Incidents in Cortex XDR Antivirus

No. issues

1 sihost.exe Shell Infrastructure Host/execute start & Cortorna

2 Outlook.exe Microsoft office service
3 explorer.exe Windows process that is run automatically at startup an
4 CNAB4809.DLL Canon Advanced Printing Technology
5 userinit.exe restores your profile, fonts, colors, etc for your usernam
6 cryptocme.dll
7 AcroRd32.exe primary executable of Adobe Acrobat Reader /License
8 Acrobat.exe
9 viber.exe this file as malicious
10 CNCENPM6.dll associated with the Canon MF Series Network 64bit
11 services.exe launches the Service Control Manager utility
12 Pinnula.DynamicThemeApp.exe using too much CPU or memory
13 WFS.exe component of the Windows Fax and Scan feature
14 msiexec.exe to interpret installation packages and install products
15 nwiastup.ex_ Canon MF Network WIA 64/32bit Setup
16 rundll32.exe is used to run Dynamic Link Library (DLLs) on the W
17 Microsoft.Deployment.WindowsInstaller.dll to contain reusable code, data, and resources that multip
18 svchost.exe shared-service process that Windows uses to load DLL
19 CNCENPM6.dll is part of Canon MF Series Network 64bit comm Modu
20 iR1643iIIMFDriverV720W64 (1).exe cannon inc iR1643 driver
21 CNAB4M.DLL Driver for cannon printer LBP2900 driver
22 powershell.exe administrator command line
23 CnTnrStsTask.exe Toner Status and it is developed by CANON INC
24 drvinst.exe used for installing drivers while installing a software pa
25 ScanSetup.exe Cannon Scanner Driver
26 Microsoft.PowerShell.ConsoleHost.ni.dll is part of the Microsoft Windows Operating System pro
27 System.Windows.Forms.ni.dll an executable file on your computer's hard drive (contai
28 winlogon.exe responsible for loading your user profile into the registr
29 clipgrab-3.9.7-dotinstaller.exe (Malware-blocked) free tool for downloading videos from multiple streami
30 ShellEx64_106.dll FormatFactory Shell Menu Module
31 HipHandlers64.dll Products of McAfee Host Intrusion Prevention
32 CNAB4SMD.DLL part of Canon Advanced Printing Technology
33 IAStorIconLaunch.exe a software component of Intel® Rapid Storage Technol
34 System.ComponentModel.Composition.ni.dll part of Microsoft® .NET Framework and developed by
35 AnyDesk.exe AnyDesk out of date version
36 unins000.exe executed to carry out the removal process
37 pnpts.dll part of PlugPlay Troubleshooter product developed by
38 HxCalendarAppImm.exe executable exe file which belongs to the Microsoft Outl
39 cmd.exe the default command-line interpreter for the OS
40 WerFault.exe the standard Windows error reporting tool used in Win
41 viber-20.6.0.2-installer_CHL-BS1.exe an executable exe file which belongs to the Viber proce
42 regsvr32.exe a command-line utility in Microsoft Windows and Rea
43 Update.exe part of a malicious program that is used by cybercrimin
44 kmshell.exe command line arguments to automate a number of tasks
45 crashpad_handler.exe comes along with the Google Drive File Stream Softwa
46 System.Core.ni.dll an executable file on your computer's hard drive
47 svagentsCS.exe executable file that is part of the SecureVue Agent pro
48 System.ni.dl a .NET Framework from Microsoft Corporation belong
49 System.Transactions.ni.dll an executable file on your computer's hard drive/loade
50 CompatTelRunner.exe part of the Microsoft Windows telemetry system/ colle
51 tmansvc.exe Microsoft Azure Site Recovery and it is developed by M
52 InMageDiscovery.exe Image Discovery executible
53 w3wp.exe windows worker process that run Web Applications for
54 php-cgi.exe the executable for processing PHP requests on the serv
55 ShellEx64_105.dll FormatFactory Shell Menu Module
56 mozilla-firefox-116.0.2-installer_zXVXA-1.exe Browser
57 putty.exe Free SSH and telenet Client
58 KMSELDI.exe a software component of KMSpico by ELDI/ an activa
59 mavis-beacon-free-20-installer_Qh-BQW1.exe free and efficient typing tool
60 ZapyaPC2802Lite.exe
61 SECOH-QAD.exe a file associated with KMSPico, a tool that activates W
62 KeyMagic2.exe
63 SystemSettings.exe
64 cmstp.exe
65 TurboVPN_setup.exe
66 utilman.exe
67 player.exe
68 WhatsApp.exe
69 VScan.exe
70 hello.exe
71 teamviewer.exe
72 vlc-3.0.18-win32.exe
73 window10backdoor.exe
74 wildfire-test-pe-file.exe
75
76
77
78
79
80
81
82
83
84
 Incidents in Cortex XDR Antivirus

Comments

Shell Infrastructure Host/execute start & Cortorna

Microsoft office service
Windows process that is run automatically at startup and remains an active process
Canon Advanced Printing Technology
restores your profile, fonts, colors, etc for your username

primary executable of Adobe Acrobat Reader /License

this file as malicious

associated with the Canon MF Series Network 64bit
launches the Service Control Manager utility
using too much CPU or memory
component of the Windows Fax and Scan feature
to interpret installation packages and install products
Canon MF Network WIA 64/32bit Setup
is used to run Dynamic Link Library (DLLs) on the Windows operating system
to contain reusable code, data, and resources that multiple programs
shared-service process that Windows uses to load DLL files
is part of Canon MF Series Network 64bit comm Module
cannon inc iR1643 driver
Driver for cannon printer LBP2900 driver
administrator command line
Toner Status and it is developed by CANON INC
used for installing drivers while installing a software package
Cannon Scanner Driver
is part of the Microsoft Windows Operating System product
an executable file on your computer's hard drive (contain machine code)
responsible for loading your user profile into the registry.
free tool for downloading videos from multiple streaming websites
FormatFactory Shell Menu Module
Products of McAfee Host Intrusion Prevention
part of Canon Advanced Printing Technology
a software component of Intel® Rapid Storage Technology (RST) by Intel Corporation
part of Microsoft® .NET Framework and developed by Microsoft Corporation
AnyDesk out of date version
executed to carry out the removal process
part of PlugPlay Troubleshooter product developed by Microsoft® Windows® Operating System
executable exe file which belongs to the Microsoft Outlook Calendar process
the default command-line interpreter for the OS
the standard Windows error reporting tool used in Windows
an executable exe file which belongs to the Viber process which comes
a command-line utility in Microsoft Windows and ReactOS for registering and unregistering
part of a malicious program that is used by cybercriminals to distribute malware
command line arguments to automate a number of tasks
comes along with the Google Drive File Stream Software
an executable file on your computer's hard drive
executable file that is part of the SecureVue Agent program
a .NET Framework from Microsoft Corporation belonging to Microsoft® .NET Framework
an executable file on your computer's hard drive/loaded into the main memory (RAM) and runs there as a .NET Framework pr
part of the Microsoft Windows telemetry system/ collects usage and performance data to Microsoft
Microsoft Azure Site Recovery and it is developed by Microsoft Corporation
Image Discovery executible
windows worker process that run Web Applications for IIS
the executable for processing PHP requests on the server
FormatFactory Shell Menu Module
Browser
Free SSH and telenet Client
a software component of KMSpico by ELDI/ an activator tool that is used to illegally activate copies of Windows
free and efficient typing tool

a file associated with KMSPico, a tool that activates Windows Operating Systems and Microsoft Office suites
 Alerts Serverity
Low 28
Medium 960
High 17
Totals 1005