» ApMsgFwd.exe
Overview
Analysis
File Details
Programs (1)

ApMsgFwd.exe

ApMsgFwd

Alps Electric Co., LTD.

This is installed with ThinkPad UltraNav Driver.

File name:

ApMsgFwd.exe

Publisher:

Alps Electric Co., LTD. (signed and verified)

Product:

ApMsgFwd

Version:

7, 0, 1600, 12

MD5:

f0b9f94bbd2b6873bc2a164f8a1eb636

SHA-1:

40c5f65e4aa2229270e02be676ca10333c919744

SHA-256:

bcbb8af3223217bf1de7c4f6f50dcb8c1812dd8496230b78ff0663de896a1dfc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 9:16:28 PM UTC (today)

File size:

61.3 KB (62,760 bytes)

Product version:

7, 0, 1600, 12

Original file name:

ApMsgFwd.exe

File type:

Executable application (Win64 EXE)

Language:

Japanese (Japan)

Digital Signature

Signed by:

Alps Electric Co., LTD.

Authority:

VeriSign, Inc.

Valid from:

4/14/2008 5:00:00 PM

Valid to:

4/15/2009 4:59:59 PM

Subject:

CN="Alps Electric Co., LTD.", OU=HQ, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Alps Electric Co., LTD.", L=1-7 Yukigaya Otsuka-cho Ota-ku, S=Tokyo, C=JP

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1EEF6993822FA73AC50CD95402AFEA00

File PE Metadata

Compilation timestamp:

2/9/2009 6:29:12 AM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

768:1IXQCpWZccgUiDUs4boVf933TcD/wPmtVQ939KpSgNxguo1khJ/MiGL5dSUSuqd7:1I6Qj74cx92/wOYtydNxgHLS3b1gjoH

Entry address:

0x27A0

Entry point:

48, 8B, C4, 48, 81, EC, A8, 00, 00, 00, 48, 89, 58, 18, 48, 89, 78, 20, 48, 8D, 48, 88, FF, 15, 04, 7A, 00, 00, 90, FF, 15, F5, 79, 00, 00, 48, 8B, C8, 33, D2, 41, B8, 94, 00, 00, 00, FF, 15, D4, 79, 00, 00, 48, 8B, D8, 48, 85, C0, 75, 0A, B8, FF, 00, 00, 00, E9, 62, 02, 00, 00, C7, 00, 94, 00, 00, 00, 48, 8B, C8, FF, 15, 8B, 78, 00, 00, 85, C0, 75, 1E, FF, 15, B9, 79, 00, 00, 48, 8B, C8, 4C, 8B, C3, 33, D2, FF, 15, 93, 79, 00, 00, B8, FF, 00, 00, 00, E9, 31, 02, 00, 00, 8B, 43, 10, 89, 05, 6C, C8, 00, 00... 
[+]

Entropy:

5.9631

Code size:

33 KB (33,792 bytes)

The file ApMsgFwd.exe has been discovered within the following programs.

ThinkPad UltraNav Driver by Alps Electric Co.

This package installs the software (ThinkPad UltraNav driver) to enable the following devices, IBM ThinkPad UltraNav Pointing Devices and ThinkPad UltraNav Pointing Devices.

www.alps.com/usa/index.html

7% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.