home

picasa2-current.exe

Picasa

Picasa Inc.

This is a setup and installation application. This is installed with Picasa 2. The file has been seen being downloaded from i.download.idg.pl and multiple other hosts.
Publisher:
Google Inc.  (signed by Picasa Inc.)

Product:
Picasa

Description:
Picasa setup

Version:
1, 0, 0, 1

MD5:
7cc3ae1afe58702e9e11a4ed36d68a91

SHA-1:
5e012d02247230bf4e38c9f1bf076c6bde32a12b

SHA-256:
5964c14964aa339830aea77472a10ab250449803f8cf6bb31d94967dcfa0637e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:25:25 AM UTC  (today)

File size:
4.6 MB (4,789,792 bytes)

Product version:
1, 0, 0, 1

Copyright:
© 2004 Google Inc.

Original file name:
payload.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Picasa Inc.

Authority:
VeriSign, Inc.

Valid from:
7/10/2005 5:00:00 PM

Valid to:
7/11/2006 4:59:59 PM

Subject:
CN=Picasa Inc., OU=Software Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Picasa Inc., L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
00C7F8CB060A424F6C011594975A51C0

File PE Metadata
Compilation timestamp:
1/23/2006 2:35:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:UQeil+JmpgFvpD+Nejo+r07bj/LN0dn7+4tku0WPKrgDJfHgOg/OEtWlotwaF:UQerI+Ft3zcLLN0d9tkLB2fH6O/lta

Entry address:
0x5067

Entry point:
55, 8B, EC, 6A, FF, 68, D8, C1, 40, 00, 68, D8, 6D, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 10, C1, 40, 00, 33, D2, 8A, D4, 89, 15, 88, 17, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 84, 17, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 80, 17, 41, 00, C1, E8, 10, A3, 7C, 17, 41, 00, 33, F6, 56, E8, 20, 28, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, EB, 24, 00, 00, FF, 15, 0C, C1, 40, 00, A3, C4, 2C, 41, 00, E8...
 
[+]

Entropy:
7.9847

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
44 KB (45,056 bytes)

The file picasa2-current.exe has been discovered within the following program.

Picasa 2  by Google Inc
Picasa is an image organizer and image viewer for organizing and editing digital photos, plus an integrated photo-sharing website. Picasa is 3 supports Windows XP, Windows Vista and Windows 7, and has Google+ integration for users of that service. Version 3.
www.picasa.com/support
6% remove it
 
Powered by Should I Remove It?

The file picasa2-current.exe has been seen being distributed by the following 11 URLs.

http://i.download.idg.pl/fannef/a1e57ebdec896c3d49e6dd12834c55de/57c82b07//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/1982a67c1601c76885a54f75541b8509/54b50620//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/95a9d8bdcf92e291d440f108410a8df1/55f94c92//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/f645a69e12d59f24290b28946bc8f08e/573d946b//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/769fec9fd28f623cc0d3b52ef2bcb2d2/56eae2e7//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/00a2a96f680985385928542e32c73bed/567e9be5//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/83d311adfc2661936666856e3d3b88da/568403a8//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/6b4506b945e2d875ba3a7fabb162eb7b/568cf5f8//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/0331159dba64c483de6b8a0ca186c753/5667323d//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/1369c784c705ecdc6f1ef406ef6a65fa/56f144bb//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

http://i.download.idg.pl/fannef/e1070373676e17c048e7410a7272c5a3/50743dae//zx/vol2/w95/multimedia/graphics/picasa/.../picasa2-current.exe

Scan picasa2-current.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.