home

alpemixcm.exe

Alpemix

Teknopars Bilisim Teknolojileri San. ve Tic. Ltd. Sti.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Alpemix’.
Publisher:
Teknopars  (signed by Teknopars Bilisim Teknolojileri San. ve Tic. Ltd. Sti.)

Product:
Alpemix

Version:
1.0.0.1209

MD5:
93f89e65ba0f003769e9f8cfe40af189

SHA-1:
26242edc0058d9c6663ce6514bae581848fe7641

SHA-256:
765a921ac5daf68b1c3fb482e6e7328d9b5b061611585a42338d754bf569e053

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 3:18:13 PM UTC  (today)

File size:
843.2 KB (863,472 bytes)

Product version:
1.0.0.0

Copyright:
Teknopars 2015

Trademarks:
Alpemix

Original file name:
Alpemix

File type:
Executable application (Win32 EXE)

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\downloads\alpemixcm.exe

Digital Signature
Signed by:
Teknopars Bilisim Teknolojileri San. ve Tic. Ltd. Sti.

Authority:
VeriSign, Inc.

Valid from:
10/14/2014 3:00:00 AM

Valid to:
11/13/2017 1:59:59 AM

Subject:
CN=Teknopars Bilisim Teknolojileri San. ve Tic. Ltd. Sti., O=Teknopars Bilisim Teknolojileri San. ve Tic. Ltd. Sti., L=Istanbul, S=Türkiye, C=TR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0CDBDE77FAF52F44BFE5112A19F5C422

File PE Metadata
Compilation timestamp:
10/2/2016 4:05:50 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:VBoiWG1tShfE/i8u16o0XLr/+pJjji/mGXcSjip:vojJhfE68YYzUu/mBQip

Entry address:
0x281540

Entry point:
60, BE, 00, 50, 5C, 00, 8D, BE, 00, C0, E3, FF, C7, 87, D4, 84, 1F, 00, D0, AC, 97, 62, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
756 KB (774,144 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Alpemix

Command:
C:\users\{user}\downloads\alpemixcm.exe


Scan alpemixcm.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.