» facebookvideocalling.exe
Overview
Analysis
File Details
Behaviors (1)

facebookvideocalling.exe

Facebook Video Calling

Skype Technologies SA

File name:

Publisher:

Skype Limited (signed by Skype Technologies SA)

Product:

Facebook Video Calling

Version:

1, 0, 0, 8953

MD5:

a290c7635d02e5c730440e3506de672c

SHA-1:

7babad1e3128e920b9aeef02bbc50c4f943131a8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 2:11:27 AM UTC (today)

File size:

3 MB (3,124,040 bytes)

Product version:

1, 0, 0, 8953

Original file name:

FacebookVideoCalling

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\Application data\facebook\video\skype\facebookvideocalling.exe

Digital Signature

Signed by:

Skype Technologies SA

Authority:

VeriSign, Inc.

Valid from:

1/29/2011 7:00:00 AM

Valid to:

1/30/2012 6:59:59 AM

Subject:

CN=Skype Technologies SA, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=information security, O=Skype Technologies SA, L=luxembourg, S=luxembourg, C=LU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

75C4C4FCF3E9A3852932709D9DEB536F

File PE Metadata

Compilation timestamp:

11/9/2011 5:39:20 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:OfsaW2hM40jJmELNna3T8ZT/Kwkk8bgJRiUZEpIlDNE+ENNWvKiiZT1knMQdoXRH:Ofg2hM40jUwnKAZ0k8bCReoRKNYK9R1v

Entry address:

0x12A01E

Entry point:

FC, B8, 3D, FB, 9D, 28, B9, 30, 7B, 52, 00, 81, F9, 1E, A0, 52, 00, 75, 06, 81, C1, 27, 00, 00, 00, 30, 01, C1, C0, 03, 41, 81, F9, 50, E0, 53, 00, 75, E4, F2, AA, 9D, 5F, F1, F6, 5B, 5E, 0B, 5A, D7, 75, 23, 1F, 1C, 72, A9, BB, FA, AC, 9E, 51, 89, 4E, 77, 34, BE, 75, 44, 72, 5B, D9, 72, 98, C8, 3F, BF, 1C, A3, AD, A1, 75, A9, A6, D8, C4, DF, FD, 65, 32, ED, 2E, 0F, 9D, 89, 4E, 77, BF, 10, D0, 44, 3F, 1E, 17, 62, 12, 14, AA, B2, 7D, FE, 52, CF, E8, F8, 37, 39, 81, CF, 5D, BE, 67, 3E, BC, 86, 5E, 3F, 4C, FC... 
[+]

Code size:

5 MB (5,217,792 bytes)

Windows Firewall Allowed Program

Name:

C:\Documents and Settings\KanaNet\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.