home

SkypeUpdateEx.exe

skype

Ren Jing

It runs as a separate (within the context of its own process) windows Service named “SkypeUpdateEx”.
Publisher:
skype.cog.cc  (signed by Ren Jing)

Product:
skype

Description:
SkypeUpdateEx

Version:
2000.1.0.111

MD5:
dec8dd9d9068fbdd2a10fc6745c4b8f1

SHA-1:
d46f1872ae9412b9d9bd8b6be46c123dfb76610c

SHA-256:
5a1afcc64a3c032c42fd995f8259205d1935f771494f425636c286440bc5156b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:26:32 AM UTC  (today)

File size:
164.4 KB (168,376 bytes)

Product version:
2000.1.0.111

Copyright:
Copyright © 2016

Original file name:
SkypeUpdateEx.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\skypeupdateex\skypeupdateex.exe

Digital Signature
Signed by:
Ren Jing

Authority:
WoSign CA Limited

Valid from:
8/26/2015 11:14:33 PM

Valid to:
8/26/2016 11:14:33 PM

Subject:
CN=Ren Jing, L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
4AABE7C4E55AE3765929658935834CFD

File PE Metadata
Compilation timestamp:
5/5/2016 4:41:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:lGbNkZh72EJLa9QMsPZZ/KDSHedeubsS8emNcSI6rA4hcSFBJf6S:lGbyL72EJiQMshhKDSHeYubsS7Y7

Entry address:
0x286D6

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 04, 00, 00, 00, 08, 00, 00, 00, 08, 00, 00, 00, 08, 00, 00, 00, 20, 00, 00, 00, 20, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 10, 00, 00, 00, 20, 00, 00, 00, 10, 00, 00, 00, 20, 00, 00, 00, 80, 00, 00, 00, 80, 00, 00, 00, 02, 01, 00, 00, 02, 01, 00, 00, 10, 00, 00, 00, 11, 00, 00, 00, 12, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 07, 00, 00, 00, 09, 00, 00, 00, 06, 00, 00, 00, 0A, 00, 00, 00, 05, 00, 00, 00, 0B, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
157 KB (160,768 bytes)

Service
Display name:
SkypeUpdateEx

Type:
Win32OwnProcess


Scan SkypeUpdateEx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.