» setup_prettyphoto.exe
Overview
Analysis
File Details
Programs (1)

setup_prettyphoto.exe

Toolwiz Pretty Photo

XII CNC Inc.

The program is a setup application that uses the Inno Setup installer. This is installed with Toolwiz Pretty Photo.

File name:

Publisher:

Toolwiz.com. (signed by XII CNC Inc.)

Product:

Toolwiz Pretty Photo

Description:

Toolwiz Pretty Photo Setup

Version:

2.2.0.0

MD5:

3c634c30aa76f4ebb0af442c94bf7e1a

SHA-1:

850935f4d6cc1299558bebfce4815f9f240e8285

SHA-256:

2ab587b5f6b6992fd05c2b464c6faffc3a95503f1c062b43c30ccd34a5080db6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:59:26 PM UTC (a few moments ago)

File size:

66.5 MB (69,719,768 bytes)

Product version:

2.2.0.0

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\setup_prettyphoto.exe

Digital Signature

Signed by:

XII CNC Inc.

Authority:

VeriSign, Inc.

Valid from:

8/28/2012 8:00:00 PM

Valid to:

9/28/2013 7:59:59 PM

Subject:

CN=XII CNC Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=XII CNC Inc., L=Anyang-si, S=Gyunggi-do, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5AE657C73341F9A5D7BDDD336C543E67

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

1572864:tMzYjqBl8EnGVEODlEY3fTtvCOuM6X8OpIk2eW+HdyVfiQcmfEWb:lA8+GVEOZ9vZKO+X8OpIEofiQjb

Entry address:

0x9B60

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, F0, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, F0, CD, 40, 00, B2, 01, B8... 
[+]

Entropy:

7.9997

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file setup_prettyphoto.exe has been discovered within the following program.

Toolwiz Pretty Photo by ToolWiz

Publisher's description - “ToolWiz Pretty Photo is a free powerful lightweight image editor. With just few clicks on this free tool, you can edit photos, create photo collage, and make them look the way you want them to be, and much prettier. Yes, it is that simple.”

www.toolwiz.com/products/toolwiz-pretty-photo

About 8% of users remove it

Scan setup_prettyphoto.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.