Gridinsoft Logo
File Icon

The PixelSee_id4075184id.exe (PixelSee Player Installer) File Analysis

Technical Analysis

File Name PixelSee_id4075184id.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
98304:ZswIe2XyYx+Ak+zOheEbeiX7JE05fM8dKaDv9weohz4On+REt:ZUxXyYx+/+KhNbeiX7jWS9wzbp
Scanner Version 1.0.215.174
Database Version 2025-04-28 07:00:27 UTC

Suspicious File Detected

Detected by 13 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
18%
Detection Rate
4,557,816
File Size (bytes)
13/72
Engines Detected
2025-04-28
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
df9b0a614ea4e7d629cbacca8ec74cfa
SHA1
0e1cd42e9ecb09c3dae44c73ed53a9936dcca2bd
SHA256
909f25010109d860940d6ae6dff8704557a0f2e656d63a34f277135f793120c3
SHA512
741664f9b7b7c2b5f93f90142158c57c13cef824c070e234e38ca1fd56854d2608d8fcc17012fbea0c899be2b574dc51900c342fe704c53640c793e049ea1414
ImpHash
40e6a742496978342eae2d1e8155d523

Security Engines with Detections (13 of 72)

AVG
FileRepPup [PUP] Malicious
Elastic
malicious (high confidence) Malicious
CAT-QuickHeal
Trojan.Ghanarava.1741334023c74cfa Malicious
CrowdStrike
win/grayware_confidence_90% (W) Malicious
Paloalto
generic.ml Malicious
Avast
FileRepPup [PUP] Malicious
McAfeeD
ti!909F25010109 Malicious
AhnLab-V3
PUP/Win.Bundler.C5732131 Malicious
McAfee
Artemis!DF9B0A614EA4 Malicious
VBA32
BScope.Adware.BrideData Malicious
Malwarebytes
PUP.Optional.PixelSee Malicious
MaxSecure
Trojan.Malware.140233589.susgen Malicious
DeepInstinct
MALICIOUS Malicious
59 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: cccaf089fdb7e64c772085ef033908ae
Fuzzy: e499e90b5ddbb5548ab4ab1ed89a7470
dHash: c4d0c48484c4d0c4
Image Base 0x00400000
Entry Point 0x0065dfa0
Compilation Time 2024-10-16 13:17:46
Checksum 0x0045b0f7 (Actual: 0x0045b0f7)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 16 libraries
Exports 0 functions
Resources 9 Resources
Sections 5 Sections

Version Information

Comments PixelSee Player Installer
CompanyName SIA Circle Solutions
FileDescription PixelSee Player Installer
FileVersion 14.0.0.0
InternalName pixelsee
LegalCopyright Copyright � 2022-2023 SIA Circle Solutions
OriginalFilename pixelsee
PrivateBuild 0
ProductName PixelSee
ProductVersion 14.0.0.0
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,696,132 bytes 2,696,192 bytes 6.76 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 72888E918CD7B25574BE7ED4E8C8CBBA
.rdata 0x00294000 728,618 bytes 729,088 bytes 6.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FB25EC2F0C6E5BD4BD49093ECBD363EE
.data 0x00346000 52,512 bytes 25,600 bytes 3.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 21C2AC6C9E6FEF6BC18BABD16DFF1EFF
.rsrc 0x00353000 976,552 bytes 976,896 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DECD767CCC9B1D2D782F59BC7CB953D5
.reloc 0x00442000 105,512 bytes 105,984 bytes 6.65 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 83F84FF1D1DB336DC770D3EA5DABBADD
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 9 (975,823 bytes)
Resource Type Count Total Size Percentage
ARCHIVE_7Z 2 971,734 bytes
99.6%
RT_ICON 1 2,223 bytes
0.2%
RT_DIALOG 1 272 bytes
0%
RT_ACCELERATOR 1 112 bytes
0%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 900 bytes
0.1%
RT_MANIFEST 1 392 bytes
0%
None 1 170 bytes
0%

Certificate Chain Analysis

Certificate Information
Product PixelSee
Description PixelSee Player Installer
File Version 14.0.0.0
Original Name pixelsee
Signing Date 01:18 PM 10/16/2024 (234 days ago)
Verification Status Signed
Signers SIA Circle Solutions; Sectigo Public Code Signing CA R36; Sectigo Public Code Signing Root R46; Sectigo (AAA)
Counter Signers Sectigo Public Time Stamping Signer R35; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46
Internal Name pixelsee
Copyright Copyright � 2022-2023 SIA Circle Solutions
Certificate Chain Summary
Sectigo Public Code Signing Root R46 #1 Primary
Validity Period: 2021-05-25 00:00:00 → 2028-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 16
Sectigo Public Time Stamping CA R36 #2 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Code Signing CA R36 #3 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 62 1D 6D 0C 52 01 9E 3B 90 79 15 20 89 21 1C 0A
SIA Circle Solutions #4 Chain
Validity Period: 2023-05-26 00:00:00 → 2026-05-25 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 6A D9 43 81 15 E1 71 7C D5 5B 8B D8 76 C8 9C CD
Sectigo Public Time Stamping Signer R35 #5 Chain
Validity Period: 2024-01-15 00:00:00 → 2035-04-14 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89
Sectigo Public Time Stamping Root R46 #6 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
13 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware