» sketchdrawer.exe
Overview
Analysis
File Details

sketchdrawer.exe

SoftOrbits Sketch

SoftOrbits

File name:

sketchdrawer.exe

Publisher:

SoftOrbits (signed and verified)

Product:

SoftOrbits Sketch

Version:

1.1.0.0

MD5:

6c2225ba0d2ed2f2acf57465836eb30e

SHA-1:

e005c9d8e066d9dc5c3856511cba28f8756f2fc2

SHA-256:

52c83f84c8965f7d7db36054d756f441f2840e518b9670aa2cadc13c3d68a717

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/8/2025 3:00:17 PM UTC (today)

File size:

15.3 MB (16,086,304 bytes)

Product version:

1.1.0.0

Trademarks:

SoftOrbits

Original file name:

StampRemover.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\sketch drawer\sketchdrawer.exe

Digital Signature

Signed by:

SoftOrbits

Authority:

VeriSign, Inc.

Valid from:

1/21/2012 4:00:00 PM

Valid to:

2/20/2013 3:59:59 PM

Subject:

CN=SoftOrbits, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SoftOrbits, L=Smolensk, S=Smolenskaya, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

144C975B08011FAB22336FED3C9470FA

File PE Metadata

Compilation timestamp:

1/30/2013 3:45:25 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

393216:iOU45nsmuOyzr06T44gW5EEt+PxSUOuFA/ODx9BE3:iN4psmoH3s4gf2U3JDx9BE3

Entry address:

0x16762AE

Entry point:

E9, F3, 1F, 19, FF, 7D, 04, 6C, C8, 2D, 8A, E8, 5E, A6, 03, 74, F9, 04, A1, 54, 4D, B0, C5, AA, DB, 22, 87, 76, 1F, 50, D5, A8, F5, 00, 6D, 02, 7B, FC, 81, 8F, 2B, 34, 3C, 4D, 83, 0A, 75, BD, C0, AF, DE, 9D, F8, 83, EE, 8F, 93, FB, 29, 48, AD, D8, 98, 2D, E2, 7F, 8A, AA, 87, 5A, 83, 9F, 6A, 59, 07, 61, A6, 6F, A8, FE, 01, 1F, BF, C2, AE, 81, 6E, 25, D8, 67, 1A, 46, 3E, 86, F7, 73, 53, 2E, 4D, 8D, F0, 68, 69, FD, B7, 32, 7D, 07, 71, 80, BE, BE, 4F, 22, 51, 28, 4B, 2E, 1A, 3A, 3B, E9, D9, A7, EC, 07, AD, 53... 
[+]

Entropy:

7.8737

Packer / compiler:

Xtreme-Protector v1.05

Code size:

3.4 MB (3,572,224 bytes)

Scan sketchdrawer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.