» drevo4.exe
Overview
Analysis
File Details

drevo4.exe

Agelong Tree

Genery Software

File name:

drevo4.exe

Publisher:

Genery Software (signed and verified)

Product:

Agelong Tree

Version:

4.0.0.0

MD5:

81364fec21b10329337494dcfa7eed04

SHA-1:

d06f102e2afb8b4d6a447749f3eb56bd16c01eb2

SHA-256:

efaffaafde4ce649d8b569c8b7b5a5149a12e95a1fe9186d349ff6338434acd0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/12/2025 2:02:26 PM UTC (today)

File size:

3.5 MB (3,702,600 bytes)

Product version:

4.0

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\genery software\drevo 4\drevo4.exe

Digital Signature

Signed by:

Genery Software

Authority:

VeriSign, Inc.

Valid from:

12/1/2010 3:00:00 AM

Valid to:

12/2/2011 2:59:59 AM

Subject:

CN=Genery Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Genery Software, L=Barnaul, S=Altai Krai, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

30BF6B39E00CA2E1FA6AB908BA87F5FA

File PE Metadata

Compilation timestamp:

1/31/2011 10:05:02 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:YZowTTfSL/w3Q4bH7LBktVhY972VhHwg9dG2gDoumyZaJqaQTI:YZomfw/LCkz6IrEDjmy8Jq7I

Entry address:

0x1000

Entry point:

68, 01, 00, C0, 00, E8, 01, 00, 00, 00, C3, C3, A6, 70, 66, 78, E0, 92, ED, 06, 78, 1E, E0, C8, B2, EC, 59, 9E, 88, 1C, AC, C3, 5C, CF, 7F, 80, A5, 1E, 6E, 0C, BC, 11, 43, D3, 18, 4C, C0, 10, 20, D6, DF, 40, 29, 10, 40, B9, 5B, 5B, 3A, 6C, A9, BD, B2, DD, 33, 94, 95, DB, 7F, 76, 45, 02, 80, 87, AC, 0D, 7D, 30, F3, AA, 28, CB, 43, 16, 72, C4, 09, 68, 73, 7B, FB, 93, 4F, 21, A9, DE, A0, 5C, 3F, B8, CC, 7E, B2, 3E, AD, 42, 84, 60, 21, 60, D4, F4, AB, 40, B7, 72, 96, 99, 9E, 1E, DB, 0F, 8C, 24, 38, D5, 3F, F6... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

5.3 MB (5,539,328 bytes)

Scan drevo4.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.