home

AOKStartup.exe

AOKStartup

Kochi System Development, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AOKStartup’.
Publisher:
Kochi System Development, Inc.  (signed and verified)

Product:
AOKStartup

Version:
1.07

MD5:
194efad664933523ac54b20df9a7f95e

SHA-1:
a25d12bab4c4dd497ea8e7aa7255e96510cdb056

SHA-256:
07b56479feb39ff2a65e246a559a6796d7f85a1feed90acdb536c39cd3396755

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:08:28 PM UTC  (today)

File size:
1.2 MB (1,238,400 bytes)

Product version:
1.07

Copyright:
Copyright (C) Kochi System Development 2007-2009. All rights reserved.

Original file name:
AOKStartup.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ksd\pctalker\aokstartup.exe

Digital Signature
Signed by:
Kochi System Development, Inc.

Authority:
VeriSign, Inc.

Valid from:
8/31/2009 9:00:00 AM

Valid to:
9/1/2010 8:59:59 AM

Subject:
CN="Kochi System Development, Inc.", OU=System Development Division, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Kochi System Development, Inc.", L=Kochi-shi, S=Kochi, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3DF78E4E97310137061E370D30237907

File PE Metadata
Compilation timestamp:
9/28/2009 6:20:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:EJnICkbHIbLjH0HZQTVEaRYpP050zYMzk05004API050ScRYGTcvzHsNPNyrD0NC:5+fRoFE04AAvRvTcLMNs0NC

Entry address:
0x12A4C

Entry point:
E8, 74, 4C, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, 50, 6E, 43, 00, 75, 02, F3, C3, E9, F4, 4C, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, E2, 15, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 3B, 52, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, B3, 4D, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, F2, 15, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8...
 
[+]

Entropy:
5.3840

Code size:
172 KB (176,128 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AOKStartup

Command:
C:\Program Files\ksd\pctalker\aokstartup.exe \startup


Scan AOKStartup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.