home

setup_ws.exe

Wild Media Server (UPnP, DLNA, HTTP)

Evgeny Lachinov

This is a setup program which is used to install the application. The file has been seen being downloaded from wild_media_server__upnp__dlna__http_.en.softonic.com.
Publisher:
Evgeny Lachinov  (signed and verified)

Product:
Wild Media Server (UPnP, DLNA, HTTP)

Description:
Distribution kit Wild Media Server (UPnP, DLNA, HTTP) - x32 - version 2.76

Version:
1.80.0.0

MD5:
34c00ebdf9d08dbaeb5a3dcadf9e082a

SHA-1:
287351f4e3bba8957916e14b737798607960d30d

SHA-256:
18cb10d0749b090b7c56b5741606ef18a0071087edcecc29184f8498b9332927

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 11:54:00 AM UTC  (today)

File size:
75.3 MB (79,010,160 bytes)

Product version:
1.80

Copyright:
Copyright (C) Evgeny Lachinov, 2009-2014

Original file name:
SETUPSFX.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup_ws.exe

Digital Signature
Signed by:
Evgeny Lachinov

Authority:
StartCom Ltd.

Valid from:
3/11/2016 4:11:44 PM

Valid to:
3/11/2018 4:11:44 PM

Subject:
CN=Evgeny Lachinov, O=Evgeny Lachinov, L=Saint-Petersburg, S=Saint Petersburg City, C=RU

Issuer:
CN=StartCom Class 2 Object CA, OU=StartCom Certification Authority, O=StartCom Ltd., C=IL

Serial number:
509E6040FA5BDC52636E9945B350F433

File PE Metadata
Compilation timestamp:
2/27/2016 8:52:14 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
1572864:/lfc7qOH5mpYNeNHeqQTJonWmwqYvmNAPiALl9NA02FNktV:9feH5mpUkH5QdonrwqWcAPiAB6FSV

Entry address:
0x66184

Entry point:
55, 8B, EC, 83, C4, EC, 53, 56, 57, 33, C0, 89, 45, EC, B8, 7C, F1, 45, 00, E8, 58, 2A, FA, FF, 33, C0, 55, 68, 92, 62, 46, 00, 64, FF, 30, 64, 89, 20, A1, 60, A9, 46, 00, 83, 38, 02, 0F, 85, A7, 00, 00, 00, 6A, 00, E8, 09, 36, FC, FF, A9, 00, 00, 00, 80, 0F, 94, C0, A2, 1C, 0A, 47, 00, 33, C0, 55, 68, 58, 62, 46, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, F9, 61, 46, 00, 64, FF, 30, 64, 89, 20, 33, C0, E8, 3D, 8F, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 43, E9, 12, E8, F9, FF, 01, 00, 00, 00, A8, 1A...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
402 KB (411,648 bytes)

The file setup_ws.exe has been seen being distributed by the following URL.

http://wild_media_server__upnp__dlna__http_.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOz5 I2b148tYAdChpKA8edNAdYSpjP2PGZfvdCVlaBNXgI7AH1x 7g7H7cQtxD2zbbxODFE/VvRfNKrBuMUSIko2/.../EQXnm07pPW5VRIzqeUUsZGfRn7k22 r8=

Scan setup_ws.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.