home

AhkAgent.exe

EX AntiMalware

Ahkun CO., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ExAntiMalware’.
Publisher:
Ahkun CO., LTD.  (signed and verified)

Product:
EX AntiMalware

Version:
6,0,4,19

MD5:
29e3deda342c424900d43c9805290ea0

SHA-1:
6432d5ccadc04341467254900b85dd6f21120a6a

SHA-256:
47747c9b44a30a19e441518cafabca6e7e5f952be2ccc845e342b544b4148ade

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 12:22:19 PM UTC  (today)

File size:
1 MB (1,070,208 bytes)

Product version:
6,0,4,1

Copyright:
Ahkun Co., Ltd. All rights reserved.

Original file name:
AhkAgent.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ahkun\exantimalware\enterprise\ahkagent.exe

Digital Signature
Signed by:
Ahkun CO., LTD.

Authority:
GlobalSign nv-sa

Valid from:
11/26/2012 6:53:11 PM

Valid to:
1/19/2015 2:50:43 PM

Subject:
E=info@ahkun.jp, CN="Ahkun CO., LTD.", OU=Engineering Dept, O="Ahkun CO., LTD.", L="Chiyoda Ku, Kanda Sudachou", S=Tokyo, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121844DBA507FCFF8E5ED06E8F45D51C1A1

File PE Metadata
Compilation timestamp:
3/26/2014 5:49:10 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:WIbpLstAVTQ5bZsK6g+JuLArR9X1uPso1TXyC3GuM8zqa5S9dweYTMSq30V/:WIbhs2VUbZh+IA190so9hM8zq95YTBV/

Entry address:
0x970A4

Entry point:
E8, A6, 7C, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 90, 66, 4D, 00, 75, 02, F3, C3, E9, 28, 7D, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, BD, 30, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 61, 08, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, E9, 7D, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 38, 34, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73...
 
[+]

Entropy:
6.5285

Code size:
722 KB (739,328 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ExAntiMalware

Command:
"C:\Program Files\ahkun\exantimalware\enterprise\ahkagent.exe" \boot_run


Scan AhkAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.