× Cookie が無効になっています。 このサイトを正しく動作させるには、Cookie を有効にする必要があります
SHA256: 6d880eea5603147eda5bfa7ac8cb6294d184ac5fbc46ea357380a45a9814fa51
ファイル名: 208d150aef1cca9956f763878153bde7
検出率: 0 / 64
分析日時: 2019-03-12 16:03:19 UTC (2 ヶ月, 2 週間前) 最新を表示
ウイルス対策ソフト 結果 更新日
Acronis 20190222
Ad-Aware 20190312
AegisLab 20190312
AhnLab-V3 20190312
Alibaba 20190306
ALYac 20190312
Antiy-AVL 20190312
Arcabit 20190312
Avast 20190312
Avast-Mobile 20190312
AVG 20190312
Avira (no cloud) 20190312
Babable 20180918
Baidu 20190306
BitDefender 20190312
Bkav 20190312
CAT-QuickHeal 20190312
ClamAV 20190312
CMC 20190312
Comodo 20190312
CrowdStrike Falcon (ML) 20190212
Cybereason 20190109
Cyren 20190312
DrWeb 20190312
eGambit 20190312
Emsisoft 20190312
Endgame 20190215
ESET-NOD32 20190312
F-Secure 20190312
Fortinet 20190312
GData 20190312
Ikarus 20190312
Sophos ML 20181128
Jiangmin 20190312
K7AntiVirus 20190312
K7GW 20190312
Kaspersky 20190312
Kingsoft 20190312
Malwarebytes 20190312
MAX 20190312
McAfee 20190312
McAfee-GW-Edition 20190312
Microsoft 20190312
eScan 20190312
NANO-Antivirus 20190312
Palo Alto Networks (Known Signatures) 20190312
Panda 20190312
Qihoo-360 20190312
Rising 20190312
SentinelOne (Static ML) 20190311
Sophos AV 20190312
SUPERAntiSpyware 20190307
Symantec Mobile Insight 20190220
TACHYON 20190312
Tencent 20190312
TheHacker 20190308
TotalDefense 20190312
Trapmine 20190301
TrendMicro-HouseCall 20190312
Trustlook 20190312
VBA32 20190312
ViRobot 20190312
Yandex 20190310
ZoneAlarm by Check Point 20190312
Zoner 20190312
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Copyright
(c) 2019 Skype and/or Microsoft

Product Skype
File version 8.41.0.54
Description Skype Setup
Comments This installation was built with Inno Setup.
Signature verification Signed file, verified signature
Signing date 9:09 PM 3/7/2019
Signers
[+] Skype Software Sarl
Status Valid
Issuer Microsoft Code Signing PCA 2011
Valid from 07:07 PM 06/06/2018
Valid to 07:07 PM 05/29/2019
Valid usage Code Signing
Algorithm sha256RSA
Thumbprint 0233B2BFDEB37561B67318D82AC4FBA9F89FA6A9
Serial number 33 00 00 00 F4 84 EF DD 70 78 83 23 6F 00 00 00 00 00 F4
[+] Microsoft Code Signing PCA 2011
Status Valid
Issuer Microsoft Root Certificate Authority 2011
Valid from 08:59 PM 07/08/2011
Valid to 09:09 PM 07/08/2026
Valid usage All
Algorithm sha256RSA
Thumbprint F252E794FE438E35ACE6E53762C0A234A2C52135
Serial number 61 0E 90 D2 00 00 00 00 00 03
[+] Microsoft Root Certificate Authority 2011
Status Valid
Issuer Microsoft Root Certificate Authority 2011
Valid from 11:05 PM 03/22/2011
Valid to 11:13 PM 03/22/2036
Valid usage All
Algorithm sha256RSA
Thumbprint 8F43288AD272F3103B6FB1428485EA3014C0BCFE
Serial number 3F 8B C8 B5 FC 9F B2 96 43 B5 69 D6 6C 42 E1 44
Counter signers
[+] Microsoft Time-Stamp service
Status Valid
Issuer Microsoft Time-Stamp PCA 2010
Valid from 08:26 PM 08/23/2018
Valid to 09:26 PM 11/23/2019
Valid usage Timestamp Signing
Algorithm sha256RSA
Thumbrint 744CD34C4A2DA104A91B3A79D8290DBB82E68592
Serial number 33 00 00 00 DA 48 55 02 64 48 9A 34 66 00 00 00 00 00 DA
[+] Microsoft Time-Stamp PCA 2010
Status Valid
Issuer Microsoft Root Certificate Authority 2010
Valid from 09:36 PM 07/01/2010
Valid to 09:46 PM 07/01/2025
Valid usage All
Algorithm sha256RSA
Thumbrint 2AA752FE64C49ABE82913C463529CF10FF2F04EE
Serial number 61 09 81 2A 00 00 00 00 00 02
[+] Microsoft Root Certificate Authority 2010
Status Valid
Issuer Microsoft Root Certificate Authority 2010
Valid from 09:57 PM 06/23/2010
Valid to 10:04 PM 06/23/2035
Valid usage All
Algorithm sha256RSA
Thumbrint 3B1EFD3A66EA28B16697394703A72CA340A05BD5
Serial number 28 CC 3A 25 BF BA 44 AC 44 9A 9B 58 6B 43 39 AA
Packers identified
F-PROT INNO, appended
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2018-06-14 13:27:46
Entry Point 0x0001181C
Number of sections 8
PE sections
Overlays
MD5 a8228554d0c3da02caf3e39f08dbf67c
File type data
Offset 404480
Size 63416288
Entropy 8.00
PE imports
RegCloseKey
OpenProcessToken
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegQueryValueExW
InitCommonControls
GetLastError
GetStdHandle
GetUserDefaultLangID
GetSystemInfo
GetModuleFileNameW
WaitForSingleObject
GetVersionExW
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetThreadLocale
VirtualProtect
GetFileAttributesW
RtlUnwind
lstrlenW
GetExitCodeProcess
CreateProcessW
GetStartupInfoA
SizeofResource
GetWindowsDirectoryW
LocalAlloc
LockResource
GetDiskFreeSpaceW
GetCommandLineW
SetErrorMode
UnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
EnumCalendarInfoW
GetCPInfo
DeleteFileW
GetProcAddress
InterlockedCompareExchange
GetLocaleInfoW
lstrcpynW
RaiseException
WideCharToMultiByte
RemoveDirectoryW
SetFilePointer
GetSystemDirectoryW
GetFullPathNameW
ReadFile
GetEnvironmentVariableW
InterlockedExchange
CreateDirectoryW
WriteFile
GetCurrentProcess
CloseHandle
FindFirstFileW
GetACP
GetModuleHandleW
SignalObjectAndWait
SetEvent
FormatMessageW
LoadLibraryW
CreateEventW
GetVersion
LoadResource
FindResourceW
CreateFileW
VirtualQuery
VirtualFree
FindClose
TlsGetValue
Sleep
SetEndOfFile
TlsSetValue
ExitProcess
GetCurrentThreadId
VirtualAlloc
GetFileSize
SetLastError
ResetEvent
SysReAllocStringLen
SysFreeString
SysAllocStringLen
GetSystemMetrics
SetWindowLongW
MessageBoxW
PeekMessageW
LoadStringW
MessageBoxA
CreateWindowExW
MsgWaitForMultipleObjects
TranslateMessage
CharUpperBuffW
CallWindowProcW
CharNextW
GetKeyboardType
ExitWindowsEx
DispatchMessageW
DestroyWindow
Number of PE resources by type
RT_STRING 6
RT_ICON 5
RT_RCDATA 4
RT_MANIFEST 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 9
ENGLISH US 9
PE resources
ExifTool file metadata
SubsystemVersion
5.0

Comments
This installation was built with Inno Setup.

InitializedDataSize
336896

ImageVersion
6.0

ProductName
Skype

FileVersionNumber
8.41.0.54

UninitializedDataSize
0

LanguageCode
English (U.S.)

FileFlagsMask
0x003f

ImageFileCharacteristics
No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi

CharacterSet
Windows, Latin1

LinkerVersion
2.25

FileTypeExtension
exe

MIMEType
application/octet-stream

Subsystem
Windows GUI

FileVersion
8.41.0.54

TimeStamp
2018:06:14 15:27:46+02:00

FileType
Win32 EXE

PEType
PE32

ProductVersion
8.41

FileDescription
Skype Setup

OSVersion
5.0

FileOS
Win32

LegalCopyright
(c) 2019 Skype and/or Microsoft

MachineType
Intel 386 or later, and compatibles

CompanyName
Skype Technologies S.A.

CodeSize
66560

FileSubtype
0

ProductVersionNumber
8.41.0.54

EntryPoint
0x1181c

ObjectFileType
Executable application

PE resource-wise parents
File identification
MD5 208d150aef1cca9956f763878153bde7
SHA1 a8ae6dd019906a4a6c31dae3c7b4c137a416fc67
SHA256 6d880eea5603147eda5bfa7ac8cb6294d184ac5fbc46ea357380a45a9814fa51
ssdeep
1572864:42puHXz1DpMo1dIZuwcLs4F9Qhn9cxhr0/:4EiD1X1k4Ls4TQhnN

authentihash 479758c0dbb3b3eb55eaae76ea83f4040dc0edc27451f059cc3e793baf1271b5
imphash 20dd26497880c05caed9305b3c8b9109
File size 60.9 MB ( 63820768 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID Win32 Executable (generic) (35.7%)
Win16/32 Executable Delphi generic (16.4%)
OS/2 Executable (generic) (16.0%)
Generic Win/DOS Executable (15.8%)
DOS Executable Generic (15.8%)
Tags
peexe signed overlay

VirusTotal metadata
First submission 2019-03-11 22:46:12 UTC (2 ヶ月, 2 週間前)
Last submission 2019-04-22 15:52:37 UTC (1 ヶ月前)
ファイル名 SkypeInstaller.exe
Skype-8.41.0.54.exe
Skype-8.41.0.54.exe
SkypeInstaller.exe
SkypeInstaller.exe
Skype-8.41.0.54ForWindows7.exe
skype-8-41-0-54.exe
skype_8.41.0.54.exe
Skype-8.41.0.54 (2).exe
Baixaki_Skype.exe
skype-8-41-0-54.exe
skype.exe
SkypeInstaller.exe
Skype-8.41.0.54.exe
Skype-Setup.exe
SKYPE_8.41.exe
skype_8-41-0-54_fr_11171.exe
コメントはありません. この項目について、VirusTotal コミュニティのメンバーはまだ誰もコメントしていません。是非、コメントしてください。

コメントを投稿してください...

?
コメントを投稿

サインインしていません。登録ユーザーのみがコメントを投稿できます。サインインして意見をお聞かせください。

投票はありません. この項目に対してまだ誰も投票していません。是非、投票してください。