» picexasvc.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

picexasvc.exe

Picexa Viewer

Taiwan Shui Mu Chih Ching Technology Limited

The application picexasvc.exe by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a separate (within the context of its own process) windows Service named “PicexaService”. This file is typically installed with the program Picexa by Taiwan Shui Mu Chih Ching Technology Limited..

File name:

picexasvc.exe

Publisher:

Taiwan Shui Mu Chih Ching Technology Limited (signed and verified)

Product:

Picexa Viewer

Description:

Picexa service

Version:

2.1.45.322

MD5:

106bb8f829cfaf397693db5b5dd4dda1

SHA-1:

dfa8c283d98f7d24d6b51e9e82626689d4141975

SHA-256:

7142ae86472d6b70974fefed9593e36e8dff7979cae20ac67854eb7611e8768a

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

12/25/2024 4:10:56 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Thinknice (M)

17.2.16.23

File size:

395.6 KB (405,104 bytes)

Product version:

2.1.45.322

Original file name:

Picexa.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\picexa\picexasvc.exe

Digital Signature

Signed by:

Taiwan Shui Mu Chih Ching Technology Limited

Authority:

GlobalSign nv-sa

Valid from:

3/6/2015 6:19:12 AM

Valid to:

3/4/2016 9:26:37 AM

Subject:

CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=Taipei City, S=Taiwan, C=TW

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112127474DE010DA49D31D0EE8193EAC2D0E

File PE Metadata

Compilation timestamp:

7/9/2015 3:36:34 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

Entry address:

0x21C90

Entry point:

E8, AD, C4, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, CC, 83, 3D, 50, 46, 45, 00, 01, 72, 5F, 0F, B6, 44, 24, 08, 8B, D0, C1, E0, 08, 0B, D0, 66, 0F, 6E, DA, F2, 0F, 70, DB, 00, 0F, 16, DB, 8B, 54, 24, 04, B9, 0F, 00, 00, 00, 83, C8, FF, 23, CA, D3, E0, 2B, D1, F3, 0F, 6F, 0A, 66, 0F, EF, D2, 66, 0F, 74, D1, 66, 0F, 74, CB, 66, 0F, EB, D1, 66, 0F, D7, CA, 23, C8, 75, 08, 83, C8, FF, 83, C2, 10, EB, DC, 0F, BC, C1, 03, C2, 66, 0F, 7E, DA, 33, C9, 3A, 10, 0F, 45, C1, C3, 33, C0, 8A, 44, 24, 08, 53, 8B... 
[+]

Code size:

235 KB (240,640 bytes)

Service

Display name:

PicexaService

Type:

Win32OwnProcess

Group:

SchedulerGroup

The file picexasvc.exe has been discovered within the following program.

Picexa by Taiwan Shui Mu Chih Ching Technology Limited.

About 2% of users remove it

Remove picexasvc.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.