home

printartistcraftstudioesd.exe

Print Artist Craft Studio ESD

Nova Development (Avanquest North America Inc)

This is a setup program which is used to install the application. The file has been seen being downloaded from www.avanquest.com and multiple other hosts.
Publisher:
Nova Development   (signed by Nova Development (Avanquest North America Inc))

Product:
Print Artist Craft Studio ESD

Version:
1.1

MD5:
6ab3f165fb83b4fd4941e492dc1d2cf4

SHA-1:
4a57f873c173383334e0d0c323af6606020944ee

SHA-256:
55591883ba44fe5e1b9f6449e0d290367a887c97759d3840284b7e64334ae8d5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:29:09 AM UTC  (today)

File size:
763.7 MB (800,771,032 bytes)

Product version:
1.1

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\printartistcraftstudioesd.exe

Digital Signature
Signed by:
Nova Development (Avanquest North America Inc)

Authority:
Symantec Corporation

Valid from:
9/24/2013 5:00:00 PM

Valid to:
7/10/2014 4:59:59 PM

Subject:
CN=Nova Development (Avanquest North America Inc), O=Nova Development (Avanquest North America Inc), L=Calabasas, S=California, C=US, SERIALNUMBER=C1376174, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
7CEF7E0F21ACD4F6F703E3F1E91D5901

File PE Metadata
Compilation timestamp:
8/2/2002 12:01:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12582912:/mdX/Lmpd+S+YZHFWdAmOpe5RFx62NWf42ZHIh6Kdg06NZ5KGRo0+LVgFoWeGvjz:/OXVYZlwope5RWLAcHIh6KBEBbFoWeSz

Entry address:
0x8AF7

Entry point:
55, 8B, EC, 6A, FF, 68, 20, 43, 41, 00, 68, F0, C3, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F0, 41, 41, 00, 33, D2, 8A, D4, 89, 15, 7C, 93, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 78, 93, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 74, 93, 41, 00, C1, E8, 10, A3, 70, 93, 41, 00, 33, F6, 56, E8, 70, 02, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, D1, 36, 00, 00, FF, 15, F4, 41, 41, 00, A3, 4C, BA, 41, 00, E8...
 
[+]

Entropy:
7.9996

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
76 KB (77,824 bytes)

The file printartistcraftstudioesd.exe has been seen being distributed by the following 12 URLs.

http://www.avanquest.com/.../download_link.php?type=master&id=76aab281b48ff4d17546d62296d0bb5213926296&on=1063240151&oemCodePA=7841165686087011&pId=10017967&bId=10017972&pS=YA485-1001

http://www.avanquest.com/.../download_link.php?type=master&id=391106bad0d080607f532a74af0953bd15644701&on=1066949473&oemCodePA=7038499598186778&pId=10017967&bId=10017972&pS=CN56A32378

http://www.avanquest.com/.../download_link.php?type=master&id=89fe73d6fa8f06952018ec05a950bf7812545051&on=1061245785&oemCodePA=4319163038791896&pId=10017967&bId=10017972&pS=CN46J15105

http://usa.novadevelopment.com/.../PrintArtistCraftStudioESD.exe

http://download.avanquest.com/android.php?id=9f785a0f62ec4a8e65439c30b692cce114712295

http://www.avanquest.com/.../download_link.php?type=master&id=25b0dbfb5a696f962da676a70a20ead514415431&on=1064372405&oemCodePA=2204101518353290&pId=10017967&bId=10017972&pS=CN522221C5

http://www.avanquest.com/.../download_link.php?type=master&id=36a3547827edcd5b8f476c40c6ac57ab14270874&on=1063968966&oemCodePA=9234317157171609&pId=10017967&bId=10017972&pS=CN4AU17310

http://www.avanquest.com/.../download_link.php?type=master&id=b30f5af0c6d7ee06c9f5c58cf11055c715900060&on=1067283929&oemCodePA=3574576796725608&pId=10017967&bId=10017972&pS=cn55c331qg

http://www.avanquest.com/.../download_link.php?type=master&id=1b7874740168b47d94c9ca382a4b395d12618472&on=1061451094&oemCodePA=4833863389189379&pId=10017967&bId=10017972&pS=CN47G154W6

http://www.avanquest.com/.../download_link.php?type=master&id=06edce77a7afca38d9c25e604b8c824b14594444&on=1064927502&oemCodePA=3531393397328652&pId=10017967&bId=10017972&pS=CN522222WQ

http://www.avanquest.com/.../download_link.php?type=master&id=a6c5de150646907579f58f2f997848e314873513&on=1065671571&oemCodePA=3402305093485070&pId=10017967&bId=10017972&pS=CN55D332HK

http://www.avanquest.com/.../download_link.php?type=master&id=dfd91e9920c2b97f6cf011300f2a596314629781&on=1065013417&oemCodePA=4427593012139137&pId=10017967&bId=10017972&pS=CN52P23345

Scan printartistcraftstudioesd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.