Windows 10: MSASCuiL.exe hidden, not verified and without a timestamp?

After there was suspected RAT on my pc, I loaded up Autoruns and noticed something that wasn’t there the last time I used it.. I know that MSASCuiL.exe is a component of Windows Defender, but I don’t ever recall it being a yellow entry in Autoruns. It says File not found: “C:\Program Files\Windows Defender\MSASCuiL.exe”

Any help?

submitted by /u/th3n3wm3m3
[link] [comments]

:)

 

what is MSASCuil

Hi HARILAXMI

where are you seeing MSASCuil?

which version of windows 10 are you running?

settings -> system -> about

what is listed under windows specifications?

msascuil (Microsoft Antivirus Security Centre User Interface Logo) was responsible for the icon appearing on the taskbar system tray, but apparently was later incorporated into the windows security health service and SecurityHealthSystray.exe.

 

what is MSASCuil

what is MSASCuil ,what happens if it is disabled

 

When does the Operating system verify the Authenticode Signatures for signed EXEs and signed DLLs?

When PE Files (exes, dlls etc.) are code signed using signtool, they can be verified to check if they have been authored by trusted publishers. In which scenarios does the Operating system actually verify signed EXEs and DLLs?

1. Are signatures of EXEs verified every time they are run?
2. If an EXE has a dynamically linked DLL, is the DLL's signature verified when the EXE is run?
   
3. If the EXE dynamically loads a DLL using LoadLibrary, is the DLL's signature verified when the EXE is run?
4. When an EXE requires elevated privilege (UAC), is the signature of the EXE and the DLL dependencies verified as well? (1-3)

If this questions belongs in a different category or community, please let me know. Thanks.