home

setup.exe

Picasa Updater

Google Inc

This is a setup and installation application. The file has been seen being downloaded from r3---sn-5obva5j5caxn-a5qe.gvt1.com and multiple other hosts.
Publisher:
Google Inc.  (signed by Google Inc)

Product:
Picasa Updater

Description:
Picasa

Version:
3.9.137.1410

MD5:
2294324cc84ba6d4ce08355580723189

SHA-1:
079a3c9efdaa737e75134b01c9f3d0397d7d0f0f

SHA-256:
5537adcc9afc6ac96fa6b5866debab705c30e4e8a46e9cf5f831d594c134a6e0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/24/2024 6:54:36 PM UTC  (today)

File size:
16.5 MB (17,312,072 bytes)

Product version:
3.9.0

Copyright:
© 2004-2011 Google Inc.

Original file name:
Picasa Updater

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\google\picasa2\update\lifescapeupdater\setup.exe

Digital Signature
Signed by:
Google Inc

Authority:
VeriSign, Inc.

Valid from:
1/29/2014 1:00:00 AM

Valid to:
1/30/2016 12:59:59 AM

Subject:
CN=Google Inc, OU=Digital ID Class 3 - Java Object Signing, OU=Digital ID Class 3 - Java Object Signing, O=Google Inc, L=Mountain View, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2912C70C9A2B8A3EF6F6074662D68B8D

File PE Metadata
Compilation timestamp:
6/6/2014 12:31:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:J91ShmSwbFMqi6NZt9huAeH0B/ghE0lbNpe3OyEKkByo3pX:J/S0kqi699hutg/0E0lbkzETX

Entry address:
0x69A7

Entry point:
E8, 2B, 4B, 00, 00, E9, 16, FE, FF, FF, 8B, 44, 24, 04, 33, C9, 3B, 04, CD, 70, 80, 41, 00, 74, 12, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0C, 6A, 0D, 58, C3, 8B, 04, CD, 74, 80, 41, 00, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, C3, E8, 4E, 21, 00, 00, 85, C0, 75, 06, B8, D8, 81, 41, 00, C3, 83, C0, 08, C3, E8, 3B, 21, 00, 00, 85, C0, 75, 06, B8, DC, 81, 41, 00, C3, 83, C0, 0C, C3, 56, E8, E7, FF, FF, FF, 8B, 4C, 24, 08, 51, 89, 08, E8, 8D, FF, FF, FF, 59, 8B, F0...
 
[+]

Code size:
72 KB (73,728 bytes)

The file setup.exe has been discovered within the following program.

360Amigo System Speedup Free  by 360Amigo
360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
 
Powered by Should I Remove It?

The file setup.exe has been seen being distributed by the following 50 URLs.

https://r3---sn-5obva5j5caxn-a5qe.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r5---sn-25g7sne7.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r5---sn-gwpa-pmjl.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r7---sn-4g57kn7z.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-4gxx-25gel.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r3---sn-gwpa-5hqs.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r1---sn-25glen7e.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-v2xom-bg0e.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r1---sn-2uuxa3vh-jb36.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-gwpa-5hqe.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-jpgjax-q5je.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-ovvg-j5pe.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r7---sn-gwpa-5bge.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r8---sn-gwpa-b50s.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r7---sn-2uja-3ipz.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-5aap5ojx-jj0l.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r1---sn-uxaxjvhxbt2u-5aty.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-bxuovgf5t-vnas.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-np2a-cvhs.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r7---sn-fpoqixaa5n-5uie.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r12---sn-nx57yn7s.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r6---sn-uxa3vhnxa-jb3z.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-u5a3u5a3-aigs.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r6---sn-gwpa-o5bz.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r10---sn-bvvbax-4jve.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r1---sn-uqj-j2i6.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-g5qp5oucq-q5je.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r1---sn-nv4uj5aa-cvhe.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-8vq54voxbi5o5-5jjl.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

https://r2---sn-uxaxc0j5g5h5ob5-cb5e.gvt1.com/edgedl/.../public-update-3.9.137.141.exe

Latest 30 of 5,423 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.