hskeeq34nfph.exe

PKK OOO

The executable hskeeq34nfph.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
PKK OOO  (signed and verified)

MD5:
9d7510397a1e36eebd7f700e5b7fad96

SHA-1:
0fdac575d8565f9704ca779183a0b13d084843ef

SHA-256:
6bcb46a77330822a8df85eb8a9b7b4014ff48cfd8de0e564165b3fbf2f1f1fb1

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
12/26/2024 8:16:21 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.4.23

File size:
757.9 KB (776,120 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\hskeeq34nfph.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
5/20/2015 2:00:00 AM

Valid to:
5/20/2016 1:59:59 AM

Subject:
CN=PKK OOO, O=PKK OOO, STREET=103 ul.Krasnoarmeiskaya, L=Bryansk, S=Bryansk Region, PostalCode=241037, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009C395A86D91DA63BAC9CEF694A772B43

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x92409

Entry point:
57, E9, 7B, 2C, FF, FF, 00, 00, 52, 65, 67, 69, 73, 74, 65, 72, 43, 6C, 69, 70, 62, 6F, 61, 72, 64, 46, 6F, 72, 6D, 61, 74, 57, 00, 59, 90, 78, 8F, B9, 82, 04, 6A, BD, 4D, 48, 35, 6A, 43, 83, C4, C5, 28, 26, E1, 65, 26, A3, 53, F4, F1, 19, 99, 6E, 33, 97, D7, 12, C2, 46, B0, B9, 1B, EB, 68, 9F, 01, 7A, F2, 5F, 50, F9, 7A, D5, A2, B4, 13, 45, A6, 13, FB, B8, 6E, F1, 0B, 0A, FD, 5F, 48, CF, 28, 21, F7, 54, E8, 20, B4, B9, 4D, 20, D5, 97, 08, B7, CE, 34, E7, 47, BD, AE, E1, 0D, F9, 0E, F4, E7, A5, 0D, 68, 4D...
 
[+]

Code size:
453 KB (463,872 bytes)

Remove hskeeq34nfph.exe - Powered by Reason Core Security