home

AutoDaily.exe

AutoDaily

Ahkun CO., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AutoDaily’.
Publisher:
Ahkun Co.,Ltd.  (signed by Ahkun CO., LTD.)

Product:
AutoDaily

Description:
AutoDaily

Version:
727, 0, 0, 1

MD5:
01b75e3b200e269cac437346d3673428

SHA-1:
e8bebe54e6b4d0c8817e97f2f771ece8c9ef5c9e

SHA-256:
cd6f468801a5227a957ed2b00ccd83eab4fcdd8c3e49f0f5fdc3e9571656440c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:54:42 PM UTC  (today)

File size:
609.9 KB (624,568 bytes)

Product version:
727, 0, 0, 1

Copyright:
Copyright (C) 2011-2013 Ahkun Co.,Ltd.

Original file name:
AutoDaily.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ahkun\autodaily\autodaily.exe

Digital Signature
Signed by:
Ahkun CO., LTD.

Authority:
GlobalSign nv-sa

Valid from:
11/26/2012 6:53:11 PM

Valid to:
1/19/2015 2:50:43 PM

Subject:
E=info@ahkun.jp, CN="Ahkun CO., LTD.", OU=Engineering Dept, O="Ahkun CO., LTD.", L="Chiyoda Ku, Kanda Sudachou", S=Tokyo, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121844DBA507FCFF8E5ED06E8F45D51C1A1

File PE Metadata
Compilation timestamp:
5/15/2013 10:22:37 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:v4RSeGDTt7fA+E6vtSl6d7+uA6ruKm3s1nHkfTBQh0TFv:v4RSt7fA+xQEdPVw3s1nH0FQh0V

Entry address:
0x1000

Entry point:
68, 01, 10, 55, 00, E8, 01, 00, 00, 00, C3, C3, EF, 3A, FF, C8, C1, AD, 62, 2C, 8F, B3, B5, CC, 6C, 10, 3E, 8D, 68, 69, E9, 51, 3D, 47, 7D, 82, DB, CC, D0, 9C, 19, C7, 12, A1, 19, EA, B8, B2, C9, 12, E9, 09, CF, 40, F4, 46, A1, 01, 17, 28, 30, 51, 8B, 39, EA, DD, 44, C7, 3D, 06, 0F, F5, 7A, 14, 2C, 4E, D1, 54, B0, D3, 5D, E8, 16, D7, 33, C9, DA, 04, 23, 80, 83, CE, 61, 50, 6C, 55, 8E, AE, 14, 2D, C1, AC, 79, E3, 29, 9B, FC, 51, 0D, CC, 2D, 01, 49, 9B, 52, 2D, 70, 73, E0, D5, D9, E6, A3, 54, BF, 4A, F7, 4B...
 
[+]

Entropy:
7.9538

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
676 KB (692,224 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AutoDaily

Command:
C:\Program Files\ahkun\autodaily\autodaily.exe


Scan AutoDaily.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.