home

skype380115.exe

Skype

Skype Technologies SA

This is a setup program which is used to install the application. The file has been seen being downloaded from software.oldversion.com and multiple other hosts.
Publisher:
Skype Technologies S.A.  (signed by Skype Technologies SA)

Product:
Skype

Description:
Skype

Version:
3.8.0.115

MD5:
28944aee65e32efeac509f5cb1ae2fa4

SHA-1:
7361a189a58a31cb7a7cb728971b9d9ae71c1db5

SHA-256:
e81c26047e52ced499384ae0de656c505bb271a18227a924b4d1f2dfb084f694

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 11:16:03 AM UTC  (today)

File size:
21.3 MB (22,300,968 bytes)

Product version:
3.8

Copyright:
(c) Skype Technologies S.A.

Original file name:
SkypeSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\skype380115.exe

Digital Signature
Signed by:
Skype Technologies SA

Authority:
VeriSign, Inc.

Valid from:
5/16/2007 10:00:00 AM

Valid to:
5/22/2008 9:59:59 AM

Subject:
CN=Skype Technologies SA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Skype Technologies SA, L=Luxembourg, S=Luxembourg, C=LU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
38F706F135D2B1D5CC8F32D4E358E274

File PE Metadata
Compilation timestamp:
6/20/1992 8:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:+OZBwv7C74L2bq8hy00LfVh57eVWG+sskPlhLYPEqJoJ98WX:+Labq07YfVh5qVf/lhcEqJ

Entry address:
0xBF2A8

Entry point:
55, 8B, EC, 83, C4, E8, 33, C0, 89, 45, EC, 89, 45, E8, B8, 48, EF, 4B, 00, E8, F4, 7F, F4, FF, 33, C0, 55, 68, FC, F3, 4B, 00, 64, FF, 30, 64, 89, 20, A1, F0, 3F, 4C, 00, C6, 00, 01, E8, D9, FA, FF, FF, 84, C0, 74, 46, A1, 30, 41, 4C, 00, 8B, 00, 33, D2, 52, 50, 8D, 45, E8, E8, 12, AD, F4, FF, 8B, 4D, E8, 8D, 45, EC, BA, 10, F4, 4B, 00, E8, 72, 5D, F4, FF, 8B, 45, EC, E8, A6, 48, FF, FF, 6A, 00, 6A, 00, A1, 30, 41, 4C, 00, 8B, 00, 50, 68, FF, FF, 00, 00, E8, 50, 8D, F4, FF, E9, BC, 00, 00, 00, A1, F8, 42...
 
[+]

Entropy:
7.9556

Developed / compiled with:
Microsoft Visual C++

Code size:
761.5 KB (779,776 bytes)

The file skype380115.exe has been discovered within the following program.

CustoPackTools  by neOceane
CustoPackTools has been seen bundling the Ask.com toolbar during installation as an option. "In partnership with Ask.com, CustoPack Tools can suggest you to install a free toolbar.
www.custopack.com
About 7% of users remove it
 
Powered by Should I Remove It?

The file skype380115.exe has been seen being distributed by the following 5 URLs.

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQwMjU2MTY2OTtzOjI6ImlkIjtpOjQ2MztzOjQ6ImZpbGUiO3M6MTU6InNreXBlMzgwMTE1LmV4ZSI7czozOiJ1cmwiO3M6NDk6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy9za3lwZS0zLTgtMC0xMTUiO3M6NDoicGFzcyI7czozMjoiYWZmNjUyYWExNWZjYjA3MGVhN2IwNDBmNmYzZjVlOTYiO30=

http://linkz.ge/getfile.php?id=08043C3C&access_key=NmQzNjUzN2QxMDQ1NWE4ODEzMWIxMmY5N2RmZTZmN2UxYjU3ZDIzODIzMzkzZGQ2YTFmMWQwOWRhYjZlYmMzODA3&captcha=333330

http://skype.indirsan.com/.../skype38indirsan.exe

http://i.download.idg.pl/fannef/66e1ebfde1612968f9853904df22d78c/567db0ce//zx/vol2/w95/irc/skype/.../SkypeSetup.exe

http://download.chat4o.com/SkypeSetup_3.8.0.115.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.