home

Pianists.exe

Tildes Biuras 2006

Tilde, SIA

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Pianists’.
Publisher:
SIA Tilde  (signed by Tilde, SIA)

Product:
Tildes Biuras 2006

Description:
Keyboard Pianist

Version:
5.5

MD5:
685aebd580aae6fbf53ec17dd4ab832c

SHA-1:
8fd67f9d2b847de129d00c9dbe8679d6d6e0000e

SHA-256:
d1432241e5b52687cffa26245864218f5fd91c47531f243f6cb6ebea2f3a5cfd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 9:12:28 PM UTC  (today)

File size:
165.5 KB (169,496 bytes)

Product version:
5.5

Copyright:
Copyright (c) 1994-2006 SIA Tilde

Original file name:
Pianists.exe

File type:
Executable application (Win32 EXE)

Language:
Lithuanian (Lithuania)

Common path:
C:\Program Files\tildes biuras 2006\pianists.exe

Digital Signature
Signed by:
Tilde, SIA

Authority:
VeriSign, Inc.

Valid from:
3/29/2005 3:00:00 AM

Valid to:
4/9/2006 2:59:59 AM

Subject:
CN="Tilde, SIA", OU=Digital ID Class 3 - Microsoft VBA Software Validation v2, O="Tilde, SIA", L=Riga, S=Latvia, C=LV

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4913416357F4EFBAF7368AA948A8A35D

File PE Metadata
Compilation timestamp:
10/21/2005 5:16:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
3072:/BkLkk6Fqo0Bwa6VuzIs4iH6qYDeZv0ct3C:SpN6o4iVYDel0

Entry address:
0xA4AD

Entry point:
6A, 74, 68, 80, 21, 41, 00, E8, F3, 01, 00, 00, 33, DB, 89, 5D, E0, 53, 8B, 3D, B4, 00, 41, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 5D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, 99, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, 99, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 5D, FC, 6A, 02, FF, 15, 1C, 07, 41, 00, 59, 83, 0D, 5C, 63, 41, 00, FF, 83...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
60 KB (61,440 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Pianists

Command:
C:\Program Files2\tildes~1\pianists.exe \startup


Scan Pianists.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.