home

pixsetup.exe

Pixillion

NCH Software

This is a self-extracting archive and installer. This is installed with Pixillion Image Converter. The file has been seen being downloaded from ppdjs.brothersoft.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Pixillion

Description:
Pixillion Image Converter

Version:
2.99+

MD5:
b8010df2740c5ca20bf8f17c3cf10574

SHA-1:
beb3a2bd3fda31696e613a795ee87a5bbb370730

SHA-256:
f8a9e5abb06e83e92e2ee468f1c0af319b51ed2d9d5064f9ceb1897ca16cb516

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:39:04 AM UTC  (today)

File size:
589.7 KB (603,824 bytes)

Product version:
2.99+

Copyright:
NCH Software

Original file name:
Pixillion.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\pixsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/5/2015 7:00:00 PM

Valid to:
8/6/2017 6:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58D9B9D38780932DD1CBC58A2AD28B1C

File PE Metadata
Compilation timestamp:
10/14/2015 8:33:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:Ud8xru5apEfIPr6AtOUTCW2lFHK4yv9ojsLxBDCxX0W696w7:j45vUTp2lJK3vyjSb5b6w7

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 48, 20, 40, 00, 68, 6C, 24, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 50, 20, 40, 00, 68, 90, 24, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9864

Developed / compiled with:
Microsoft Visual C++

Code size:
2 KB (2,048 bytes)

The file pixsetup.exe has been discovered within the following program.

Pixillion Image Converter  by NCH Software
Publisher's description - “Pixillion image file conversion software is a free image format converter for Windows. It can convert image files between GIF, JPEG, PNG, PDF, and BMP. Before converting your file Pixillion allows you to view the image and current file parameters.”
www.nchsoftware.com
19% remove it
 
Powered by Should I Remove It?

The file pixsetup.exe has been seen being distributed by the following 12 URLs.

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=e72266fh0k7jYjpARYfj7BkLByN8/l1zWDJvBNPLHI79nNVZDy/4 z3NqZxvYA61hDkSDVH6E7cE6vsjDwMIDCRK1a4DyE5ZEzM fbPC26e1ZDixHTYkQRkwhuj5w3VQ5hA1/G/.../I2PBSl2lGxQwG2Lw5cjJYz4K46lgMsdy1cq8JwpBYEO3jphHq2CIcAR

http://pixillion-image-converter.software.informer.com/.../

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=a96cBElnA8VbRDauM/cjslr7s2sKY4Uu4kRghdbloQKTWjuGx/TaV NLcBbtsWU4njfjMB5TFym5G8wRbUW/qkTA0mJzaXb4Wm3/WvsJawJc8ryuXwH2gR/FM63/.../lLgoyETBuvwB5AQLxuSMFNBw

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/.../PBssHD6RHfeB7StbcmSbylJjWyqX6ct40uneuxugiJp6T m1Jc78XdlkOp3UwvdJodScrF9j3Wu5JKOMvcxzqgx036Q

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=e95dtFYsjHd iXnw9SQ2XIsTSG0s5dGmgiiT/BelhE2tDXj5aZ9irGAWeuKDm/KvJZ5D uH8tLUa50Lv8p5aJHnVmwAwmb7X54hNnApPHiw5hsUO9cHvX8IOpZixTHOd/I3Sjwmmm6NSD2KFuDDig/.../FeGZ65dOSArndV

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=bf8eXZ6Q9oQXhyyDYW5IuIWTuHGTl6zQINPrpAzJro9LtQpERdDlVD gh1g5AqSOwTc5pAcD0uzO6RC8W5E/Yxqk6SRznzHMvLzXjL9SU9bOpn3Xz1cna85XKRfoumPYJ9XB5bpqnbLgRhxswhrp9syFFDYf8zp8hmcNFsw2nmIDuEZnq4Fyskgi551IlODdJb6x/.../pu5VQke1bqX08UJw

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=f635GyLhtL7Lqp8N1rthschzUUNuERpqDIMFLwC9CvNa8IsgpXtYBGZaEnL7 TzU9zEgYRy7Y goUwIXeMhOUGs7qQLO3A5/Wd/.../gIu1q4HTGxea xHYE2t8SC5pYgSERwOKLuRDheacjQhSQCfbadraeYb1s80CfIdaxf8fhLFDAXxGGyTolFtTwtSJIYhHYtvUvOEIg

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/.../5SLNQJNNP0QGi 1s9rkGqX4iM38gjynVQ39hfzV6xcHRKBTKr8A4nUYLaZOxRk7X7DpOsAVnJi

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=f6b3Ho4mSxCblJfjxZoGJUX1DWxUVAWz1bRC1qrZlE3JtbnJXgTgFqv8I9/.../f7xazONNudQ3eqoHLboRTuXBLIByA5NIN5BW9o6OpkJ6ICzZqaPXe jPrzOJNcxpXBwQxzDH6DnCmQfVXCk7J2VBjFaRAvkg

http://www.nch.com.au/.../pixsetup.exe

http://www.nchsoftware.com/.../pixpsetup.exe

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=234dgcLxgjpNLLC32brjTU17rwXv0m8HCb0 bOfTwxq0L8iZC7N D7EwQPLNDscdSf/2K07k SadqNXBw5R78h33xYlAo Hvj8/.../TPQVt 5xGGOa1S45N KTLVFN2dKEav

Scan pixsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.