upnpcont.exe

  • File Path: C:\Windows\system32\upnpcont.exe
  • Description: UPnP Device Host Container

Hashes

Type Hash
MD5 BEE0645BA7D664E57AE8CE9954E89EC8
SHA1 BDEE9BA0307AE192B66DA2B81CD2777B488A44FE
SHA256 D31C35E8655D8FD49DD0C8F55E19CD9E5A795EDE6C148CDAA34E13CCA6F05D72
SHA384 E738C9205862BBCBBD059CEFD4663A8BDEF6C010A239E028BD9FAE80AF5D6B33B3430B88EFFADD53B1E3B68C6FCA8D54
SHA512 B18D2951EB0741E3BA7724B2EA94DE923ADCD6151D2F6C4D024CE0B6DB6422EA3ABA89A8B61044C8E699BAE094F5AA8EE3B26C47826BE9B353B90DC45EDAD409
SSDEEP 768:tMh/7183E+APyg2DdC65oSZl4Uh6Rp80YITHZkiZXZ6PLyUh5:tEJ80+R1C65ZWplRVLXZ6zp

Runtime Data

Open Handles:

Path Type
(RW-) C:\Users\user File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{F79646A6-8BE5-443B-A98F-AD03D667F646}.2.ver0x0000000000000001.db Section
\Sessions\1\BaseNamedObjects\SessionImmersiveColorPreference Section

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\upnpcont.exe

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: upnpcont.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.450 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.450
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\upnpcont.exe 96
C:\Windows\system32\upnpcont.exe 96

MIT License. Copyright (c) 2020-2021 Strontic.