» sketchdrawer.exe
Overview
Analysis
File Details

sketchdrawer.exe

Photo Stamp Remover

SoftOrbits

File name:

sketchdrawer.exe

Publisher:

SoftOrbits (signed and verified)

Product:

Photo Stamp Remover

Version:

5.2.1.0

MD5:

a8238ed1653e58c256a5b55fe97a761f

SHA-1:

601ff60fee96d8770bb9fbc97a3ce5d878f50ee8

SHA-256:

cdee62ca03398b3c2560adaadf7bd44035452f4dea6222916b639ba8da206788

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 2:21:57 AM UTC (today)

File size:

14.3 MB (15,020,320 bytes)

Product version:

5.2.1.0

Trademarks:

SoftOrbits

Original file name:

StampRemover.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\sketch drawer\sketchdrawer.exe

Digital Signature

Signed by:

SoftOrbits

Authority:

VeriSign, Inc.

Valid from:

1/22/2012 1:00:00 AM

Valid to:

2/21/2013 12:59:59 AM

Subject:

CN=SoftOrbits, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SoftOrbits, L=Smolensk, S=Smolenskaya, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

144C975B08011FAB22336FED3C9470FA

File PE Metadata

Compilation timestamp:

2/5/2013 7:05:27 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

393216:I4fawlc2CDhh8AtwLU8BLYRYnZoA6yr8KXcDWVz1Ex:blpLj7oj+jjpEx

Entry address:

0x1048781

Entry point:

E9, D1, 63, FF, FF, 9B, D0, E1, 86, 9C, A9, 81, 59, 94, DB, 6B, CD, 2D, 21, EB, 49, BB, 42, AC, C3, 24, 81, 4D, C8, 28, 0A, 0F, 41, 64, BE, 51, A5, 88, 88, 36, F2, 05, EF, 70, 97, 29, 9F, CE, 4B, DD, 7B, 09, 9B, 54, 81, 28, 47, 63, 30, 6B, 80, 73, BE, BB, 15, DB, F7, AB, DC, F9, 9B, 93, 92, 69, 7B, 93, 5C, 64, 31, 3D, 36, 45, 17, ED, EB, 39, 72, 4D, 0A, 67, B3, 95, 6B, 96, 58, 15, 1A, 53, BF, D5, B9, 40, 7E, 02, 1D, 06, 5C, 3A, 6B, E2, 36, C9, 41, 1A, 56, 84, AF, 8D, C4, F3, C4, 29, B6, 8E, 7C, 28, 25, B1... 
[+]

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

3.3 MB (3,475,456 bytes)

Scan sketchdrawer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.