home

UnicoWS.dll

Microsoft Windows 95, Windows 98, and Windows Millennium Operating Systems

Microsoft Corporation

This is installed with multiple programs including Rise of Nations and Microsoft Rise Of Nations. The file has been seen being downloaded from mlfdll.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft (R) Windows (R) 95, Windows (R) 98, and Windows (R) Millennium Operating Systems

Description:
Microsoft Layer for Unicode on Win9x Systems (MSLU)

Version:
1.0.3703.0

MD5:
006401678cfbccbcb97e405e2f83d2fa

SHA-1:
0976db1b5b9aa69e77fa25c35c8189e3ef851ffc

SHA-256:
a491c11f667fda3fb3311f6221bca15e4da159df4c12f7a7a0cfbf99f2b7c60b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/5/2024 12:43:34 PM UTC  (today)

File size:
240.6 KB (246,424 bytes)

Product version:
1.0.3703.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
UnicoWS.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\windows\temp\powerplugs3denhancedpresentation\getting started with powerplugs transitions\unicows.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
5/25/2002 1:55:48 AM

Valid to:
11/25/2003 2:05:48 AM

Subject:
CN=Microsoft Corporation, OU=Copyright (c) 2002 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61071143000000000034

File PE Metadata
Compilation timestamp:
10/30/2002 2:36:00 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
7.10

CTPH (ssdeep):
6144:3+zSDvZB9bZQ+tbAOgQm3uldxnE5x/htk+gq:jD4OgQm+plq

Entry address:
0xE088

Entry point:
55, 8B, EC, 8B, 45, 0C, 56, 57, 33, FF, 2B, C7, 0F, 84, 9C, 00, 00, 00, 48, 74, 1E, 48, 48, 0F, 85, E4, 00, 00, 00, 39, 3D, C4, 8A, 30, 7F, 0F, 85, D8, 00, 00, 00, E8, BB, C6, FF, FF, E9, CE, 00, 00, 00, E8, 0E, 5F, FF, FF, 3D, 00, 00, 00, 80, A3, 8C, 80, 30, 7F, 1B, C0, F7, D8, A3, C4, 8A, 30, 7F, 0F, 85, B0, 00, 00, 00, FF, 15, 38, 16, 2D, 7F, 83, F8, FF, A3, E0, 8A, 30, 7F, 75, 11, 68, A4, 00, 00, 00, FF, 15, B4, 16, 2D, 7F, 89, 3D, E0, 8A, 30, 7F, 8B, 35, C4, 15, 2D, 7F, 68, 20, 8B, 30, 7F, FF, D6, 68...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
217 KB (222,208 bytes)

The file UnicoWS.dll has been discovered within the following programs.

Microsoft Rise Of Nations  by Microsoft Corporation
1% remove it
Rise of Nations  by Microsoft Corporation
Publisher's description - “Rise of Nations is a historical real time strategy game from Big Huge Games’ Brian Reynolds, designer of PC game classics such as Civilization 2 and Alpha Centauri. Dominate 6,000 years of history from the Ancient Age to the Information Age.”
www.microsoft.com/games/thronesandpatriots
1% remove it
 
Powered by Should I Remove It?

The file UnicoWS.dll has been seen being distributed by the following 3 URLs.

https://mlfdll.com/.../UNICOWS.DLL

https://doc-10-28-docs.googleusercontent.com/docs/securesc/049d3pn6sdv2v13aslsbrul4ovhh7e6i/dnp7l7voorb3nirn56l2j6dig3tgr1ud/1455033600000/.../14842667018191680551/0Byp6mSiY2g4XOHpaZjBYanRDYlk?e=download

https://email.t-online.de/em/bin/.../deliveruploadedfile?id=737875378&disposition=attachment

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.