home

Apoint.exe

Alps Pointing-device Driver

Alps Electric Co., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Apoint’. This is installed with NX PAD Driver.
Publisher:
Alps Electric Co., LTD.  (signed and verified)

Product:
Alps Pointing-device Driver

Description:
NX PAD

Version:
7, 1, 904, 47

MD5:
c199380e1f34f1d69955c8bcbbdb6e46

SHA-1:
aa5e1357716c95cd1a3438730e75f5cb44198505

SHA-256:
660a7bb6c37f5b9d8c93e27e63291916f84f035c76c3f5bed44e878929b160b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:07:01 PM UTC  (today)

File size:
322.9 KB (330,616 bytes)

Product version:
7, 1, 904, 47

Copyright:
Copyright (C) 1999-2012 Alps Electric Co., Ltd.

Original file name:
Apoint.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\apoint2k\apoint.exe

Digital Signature
Signed by:
Alps Electric Co., LTD.

Authority:
VeriSign, Inc.

Valid from:
3/31/2011 9:00:00 AM

Valid to:
3/31/2012 8:59:59 AM

Subject:
CN="Alps Electric Co., LTD.", OU=HQ, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Alps Electric Co., LTD.", L=1-7 Yukigaya Otsuka-cho Ota-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
05466CAD10AF83776DF87BEB6D1BA2FE

File PE Metadata
Compilation timestamp:
2/14/2012 8:02:22 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:smSK1St+ZaKJ0paV0RGfhZ85LIQ+mSvWz320pm4NO9SJRJrxLkU1/lcyl3Mn8naM:VSXhKJ0pa+AseQkv43tpacJRfnWyNuAN

Entry address:
0x1E1A0

Entry point:
48, 8B, C4, 48, 81, EC, A8, 00, 00, 00, 48, 89, 58, 18, 48, 89, 78, 20, 48, 8D, 48, 88, FF, 15, 6C, F1, 00, 00, 90, FF, 15, CD, EF, 00, 00, 48, 8B, C8, 33, D2, 41, B8, 94, 00, 00, 00, FF, 15, C4, EF, 00, 00, 48, 8B, D8, 48, 85, C0, 75, 0A, B8, FF, 00, 00, 00, E9, 62, 02, 00, 00, C7, 00, 94, 00, 00, 00, 48, 8B, C8, FF, 15, 3B, F1, 00, 00, 85, C0, 75, 1E, FF, 15, 91, EF, 00, 00, 48, 8B, C8, 4C, 8B, C3, 33, D2, FF, 15, 93, EF, 00, 00, B8, FF, 00, 00, 00, E9, 31, 02, 00, 00, 8B, 43, 10, 89, 05, E4, 07, 02, 00...
 
[+]

Entropy:
5.8285

Code size:
172.5 KB (176,640 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Apoint

Command:
C:\Program Files\apoint2k\apoint.exe


The file Apoint.exe has been discovered within the following program.

NX PAD Driver  by Alps Electric Co.
www.alps.com/usa/index.html
6% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.