How to remove IMDCSC.exe
IMDCSC.exe
The module IMDCSC.exe has been detected as Backdoor.DarkKomet
File Details
| Product Name: | Remote Service Application |
| Company Name: | Microsoft Corp. |
| MD5: | 316e0729b96db6bba175bdf595e0d77d |
| Size: | 658 KB |
| First Published: | 2017-07-24 23:05:45 (7 years ago) |
| Latest Published: | 2017-07-24 23:05:46 (7 years ago) |
| Status: | Backdoor.DarkKomet (on last analysis) | |
| Analysis Date: | 2017-07-24 23:05:46 (7 years ago) |
Common Places:
| %sysdrive%\$recycle.bin\s-1-5-21-2516265359-861500591-3344223579-1000 |
| %mydoc%\dcscmin |
| %sysdrive%\$recycle.bin\s-1-5-21-2516265359-861500591-3344223579-1000\$r4x3veu.rar |
File Names:
| $R0FAHJ7.exe |
| IMDCSC.exe |
| Gta V.exe |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0008f888 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 580096 | 8067456c5dc713997e61924c501c8cb2 |
| .itext | 6656 | 3f63b5c2974302201afb8afa01b8ac10 |
| .data | 15872 | 81fa247370ecc3476b5c17086c0f2024 |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 16896 | cd30ca2b6ff5111155dec94ee29ec186 |
| .tls | 0 | 00000000000000000000000000000000 |
| .rdata | 512 | c1788dfeb92bbf0cff5aeaeaf1270ff8 |
| .reloc | 35840 | e55564594dad16a2ca19fb85903b9300 |
| .rsrc | 17408 | 7c2079566ccf736e3c39d82e7868ffdb |
More information:
Download GridinSoft
Anti-Malware - Removal tool for IMDCSC.exe
