home

autoshutdown.exe

PC Auto Shutdown

zhaoping liu

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PC Auto Shutdown’.
Publisher:
GoldSolution Software, Inc.  (signed by zhaoping liu)

Product:
PC Auto Shutdown

Description:
Auto shutdown computers at schedule time

Version:
5.2.0.0

MD5:
721676428c4933bfa02e5ec0b04b5fd8

SHA-1:
363f054f6df1af1a2df32ff0bb88112cc3b35355

SHA-256:
de85eb4c2fb321331cd8434d8dd7765f1d13ba1b785e2de7a0c0fe942c20930c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:41:43 PM UTC  (today)

File size:
1.4 MB (1,435,952 bytes)

Product version:
5.2

Copyright:
Copyright 2003-2012 GoldSolution Software

Trademarks:
PC Auto Shutdown

Original file name:
PC Auto Shutdown

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pc auto shutdown\autoshutdown.exe

Digital Signature
Signed by:
zhaoping liu

Authority:
The USERTRUST Network

Valid from:
1/18/2010 1:00:00 AM

Valid to:
1/18/2013 12:59:59 AM

Subject:
CN=zhaoping liu, O=zhaoping liu, STREET="415 Gateway Drive, apt 33", L=Pacifica, S=CA, PostalCode=94044, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
5FDAFF1C5F7FF6330F6090FAA6CA4C47

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:hnKfGtHDFUrI4jfcohFSU6zNdulM7VVzjYckS:5t5ec4jfcIFSUou6rzjnF

Entry address:
0xB7EB8

Entry point:
55, 8B, EC, B9, 10, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, E8, 7A, 4B, 00, E8, 08, E9, F4, FF, 33, C0, 55, 68, 0D, 87, 4B, 00, 64, FF, 30, 64, 89, 20, 68, 1C, 87, 4B, 00, 6A, FF, 6A, 00, E8, 78, EB, F4, FF, E8, 53, EC, F4, FF, 3D, B7, 00, 00, 00, 0F, 85, 83, 00, 00, 00, 68, 34, 87, 4B, 00, E8, 8E, F4, F4, FF, 8B, 15, 38, B2, 4B, 00, 89, 02, 68, 4C, 87, 4B, 00, 68, 60, 87, 4B, 00, E8, CF, F1, F4, FF, 85, C0, 74, 21, 6A, 00, 6A, 00, A1, 38, B2, 4B, 00, 8B, 00, 50, 68, 4C, 87, 4B, 00, 68, 60...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
734.5 KB (752,128 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PC Auto Shutdown

Command:
"C:\Program Files\pc auto shutdown\autoshutdown.exe"


Scan autoshutdown.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.