home

setup.exe

Picasa Updater

Google Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.bitstagcontent.com and multiple other hosts.
Publisher:
Google Inc.  (signed and verified)

Product:
Picasa Updater

Description:
Picasa

Version:
3.9.136.190

MD5:
cc1ef87e53a9ef57cf338b840ce7445d

SHA-1:
3ddfb30452cbe7ed9db2d5ea669ba832dfcd998a

SHA-256:
c9abeb87c49985342266831bf0d1e69ac9a72827a0848b37c04e2c299455063b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:20:31 AM UTC  (today)

File size:
14.3 MB (14,956,872 bytes)

Product version:
3.9.0

Copyright:
© 2004-2011 Google Inc.

Original file name:
Picasa Updater

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\google\picasa3\setup.exe

Digital Signature
Signed by:
Google Inc.

Authority:
VeriSign, Inc.

Valid from:
6/21/2011 2:00:00 AM

Valid to:
6/21/2013 1:59:59 AM

Subject:
CN=Google Inc., OU=Digital ID Class 3 - Java Object Signing, OU=Digital ID Class 3 - Java Object Signing, O=Google Inc., L=Mountain View, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0D33F28709E263DE83AFFD883E39B912

File PE Metadata
Compilation timestamp:
3/25/2013 9:37:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:AxEHmD3HzEd6J3ojVHWML5K62249dfwTUqFRaadeItQ:AxEHs3H/4jVJL5K62249NwAadJi

Entry address:
0x69B7

Entry point:
E8, 28, 4B, 00, 00, E9, 16, FE, FF, FF, 8B, 44, 24, 04, 33, C9, 3B, 04, CD, 70, 80, 41, 00, 74, 12, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0C, 6A, 0D, 58, C3, 8B, 04, CD, 74, 80, 41, 00, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, C3, E8, 34, 24, 00, 00, 85, C0, 75, 06, B8, D8, 81, 41, 00, C3, 83, C0, 08, C3, E8, 21, 24, 00, 00, 85, C0, 75, 06, B8, DC, 81, 41, 00, C3, 83, C0, 0C, C3, 56, E8, E7, FF, FF, FF, 8B, 4C, 24, 08, 51, 89, 08, E8, 8D, FF, FF, FF, 59, 8B, F0...
 
[+]

Code size:
72 KB (73,728 bytes)

The file setup.exe has been seen being distributed by the following 26 URLs.

http://www.bitstagcontent.com/cq ySntVR__Ejn8rZ fC1vCPFBOjB nOYTxR5XMVg0gAPWqHgAF7CmW5WeqXZ7YuiZgFKydMdGm 1O9DIJLgxDWJCwXaxgoiPP_jwV SVe9UfBGNPl3EkarPZnrpqfM4QyzUXbUca_MCRosGp5ztBmyV6ADoeeInAdYT7_mTmkL46Dh80dcd4qYMaYtNynDGaTs0cyrE-GzUAAERPFtPZJ4nhQbNhAxtw4FQgme04bIydqeAo3lhRYI3EjDPoXQO kRjttekF

http://www.bitstagcontent.com/c85ynGUc9VXmuNYXjqyfTa9k_o5JdmPJihhA0znyXtWMqbjbTTGQGRMKqb7XHcTUjBLLTfj1itzl4MZ1Ai5cbarb3c6RAXpxMc8XLkkbN VRI8sKKJOeWy27Q 8lQLSoWVeg82437jhXNagFVoCoMLzFmvwLGuA7UmddNNuC0W1RrmcRb0foqiWafTUjBedVoNg2nK5bCcsiy6BiuauEoza49upGWQ==-GzoAAES3eV4qU7A8jx19ggXBBhw4FUiANg4bY2cqOIo3VpSgRmKMYS8v6zPhFyXD xqRyk8=

http://cdn.adlrma.com/downloads/software/.../picasa39-setup.exe

http://www.bitstagcontent.com/zbAbLmtH4B5L ChMEk 7dLq6_f_rf_JsLjgMz7AxVoW0Geh5rTux9UjxjrQ1Aw1xrsGyhGXaCsbCmoiPtkx3iJg3Yw3aXXQNgtd8JFe3aNnomyNSQC0Cy4SM3oxmwIKQm727lMNgdv x_9kPywRp0KstoFvoTIUQLuQl1C0lZHLad5hEd_GtxRL Tp0Pavzfj sEBlYb-GzUAAERPFtPZJ4nhQbNhAxtw4FQgme04bIydqeAo3lhRYI3EjDPoXQO kRjttekF

http://www.bitstagcontent.com/dbrauFABNK7IiMCFOZl5v5Ztr8SK323zvufRsaHRZyiNelfEz0 3yEYHbvwxDvrpsdww dAHuoSAhaZglAZCf5vG8dIyUQk3AqEzuTvrqPbVwZNhVZ3L8ebbThJ41t_ 429ZxYgU4o4nMYNcGaoSzwH o40J2oJCEHMHonv3eSBl9ur_myJyD0PnGTgq9q4lOy1YPRJV-GzUAAERPFtPZJ4nhQbNhAxtw4FQgme04bIydqeAo3lhRYI3EjDPoXQO kRjttekF

http://download-1.com/softwares/.../picasa39-setup136.exe

http://www.grabdownloadsworld.com/vzi1Z1Q7WUkqhtPBM4KGn4fOHTfSbfs39BRFgX_4u7QQynmGggmzoU6aUNlTsPffIT_R4DlnePZpYTZnXKL14rhHTcojdvUdgkKy0AP LTNDqpjL7VHTqK6OBR5gIKOE8oQ8kx3dnXFb9F2w14mw4fpuQhFXqmiliPl9EB2W66F34OrSqj9NSTH9EPcX3hCR7Id8TCFQJR8 DcAW9QU8Qjvo KTQMpJUHPHiXo4bUup 7fm1T gxpyjwQAJ89p49tRw6g6b2WHNzbW Aakr37vCmM3GWMoIEJHQ3j2SwKHS_kVuIMHnP5RBJrs9V9hov4NSL4C2FUJhi177hroan6oURtwoCZFRrFz3PX7R_pHCgNEr1gKfWeDkdaPYZZd4D4LIUhBHhPbsoTYfwokxpfLzmAH4SydRPMbBoBLV4meRXJI4c_qtjfzDJxTyoEaTeoJYFvCS u3I_njxZLEuzILqoDIVUOxF_WXIn1H_blI5uiwxCT3A=-G3cAAMTcRq0ZZzYMMaUh8g38OJ1ODhy H1pJ jjhADjQjYWHJggO4doMchv31RldaqCS5318tBbfqpPCDN9lZPQKH 0vecdQKiuyE64KbIvJJXa17p4XMxkH

https://tmpfile11763.s3.amazonaws.com/download77/ic_trackings/10596/.../picasa.exe

http://www.bitstagcontent.com/BJvXHFv8NAV5_8LPIkKYWFmgX1gDAEgLdFGStd4D I96xcBhITZf4RcONR 2ViaUuWG 3wrklEkWCJCu5MePwwphte9kHBZIq_YwBatCrnJ_MX69maANWB9N8_zRagaNALGzehcIiam1R8ynxZCsltil3_GIsckapla8w5PW WG6xw9mPAWEF3m0Z48B2WN7lNJAvQEQ-GzkAAMQ2RzH5HgjGcGFNcIPBBhw4FUhmA CwMXamgqN4Y0VJ1EjsWibc5iz4oWV53wRK Qk=

http://www.bitstagcontent.com/ykGdhuvVaxgMGtIZvomP3PcfTCMJNe7SknsFyjOJNUPEJIYeg9X0v8cZJM7uq9EfRZ R9SEDPpZMSBWV1K7XYAsmBxnnKt97phyav V8HM8X5ESRBHkq91EvnTK qmMzNdFqy6z652lNjt9ttUV1Y3MMW6v4lX9dlZwWw2158CqVrvMlDnI059yckFke8Sm4CSaCzp3m-GzoAAES3eV4qU7A8jx19ggXBBhw4FUiANg4bY2cqOIo3VpSgRmKMYS8v6zPhFyXD xqRyk8=

http://downloadam.com/softwares/.../picasa39-setup136.exe

http://www.giftnewgift.com/YNtnDK Vzip3IeP_dx qwVOr6ULBVZS5oQy6vT8rmnw PyVkQ5myX8sRJmwLfoiC1sapcyagZrch2kuBwiwr9UPaKMVbQmWKfPrQTu6ViZ7JIvyGlTAtyk5hUaWbuRuIMfb5O mQ7HElSh1ko8sL5ebQn9HIgrf3R5IYtfdWw2PvNrOOJQtbKmmXp9JuFf FI75zSuBA-G3cAAMTcRq0ZZzYMMaUh8g38OJ1ODhy H1pJ jjhADjQjYWHJggO4doMchv31RldaqCS5318tBbfqpPCDN9lZPQKH 0vecdQKiuyE64KbIvJJXa17p4XMxkH

http://www.bitstagcontent.com/a4G6sFqghvH0nCosOnk6iBwB3WeXL0MyEcM pLdFzdFHvqiQ5k9GVcELBSCfA1Nl0QBZEbaFModOXDd0t Ar4uPOLMEWAHlp0gq9zbHhMb7Cpb_XkdHESwRxRaQdQ9Sn9ZBB4g_DFUz_jhwlqxXtxnYT KYImZmdJyvIsJwO_l1vvzFwGYH348PsjgYognB7EueL6JhO-GzoAAES3eV4qU7A8jx19ggXBBhw4FUiANg4bY2cqOIo3VpSgRmKMYS8v6zPhFyXD xqRyk8=

http://www.bitstagcontent.com/DKP4CsJWsKlTg9x6j85puWamcMBDgcmEuaALwGjH1oge26XdoKqpQ9Dim7 t783cM6onNpcS2HD_n_r0aUY9_VUUXwn6oj67VRpjk168XrY yEpl RZREWeHsEwmhbCGjruKuoHWhzYU01tm7rQPRtx2mCA2dZmV20qXDyiYDCL_yxnwxUGsz0HFmm4dpQyTAnaLJMgv-GzUAAERPFtPZJ4nhQbNhAxtw4FQgme04bIydqeAo3lhRYI3EjDPoXQO kRjttekF

http://www.bitstagcontent.com/VONvn4bLGzl864u1aI_b8CfkX3WRmAEcYK4JzlCcDWquC1qDBQONeCxl4KzPxiqN7Ne7fuajiqCA6Iz1Fa66tnj5qOtEMA8MN84qntSlCveT9EBT8oXslv16jDemT4yCe9KAxRaNnRBZmY44HOoaInvCJwSqnHc6OhwiooEDx58_dIufTMfZ79dpfUexThObFKTm1sbn-GzoAAES3eV4qU7A8jx19ggXBBhw4FUiANg4bY2cqOIo3VpSgRmKMYS8v6zPhFyXD xqRyk8=

http://www.bitstagcontent.com/wjknjf88aKiUGWR8QYV3koAY7I8C7BThw97aBtwGsPfFAVsFjTeP8UlJvjVdefEDHCaGBYJYqmEHX86pD7nMgETwXXu5Z1w LYLIdE5h9Sfbd7EFZKvOf7JoTJgbuVHb5J4PENZNc5e2rYIitrcSe7PmSl4RW tC 4jHYXiVD_MFLPwrNez45V reArbAfxRfp 5qaDi-GzUAAERPFtPZJ4nhQbNhAxtw4FQgme04bIydqeAo3lhRYI3EjDPoXQO kRjttekF

http://www.giftnewgift.com/D3ol6PE9dfsF88hk6I2tcnobeasN5Pah3xmqbXAsXGNiffVC1AJFuvPRswP_JEg5YTI1lzJ7 k a_SqvDC_cmzxvySsGz3heDnCAWy kKgSrtjMUcqA0C34vY93dV1Pakth0g_CmgwMoB71oQqxztHazKuz_Lfu0Lgy1xdQw8vSWm4Ws4DROXc EqVmkopHdRvu2xWEv-G3cAAMTcRq0ZZzYMMaUh8g38OJ1ODhy H1pJ jjhADjQjYWHJggO4doMchv31RldaqCS5318tBbfqpPCDN9lZPQKH 0vecdQKiuyE64KbIvJJXa17p4XMxkH

http://www.todaybytetower.com/c?x=217MYPnBAfHeBaowe5QcUj7apzFGvNsHvK4hyz1y3nQ=&c=0ycdzI/HodCzyvlQW00u7qbUc4zLmTuObJw9s5KenWu6BZY4PDId4Ssx4Z2YHe/DpyKS9Y0/Q0s/A/RBII/M2aM3dX17wRVCH7s6OLKjajL7qswQMQVBOBfCoSngjbq7atmNlL/s ElT43HplGz2RLzkgjiQL2WnOXZyYOidOm4=&downloadAs=picasa.exe&fallback_url=http://ddxserverneu.com/softwares/.../picasa39-setup136.exe

data:application/octet-stream;base64,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

https://tmpfile2185.s3.amazonaws.com/download77/ic_trackings/1196909/.../picasa.exe

https://tmpfile1448.s3.amazonaws.com/download77/ic_trackings/47148/.../picasa.exe

https://tmpfile3668.s3.amazonaws.com/download77/ic_trackings/72340/.../picasa.exe

http://arkiv.idg.se/pfa/.../picasa39-setup.exe

https://dl.google.com/.../picasa39-setup.exe

http://dl.google.com/.../picasa39-setup.exe

http://software-files-a.cnet.com/s/software/13/05/89/.../picasa39-setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.