» money tree.exe
Overview
Analysis
File Details

money tree.exe

Alawar Entertainment Inc

File name:

money tree.exe

Publisher:

Alawar Entertainment Inc (signed and verified)

MD5:

8b3109c7d87b38945b2004b81f5eb4ee

SHA-1:

284078b3f81558f8df4159488ef5209a17f7c162

SHA-256:

aad18d82af8fd84f837c72fdf9a7e67b6dde8c93b46a1ad8a6f5b0789c9d206d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 8:37:38 AM UTC (today)

File size:

486.8 KB (498,480 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\alawar\moneytree\money tree.exe

Digital Signature

Signed by:

Alawar Entertainment Inc

Authority:

VeriSign, Inc.

Valid from:

12/13/2007 7:00:00 AM

Valid to:

1/2/2009 6:59:59 AM

Subject:

CN=Alawar Entertainment Inc, OU=-, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alawar Entertainment Inc, L=Alexandria, S=Virginia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

72F3743DF8E423F8F36A6E5C1F8A2153

File PE Metadata

Compilation timestamp:

5/8/2008 3:40:36 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:/O0W2OeKxbr1EC2A58AMFSWKAwF4ka6b7MP+Dd29:s2Axbp6I8AMQWKA+77MP+h29

Entry address:

0x1000

Entry point:

68, 01, 40, 47, 00, E8, 01, 00, 00, 00, C3, C3, BF, 1E, E2, 43, 49, AD, 05, 36, 64, 66, 01, EC, 18, AE, 47, 74, C8, D4, 44, 53, 02, 55, 4C, 0B, DD, 94, 90, 43, 5A, 7F, 68, 94, 5A, 05, 3A, F7, 26, 43, C1, 58, 4A, 4B, 24, 0F, 53, A1, 45, A2, BE, A9, 8F, F5, 8F, A4, A9, 65, A4, D6, 09, 25, F8, E0, 9F, DF, A0, AE, 7A, 77, 6A, 40, 61, 52, 9A, 27, 42, EF, 71, B4, A2, 6D, 5E, CC, 1C, 74, 34, 01, B5, 58, 17, ED, 7B, 79, 1F, 01, 4E, 7E, 92, 37, CB, 4D, AD, C6, 87, BF, 9B, 41, C1, CB, 2A, A8, 48, B5, 04, CD, A1, E9... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

28 KB (28,672 bytes)

Scan money tree.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.