home

SkypeUpdateEx.exe

skype

Ren Jing

It runs as a windows Service named “SkypeUpdateEx”.
Publisher:
skype.cog.cc  (signed by Ren Jing)

Product:
skype

Description:
SkypeUpdateEx

Version:
2000.0.0.106

MD5:
ccbb0e2a49cf7122f87eb555d8cf3dbd

SHA-1:
72d52640ed5920f5865910dbd45130a12f709084

SHA-256:
beae653d6ad54e2105635d4963bddab5afe67ab8a7e9af142d786537c47ba256

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:27:08 AM UTC  (today)

File size:
163.4 KB (167,352 bytes)

Product version:
2000.0.0.106

Copyright:
Copyright © 2016

Original file name:
SkypeUpdateEx.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\skypeupdateex\skypeupdateex.exe

Digital Signature
Signed by:
Ren Jing

Authority:
WoSign CA Limited

Valid from:
8/26/2015 9:14:33 PM

Valid to:
8/26/2016 9:14:33 PM

Subject:
CN=Ren Jing, L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
4AABE7C4E55AE3765929658935834CFD

File PE Metadata
Compilation timestamp:
3/18/2016 3:51:22 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:c4P2q8F9QM4DwhX7HhjKTQeibsI8eRNhSI6rA4hcSFBjtm:c4PyQM4cVIhibsI7t

Entry address:
0x28466

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 08, 00, 00, 00, 08, 00, 00, 00, 08, 00, 00, 00, 20, 00, 00, 00, 20, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 10, 00, 00, 00, 20, 00, 00, 00, 10, 00, 00, 00, 20, 00, 00, 00, 80, 00, 00, 00, 80, 00, 00, 00, 02, 01, 00, 00, 02, 01, 00, 00, 10, 00, 00, 00, 11, 00, 00, 00, 12, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 07, 00, 00, 00, 09, 00, 00, 00, 06, 00, 00, 00, 0A, 00, 00, 00, 05, 00, 00, 00, 0B, 00...
 
[+]

Entropy:
5.9701

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
156 KB (159,744 bytes)

Service
Display name:
SkypeUpdateEx

Type:
Win32OwnProcess, InteractiveProcess


Scan SkypeUpdateEx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.