home

AhkAgent.exe

EX AntiMalware

Ahkun CO., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ExAntiMalware’.
Publisher:
Ahkun CO., LTD.  (signed and verified)

Product:
EX AntiMalware

Version:
6,0,2,5

MD5:
639bebd1fc9da4e2dbe1ca964800c8f5

SHA-1:
d19012e627696f31b92b14a1f384e831dcf9a0cb

SHA-256:
14183f807a34e77ceb601813307abd42de423eb071d28f2818bb086e8c2c4003

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 5:51:58 AM UTC  (today)

File size:
1.1 MB (1,101,512 bytes)

Product version:
6,0,2,5

Copyright:
Ahkun Co., Ltd. All rights reserved.

Original file name:
AhkAgent.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ahkun\exantimalware\enterprise\ahkagent.exe

Digital Signature
Signed by:
Ahkun CO., LTD.

Authority:
GlobalSign nv-sa

Valid from:
11/7/2011 6:49:14 PM

Valid to:
12/19/2012 2:50:44 PM

Subject:
E=info@ahkun.jp, CN="Ahkun CO., LTD.", OU=Engineering Dept, O="Ahkun CO., LTD.", L="Chiyoda Ku, Kanda Sudachou", S=Tokyo, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C7ED00C50D0CF1EA64A3B44F453BBF33

File PE Metadata
Compilation timestamp:
5/18/2012 11:24:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:8B35XXWyVuU1Is9v6YvvhjTBDvWEIJKpoapuMQfFkQBSlIC/KD8kQePAmZdwd+JT:qBWyYU1bv6kICyMkk56wkQePDl9c54

Entry address:
0x99195

Entry point:
E8, 25, 7E, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 60, 86, 4D, 00, 75, 02, F3, C3, E9, A7, 7E, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 1C, 35, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 61, 08, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 68, 7F, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 97, 38, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73...
 
[+]

Entropy:
6.5118

Code size:
731 KB (748,544 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ExAntiMalware

Command:
"C:\Program Files\ahkun\exantimalware\enterprise\ahkagent.exe" \boot_run


Scan AhkAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.