» xpscontrolpanel.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

xpscontrolpanel.exe

XPS Control Panel

Skyhook Wireless

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Skyhook Wireless XPS Service’. This is installed with Skyhook Wireless XPS Service.

File name:

xpscontrolpanel.exe

Publisher:

Skyhook Wireless (signed and verified)

Product:

XPS™ Control Panel

Version:

3.4.2.20 ($Rev: 7141 $)

MD5:

348005fdeb77f42e0b4a0bbfbe057606

SHA-1:

79b31f2c1c47f8c0e828d4ac7eef77a2b83a40d0

SHA-256:

3ce5f6ae54ae3874c4d63d41473ecb69c389fe9d6e6a37f2b34f053df4dded35

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 9:31:21 PM UTC (today)

File size:

613.8 KB (628,552 bytes)

Product version:

3.4.2.20

Original file name:

xpscontrolpanel.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\skyhook wireless\xps\xpscontrolpanel.exe

Digital Signature

Signed by:

Skyhook Wireless

Authority:

VeriSign, Inc.

Valid from:

7/21/2009 2:00:00 AM

Valid to:

7/22/2010 1:59:59 AM

Subject:

CN=Skyhook Wireless, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Skyhook Wireless, L=Boston, S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

574BE90A7803A0961B25690594AC11EE

File PE Metadata

Compilation timestamp:

4/22/2010 4:44:43 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:KzDg25/c5RnKawF4yB9uVx3seFZWZDpsYQmhzq:KY6/c5RnKwyB9uDcA+p2Wq

Entry address:

0x162B3

Entry point:

E8, B1, A6, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, 68, 20, 54, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 60, 1D, 43, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0... 
[+]

Code size:

155 KB (158,720 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Skyhook Wireless XPS Service

Command:

C:\Program Files\skyhook wireless\xps\xpscontrolpanel.exe --no-info

The file xpscontrolpanel.exe has been discovered within the following program.

Skyhook Wireless XPS Service by SkyhookWireless

Skyhook Wireless is a Wi-Fi positioning system technology for determining geographical location.

www.skyhookwireless.com

21% remove it

Scan xpscontrolpanel.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.