Should I block it?
No, this file is 100% safe to run.
Relationships
Wizard.exe
Wizard Module
Version: | 1, 0, 0, 1 |
MD5: | 296583b50a1193795f2fb9d8a89f9a0d |
SHA1: | 03c7006377d322149ff102520bee656307d73eaf |
SHA256: | d004448ce45e051c7e4b72ff31febb4890e2a5f57c2ab8f0575fa2be0f27a9b4 |
Overview
wizard.exe executes as a process with the local user's privileges typically within the context of its parent
raidcall.exe (raidcall by KORAM GAMES LIMITED). It is installed with a couple of know programs including RaidCall published by raidcall.com, RaidCall from raidcall.com and RaidCall by raidcall.com. This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536).
Details
File name: | wizard.exe |
Product name: | Wizard Module |
Typical file path: | C:\Program Files\raidcall\wizard.exe |
File version: | 1, 0, 0, 1 |
Size: | 520 KB (532,480 bytes) |
Digital DNA |
File packed: | No |
.NET CLR: | No |
More details
Programs
The following programs will install this file
Some version may be bundled with the OpenCandy distribution and monetization platform.
Network connections
[UDP] listens on port 51378
[UDP] listens on port 50169
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00240099% | |
Kernel CPU: | 0.00143192% | |
User CPU: | 0.00096907% | |
Kernel CPU time: | 749 ms/min | |
CPU cycles: | 14,693,940/sec | |
Memory |
Private memory: | 6.01 MB | |
Private (maximum): | 15.84 MB | |
Private (minimum): | 11.94 MB | |
Non-paged memory: | 6.01 MB | |
Virtual memory: | 117.39 MB | |
Virtual memory (peak): | 121.18 MB | |
Working set: | 11.96 MB | |
Working set (peak): | 15.87 MB | |
Page faults: | 4,296/min | |
I/O |
I/O read transfer: | 1.33 KB/sec | |
I/O read operations: | 1/sec | |
I/O other transfer: | 433 Bytes/sec | |
I/O other operations: | 29/sec | |
Resource allocations |
Threads: | 7 | |
Handles: | 229 | |
GUI GDI count: | 30 | |
GUI GDI peak: | 33 | |
GUI USER count: | 26 | |
GUI USER peak: | 32 | |
Process properties
Integrety level: | High |
Platform: | 64-bit |
Command lines: |
- "C:\Program Files\raidcall\wizard.exe" --up --url=ahr0cdovl2fkcy5yywlkdgfsay5jb20vbmfkcy9mb2dpbldpbmrvd0fkcy9pbmrlec5waha/dwlkptgymzu4otgmdmvyptcums44 --pos=bottom-right --time=86400 --size=301*213 --text= --delay=2 --hwnd=1250558 [email protected] --uid=8235898 --nick=zptok86u0ivi4pyu --param=nznnppoos6nb16im%2fnhf7ukms39gbwpvngxakaibagzn4o%2bjowyxrw%3d%3d
- "C:\Program Files\raidcall\wizard.exe" --up --url=ahr0cdovl2fkcy5yywlkdgfsay5jb20vbmfkcy9mb2dpbldpbmrvd0fkcy9pbmrlec5waha/dwlkptu4oda0otemdmvyptcums44 --pos=bottom-right --time=86400 --size=301*213 --text= --delay=2 --hwnd=69198 [email protected] --uid=5880491 --nick=zrhjvs6xyolui17kncmx --param=btb0dzx74vgx%2fn8boz%2bikvlip8ybngq6ngxakaibagz%2f%2bke8ut02mq%3d%3d
|
Owner: | User |
Parent process: | raidcall.exe (raidcall by KORAM GAMES LIMITED) |
Distribution by Windows OS
OS version | distribution |
Windows 7 Ultimate |
100.00% |
|
Distribution by PC manufacturer
PC Manufacturer | distribution |
Dell |
100.00% |
|