upnpcont.exe

  • File Path: C:\Windows\system32\upnpcont.exe
  • Description: UPnP Device Host Container

Hashes

Type Hash
MD5 F44E0D93F70AE6BF08E0A43459A59953
SHA1 E33977D7156B67A9F60950C852820742A6CA52D5
SHA256 0B6F3A562DD9C806AB0C2F8391F0D808D807BA8B231A163D9B57B38F1B4D7277
SHA384 664ECA599BC6DBD8687F288C850BFA7942651FA3A53CCF7C9E4D0E755970D45E58A5240776A35EC496C212F72219A2B8
SHA512 7DE671641B134E58E4CED740F60C24EF56A5BDBADE0C1FE3EDFC9CF5A89930BB3A8BA52C95347E76976D8EB1132FD0522F50ADEBB036F1D8D4DB48D651350133
SSDEEP 768:9K7FqYHwaEuRfCdGScdirYS51GaGLQ3L+r44bITeZVl0iZqZq/3fLyUh5:9MqYHwTu4EdirJ1+DUQVxqZq/3Dp
IMP 7B81D592E2E0E57EBD2E87234270AF60
PESHA1 5354D8D4841F2BC10C879716CE4DF0E19C5D8EEB
PE256 B334FACD7DDFD5364D8425DED36272C7F566B81680C1E881CB56B68767E56BA8

Runtime Data

Open Handles:

Path Type
(RW-) C:\Users\user File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\upnpcont.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: upnpcont.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.867 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.867
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/0b6f3a562dd9c806ab0c2f8391f0d808d807ba8b231a163d9b57b38f1b4d7277/detection

MIT License. Copyright (c) 2020-2021 Strontic.