» upnpwizardc.exe
Overview
Analysis
File Details
Programs (1)

upnpwizardc.exe

UPnP Wizard Command Line

XL Development

This file is installed with the program UPnP Wizard.

File name:

upnpwizardc.exe

Publisher:

-XL- Development (signed by XL Development)

Product:

UPnP Wizard Command Line

Version:

2.2.0.12

MD5:

006f58940bb926172ad8a7bdafa30b7a

SHA-1:

58dff2ecdc989d6fd488705ab28f11f9d3e61a74

SHA-256:

2576390da94380a71459cdd0e0894e3c8988b0cacf5afab9f5c1a7dc2d39a4b4

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/7/2024 4:29:36 PM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

Trojan/Win32.HDC

2015.06.08

File size:

2.2 MB (2,271,808 bytes)

Product version:

2.2

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\upnp wizard\upnpwizardc.exe

Digital Signature

Signed by:

XL Development

Authority:

COMODO CA Limited

Valid from:

1/20/2014 3:00:00 AM

Valid to:

1/21/2016 2:59:59 AM

Subject:

CN=XL Development, O=XL Development, L=Poway, S=CA, PostalCode=92064, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00CA2F532BACD17AFAE28E962AA245CA47

File PE Metadata

Compilation timestamp:

5/18/2015 8:43:44 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

2.25

CTPH (ssdeep):

24576:bzb3yZtzyEFOzUAz3Q8qP523wI8qbLV3tJBYSYmKzbVI5DnqFlCXmoBfziU+Z:by4ze8qBsLVdJaSYmKzbVsB1ziU+Z

Entry address:

0x1EE41C

Entry point:

55, 8B, EC, 83, C4, EC, 53, 56, 57, 33, C0, 89, 45, EC, A1, 64, 3F, 5F, 00, C6, 00, 01, B8, C8, D6, 5D, 00, E8, E4, 07, E2, FF, 33, C0, 55, 68, 86, E5, 5E, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, 25, E5, 5E, 00, 64, FF, 30, 64, 89, 20, A1, 58, 3C, 5F, 00, BA, A4, E5, 5E, 00, E8, 29, 97, E1, FF, E8, C4, 98, E1, FF, E8, 4F, 85, E1, FF, A1, 58, 3C, 5F, 00, BA, F8, E5, 5E, 00, E8, 10, 97, E1, FF, E8, AB, 98, E1, FF, E8, 36, 85, E1, FF, B8, 44, E6, 5E, 00, E8, 38, B2, E3, FF, 84, C0, 74, 07, E8, 77, ED, FE... 
[+]

Entropy:

6.6292

Developed / compiled with:

Microsoft Visual C++

Code size:

1.9 MB (2,020,864 bytes)

The file upnpwizardc.exe has been discovered within the following program.

UPnP Wizard by -XL- Development

About 4% of users remove it

Scan upnpwizardc.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.