home

ActualDrawing.exe

Actual Drawing

PY Software

Publisher:
PY Software.  (signed by PY Software)

Product:
Actual Drawing

Version:
6, 0, 0, 0

MD5:
4782c102ca2b561b4cff25b5347cd5d6

SHA-1:
9206eda7dfb0e421f6f57d8754023d3675f68138

SHA-256:
11a4fef6ff34f26ff42e9034226f513b28f6ce36ec399b59a371a5f23c2ba22f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 3:32:36 AM UTC  (today)

File size:
3.3 MB (3,452,000 bytes)

Product version:
6, 0, 0, 0

Copyright:
©2000-2005 by PY Software.

Trademarks:
PY Software, Inc.

Original file name:
ActualDrawing.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\web designer\actualdrawing.exe

Digital Signature
Signed by:
PY Software

Authority:
The USERTRUST Network

Valid from:
8/18/2010 5:30:00 AM

Valid to:
8/19/2011 5:29:59 AM

Subject:
CN=PY Software, O=PY Software, STREET=6 Eva Rd, L=Toronto, S=ON, PostalCode=M9C 2A8, C=CA

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
0096839A22CC842B92EDEFB2824016F0CC

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:YuspoXNCUie5Mrk2pTxdRNjZpHTR+Yt1:YnpoXGvVZpdt1

Entry address:
0x1000

Entry point:
68, 01, A0, 89, 00, E8, 01, 00, 00, 00, C3, C3, A9, 07, 1E, 8C, 27, E2, 0F, 43, 36, 9B, 98, 34, 93, 9A, 28, FE, E3, FE, B7, 7D, 15, 2C, F9, 27, 95, 95, 88, 48, E9, E2, 17, 3A, E7, 60, 7C, 96, A9, D5, FA, 33, AB, 3F, 15, CB, D7, 23, 96, 9C, DE, 9E, 30, 76, 06, C7, 7D, 05, A3, 68, D9, A7, 65, 9C, DF, BC, E4, 89, ED, 4B, 2A, E0, 58, 76, 24, 67, 03, C5, 9D, AA, BD, 34, 89, 0A, CF, 7B, 64, 7B, 32, 21, 67, 8F, 64, 2D, 1F, 9A, D5, 4B, 9F, 6E, F0, 12, 63, AC, 33, AB, 83, B6, 83, 65, B1, AB, C3, 5A, 4A, A7, 45, 28...
 
[+]

Entropy:
6.9835

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
2.2 MB (2,267,648 bytes)

Scan ActualDrawing.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.