home

GoogleUpdateSetup.exe

Google Update

Google Inc

This is a setup and installation application. The file has been seen being downloaded from dl.google.com and multiple other hosts.
Publisher:
Google Inc.  (signed by Google Inc)

Product:
Google Update

Description:
Google Update Setup

Version:
1.3.25.11

MD5:
87eb5afd21e52cb08883e04605b55829

SHA-1:
635dc200f117c97e3902935b37dfb050ab1edd87

SHA-256:
85e59bae1d61fdf1bef958ea0dcfcfe5cf5605714ee958bde3fb07cd55942f18

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/24/2024 9:33:43 PM UTC  (today)

File size:
860.1 KB (880,784 bytes)

Product version:
1.3.25.11

Copyright:
Copyright 2007-2010 Google Inc.

Original file name:
GoogleUpdateSetup.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\google\update\1.3.25.11\googleupdatesetup.exe

Digital Signature
Signed by:
Google Inc

Authority:
Thawte, Inc.

Valid from:
11/10/2011 2:00:00 AM

Valid to:
11/10/2014 1:59:59 AM

Subject:
CN=Google Inc, OU=Digital ID Class 3 - Netscape Object Signing, O=Google Inc, L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
255171CBC3F106F6F41E03EB77CF4FE9

File PE Metadata
Compilation timestamp:
11/6/2014 7:49:20 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:WGl5r9EulFOpgxglTiUFQpeaFUygRxJacW:WGXlF3xpYx05

Entry address:
0x5329

Entry point:
E8, D1, 13, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, 00, 81, 38, 63, 73, 6D, E0, 75, 2A, 83, 78, 10, 03, 75, 24, 8B, 40, 14, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 05, E8, 2B, 14, 00, 00, 33, C0, 5D, C2, 04, 00, 68, 33, 53, 40, 00, FF, 15, 0C, F0, 40, 00, 33, C0, C3, 8B, FF, 55, 8B, EC, 68, 2C, F2, 40, 00, FF, 15, 14, F0, 40, 00, 85, C0, 74, 15, 68, 1C, F2, 40, 00, 50, FF, 15, 10, F0, 40, 00, 85, C0, 74, 05, FF, 75...
 
[+]

Entropy:
7.8844  (probably packed)

Code size:
53.5 KB (54,784 bytes)

The file GoogleUpdateSetup.exe has been seen being distributed by the following 22 URLs.

http://dl.google.com/tag/s/appguid={3C122445-AECE-4309-90B7-85A6AEF42AC0}&iid={B9C9D53C-45F5-9ABD-308A-CA8F7B136B6E}&lang=en&browser=2&usagestats=0&appname=Google Drive&needsadmin=true/.../googledrivesync.exe

http://lb.cdn.m6web.fr/d/c/a/cd2484a2dcb5ceaf22971367aa1fcc3c/548dcfea/soft/.../google-chrome_39-0-2171-65_fr_257658.exe

http://dl.google.com/tag/s/appguid={74AF07D8-FB8F-4d51-8AC7-927721D56EBB}&iid={BF2DF418-5A65-8754-AC08-8CC39ADA49D9}&lang=pt-BR&browser=4&usagestats=1&appname=Google Earth&needsadmin=True&brand=GGGE/earth/.../GoogleEarthSetup.exe

http://dl.google.com/tag/s/appguid={3C122445-AECE-4309-90B7-85A6AEF42AC0}&iid={3F8A9BD0-CB87-BA98-1457-09FE40EA8173}&lang=en&browser=4&usagestats=0&appname=Google Drive&needsadmin=true/.../googledrivesync.exe

http://lb.cdn.m6web.fr/d/c/a/f1b3f70871cfdf8165bb9cfff1861aad/54dc7dcf/soft/.../google-chrome_40-0-2214-91_fr_257658.exe

http://d210.cdn.m6web.fr/soft/.../google-chrome_40-0-2214-91_fr_257658.exe

http://dl.google.com/tag/s/appguid={3C122445-AECE-4309-90B7-85A6AEF42AC0}&iid={A171A80C-4280-CB3A-B711-BB43D15D4C13}&lang=en-US&browser=4&usagestats=0&appname=Google Drive&needsadmin=true/.../googledrivesync.exe

http://e.ccm2.net/www.commentcamarche.net/download/.../ChromeSetup-40.exe

http://dl.google.com/tag/s/appguid={3C122445-AECE-4309-90B7-85A6AEF42AC0}&iid={BAE427EB-8127-CBE8-BEEA-7584583F09A3}&lang=en&browser=4&usagestats=0&appname=Google Drive&needsadmin=true/.../googledrivesync.exe

http://lb.cdn.m6web.fr/d/c/a/f640b011e8abb95b4244cfcaecafa744/5485789b/soft/.../google-chrome_39-0-2171-65_fr_257658.exe

http://software.thaiware.com/download_url.php?id=10638

http://scintillate.prosnowclub.ru/ODQzNjtodHRwJTNBJTJGJTJGZGwuZ29vZ2xlLmNvbSUyRnVwZGF0ZTIlMkZpbnN0YWxsZXJzJTJGQ2hyb21lU2V0dXAuZXhlO25hbWU9b2Jub3ZsZW5pLmV4ZTtzaXplPTYwMDAwMDt0eXBlPXNldHVw

http://butters.earlem.com/.../ChromeSetup.exe

http://downloads.cdnlocker.com/google-chrome.exe

http://146.185.26.220/.../ChromeSetup.exe

http://dl.google.com/update2/.../ChromeSetup.exe

http://dl.google.com/tag/s/appguid={3C122445-AECE-4309-90B7-85A6AEF42AC0}&iid={058C4FF2-D104-92F6-5C1E-81BF3F25E923}&lang=en&browser=4&usagestats=0&appname=Google Drive&needsadmin=true/.../googledrivesync.exe

https://dl.google.com/update2/.../ChromeSetup.exe

http://dl.google.com/tag/s/appguid={74AF07D8-FB8F-4d51-8AC7-927721D56EBB}&iid={11F367A1-F002-9BA6-46D1-F797C4F5D8DD}&lang=undefined&browser=4&usagestats=1&appname=Google Earth&needsadmin=True&brand=GGGE/earth/.../GoogleEarthSetup.exe

http://lb.cdn.m6web.fr/d/c/a/0456f29d9b457532ed3d228263069f1f/5501b5a7/soft/.../google-drive_1-19-8406-6504_fr_414402.exe

http://i.softplanet.com/.../Google-Chrome400221494.exe

http://dlgbit.winfuture.de/456bbe90dc604e6966541dd159c96e06/5465e44a/software/Chrome/.../ChromeSetup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.