home

pixsetup.exe

Pixillion

NCH Software

This is a setup and installation application. This is installed with Pixillion Image Converter. The file has been seen being downloaded from ppdjs.brothersoft.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Pixillion

Description:
Pixillion Image Converter

Version:
3.04+

MD5:
5b7e8ca8db762fab4cac74632bb11c82

SHA-1:
de65e11b872169ccf9081aef3c96dfb43a032461

SHA-256:
085033a8e38258a5f940c0fe60a96cea619dc4d51edd35428f6f73a80f02fd6f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:46:29 AM UTC  (today)

File size:
596.2 KB (610,544 bytes)

Product version:
3.04+

Copyright:
NCH Software

Original file name:
Pixillion.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\pixsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/6/2015 2:00:00 AM

Valid to:
8/7/2017 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58D9B9D38780932DD1CBC58A2AD28B1C

File PE Metadata
Compilation timestamp:
1/25/2016 12:09:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:UduP+lgTwjlYa+ZvmmzqtZ6CnzuQgVoI79jWk4CZvM/M:1WlgTw0ZvmPtZNz7IB6kRaM

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 48, 20, 40, 00, 68, 6C, 24, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 50, 20, 40, 00, 68, 90, 24, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2 KB (2,048 bytes)

The file pixsetup.exe has been discovered within the following program.

Pixillion Image Converter  by NCH Software
Publisher's description - “Pixillion image file conversion software is a free image format converter for Windows. It can convert image files between GIF, JPEG, PNG, PDF, and BMP. Before converting your file Pixillion allows you to view the image and current file parameters.”
www.nchsoftware.com
19% remove it
 
Powered by Should I Remove It?

The file pixsetup.exe has been seen being distributed by the following 16 URLs.

http://ppdjs.brothersoft.com/ppd_stat.php?url=/.../vVgIf22WRXupiaXSY Pt

http://ppdjs.brothersoft.com/ppd_stat.php?url=http://www.nch.com.au/components/.../mGD0DW5K0kJL 0uGNMQXkhy8JUgvKE3V8Kp7R0BOer3fUjtqvUbDLw1UdoFRHu4AHglETANDKf8rQhdq6aFYs1NrgTcv3fHQZ3mBnhFCGPbHgp9THHDqQahYrTvllPNSw

http://www.ranchsendgift.com/qkhvLL7AyXeir0NzsnOYYZtlq_v52r4wr8D1lxjw8MtXh6XRZT0aPZT9wJUS5Vl4LipP5EgLBOQsx1dsC hk0emXUeetVf3YNLIzs9fOyuEKhgaXXuJ5Emub5DtMHT0HEytlZP5NPKQmkBTfoPXnHGbGsXN58BJeuQb0XT37zOiEICgF2NGPy8JcBDfaAHVr DUATe7DZe6bhFi1du8QWL3D8MoJig==-GywAAERveH7beUsrHikUcMgB 7 EosC0ljjwlBojv WxMgx2RDedWzvs_NFeQy8=

http://ppdjs.brothersoft.com/.../d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=f98dnC8chDTi6NfHIK4OwGIbcXOWmVpPVSsvh7g1SyqQXrzjDAgk9bbkpbIjkRnYHyzg16eopyuUiR0RCdzJDZQkw7zTOT99GOoqjKg36MD b34wRGXjxeEE8Dyojsl SoSEWJTXMvbNvT1gnqgeEg8hgS3OMdH0D3J1scqiDNL8YUvQV7MLSuwYWNpImOonpyUpQs3TTnnH67KSFhSFX20

http://pixillion-image-converter.software.informer.com/.../

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=3961pWIdEjSZspdkLc9SA6Ji5n/ZaB4xIhMk8usOhCkoWV3BNbyb8jKU6qI6Khl2oWLnrJk7Tyg 1yQt wF/hWQ 3D3sNNpuDvWypZq7MxC3tL7UKNe6MRTHQqGBQPRXhdBTfTsaIJ H8EPxw/.../M1fHc2794vaf2Sb jQ

http://ppdjs.brothersoft.com/ppd_stat.php?url=http://www.nch.com.au/components/pixsetup.exe&c=f611R36IhN0g1PuCL5pDNzu8/zV2HnaakaSqG/qoQc42349Mik5a3dagfPr0WrPzP8vWIxzx4Cg/.../CO49MWeQ

http://www.ranchsendgift.com/uD5ykf3 USJSH9naDZcnU1GSA4f8R0xd1 XVu38As1_HNuk9UUvMlgah0O4S9iaPrhomoAKQ_UrG32FeOzeBmgG8zQRfEcif8ndznpJWsyxZUBYvsex0KlhwMRfRbJW0YiQcRjPuu4dfUrXkvyVBmR9AJkCHhCMkCLTwWszacScSSk6EZeQc88isjbWJl_w1c kjBmktdGRmbeuC9WMjwR5cQmAFlA==-GywAAERveH7beUsrHikUcMgB 7 EosC0ljjwlBojv WxMgx2RDedWzvs_NFeQy8=

http://www.brothersoft.com/d.php?soft_id=193613&url=http://www.nch.com.au/.../pixsetup.exe&name=Pixillion Image Converter Software

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=6368HER3zz7NI hAavmBjfQ60x5aYKc57Wyq6kT3mNlIwM/PP3/01FJLk86o3YSfNWCqyG9XGagMv6469G34i3qskN0LSu2CO1uVCrgRY/.../HG KvY77GwirvvOyEugwbw

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=997b0Psqn5iUDExsQnQ5JTQlwNWnfIUfbtTLwQ/e/KPQSKK4FErlFbdxiobcBXgtxc5u7q9MAsmg3xBo97DeDGXAFJDOoTIr9G1xMyKbK9WQqggxHDwXqHjEyOIxeRUaeqwN2PMTfPiJFA10 zoTfSM/.../57BLcBpAy3LiXRnCKp38ZEggPjx nJySejapSucCQzSWTTC

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=b23fObJRmyJ9oBtMIS3JBrG79OBRO/E932EmnUxV0kZNj8KbWO8cuk945fo kiGy8tpbUXLRU/pXnn8RNOBXZ8fNkUlTC2WPor4V HgOaQ8 89T7Dt5LXJTE/wTf6XeUshFjZmgz3KMl4FCdgr0 u atKK6BH/1FIEBEOXJOL/.../w84qDth82Uogxi3DEoQeAnQnuPgFyj6Ae5fl9v1CL

http://ppdjs.brothersoft.com/ppd_stat.php?url=http://www.nch.com.au/components/.../gT4TSOBcBu3SESOFk 6s0RPoiit Ecg

http://www.nch.com.au/.../pixsetup.exe

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=193613&url=http://www.nch.com.au/components/pixsetup.exe&c=85c80gPNsk9SaSIJNO/irT09vC rJlQDCikkKl/I4gUlhN46J uGK9XseRTprV1JxasAJxQXGR7QiBqtHgcbwMutK6zd/vahdcvCav/thf89I3QyA2uwMy6gHGnEhNiqtQRpy4tLMHlavtgS9NqKaTTTPiRK7q4B8Fxg49N/UNOrts95/VcSLWuX2jZjz7 p/.../KmYiZ0n7EDP4Yg

http://www.nchsoftware.com/.../pixpsetup.exe

Scan pixsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.