Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegDeleteValueA, CryptGenRandom, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, RegDeleteKeyA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, CryptCreateHash, CryptHashData, CryptDeriveKey, CryptEncrypt, CryptDecrypt, RegQueryInfoKeyA, RegEnumValueA, RegEnumKeyExA, RegSetValueExA, RegQueryValueExA, RegOpenKeyExA, RegCreateKeyExA, RegEnumValueW, RegEnumKeyExW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, CryptAcquireContextA, RegCreateKeyExW, RegCloseKey, CryptReleaseContext
comctl32.dll
PropertySheetW, CreatePropertySheetPageW, PropertySheetA, CreatePropertySheetPageA, InitCommonControlsEx
comdlg32.dll
GetOpenFileNameA, GetSaveFileNameA, GetOpenFileNameW, GetSaveFileNameW
gdi32.dll
GetTextExtentPoint32A, CreateCompatibleBitmap, GetICMProfileA, ExtTextOutA, TextOutA, GetTextExtentPoint32W, ExtTextOutW, TextOutW, GetObjectA, GetKerningPairsA, GetGlyphOutlineA, DeleteDC, SelectObject, CreateCompatibleDC, GetDeviceCaps, CreateDIBSection, BitBlt, Rectangle, CreatePen, GetStockObject, SetStretchBltMode, DeleteObject, GetOutlineTextMetricsA, GetTextMetricsA, CreateFontIndirectA, GetGlyphOutlineW, SetBkMode, CreateSolidBrush
kernel32.dll
DllMain
mscms.dll
GetColorDirectoryA
ole32.dll
CoCreateInstance, CoTaskMemFree, CoInitializeEx, CoUninitialize, CreateStreamOnHGlobal, CLSIDFromString, CLSIDFromProgID, CoGetClassObject, OleLockRunning, StringFromGUID2, CoTaskMemRealloc, OleInitialize, CoTaskMemAlloc, OleUninitialize, CoResumeClassObjects, CoRegisterClassObject
shell32.dll
ExtractIconExA, SHGetSpecialFolderPathW, SHGetFileInfoW, ShellExecuteW, SHGetPathFromIDListW, DragAcceptFiles, SHChangeNotify, SHFileOperationW, DragQueryFileA, SHGetMalloc, SHBrowseForFolderA, SHGetPathFromIDListA, ShellExecuteExW, SHFileOperationA, SHGetFileInfoA, SHBrowseForFolderW, SHGetSpecialFolderPathA, DragQueryFileW, ShellExecuteA, ShellExecuteExA
shlwapi.dll
StrRetToBufW, SHDeleteKeyA, SHDeleteValueA, AssocQueryStringW
urlmon.dll
CoInternetGetSession, URLDownloadToFileW, URLDownloadToFileA, FindMimeFromData
user32.dll
PeekMessageA, GetCursorPos, IsDialogMessageA, TranslateAcceleratorA, TranslateMessage, DispatchMessageA, MsgWaitForMultipleObjects, GetAsyncKeyState, SetActiveWindow, LoadCursorA, SetCursor, GetWindow, GetCursor, UnregisterClassW, SetClassLongA, InsertMenuItemA, GetClassInfoA, GetMenuItemInfoA, SetClassLongW, SetWindowTextA, AppendMenuA, SetWindowTextW, DialogBoxParamW, MessageBoxA, DialogBoxParamA, SendMessageW, SetDlgItemTextW, SetDlgItemTextA, DefWindowProcW, CreateDialogParamW, DefWindowProcA, LoadStringA, CreateDialogParamA, CreateWindowExW, SetMenuItemInfoW, GetMenuItemInfoW, InsertMenuItemW, AppendMenuW, CreateWindowExA, MessageBoxW, RegisterClassA, SetWindowLongW, GetWindowLongW, UnregisterClassA, SetMenuItemInfoA, CallWindowProcW, RegisterClassW, SetMenu, ReleaseCapture, GetActiveWindow, PostQuitMessage, BeginPaint, EndPaint, IsWindowVisible, SetCapture, GetTopWindow, InvalidateRect, GetMenu, ScreenToClient, RedrawWindow, FindWindowExA, SetMenuInfo, TrackPopupMenu, CreatePopupMenu, EmptyClipboard, SetClipboardData, OpenClipboard, CloseClipboard, DialogBoxIndirectParamW, RemovePropA, InvalidateRgn, RegisterWindowMessageA, GetClassInfoExA, IsChild, DestroyAcceleratorTable, RegisterClassExA, CharNextA, CreateAcceleratorTableA, GetSysColor, SetPropA, DialogBoxIndirectParamA, SetTimer, KillTimer, GetPropA, LoadIconA, EndDialog, EnumThreadWindows, SetWindowsHookExA, IsWindow, FlashWindowEx, CallNextHookEx, UnhookWindowsHookEx, ShowCursor, GetWindowRect, GetWindowTextW, GetWindowTextLengthW, GetWindowTextA, SystemParametersInfoA, SetWindowPos, LoadImageA, GetDlgItem, IsIconic, ClientToScreen, GetDesktopWindow, GetDC, GetForegroundWindow, ReleaseDC, GetWindowPlacement, AdjustWindowRect, EnableMenuItem, CheckMenuItem, GetSystemMetrics, DrawIcon, DestroyIcon, GetClientRect, DestroyWindow, GetFocus, EnableWindow, GetClassLongA, SetFocus, GetWindowTextLengthA, SendMessageA, MessageBeep, CreateDialogIndirectParamA, GetParent, FindWindowA, EnumWindows, GetClassNameA, GetWindowLongA, DrawTextW, GetScrollBarInfo, IsWindowEnabled, ShowWindow, SetForegroundWindow, FillRect, UpdateWindow, AdjustWindowRectEx, CallWindowProcA, MoveWindow, EnumChildWindows, SetParent, GetKeyState, PostMessageA, SetWindowLongA, DestroyMenu
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA
wininet.dll
InternetOpenA, InternetConnectA, HttpOpenRequestA, HttpSendRequestA, InternetCloseHandle, InternetSetStatusCallback, InternetCrackUrlA, DeleteUrlCacheEntry, InternetGoOnline, InternetGetConnectedStateEx, InternetQueryOptionA, HttpEndRequestA, InternetReadFile, InternetWriteFile, InternetErrorDlg, HttpQueryInfoA, HttpAddRequestHeadersA, HttpSendRequestExA, InternetGetConnectedState, InternetSetOptionA
wintrust.dll
WinVerifyTrust
Export table
delete_JSON_parser
init_JSON_config
JSON_parser_char
JSON_parser_done
JSON_parser_is_legal_white_space_string
new_JSON_parser

picasaphotoviewer.exe

Picasa Photo Viewer by Google Inc. (Signed)

Remove picasaphotoviewer.exe
Version:   3.9.136.20
MD5:   b5d7bbd83870c9d59d1f6160dd3d71e0
SHA1:   14df2b26f3ae9a44df48f508e2ead28b629ac330
SHA256:   d815bbcc7581868c56061509e8b99c64baac3267038b024cbba1d8598e9caab4

Overview

picasaphotoviewer.exe executes as a process with the local user's privileges typically within the context of its parent chrome.exe (Google Chrome by Google Inc). It is installed with a couple of know programs including Picasa 3 published by Google Inc, Picasa 2 from Google Inc and Picasa 2 by Google Inc. The file is digitally signed by Google Inc. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:picasaphotoviewer.exe
Publisher:Google Inc.
Product name:Picasa Photo Viewer
Typical file path:C:\Program Files\google\picasa3\picasaphotoviewer.exe
Original name:GooglePhotoViewer.exe
File version:3.9.136.20
Product version:3.9.0
Size:4.58 MB (4,802,888 bytes)
Certificate
Issued to:Google Inc.
Authority (CA):VeriSign
Effective date:Monday, June 20, 2011
Expiration date:Thursday, June 20, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Apple Inc.
9% remove
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad. iTunes is an application that allows the user to purchase and manage audio and video on a personal computer, acting as a front end for Apple's QuickTime media player. Officially, using iTunes is required in order to manage the audio of an ...
Fuji Xerox
3% remove
DocuWorks Document Tray Option is a optional software that uses DocuWorks to provide electronic document trays that electronically facilitate document delivery among colleagues and managers in your organization. Managing documents has never been easier. DocuWorks enables seamless integration of electronic documents created by various applications such as Microsoft® Word, Excel®, PowerPoint® and paper document imported from scanners. It...
Google Inc
6% remove
Picasa is an image organizer and image viewer for organizing and editing digital photos, plus an integrated photo-sharing website. Picasa is 3 supports Windows XP, Windows Vista and Windows 7, and has Google+ integration for users of that service. Version 3.9 also removed integration with Picasa Web Albums for users of Google+. For organizing photos, Picasa has file importing and tracking features, as well as tags, facial recognition, ...
Google Inc
6% remove
Picasa is an image organizer and image viewer for organizing and editing digital photos, plus an integrated photo-sharing website. Picasa is 3 supports Windows XP, Windows Vista and Windows 7, and has Google+ integration for users of that service. Version 3.9 also removed integration with Picasa Web Albums for users of Google+. For organizing photos, Picasa has file importing and tracking features, as well as tags, facial recognition, ...
Google Inc
10% remove

BehaviorsBehaviors

Scheduled tasks
  • The job '{ED6ED044-F1F5-4FC8-8629-24E7AD631BCD}' runs on registration in the path '\{ED6ED044-F1F5-4FC8-8629-24E7AD631BCD}'
  • The task '{D8CF0329-C2E2-45F5-A362-F9BE5BDB37AA}' runs on registration in the path '\{D8CF0329-C2E2-45F5-A362-F9BE5BDB37AA}'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.13860177%
0.028634%
Kernel CPU:0.03555393%
0.013761%
User CPU:0.10304784%
0.014873%
Kernel CPU time:932 ms/min
100,923,805ms/min
CPU cycles:25,017,083/sec
17,470,203/sec
Context switches:583/sec
284/sec
Memory
Private memory:69.52 MB
21.59 MB
Private (maximum):63.39 MB
Private (minimum):59.02 MB
Non-paged memory:69.52 MB
21.59 MB
Virtual memory:146.04 MB
140.96 MB
Virtual memory (peak):219.69 MB
169.69 MB
Working set:76.88 MB
18.61 MB
Working set (peak):149.26 MB
37.95 MB
Page faults:182,330/min
2,039/min
I/O
I/O read transfer:611.9 KB/sec
1.02 MB/min
I/O read operations:36/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:2.56 KB/sec
448.09 KB/min
I/O other operations:202/sec
1,671/min
Resource allocations
Threads:4
12
Handles:189
600
GUI GDI count:31
103
GUI GDI peak:32
142
GUI USER count:8
49
GUI USER peak:13
71

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command lines:
  • "C:\Program Files\google\picasa3\picasaphotoviewer.exe" "C:\users\user\appdata\local\microsoft\windows\temporary internet files\content.outlook\0wgfbpad\11x17 elliotrosstriocorkscrew12 5.jpg"
  • "C:\Program Files\google\picasa3\picasaphotoviewer.exe" "C:\users\sony\downloads\skype\486605_621295877887224_1939792418_n.jpg"
  • "C:\Program Files\google\picasa3\picasaphotoviewer.exe" "C:\Documents and Settings\user\My documents\downloads\1059227_10152933590150231_1722924052_o.jpg"
Owner:User
Parent processes:

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Starter 40.00%
Windows 7 Home Premium 20.00%
Windows 8 Single Language 20.00%
Microsoft Windows XP 20.00%

Distribution by countryDistribution by country

Mexico installs about 40.00% of Picasa Photo Viewer.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 28.57%
Dell 28.57%
Sony 28.57%
American Megatrends 14.29%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE