» drevo4.exe
Overview
Analysis
File Details

drevo4.exe

Agelong Tree

Genery Software

File name:

drevo4.exe

Publisher:

Genery Software (signed and verified)

Product:

Agelong Tree

Version:

4.6.6.17

MD5:

0b6c33f000950cdb22e352f543c2dfce

SHA-1:

eb13b0644848b4ab226de33b5fb8956f3be3ea21

SHA-256:

47b640fcf284af70cc33ce0f0a9f18b7ac6eb662bed2366680ec914932cc67b3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/12/2025 2:27:20 PM UTC (today)

File size:

5.1 MB (5,363,496 bytes)

Product version:

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\genery software\drevo 4\drevo4.exe

Digital Signature

Signed by:

Genery Software

Authority:

VeriSign, Inc.

Valid from:

11/22/2012 7:00:00 AM

Valid to:

12/23/2013 6:59:59 AM

Subject:

CN=Genery Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Genery Software, L=Barnaul, S=Altai Krai, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1E8851A4A36CFBE896F2A28EB8271FC7

File PE Metadata

Compilation timestamp:

6/17/2013 11:45:54 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:6Jxr22MhMaWSTqhvJIgdsaU3sdfP6H8G1Zn6CN+/j:6z62KwhvJIgdsaU3sRC9T62+/j

Entry address:

0x1000

Entry point:

68, 01, 70, 1E, 01, E8, 01, 00, 00, 00, C3, C3, 8A, 6E, 2D, C8, FD, B7, 02, C8, D1, 9D, F3, 8C, 4B, 61, 4F, 89, 38, 3D, F7, 2D, 00, AD, BE, 0C, C3, 4B, CC, 6B, FB, 84, 4B, 9B, 7D, 52, 0E, D4, D2, A8, 26, B8, A9, 5A, EA, 42, F2, 05, 8E, 4B, 26, 1E, 0B, D2, 0B, 7E, DD, AB, 3D, B9, 8D, C4, 01, F6, BC, 26, 93, 39, CB, 56, BF, 15, 65, 5C, BE, 3B, B7, 6D, CD, C8, 4C, 65, 8A, 3B, E0, 53, B2, 7A, 2C, E7, 45, 42, E5, 15, 47, 2C, C9, EB, 2F, D1, 32, F1, 9D, FC, 10, 89, 62, 3C, 8D, 34, E2, 09, 9D, AA, 21, F0, E8, C3... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

9.6 MB (10,081,792 bytes)

Scan drevo4.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.