home

csrskype.exe

Skype Handsfree Support

Cambridge Silicon Radio Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CSRSkype’.
Publisher:
CSR, plc  (signed by Cambridge Silicon Radio Ltd.)

Product:
Skype Handsfree Support

Version:
4.0.55 built by: WinDDK

MD5:
c59cf57d06045ed8217ea43da2b09fa5

SHA-1:
b7a61f6cc8b041eff1be314f24f8c7628498c7ea

SHA-256:
2d5051db2c69c15791b71d7d5b63c4121cc6ff1457de49ab2b9e8d6d747e1a9b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:04:13 AM UTC  (today)

File size:
337.8 KB (345,952 bytes)

Product version:
4.0.55

Copyright:
Copyright © 2008 CSR, plc

Original file name:
CSRSkype

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\csr\bluetooth feature pack 5.0\csrskype.exe

Digital Signature
Signed by:
Cambridge Silicon Radio Ltd.

Authority:
VeriSign, Inc.

Valid from:
8/28/2006 5:00:00 AM

Valid to:
11/17/2009 4:59:59 AM

Subject:
CN=Cambridge Silicon Radio Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cambridge Silicon Radio Ltd., L=Cambridge, S=England, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3B860947C18DA8ADFD78C4AB66F4C59B

File PE Metadata
Compilation timestamp:
6/26/2009 2:32:03 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:wRh5EbNm2aBEXRnfbZezyUhSvxx1vBT9f/Iy2sHTITsw7T3KP7:kh5EGBYf4z0vxl9A5sHTITsw7mP7

Entry address:
0x13AF9

Entry point:
E8, 26, 2C, 00, 00, E9, 12, FE, FF, FF, CC, CC, CC, CC, CC, E9, 23, 0B, 00, 00, CC, CC, CC, CC, CC, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 3C, 30, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 20, 13, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 66, 2C, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 25, 10, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8...
 
[+]

Entropy:
6.6864

Code size:
171 KB (175,104 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CSRSkype

Command:
C:\Program Files\csr\bluetooth feature pack 5.0\csrskype.exe


Scan csrskype.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.