MoUsoCoreWorker.exe

Question

I found this suspicious program on my computer"MoUsoCoreWorker.exe"

His file path is"C:\Windows\UUS\amd64\MoUsoCoreWorker.exe"

and was given"TrustedInstaller"

I use Avast and Microsoft Defender to detect a virus,
but Trojan:Script/Wacatac.B!ml is detected in Microsoft Security Intelligence's online file.

Sorry for my bad English, I used google translate to write this report

This file is not digitally signed by Microsoft

Answer 1

Hi ARMY4,

I am Dave, I will help you with this.

Rest assured, MoUsoCoreWorker.exe is a legitimate process, it is part of the Windows Update process, you do not need to worry about that file, it is not malware.

Answer 2

I just checked some sources and they also have this file "C:\Windows\UUS\amd64\MoUsoCoreWorker.exe" However, they say their "MoUsoCoreWorker.exe" is digitally signed by Microsoft

Answer 3

https://www.microsoft.com/en-us/wdsi/submission/77f56fa2-2a30-4427-aeec-fe1098cfeb84

Answer 4

Hi ARMY4,

Can you please provide a link to that Microsoft Security Intelligence online detection you are referring to.

Answer 5

Hi ARMY4,

My version of that file is also digitally signed, by many people report that there are a lot of Microsoft processes are missing the Microsoft signature, it seems to be a vug rather than malware.

If you scan wat file with Avast and Defender, it is not being flagged, is that correct?