home

ALPHASH.EXE

AlphaShift

Cloanto Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CloantoAlphaShift’. This is installed with Accenti.
Publisher:
Cloanto Italia srl  (signed by Cloanto Corporation)

Product:
AlphaShift

Description:
AlphaShift Application

Version:
4, 1, 2, 0

MD5:
b7c244f4205967bd050a3da8bcdfbd8a

SHA-1:
cbb608b751138282f301bf2a1f80cdfd821c323d

SHA-256:
90d7b548c3c2ec782708005f57a3cffd8ecfa9ccfb7f6b84b88bce1b937649f3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:37:45 PM UTC  (today)

File size:
237.8 KB (243,552 bytes)

Product version:
4, 1, 2, 0

Copyright:
Copyright © 1998-2014 Cloanto Italia srl

Trademarks:
Cloanto® is a registered trademark of Cloanto Italia srl

Original file name:
ALPHASH.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\cloanto\alphashift\alphash.exe

Digital Signature
Signed by:
Cloanto Corporation

Authority:
VeriSign, Inc.

Valid from:
11/14/2013 1:00:00 AM

Valid to:
12/15/2014 12:59:59 AM

Subject:
CN=Cloanto Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cloanto Corporation, L=Las Vegas, S=Nevada, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
49DBF43A02978441E4E9531C03274419

File PE Metadata
Compilation timestamp:
5/13/2014 11:05:38 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:WqsKEFXTkUuHCVPAZLmkp/QkYjOeJHnAING:xs1FX7uHCVPAZakpot1vG

Entry address:
0x16119

Entry point:
E8, FC, 66, 00, 00, E9, 79, FE, FF, FF, CC, 68, B0, 44, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, F8, A7, 42, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 0C, 68, D8, 81, 42, 00, E8, 9B, FF, FF, FF, 6A, 0E, E8, 64, 02, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B...
 
[+]

Code size:
136 KB (139,264 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CloantoAlphaShift

Command:
C:\Program Files\cloanto\alphashift\alphash.exe


The file ALPHASH.EXE has been discovered within the following program.

Accenti  by Cloanto
www.accenti.it
About 1% of users remove it
 
Powered by Should I Remove It?

Scan ALPHASH.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.