364ea7a428\mspmsnsv.dll
C:\c419f45af00f31f1364ea7a428\mspmsp.dll
C:\c419f45af00f31f1364ea7a428\msscp.dll
C:\c419f45af00f31f1364ea7a428\mswmdm.dll
C:\c419f45af00f31f1364ea7a428\portabledeviceapi.dll
C:\c419f45af00f31f1364ea7a428\portabledeviceclassextension.dll
C:\c419f45af00f31f1364ea7a428\portabledevicetypes.dll
C:\c419f45af00f31f1364ea7a428\portabledevicewiacompat.dll
C:\c419f45af00f31f1364ea7a428\portabledevicewmdrm.dll
C:\c419f45af00f31f1364ea7a428\qasf.dll
C:\c419f45af00f31f1364ea7a428\spuninst.exe
C:\c419f45af00f31f1364ea7a428\spupdsvc.exe
C:\c419f45af00f31f1364ea7a428\update\update.exe
C:\c419f45af00f31f1364ea7a428\update\update.ver
C:\c419f45af00f31f1364ea7a428\update\updspapi.dll
C:\c419f45af00f31f1364ea7a428\update\wmfdist11.cdf
C:\c419f45af00f31f1364ea7a428\update\wpdinstallutil.dll
C:\c419f45af00f31f1364ea7a428\uwdf.exe
C:\c419f45af00f31f1364ea7a428\wdfapi.dll
C:\c419f45af00f31f1364ea7a428\wdfmgr.exe
C:\c419f45af00f31f1364ea7a428\wmadmod.dll
C:\c419f45af00f31f1364ea7a428\wmadmoe.dll
C:\c419f45af00f31f1364ea7a428\wmasf.dll
C:\c419f45af00f31f1364ea7a428\wmdmlog.dll
C:\c419f45af00f31f1364ea7a428\wmdmps.dll
C:\c419f45af00f31f1364ea7a428\wmdrmdev.dll
C:\c419f45af00f31f1364ea7a428\wmdrmnet.dll
C:\c419f45af00f31f1364ea7a428\wmdrmsdk.dll
C:\c419f45af00f31f1364ea7a428\wmidx.dll
C:\c419f45af00f31f1364ea7a428\wmnetmgr.dll
C:\c419f45af00f31f1364ea7a428\wmsdmod.dll
C:\c419f45af00f31f1364ea7a428\wmsdmoe2.dll
C:\c419f45af00f31f1364ea7a428\wmsetsdk.exe
C:\c419f45af00f31f1364ea7a428\wmspdmod.dll
C:\c419f45af00f31f1364ea7a428\wmspdmoe.dll
C:\c419f45af00f31f1364ea7a428\wmvadvd.dll
C:\c419f45af00f31f1364ea7a428\wmvadve.dll
C:\c419f45af00f31f1364ea7a428\wmvcore.dll
C:\c419f45af00f31f1364ea7a428\wmvdecod.dll
C:\c419f45af00f31f1364ea7a428\wmvdmod.dll
C:\c419f45af00f31f1364ea7a428\wmvdmoe2.dll
C:\c419f45af00f31f1364ea7a428\wmvencod.dll
C:\c419f45af00f31f1364ea7a428\wmvsdecd.dll
C:\c419f45af00f31f1364ea7a428\wmvsencd.dll
C:\c419f45af00f31f1364ea7a428\wmvxencd.dll
C:\c419f45af00f31f1364ea7a428\wpdconns.dll
C:\c419f45af00f31f1364ea7a428\wpdinstallutil.dll
C:\c419f45af00f31f1364ea7a428\wpdmtp.dll
C:\c419f45af00f31f1364ea7a428\wpdmtpdr.dll
C:\c419f45af00f31f1364ea7a428\wpdmtpus.dll
C:\c419f45af00f31f1364ea7a428\wpdshext.dll
C:\c419f45af00f31f1364ea7a428\wpdshextautoplay.exe
C:\c419f45af00f31f1364ea7a428\wpdshserviceobj.dll
C:\c419f45af00f31f1364ea7a428\wpdsp.dll
C:\c419f45af00f31f1364ea7a428\wpdusb.sys
C:\c419f45af00f31f1364ea7a428\wpd_ci.dll

Detected by UnHackMe:

WDFMGR.EXE
Default location: C:\C419F45AF00F31F1364EA7A428\WDFMGR.EXE

Dropper information:
MD5: 2165a80949566d02e6f8f1a100813014
File size: 9824584 bytes