Erm.. this only checks the installer - not what its downloading and installing on your machine.
Its still a wide open gap for security issues, isnt it?
And then virustotal shows:
Files written
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device...