How to remove SASrv.exe

SASrv.exe

The module SASrv.exe has been detected as Ransom.Wacatac

SASrv.exe
Product Name:

SmartAudio Service Application

Company Name:

Conexant Systems, Inc.

MD5: 21ef4c55d59d2c696f464a5ca64ae119
Size: 421 KB
First Published: 2024-09-24 23:02:06 (a year ago)
Latest Published: 2024-09-24 23:02:06 (a year ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2024-09-24 23:02:06 (a year ago)
%system%
%programfiles%\conexant\install\audio\saii
%system%\driverstore\filerepository\g14plmwa.inf_amd64_dcd02d240683c17f\saii.cab\saii
100.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00015555

PE Sections:

Name Size of data MD5
.text 137216 3c17b0723539f8713ec2783adf123181
.rdata 204288 1b53bba41e0c387287ec95192dfeef65
.data 4608 b80d33c7f982808cb064414b186e443e
.rsrc 50688 3187a83f26785afc32864c1f4130f866
.reloc 26624 fcadc8d5ed32cccae648874bd58e6894

More information:

Download GridinSoft Anti-Malware - Removal tool for SASrv.exe