home

Pianists.exe

Tilde Product Group

Tilde, SIA

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Pianists’.
Publisher:
Tilde SIA  (signed by Tilde, SIA)

Product:
Tilde Product Group

Description:
Keyboard Pianist

Version:
7.0.1.211

MD5:
88a082a4aca79dbf27c8718812da7d9e

SHA-1:
0a0eef4dc63c713f2af66426a916ea67dbb1f349

SHA-256:
7b0d7f3730446bb6a9702298ed4db754392909956e23784380ebd2aed98af86b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:23:56 PM UTC  (today)

File size:
211.8 KB (216,872 bytes)

Product version:
7.0.1.211

Copyright:
© TILDE SIA, 2013

Original file name:
Pianists.exe

File type:
Executable application (Win32 EXE)

Language:
Anglu (Amerikas Savienotas Valstis)

Common path:
C:\Program Files\tildes birojs\pianists.exe

Digital Signature
Signed by:
Tilde, SIA

Authority:
VeriSign, Inc.

Valid from:
4/8/2013 3:00:00 AM

Valid to:
5/9/2015 2:59:59 AM

Subject:
CN="Tilde, SIA", OU=Digital ID Class 3 - Microsoft VBA Software Validation v2, O="Tilde, SIA", L=Riga, S=Latvia, C=LV

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
669F06ED17F9EE9BF6267566B6FF6CB6

File PE Metadata
Compilation timestamp:
10/23/2013 4:42:18 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:+faRcVSkalWcrCSPR6MvP1d/ljRmN4vYpthOEhW3DD4kst:YmuMd/ljRHYvhOGW3DD2

Entry address:
0xD296

Entry point:
E8, 1F, 04, 00, 00, E9, 1C, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 98, 08, 42, 00, 89, 0D, 94, 08, 42, 00, 89, 15, 90, 08, 42, 00, 89, 1D, 8C, 08, 42, 00, 89, 35, 88, 08, 42, 00, 89, 3D, 84, 08, 42, 00, 66, 8C, 15, B0, 08, 42, 00, 66, 8C, 0D, A4, 08, 42, 00, 66, 8C, 1D, 80, 08, 42, 00, 66, 8C, 05, 7C, 08, 42, 00, 66, 8C, 25, 78, 08, 42, 00, 66, 8C, 2D, 74, 08, 42, 00, 9C, 8F, 05, A8, 08, 42, 00, 8B, 45, 00, A3, 9C, 08, 42, 00, 8B, 45, 04, A3, A0, 08, 42, 00, 8D, 45, 08, A3, AC, 08, 42...
 
[+]

Code size:
86.5 KB (88,576 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Pianists

Command:
"C:\Program Files\tildes birojs\pianists.exe" \start


Scan Pianists.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.