home

msdcsc.exe

Remote Service Application

Microsoft Corp.

The executable msdcsc.exe has been detected as malware by 43 anti-virus scanners.
Publisher:
Microsoft Corp.

Product:
Remote Service Application

Version:
1, 0, 0, 1

MD5:
250f6d09a657fb4c9a3c8984be472e33

SHA-1:
55aa00ef4373af56da595b579ca9dc66f13f56ee

SHA-256:
fd035e315b7b268ecd1fec3f35f1e7bd35dbabd649c09cd320f207478f71f6a6

Scanner detections:
43 / 68

Status:
Malware

Analysis date:
4/26/2024 2:54:57 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Backdoor.Fynloski.C
680

Agnitum Outpost
Trojan.Comet.Gen.LO
7.1.1

AhnLab V3 Security
Trojan/Win32.DelfInject
2015.01.26

Avira AntiVirus
BDS/DarkKomet.GR
7.11.205.14

avast!
Win32:Agent-ASXK [Trj]
2014.9-150327

AVG
BackDoor.Generic16
2016.0.3158

Baidu Antivirus
Backdoor.Win32.DarkKomet
4.0.3.15327

Bitdefender
Backdoor.Fynloski.C
1.0.20.430

Bkav FE
W32.OnGamesLTKVPOK.Trojan
1.3.0.4959

Clam AntiVirus
WIN.Trojan.DarkKomet
0.98/21511

Comodo Security
Backdoor.Win32.Agent.XAB
20841

Dr.Web
BackDoor.Comet.2020
9.0.1.086

Emsisoft Anti-Malware
Backdoor.Fynloski
8.15.03.27.05

ESET NOD32
Win32/Fynloski.AA
9.11070

Fortinet FortiGate
W32/DarkKomet.ID!tr.bdr
3/27/2015

F-Prot
W32/Downloader.C.gen
v6.4.6.5.141

F-Secure
Backdoor.Fynloski.C
11.2015-27-03_6

G Data
Backdoor.Fynloski
15.3.24

herdProtect (fuzzy)
variant of how to hack facebook.exe
2015.7.2.0

IKARUS anti.virus
Backdoor.Win32.Zegost
t3scan.1.8.6.0

K7 AntiVirus
Backdoor
13.176.11451

Kaspersky
Backdoor.Win32.DarkKomet
14.0.0.2284

Malwarebytes
Backdoor.Agent.DCRSAGen
v2015.03.27.05

McAfee
Generic BackDoor.xa
5600.6814

Microsoft Security Essentials
Backdoor:Win32/Fynloski.A
1.11302

MicroWorld eScan
Backdoor.Fynloski.C
16.0.0.258

NANO AntiVirus
Trojan.Win32.DarkKomet.cssoim
0.28.0.58394

Norman
Downloader.HJVR
11.20150327

nProtect
Trojan/W32.Agent.673280.BU
14.03.15.01

Panda Antivirus
Trj/Packed.B
15.03.27.05

Qihoo 360 Security
Win32/Backdoor.f83
1.0.0.1015

Quick Heal
Backdoor.Fynloski.A9
3.15.12.00

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.1.11

Rising Antivirus
PE:Backdoor.Pontoeb!1.6637
23.00.65.15325

Sophos
Troj/Backdr-ID
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Fynloski
9973

Total Defense
Win32/Fynloski.A!generic
37.0.11403

Trend Micro House Call
BKDR_FYNLOS.SMM
7.2.86

Trend Micro
BKDR_FYNLOS.SMM
10.465.27

Vba32 AntiVirus
Backdoor.DarkKomet
3.12.26.3

VIPRE Antivirus
Backdoor.Win32.Fynloski.A
36970

ViRobot
Backdoor.Win32.Agent.674304.A[h]
2014.3.20.0

Zillya! Antivirus
Trojan.Fynloski.Win32.3190
2.0.0.2045

File size:
658.5 KB (674,304 bytes)

Product version:
4, 0, 0, 0

Copyright:
Copyright (C) 1999

Original file name:
MSRSAAP.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
6/7/2012 6:59:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:+9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hw:KZ1xuVVjfFoynPaVBUR8f+kN10EB+

Entry address:
0x8F888

Entry point:
55, 8B, EC, B9, 30, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, E0, E3, 48, 00, E8, 2F, 7E, F7, FF, 33, C0, 55, 68, 56, 06, 49, 00, 64, FF, 30, 64, 89, 20, 6A, 00, E8, 2A, 07, F8, FF, A1, B0, 48, 49, 00, C6, 00, 01, E8, 21, B7, FF, FF, B2, 01, A1, 80, DE, 48, 00, E8, 19, E6, FF, FF, A3, E8, C3, 49, 00, 33, D2, 55, 68, 09, FA, 48, 00, 64, FF, 32, 64, 89, 22, 8D, 4D, EC, BA, 70, 06, 49, 00, A1, E8, C3, 49, 00, E8, 68, E6, FF, FF, 8B, 55, EC, A1, 38, 4B, 49, 00, E8, 7F, 5C, F7, FF, 8D, 55, E0...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
573 KB (586,752 bytes)

Remove msdcsc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.