home

cncnet_upnp.exe

MD5:
ff31d05aed7e182070c5339185ba9eb5

SHA-1:
69fb2053ca0600613f01462c909c154254021ec9

SHA-256:
601586a157e7ef6d16cd7169ed215b9cc3ffe3dfb74ec1533886a7b317651904

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 10:10:31 PM UTC  (today)

File size:
162 KB (165,888 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cncnet_upnp.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.25

CTPH (ssdeep):
3072:FSD6vIedidXYWlidHEh27mZcAx1dHCgsyc5fIz:FSMIoKYKiuhGY1Z1

Entry address:
0x223D0

Entry point:
55, 8B, EC, B9, 0B, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, A1, 20, 3E, 42, 00, C6, 00, 01, B8, E4, 14, 42, 00, E8, 38, 45, FE, FF, 33, C0, 55, 68, 00, 28, 42, 00, 64, FF, 30, 64, 89, 20, A1, 5C, 3C, 42, 00, BA, 18, 28, 42, 00, E8, 9F, 2C, FE, FF, E8, 76, 13, FE, FF, E8, A9, 09, FE, FF, 33, C0, 55, 68, 84, 27, 42, 00, 64, FF, 30, 64, 89, 20, 8D, 45, EC, E8, DB, 5F, FE, FF, 8B, 55, EC, B8, F0, 74, 42, 00, B9, 4C, 28, 42, 00, E8, 79, 28, FE, FF, 6A, 00, E8, AE, C1, FE, FF, 33, C0, 55, 68, 37, 27...
 
[+]

Entropy:
6.4879

Developed / compiled with:
Microsoft Visual C++

Code size:
133 KB (136,192 bytes)

The file cncnet_upnp.exe has been seen being distributed by the following URL.

http://funkyfr3sh.cncnet.org/.../CnCNet_UPnP.exe

Scan cncnet_upnp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.