» drevo4.exe
Overview
Analysis
File Details

drevo4.exe

Agelong Tree

Genery Software

File name:

drevo4.exe

Publisher:

Genery Software (signed and verified)

Product:

Agelong Tree

Version:

4.2.8.28

MD5:

d1c3a4a2c4b4630b4c93b257d474eaae

SHA-1:

5fdab828af7e45e429f4224d73d6195710c6d9b5

SHA-256:

ca1af4d7a7e8f228181eec6f035c6268681c75ecfc27759a9a6b9e6440f0d000

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/12/2025 2:15:25 PM UTC (today)

File size:

4 MB (4,188,488 bytes)

Product version:

4.2

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\genery software\drevo 4\drevo4.exe

Digital Signature

Signed by:

Genery Software

Authority:

VeriSign, Inc.

Valid from:

12/1/2010 5:00:00 AM

Valid to:

12/2/2011 4:59:59 AM

Subject:

CN=Genery Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Genery Software, L=Barnaul, S=Altai Krai, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

30BF6B39E00CA2E1FA6AB908BA87F5FA

File PE Metadata

Compilation timestamp:

8/28/2011 3:02:06 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:JZIqnLOAnCm+GQKHPmbBB3jHgy2Fn56kEgegG01wIpUQWthHTg9eACU83SoV9aJm:ZUTKHPA73zgTV56k5/BCIyQ8k81ZQJqh

Entry address:

0x1000

Entry point:

68, 01, 90, D3, 00, E8, 01, 00, 00, 00, C3, C3, 86, A2, 3B, 27, 31, B5, BD, 26, 31, 74, 88, A1, 27, 6E, 83, 16, FC, 9F, 88, 23, AD, BC, 12, C1, 2D, 89, EA, DB, 39, 6C, E2, 47, 56, B8, 22, B1, BE, 12, 47, 43, D2, B5, 1D, 61, 14, 51, 42, 98, 16, 85, 1B, 94, 30, 65, 14, C3, 79, E3, 50, 1D, FD, DD, 46, AE, 4E, 58, 2B, 4E, 89, 37, BE, 55, E5, 6F, 0D, F7, 7B, A0, 8D, 40, DF, 84, B4, 2E, 4D, 56, 40, 7E, 28, 9F, 34, E7, 6A, 30, B3, B8, 01, 0A, 66, 2E, 46, DE, 97, C3, 4F, 57, 60, B0, D7, 12, 8B, E4, 72, 04, DA, CF... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

6.2 MB (6,460,928 bytes)

Scan drevo4.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.