RansomWhere icon indicating copy to clipboard operation
RansomWhere copied to clipboard

Published 20 hours ago • verified publisher icon objective-see

Still Useful?

Open chrisspiegl opened this issue 3 years ago • 4 comments

Hello, I am wondering if everything is still good with this program and if it is still useful and working as expected on newest versions (macOS Big Sur). I am on Intel but may be also interesting to know if it works on M1 mac machines?

I have it installed and it is running, but I do not have the technical knowledge to verify if it actually is doing as it is expected.

Thank you for developing these tools like LuLu and more 🌸.

chrisspiegl avatar Apr 10 '21 05:04 chrisspiegl

Hey @chrisspiegl 👋🏻 I can confirm that on M1 machine it works well via Rosetta 2. I would love native support for arm. But that is another issue.

axeII avatar Jun 13 '21 09:06 axeII

It's occasionally pretty resource-intensive (still on Intel), so an update would be most welcome.

JayBrown avatar Feb 20 '22 20:02 JayBrown

I think it uses a lot of CPU over time. I really wish it would be released for ARM.

huyz avatar Mar 31 '23 04:03 huyz

It's still useful… @objective-see wrote in April 2023:

And though "RansomWhere?" is a bit dated, it appears to be able to generically detect this LockBit sample… even though it had no a priori knowledge of this malware

https://objective-see.org/blog/blog_0x75.html

JayBrown avatar Aug 11 '23 08:08 JayBrown