home

WMS.EXE

Wild Media Server (UPnP, DLNA, HTTP)

Evgeny Lachinov

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Wild Media Server (UPnP, DLNA, HTTP)’. This is installed with Wild Media Server (UPnP, DLNA, HTTP).
Publisher:
Evgeny Lachinov  (signed and verified)

Product:
Wild Media Server (UPnP, DLNA, HTTP)

Version:
1.99.0.0

MD5:
4989b55ffc6627f1953a2cd8779c5960

SHA-1:
f9fafe7ef3ae8b3b7a6b78841fa6fd523d542801

SHA-256:
5573a2a84c5e93bc9cb0ae1d6352ad19647df8d59a6450f8e9d9f940aefc24d0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 8:35:37 PM UTC  (today)

File size:
25.1 MB (26,332,680 bytes)

Product version:
1.99

Copyright:
Copyright (C) Evgeny Lachinov, 2009-2014

Original file name:
WMS.EXE

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\wild media server\wms.exe

Digital Signature
Signed by:
Evgeny Lachinov

Authority:
StartCom Ltd.

Valid from:
4/10/2014 8:16:34 AM

Valid to:
4/10/2016 3:15:46 AM

Subject:
E=eugene@wildmediaserver.com, CN=Evgeny Lachinov, L=Saint-Petersburg, S=Saint Petersburg City, C=RU, Description=hybpw73e38z5P2S4

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0DAD

File PE Metadata
Compilation timestamp:
12/20/2014 10:13:57 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:RvWntPoeoOyfwbAPTcsXgIX6HkemKC3Wt5KCQf5aZ:R+JoeoxfwbolqHkeDC3Y5KCQf5aZ

Entry address:
0x1216440

Entry point:
55, 53, 48, 83, EC, 78, 48, 8B, EC, 48, C7, 45, 40, 00, 00, 00, 00, 48, C7, 45, 38, 00, 00, 00, 00, 48, C7, 45, 48, 00, 00, 00, 00, 48, C7, 45, 50, 00, 00, 00, 00, 48, 89, 6D, 58, 90, 48, 8D, 0D, 8B, 2F, FD, FF, E8, 46, 16, E0, FE, 90, E8, 60, 29, FD, FF, 48, 8B, 0D, A9, 78, CC, FF, 48, 8D, 55, 50, E8, 90, 69, DF, FE, 48, 8B, 05, B1, 00, 20, 00, 48, 8B, 00, 48, 89, C1, 48, 8D, 15, D8, 03, 00, 00, 4C, 8B, 45, 50, 4D, 33, C9, 48, 8B, 00, FF, 50, 50, 85, C0, 0F, 85, F1, 02, 00, 00, 48, 8B, 0D, 28, 15, 08, FF...
 
[+]

Code size:
18.1 MB (18,962,944 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Wild Media Server (UPnP, DLNA, HTTP)

Command:
C:\Program Files\wild media server\wms.exe \hide


The file WMS.EXE has been discovered within the following program.

Wild Media Server (UPnP, DLNA, HTTP)  by Evgeny Lachinov
Publisher's description - “Wild Media Server (UPnP, DLNA, HTTP) - program, which provides media resources (photographs, audio and video files) on your computer to other UPnP (DLNA) devices in the home network, for example, Philips TVs, Sony TVs, Samsung TVs, LG TVs, Toshiba TVs, Sony Playstation 3, XBOX 360, WD TV Live, iPad/iPhone/iPod, mobile and PDA devices.”
About 3% of users remove it
 
Powered by Should I Remove It?

Scan WMS.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.