pms-setup-windows-1.52.1.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from ps3mediaserver.googlecode.com and multiple other hosts.
MD5:
0560c6e3bbce35e9caa0c570ea35be50

SHA-1:
5d7b2e7c77012a3bb9ccd9b4c1ea0e31b1139f5b

SHA-256:
a782ac5c69abc74f5c8c8a6c54612ff48dbf32ee6142072278623d78e26bc60c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:23:27 PM UTC  (today)

File size:
29.4 MB (30,791,231 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\pms-setup-windows-1.52.1.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:NStggF43Dcscfur/Uz4WIphMd6XNY3lOEmXidi8hOlaPfv5Ml+PsK/+OWKkNY5BP:0v43LAgURIPMcG3goiPwPlPsK+KP5n/p

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file pms-setup-windows-1.52.1.exe has been discovered within the following programs.

PS3 Media Server  by PS3 Media Server
Publisher's description - “PS3 Media Server is a DLNA compliant Upnp Media Server for the PS3, written in Java, with the purpose of streaming or transcoding any kind of media files, with minimum configuration. It's backed up with the powerful Mplayer/FFmpeg packages.”
www.ps3mediaserver.org
About 7% of users remove it
 
Powered by Should I Remove It?

The file pms-setup-windows-1.52.1.exe has been seen being distributed by the following 2 URLs.

Scan pms-setup-windows-1.52.1.exe - Powered by Reason Core Security