home

SkypeUpdateEx.exe

skype

Ren Jing

It runs as a windows Service named “SkypeUpdateEx”.
Publisher:
skype.cog.cc  (signed by Ren Jing)

Product:
skype

Description:
SkypeUpdateEx

Version:
2000.0.0.106

MD5:
08e72dc832fbfac9b23948b718a34a31

SHA-1:
4902169742a7b803b195387b7a18f848acb3b027

SHA-256:
dc0a3a63bd9afebbee6bc6f9e97c7227b98eb4109ec2eb87b912100ab7366861

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 5:12:22 PM UTC  (today)

File size:
163.4 KB (167,352 bytes)

Product version:
2000.0.0.106

Copyright:
Copyright © 2016

Original file name:
SkypeUpdateEx.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\skypeupdateex\skypeupdateex.exe

Digital Signature
Signed by:
Ren Jing

Authority:
WoSign CA Limited

Valid from:
8/26/2015 11:14:33 PM

Valid to:
8/26/2016 11:14:33 PM

Subject:
CN=Ren Jing, L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
4AABE7C4E55AE3765929658935834CFD

File PE Metadata
Compilation timestamp:
3/18/2016 5:51:22 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:c4P2q8F9QM4DwhX7HhjKTQeibsI8eRNhSI6vA4hcSFBjtm:c4PyQM4cVIhibsI7p

Entry address:
0x28466

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 08, 00, 00, 00, 08, 00, 00, 00, 08, 00, 00, 00, 20, 00, 00, 00, 20, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 10, 00, 00, 00, 20, 00, 00, 00, 10, 00, 00, 00, 20, 00, 00, 00, 80, 00, 00, 00, 80, 00, 00, 00, 02, 01, 00, 00, 02, 01, 00, 00, 10, 00, 00, 00, 11, 00, 00, 00, 12, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 07, 00, 00, 00, 09, 00, 00, 00, 06, 00, 00, 00, 0A, 00, 00, 00, 05, 00, 00, 00, 0B, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
156 KB (159,744 bytes)

Service
Display name:
SkypeUpdateEx

Type:
Win32OwnProcess, InteractiveProcess


Scan SkypeUpdateEx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.