home

NaviStudio3 User.exe

NAVI＊STUDIO３ User

Pioneer Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NaviStudio3User’.
Publisher:
Pioneer Corporation  (signed and verified)

Product:
NAVI＊STUDIO３ User

Version:
3, 1, 0, 20

MD5:
7919d76687c0a0e1fa97c98204d10c75

SHA-1:
e8ae85d58808a0ee3f3a0a68ea0651fe27307642

SHA-256:
99409379b6aaf7660a9f58c66ac127897173a12cbb7570f577619f30707a451a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 7:00:08 PM UTC  (today)

File size:
105.9 KB (108,400 bytes)

Product version:
3, 1, 0, 0

Copyright:
Copyright (C) PIONEER CORPORATION 2009

Original file name:
NaviStudio3 User.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\pioneer\navistudio3\navistudio3 user.exe

Digital Signature
Signed by:
Pioneer Corporation

Authority:
VeriSign, Inc.

Valid from:
2/17/2009 9:00:00 AM

Valid to:
2/18/2010 8:59:59 AM

Subject:
CN=Pioneer Corporation, OU=Components Business Division, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Pioneer Corporation, L=Kawasaki-shi, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
19DACA4F63F7FCCFF0B0298408F137FC

File PE Metadata
Compilation timestamp:
4/2/2009 5:06:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:Tkdq4mreWjcRRONfLyeLN6wIM86fKolpbTICPjjs09ADzR1J8lHJd+I:TXSWIRefzAD91J8lHJD

Entry address:
0x5A3B

Entry point:
E8, 68, 46, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 8B, 7D, 08, 33, C0, 83, C9, FF, F2, AE, 83, C1, 01, F7, D9, 83, EF, 01, 8A, 45, 0C, FD, F2, AE, 83, C7, 01, 38, 07, 74, 04, 33, C0, EB, 02, 8B, C7, FC, 5F, C9, C3, 55, 8B, EC, 83, EC, 10, 53, FF, 75, 10, 8D, 4D, F0, E8, 1D, F5, FF, FF, 8B, 45, 08, 33, DB, 3B, C3, 75, 28, E8, D1, F9, FF, FF, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 5F, 1D, 00, 00, 83, C4, 14, 38, 5D, FC, 74, 07, 8B, 45, F8, 83, 60, 70...
 
[+]

Entropy:
6.0667

Code size:
64 KB (65,536 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NaviStudio3User

Command:
C:\Program Files\pioneer\navistudio3\navistudio3 user.exe


Scan NaviStudio3 User.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.