» drevo4.exe
Overview
Analysis
File Details

drevo4.exe

Agelong Tree

Genery Software

File name:

drevo4.exe

Publisher:

Genery Software (signed and verified)

Product:

Agelong Tree

Version:

4.7.2.26

MD5:

8ed355055578e71851aeb02dcbb80405

SHA-1:

463acc02301bd012dc9aa0f662428445e617935e

SHA-256:

c50d7dad795f8ab0cf3114a5f538dc1e75ba0ee8e0eed9deade36577cbdf0352

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 12:52:02 PM UTC (today)

File size:

4.7 MB (4,934,952 bytes)

Product version:

4.7

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\genery software\drevo 4\drevo4.exe

Digital Signature

Signed by:

Genery Software

Authority:

VeriSign, Inc.

Valid from:

11/16/2013 3:00:00 AM

Valid to:

1/16/2016 2:59:59 AM

Subject:

CN=Genery Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Genery Software, L=Barnaul, S=Altai Krai, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6870D59AFDBC0AF1F9E5CB7B6AACDEF3

File PE Metadata

Compilation timestamp:

2/26/2015 7:01:10 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:p49EgSNhNVJb/x7W0g5nxJ/Kou5sBW18/O2QV3FMBklHJAsY:pTgS91iPnx5u5cpG2QEcDY

Entry address:

0x1000

Entry point:

68, 01, 90, 30, 01, E8, 01, 00, 00, 00, C3, C3, EC, 03, 7B, 2B, C4, E8, BC, 23, AE, 37, 7D, 5D, 3B, 16, 91, D1, 52, 07, 63, 70, 20, 87, 7D, 27, 7A, DD, 52, 3B, E3, 43, AD, E2, 3C, 7C, 10, B9, D7, F4, 6F, 93, B3, BB, CF, 72, 62, B7, 91, 6F, C0, 7F, BD, 90, 65, 23, 18, 0F, E1, B0, 2C, 1C, 22, 24, 1A, D7, 0D, 18, EF, BF, 03, EF, 11, 4D, D1, 05, DA, 7A, 2E, 6F, 64, 51, C4, 44, 4E, 32, 6D, 8D, 30, 03, EF, F4, 20, AF, 53, 25, 44, 0D, E4, DC, CE, 43, 3E, 77, 14, E4, FD, 6F, 11, 45, 90, C7, 75, 7F, F4, B6, 32, 85... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

10.4 MB (10,890,752 bytes)

Scan drevo4.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.