home

mms_3_0_2_224_update.exe

My Memories Suite

StoryRock, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from capsa.storage.googleapis.com.
Publisher:
StoryRock, Inc.  (signed and verified)

Product:
My Memories Suite

Version:
3.0.2.224

MD5:
1af76ea27a34d25b6bcc645ec6fb621e

SHA-1:
20bc321d67641ccacad7e89e6f4569b8cae55435

SHA-256:
401a56fc363aeab64c969e27513bd51e70fb02524ef1ab5839213414bca8988a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 9:10:43 AM UTC  (today)

File size:
22.7 MB (23,762,000 bytes)

Product version:
3.0.2.224

Copyright:
StoryRock, Inc.

Original file name:
mms_3.0.2.224_update.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\mms_3_0_2_224_update.exe

Digital Signature
Signed by:
StoryRock, Inc.

Authority:
VeriSign, Inc.

Valid from:
10/19/2011 8:00:00 PM

Valid to:
11/17/2014 6:59:59 PM

Subject:
CN="StoryRock, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="StoryRock, Inc.", L=Salt Lake City, S=Utah, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
200CA20878E000F864645DCF89AD4D8B

File PE Metadata
Compilation timestamp:
6/7/2010 12:31:57 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
393216:k1PLLUlwYWcEtJQPbPJ/KJrI1gLH8IB9prbOA28O+dhO5bWKFrfCyr6CNKbPF:k5Ylwy46LlKJE0H8OXu7B0O4KFzNS

Entry address:
0x11F8

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9984  (probably packed)

Code size:
169.5 KB (173,568 bytes)

The file mms_3_0_2_224_update.exe has been seen being distributed by the following URL.

http://capsa.storage.googleapis.com/1af76ea27a34d25b6bcc645ec6fb621e.ea10bf182bf8a478b93816a4e033abb8?GoogleAccessId=GOOG57ULWBZRNEX5RYCG&Expires=1449623584&Signature=b3afvigmWVl7UfgD7bROgXQ6 BM=&response-content-disposition=attachment; filename="mms_3_0_2_224_update.exe"

Scan mms_3_0_2_224_update.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.