Skype.exe
Skype by Skype Technologies SA (Signed)
Warning 30 antivirus scanners has detected malware in various versions of Skype.exe.
Overview
There are 70 versions of Skype.exe in the wild, the latest version being 6.7.60.102. Skype.exe is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 17.81 MB. The file is a digitally signed and issued to Skype Technologies SA by VeriSign. The programs Skype™ 5.10, Skype™ 6.0 and Skype 3.0 have been observed as installing specific variations of Skype.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0063% including both foreground and background operations, the average private memory consumption is about 109.73 MB with the maximum memory reaching around 127.67 MB. Addionally, typically read and write I/O disk operations is about 124.47 KB per minute for reads and 109.08 KB per minute for writes.
What is Skype.exe?
Skype starts up when your computer boots and remains in the background throughout the lifecycle of your PC. If you have Skype installed on a computer that's connected to the Internet, you can make phone calls, send text messages, connect to video chats, access voice mail, send instant messages and much more. By default, Skype places an icon in the Windows taskbar during the installation process. This is the core Skype program.
About Skype.exe (from Skype Technologies SA)
“Why just talk when you can see each other face-to-face? Video call your family in Australia, your friends in Spain or your colleagues in Japan, for free. It’s the next best thing to being there. Call ”
Details |
File name: | Skype.exe |
Publisher: | Skype Technologies S.A. |
Product name: | Skype |
Description: | Skype |
Typical file path: | C:\Program Files\skype\phone\skype.exe |
Certificate |
Issued to: | Skype Technologies SA |
Authority (CA): | VeriSign |
Expiration date: | Saturday, August 17, 2013 |
Programs installed in
(Note, the programs listed below are for all versions of Skype.)
The LifeCam is a Webcam from Microsoft for home PC users available in various models. Its special features include an embedded microphone and integration with Windows Live Messenger, thus enabling dir...
Skype is a proprietary Voice over IP service and software application. The service allows users to communicate with peers by voice using a microphone, video by using a webcam, and instant messaging ov...
Behaviors
(Note, the behaviors below are for all versions of Skype.exe, select a unique version for details.)
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Skype' → "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
Scheduled tasks
- The task '{75A42406-984B-449D-9584-1F3C606C48E2}' runs on registration in the path '\{75A42406-984B-449D-9584-1F3C606C48E2}'
- The task '{03948A75-47C0-44E5-A90F-5545CF1F5701}' runs on registration in the path '\{03948A75-47C0-44E5-A90F-5545CF1F5701}'
- The job '{D67D5B95-8531-47D4-82AA-8739EA0F5500}' runs on registration in the path '\{D67D5B95-8531-47D4-82AA-8739EA0F5500}'
- The task '{8A100D40-E2BB-4E01-840C-6BE512AF71F4}' runs on registration in the path '\{8A100D40-E2BB-4E01-840C-6BE512AF71F4}'
- The task '{EFDF2438-481E-4AEC-93EA-48BC86698C68}' runs on registration in the path '\{EFDF2438-481E-4AEC-93EA-48BC86698C68}'
- The task '{C4FF82DC-D11A-4BCF-8C54-C10E40349920}' runs on registration in the path '\{C4FF82DC-D11A-4BCF-8C54-C10E40349920}'
- The job '{A28EBB70-2CFB-45C1-A296-24024B24ED01}' runs on registration in the path '\{A28EBB70-2CFB-45C1-A296-24024B24ED01}'
- The job '{6D9163DA-5FBB-4809-ADEE-D4A72DB39267}' runs on registration in the path '\{6D9163DA-5FBB-4809-ADEE-D4A72DB39267}'
- The task '{2CB91A24-9517-4F42-8AC3-4BD5E2E800DC}' runs on registration in the path '\{2CB91A24-9517-4F42-8AC3-4BD5E2E800DC}'
- The task '{024D9C10-E0D5-40CB-A0F5-3325E08D6FFD}' runs on registration in the path '\{024D9C10-E0D5-40CB-A0F5-3325E08D6FFD}'
- The task '{41800888-663B-4219-9E17-D8FE3F6A7A7E}' runs on registration in the path '\{41800888-663B-4219-9E17-D8FE3F6A7A7E}'
- The job '{32783ABB-DA10-4028-9A04-6A6592697067}' runs on registration in the path '\{32783ABB-DA10-4028-9A04-6A6592697067}'
- The task '{FD0A2BA2-3431-4DA4-A7DF-E199578E054C}' runs on registration in the path '\{FD0A2BA2-3431-4DA4-A7DF-E199578E054C}'
- The task '{21AB8436-E36D-47F6-85FC-0C9EC9561421}' runs on registration in the path '\{21AB8436-E36D-47F6-85FC-0C9EC9561421}'
- The job '{97E2CF17-82E2-404E-88BE-BAA82DC6FD3F}' runs on registration in the path '\{97E2CF17-82E2-404E-88BE-BAA82DC6FD3F}'
- The job '{792ABD3E-9D6B-4757-8E03-220580A2DFBB}' runs on registration in the path '\{792ABD3E-9D6B-4757-8E03-220580A2DFBB}'
- The job '{7ABD8BF7-3EE9-428F-A9BB-DACDB8C8B49F}' runs on registration in the path '\{7ABD8BF7-3EE9-428F-A9BB-DACDB8C8B49F}'
- The job '{EF803F50-F83F-4907-B9C3-09A34A8C1A4D}' runs on registration in the path '\{EF803F50-F83F-4907-B9C3-09A34A8C1A4D}'
- The job '{60C2329C-8EAC-43B4-9891-B27E93DA13BD}' runs on registration in the path '\{60C2329C-8EAC-43B4-9891-B27E93DA13BD}'
- The job '{9489E999-21D9-4D02-BE62-82327841F513}' runs on registration in the path '\{9489E999-21D9-4D02-BE62-82327841F513}'
- The task '{881F47A9-51A2-4BDA-86D8-11F6048561E3}' runs on registration in the path '\{881F47A9-51A2-4BDA-86D8-11F6048561E3}'
- The task '{F5F4D055-C19D-43EE-8556-CE52E2EB8AFC}' runs on registration in the path '\{F5F4D055-C19D-43EE-8556-CE52E2EB8AFC}'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Programas\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Programmer\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program\Skype\Phone\Skype.exe'
- Firewall exception for 'C:\Program Files\Skype\Phone\Skype.exe'
Malware detections
Based on 40+ industry antivirus scanners, 30 of them detected the following malware.
Antivirus engine | Engine version | Detection | File version |
CMC |
1.1.0.977 |
Trojan.Win32.Monder.2!O |
4.2.0.155 |
Comodo Internet Security |
17109 |
Heur.Suspicious |
2.5.0.137 |
Emsisoft Anti-Malware |
3.0.0.596 |
Trojan.Generic.6761191 (B) |
6.3.59.105 |
Rising Antivirus |
23.62.02.05 |
Suspicious |
5.3.32.116 |
Rising Antivirus |
25.0.0.11 |
PE:Malware.XPACK/RDM!5.1 |
6.3.59.105 |
Rising Antivirus |
25.0.0.11 |
PE:Malware.XPACK/RDM!5.1 |
6.3.0.105 |
Rising Antivirus |
25.0.0.11 |
PE:Malware.XPACK/RDM!5.1 |
6.3.60.105 |
Rising Antivirus |
25.0.0.11 |
PE:Malware.XPACK/RDM!5.1 |
6.3.73.105 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
5.9.0.123 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
5.10.0.116 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
5.8.0.158 |
SUPERAntiSpyware |
4.40.0.1006 |
Trojan.Agent/Gen-Krpytik |
5.0.32.152 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.0.0.120 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.0.0.126 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
5.9.0.114 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.0.60.126 |
SUPERAntiSpyware |
4.40.0.1006 |
Trojan.Agent/Gen-Krpytik |
5.1.59.112 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.0.73.126 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.0.66.126 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.0.59.126 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.1.0.129 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.1.73.129 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.1.60.129 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.1.59.129 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.1.32.129 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.1.66.129 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
5.10.32.114 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
6.0.32.120 |
SUPERAntiSpyware |
4.40.0.1006 |
Trojan.Agent/Gen-Krpytik |
5.3.32.116 |
SUPERAntiSpyware |
5.6.0.1008 |
Trojan.Agent/Gen-Krpytik |
5.8.32.154 |
All file variations of Skype.exe
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
25.75% |
|
Windows 7 Ultimate |
24.25% |
|
Microsoft Windows XP |
21.75% |
|
Windows Vista Home Premium |
5.25% |
|
Windows 8 |
4.50% |
|
Windows 8 Pro |
3.50% |
|
Windows 7 Professional |
3.50% |
|
Windows 7 Home Basic |
3.00% |
|
Windows 8 Pro with Media Center |
2.00% |
|
Windows 8.1 |
1.25% |
|
Windows 8 Single Language |
1.00% |
|
Windows 8 Pro N |
1.00% |
|
Windows 8.1 Enterprise |
0.50% |
|
Windows 8 Enterprise |
0.50% |
|
Windows Vista Ultimate |
0.50% |
|
Windows 7 Home Premium N |
0.50% |
|
Windows Se7en Titan |
0.25% |
|
Windows 8.1 Pro with Media Center |
0.25% |
|
Windows 8.1 Single Language Preview |
0.25% |
|
Windows Vista Business |
0.25% |
|
Windows 7 Starter |
0.25% |
|
21 other Windows OS version |
Distribution by country
United States installs about 26.57% of Skype.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Hewlett-Packard |
18.88% |
|
Toshiba |
18.47% |
|
Dell |
16.47% |
|
Acer |
10.44% |
|
Sony |
8.03% |
|
Lenovo |
7.63% |
|
ASUS |
6.43% |
|
American Megatrends |
3.82% |
|
Intel |
3.61% |
|
Medion |
1.20% |
|
MSI |
1.20% |
|
NEC |
1.20% |
|
GIGABYTE |
1.20% |
|
Samsung |
0.80% |
|
Packard Bell |
0.40% |
|
Sahara |
0.20% |
|