home

pixsetup.exe

Pixillion

NCH Software

This is a self-extracting archive and installer. This is installed with Pixillion Image Converter. The file has been seen being downloaded from files.downloadnow.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Pixillion

Description:
Pixillion Image Converter

Version:
2.96+

MD5:
0e2094f18b9c0ca6cc385fef62080dce

SHA-1:
07a4b3a9efd7823214a651c4e8b05c4abe8181c2

SHA-256:
098954f6a734d3f870cda5334ee0abf1c12914e1aaff4fce629e3c584b0810c3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:13:20 AM UTC  (today)

File size:
578.3 KB (592,136 bytes)

Product version:
2.96+

Copyright:
NCH Software

Original file name:
Pixillion.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\pixsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/5/2015 8:00:00 PM

Valid to:
8/6/2017 7:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58D9B9D38780932DD1CBC58A2AD28B1C

File PE Metadata
Compilation timestamp:
10/14/2015 9:33:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:/dZuTkfXMSJGLFY8Mep0JFfp9FQluE0Ly5iyvrOr3:vuTkP7iy8Zp0JFfFgx5rOz

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 48, 20, 40, 00, 68, 6C, 24, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 50, 20, 40, 00, 68, 90, 24, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9864

Developed / compiled with:
Microsoft Visual C++

Code size:
2 KB (2,048 bytes)

The file pixsetup.exe has been discovered within the following program.

Pixillion Image Converter  by NCH Software
Publisher's description - “Pixillion image file conversion software is a free image format converter for Windows. It can convert image files between GIF, JPEG, PNG, PDF, and BMP. Before converting your file Pixillion allows you to view the image and current file parameters.”
www.nchsoftware.com
19% remove it
 
Powered by Should I Remove It?

The file pixsetup.exe has been seen being distributed by the following 4 URLs.

http://files.downloadnow.com/s/software/14/49/31/.../pixsetup.exe

http://www.nch.com.au/.../pixsetup.exe

http://www.nchsoftware.com/.../pixpsetup.exe

http://ppdjs.brothersoft.com/ppd_stat.php?url=http://www.nch.com.au/components/pixsetup.exe&c=c8718AWgfjcyZYEKxJyDCp1l/kDKj1gS1ZuP7ukaw2HlsGgWPVdg97/DkAUC8QysbT1YpyLj0e7mgj UEEheu7cdz7XKghvGYbF gprfMggnj41SpWFrgkYuUN0hlVSryG0AKVrlnFbaXY1mttahzNXiE2 L0 hOOvLI1cc3xkr9/si1iww7nHtTiDPgQq9/.../m3yzGOanQrINnJGlbZgA

Scan pixsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.