home

hskrt32.exe

UBT (EU) Ltd.

The executable hskrt32.exe has been detected as malware by 6 anti-virus scanners.
Publisher:
UBT (EU) Ltd.  (signed and verified)

Description:
Hskr Service Ext

Version:
1.4.0.8710

MD5:
59ba32002de4a3b089c5ae690d45958b

SHA-1:
1f158ada1b3680ba61e54aa7172bcbaa39b78671

SHA-256:
306c183a43038d44f5e2188fa77753ac71d93ddc0b5eb4850b64d2689503412d

Scanner detections:
6 / 68

Status:
Malware

Analysis date:
11/24/2024 11:51:47 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Barys.1732
920

Bitdefender
Gen:Variant.Barys.1732
1.0.20.1050

Emsisoft Anti-Malware
Gen:Variant.Barys.1732
8.14.07.29.12

F-Secure
Gen:Variant.Barys.1732
11.2014-29-07_3

G Data
Gen:Variant.Barys.1732
14.7.24

MicroWorld eScan
Gen:Variant.Barys.1732
15.0.0.630

File size:
20.8 KB (21,296 bytes)

Product version:
1.4.0.8710

Original file name:
hskrt.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\common files\msobe2\hskrt32.exe

Digital Signature
Signed by:
UBT (EU) Ltd.

Authority:
DigiCert Inc

Valid from:
10/17/2013 1:00:00 AM

Valid to:
10/20/2016 1:00:00 PM

Subject:
CN=UBT (EU) Ltd., O=UBT (EU) Ltd., L=Warwick, S=Warwickshire, C=GB, PostalCode=CV34 6BY, STREET=Exchange Place, STREET=Poseidon Way, SERIALNUMBER=04938684, OID.1.3.6.1.4.1.311.60.2.1.3=GB, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0A85174C41FCDDD1741EB80F47B36C29

File PE Metadata
Compilation timestamp:
5/29/2014 10:33:51 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
384:+3kUjWd+Sq5hDEvr7uEBmculUQTaElwKwjZdZJzygOXN:+vjr5hDkjEvgeN

Entry address:
0x1550

Entry point:
55, 8B, EC, 83, EC, 20, 53, 56, 57, C7, 45, F4, 09, 00, 00, 00, FF, 15, 44, 30, 40, 00, 8B, F0, 8D, 45, F8, 50, 68, 08, 00, 02, 00, C7, 45, F0, 00, 00, 00, 00, C7, 45, F8, 00, 00, 00, 00, FF, 15, 98, 30, 40, 00, 50, FF, 15, 34, 30, 40, 00, 85, C0, 0F, 84, 2E, 02, 00, 00, 8D, 45, FC, 50, 6A, 00, 6A, 00, 6A, 01, FF, 75, F8, C7, 45, FC, 00, 00, 00, 00, FF, 15, 2C, 30, 40, 00, 8B, 45, FC, 8B, 1D, 60, 30, 40, 00, 85, C0, 74, 67, 40, 50, 6A, 08, 56, FF, D3, 8B, F8, 85, FF, 74, 5A, 8D, 45, FC, 50, FF, 75, FC, 57...
 
[+]

Entropy:
6.2319

Developed / compiled with:
Microsoft Visual C++

Code size:
5.5 KB (5,632 bytes)

Remove hskrt32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.