home

WMS.EXE

Wild Media Server (UPnP, DLNA, HTTP)

Evgeny Lachinov

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Wild Media Server (UPnP, DLNA, HTTP)’.
Publisher:
Evgeny Lachinov  (signed and verified)

Product:
Wild Media Server (UPnP, DLNA, HTTP)

Version:
2.11.0.0

MD5:
b1073e2ffbaefa52709ea07ca93797c8

SHA-1:
9e022d8d521158e7421e2d0291f63dff7b608c13

SHA-256:
3ecfd219bced0ed4cd1504ba3ed6f02462b204b2218f482686d02a59e1ab2b62

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 10:34:09 AM UTC  (today)

File size:
24.9 MB (26,155,528 bytes)

Product version:
2.11

Copyright:
Copyright (C) Evgeny Lachinov, 2009-2015

Original file name:
WMS.EXE

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\wild media server\wms.exe

Digital Signature
Signed by:
Evgeny Lachinov

Authority:
StartCom Ltd.

Valid from:
4/10/2014 8:16:34 AM

Valid to:
4/10/2016 3:15:46 AM

Subject:
E=eugene@wildmediaserver.com, CN=Evgeny Lachinov, L=Saint-Petersburg, S=Saint Petersburg City, C=RU, Description=hybpw73e38z5P2S4

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0DAD

File PE Metadata
Compilation timestamp:
4/20/2015 6:40:19 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:T8ICMqPMWD/7ToeopaycoXPwLJuR6hN7wsHWZ5KCQrLaL:T8vG2oeot5gDnMKy5KCQrLaL

Entry address:
0x11F5150

Entry point:
55, 53, 48, 83, EC, 78, 48, 8B, EC, 48, C7, 45, 40, 00, 00, 00, 00, 48, C7, 45, 38, 00, 00, 00, 00, 48, C7, 45, 48, 00, 00, 00, 00, 48, C7, 45, 50, 00, 00, 00, 00, 48, 89, 6D, 58, 90, 48, 8D, 0D, BB, 2E, FD, FF, E8, 36, 29, E2, FE, 90, E8, 90, 28, FD, FF, 48, 8B, 0D, F9, 29, CC, FF, 48, 8D, 55, 50, E8, 80, 7C, E1, FE, 48, 8B, 05, 11, 9B, 1D, 00, 48, 8B, 00, 48, 89, C1, 48, 8D, 15, D8, 03, 00, 00, 4C, 8B, 45, 50, 4D, 33, C9, 48, 8B, 00, FF, 50, 50, 85, C0, 0F, 85, F1, 02, 00, 00, 48, 8B, 0D, 18, A7, 09, FF...
 
[+]

Entropy:
5.9796

Code size:
18 MB (18,827,264 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Wild Media Server (UPnP, DLNA, HTTP)

Command:
C:\Program Files\wild media server\wms.exe \hide


Scan WMS.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.