» mkd25setup.exe
Overview
Analysis
File Details
Programs (1)
Downloads (2)

mkd25setup.exe

AhnLab Online Security

AhnLab, Inc.

This is installed with AhnLab Online Security. The file has been seen being downloaded from updateglobal.ahnlab.com and multiple other hosts.

File name:

mkd25setup.exe

Publisher:

AhnLab, Inc. (signed and verified)

Product:

AhnLab Online Security

Version:

2, 5, 0, 51

MD5:

5e361f122f2518656dd206aedc2bd1f7

SHA-1:

ef830f39b77c4c74878f32b9ef88e170f0980ea7

SHA-256:

01b1bc8398144de9331a56fa32704057d9eeef509aff4f668f44e08f7d4d78d0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/28/2024 11:39:14 AM UTC (today)

File size:

211.9 KB (217,032 bytes)

Product version:

2, 5, 0, 51

Original file name:

mkd25setup.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\ahnlab\asp\smart update i\update\patch\40\win\p\aos\ak_1005\s\x64\mkd25setup.exe

Digital Signature

Signed by:

AhnLab, Inc.

Authority:

VeriSign, Inc.

Valid from:

4/27/2012 9:00:00 AM

Valid to:

6/27/2014 8:59:59 AM

Subject:

CN="AhnLab, Inc.", OU=Information System Team, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="AhnLab, Inc.", L=Seongnam, S=Gyeounggi, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5BE7658868EA973EDA24E7EC917198BA

File PE Metadata

Compilation timestamp:

2/6/2013 5:49:14 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:4kFCMQn8Is0paTjEB8qw3bOefJBdxmmMFVUMsXtvg:4kFPQn8IhvGqw3bOidxmmEVU6

Entry address:

0x174F8

Entry point:

55, 8B, EC, 6A, FF, 68, 10, 0B, 42, 00, 68, 62, 76, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 68, B3, 41, 00, 59, 83, 0D, 94, 80, 42, 00, FF, 83, 0D, 98, 80, 42, 00, FF, FF, 15, 6C, B3, 41, 00, 8B, 0D, BC, 7F, 42, 00, 89, 08, FF, 15, 70, B3, 41, 00, 8B, 0D, B8, 7F, 42, 00, 89, 08, A1, 74, B3, 41, 00, 8B, 00, A3, 90, 80, 42, 00, E8, C0, 01, 00, 00, 39, 1D, C0, 61, 42, 00, 75, 0C, 68, 24, 77, 41, 00, FF, 15, 78, B3... 
[+]

Entropy:

6.0749

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

104 KB (106,496 bytes)

The file mkd25setup.exe has been discovered within the following program.

AhnLab Online Security by AhnLab, Inc

Publisher's description - “AhnLab provides safe desktop environments by providing protection against viruses, worms, adwares, spywares, trojans, keyloggers, spybots and much more. Protects against security threats such as virus, worm, trojan horse, and spyware with the integrated engine.”

global.ahnlab.com

About 2% of users remove it

The file mkd25setup.exe has been seen being distributed by the following 2 URLs.

http://updateglobal.ahnlab.com/onetouch/patch/40/win/p/aos/ak_1005/s/.../mkd25setup.exe

Scan mkd25setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.