ums-4.0.3-java7.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download3.files2get.com and multiple other hosts.
MD5:
9695ea413730570c839aff9f49f7d5b2

SHA-1:
e5fe480dcec905dcd856b170d012b98d8a8bc311

SHA-256:
48512357d1a64e884f386b5fbd9205e1d08c9c1d7ebad1bb394013c43355c8e1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 5:28:13 PM UTC  (today)

File size:
44.7 MB (46,895,430 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\ums-4.0.3-java7.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:XcqApGo6jiW29yEcZt4r5/REvncUbqBb/IfkoyyIIZbOxnfIxjq6pjuduj7d:XclwjiZDAIEvRbUbjoyzIQnHi4I

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file ums-4.0.3-java7.exe has been discovered within the following program.

Universal Media Server  by universalmediaserver.com
Publisher's description - “Universal Media Server is a DLNA-compliant UPnP Media Server. It is based on PS3 Media Server by shagrath. It is actually an evolution of the "SubJunk Build" of PMS. The program streams or transcodes many different media formats with little or no configuration.”
www.universalmediaserver.com
About 6% of users remove it
 
Powered by Should I Remove It?

The file ums-4.0.3-java7.exe has been seen being distributed by the following 2 URLs.

Scan ums-4.0.3-java7.exe - Powered by Reason Core Security