home

Childpiano.exe

Baby Computer Piano

Zhiming Chai

Publisher:
CFSoft  (signed by Zhiming Chai)

Product:
Baby Computer Piano

Description:
Child Computer Piano

Version:
2.6.0.1

MD5:
44f4e56937d90e1f2d8c11b8985d735a

SHA-1:
58baf7da835f24afe528e2ff1ab30bd4236e4f4a

SHA-256:
8f1a99e8330e3c17ea55384839b8da591394ba7a1036d758d812daf1e8eae7b6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 8:00:22 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
Trojan.Generic
1.0.0.1077

File size:
3.7 MB (3,903,664 bytes)

Product version:
2.6.0.1

Copyright:
Copyright (C) 2011

Original file name:
Childpiano.exe

File type:
Executable application (Win32 EXE)

Language:
English

Common path:
C:\users\{user}\appdata\local\cfsoft\childpiano.exe

Digital Signature
Signed by:
Zhiming Chai

Authority:
StartCom Ltd.

Valid from:
11/16/2011 5:13:22 AM

Valid to:
11/16/2013 12:44:44 AM

Subject:
E=ncuchenfeng@gmail.com, CN=Zhiming Chai, L=Nanchang, S=Jiangxi, C=CN, Description=566223-9hK1L2O1nyxQKgrV

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0494

File PE Metadata
Compilation timestamp:
5/19/2012 4:03:46 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:lyzi7NVOoMpNim2/mYCkfyDWz4rpdzgH9NumUjf+eHHf8immmM+J:RNVNon2/mYXwWUrpd0tU7BHHfUMK

Entry address:
0x2AA26

Entry point:
E8, F4, 71, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 14, 17, 47, 00, 75, 02, F3, C3, E9, 76, 72, 00, 00, 6A, 0C, 68, D0, A2, 46, 00, E8, 1D, 18, 00, 00, 33, DB, 89, 5D, E4, 33, C0, 8B, 7D, 08, 3B, FB, 0F, 95, C0, 3B, C3, 75, 1C, E8, 29, 26, 00, 00, C7, 00, 16, 00, 00, 00, 53, 53, 53, 53, 53, E8, FD, 15, 00, 00, 83, C4, 14, 33, C0, EB, 79, 33, C0, 8B, 75, 0C, 3B, F3, 0F, 95, C0, 3B, C3, 74, D6, 33, C0, 38, 1E, 0F, 95, C0, 3B, C3, 74, CB, E8, A1, 77, 00, 00, 89, 45, 08, 3B, C3, 75, 0D, E8, E8, 25, 00, 00, C7, 00...
 
[+]

Entropy:
6.7863

Code size:
345 KB (353,280 bytes)

Scan Childpiano.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.