home

SkypeUpdateEx.exe

skype

Ren Jing

It runs as a separate (within the context of its own process) windows Service named “SkypeUpdateEx”.
Publisher:
skype.cog.cc  (signed by Ren Jing)

Product:
skype

Description:
SkypeUpdateEx

Version:
2000.1.0.111

MD5:
89cb852b62a6cc8bac80cbde4450220d

SHA-1:
00fa168f9c9882e7d54b90f612ce0d4fde92a285

SHA-256:
c3ab64df8d84247757b0ada3de7fb69e680b133971c0e86489567f8f295ff075

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:27:10 AM UTC  (today)

File size:
164.4 KB (168,376 bytes)

Product version:
2000.1.0.111

Copyright:
Copyright © 2016

Original file name:
SkypeUpdateEx.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\skypeupdateex\skypeupdateex.exe

Digital Signature
Signed by:
Ren Jing

Authority:
WoSign CA Limited

Valid from:
8/26/2015 10:14:33 PM

Valid to:
8/26/2016 10:14:33 PM

Subject:
CN=Ren Jing, L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
4AABE7C4E55AE3765929658935834CFD

File PE Metadata
Compilation timestamp:
5/5/2016 3:41:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:lGbOUEp9QMsPZZ/KDSHedeubsS8emNcSI6rA4hcSFBJf6S:lGbMQMshhKDSHeYubsS7Y7

Entry address:
0x286D6

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 08, 00, 00, 00, 08, 00, 00, 00, 08, 00, 00, 00, 20, 00, 00, 00, 20, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 10, 00, 00, 00, 20, 00, 00, 00, 10, 00, 00, 00, 20, 00, 00, 00, 80, 00, 00, 00, 80, 00, 00, 00, 02, 01, 00, 00, 02, 01, 00, 00, 10, 00, 00, 00, 11, 00, 00, 00, 12, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 07, 00, 00, 00, 09, 00, 00, 00, 06, 00, 00, 00, 0A, 00, 00, 00, 05, 00, 00, 00, 0B, 00...
 
[+]

Entropy:
5.9697

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
157 KB (160,768 bytes)

Service
Display name:
SkypeUpdateEx

Type:
Win32OwnProcess


Scan SkypeUpdateEx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.