TRANSCRIBE.EXE – Unclassified Malware removal

TRANSCRIBE.EXE size: 180224 bytes
TRANSCRIBE.EXE hash: BD966C35CEA819D38442DD00B2B5AB0A

Created files:

%WinDir%\kuhar.exe
%TEMP%\kuhar\kuhar.exe
%TEMP%\kuhar\runk.exe
%TEMP%\kuhar\transcribe.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\kuhar: %WinDir%\kuhar.exe

Detected by UnHackMe:

TRANSCRIBE.EXE
Default location: %TEMP%\KUHAR\TRANSCRIBE.EXE

Dropper information:
MD5: faf5820696d8147fde5af55ccf1217c6
File size: 912494 bytes