home

skypesetup.exe

Skype

Innovative Systems LLC

The application skypesetup.exe by Innovative Systems has been detected as adware by 20 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from skype.joydownload.com and multiple other hosts.
Publisher:
Innovative Systems LLC  (signed and verified)

Product:
Skype

Version:
1.0.0.0

MD5:
6c04318e1e199c542649b4fed1f11078

SHA-1:
5b1c15a96136ea124198e0ace0a114aeb84042a0

SHA-256:
eec8164fdf92cac46cfe64df6f18ccca8327cd7672745980a6907f2d3bf4f8ff

Scanner detections:
20 / 68

Status:
Adware

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
11/25/2024 6:52:30 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.OpenCandy
7.1.1

AhnLab V3 Security
PUP/Win32.OpenCandy
2014.08.22

Avira AntiVirus
APPL/Downloader.Gen
7.11.168.220

avast!
Adware-gen [Adw]
2014.9-140824

AVG
Generic
2015.0.3373

Baidu Antivirus
Adware.Win32.OpenCandy
4.0.3.14824

Clam AntiVirus
Win.Trojan.Opencandy
0.98/21411

Comodo Security
Application.Win32.OpenCandy.~WD
18598

Dr.Web
Adware.Downware.6712
9.0.1.0236

ESET NOD32
Win32/JoyDownloader
8.10297

IKARUS anti.virus
PUA.JoyDownloader
t3scan.1.7.5.0

K7 AntiVirus
Unwanted-Program
13.180.12456

Malwarebytes
PUP.Optional.OpenCandy
v2014.08.24.06

McAfee
Artemis!6C04318E1E19
5600.7029

NANO AntiVirus
Riskware.Win32.OpenCandy.cxlnia
0.28.0.60253

Reason Heuristics
PUP.Installer.InnovativeSystems.K
14.8.24.6

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
23.00.65.14822

Sophos
OpenCandy
4.98

Trend Micro House Call
TROJ_GEN.F47V0604
7.2.236

VIPRE Antivirus
Opencandy
32442

File size:
491.8 KB (503,624 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\skypesetup.exe

Digital Signature
Signed by:
Innovative Systems LLC

Authority:
VeriSign, Inc.

Valid from:
5/19/2014 2:00:00 AM

Valid to:
5/20/2015 1:59:59 AM

Subject:
CN=Innovative Systems LLC, O=Innovative Systems LLC, L=Dnepropetrovsk, S=Dnepropetrovska oblast, C=UA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
450EACFE8D673E82864CE46BC1A92FCA

File PE Metadata
Compilation timestamp:
5/20/2013 1:53:11 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:vKcfLN3pUxAcT1TBHEShIvwYnys8TB8Jsa1eMGV8V5M/Wbw9e2iKnwm:hjN3ax91T+BvwjHTekN4OMw9eXm

Entry address:
0x333E

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 30, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, BC, 80, 40, 00, 55, FF, 15, AC, 82, 40, 00, 6A, 08, A3, 78, 4F, 43, 00, E8, A8, 2E, 00, 00, A3, C4, 4E, 43, 00, 55, 8D, 44, 24, 34, 68, B4, 02, 00, 00, 50, 55, 68, F0, B1, 42, 00, FF, 15, 7C, 81, 40, 00, 68, 7C, A3, 40, 00, 68, C0, 3E, 43, 00, E8, 13, 2B, 00, 00, FF, 15, 34, 81, 40, 00, BB, 00, F0, 43, 00, 50, 53, E8, 01, 2B, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
24.5 KB (25,088 bytes)

The file skypesetup.exe has been seen being distributed by the following 40 URLs.

http://skype.joydownload.com/get_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmHxz1cteQv A8/yWn9np5iNENJ1Xma73uNDC2w15KcTrYCeL ErQ8gLNmztTLWFDFqm3qBwX9u3GtivLQvNKbm2VBs8B4wwwAAWSsUzR0kMMg/Sr6UmqcS/9Wy83zbm5TerJxJRoFIa71RHE8cs/OLAl21eKkTndsPceuw Z2BGywoBmU1b85Fpn esakfScFg5SvFqounhkf/ umxBitDf8x0my4VocI/.../rBwfhoojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhz4coqK6bYk5ib0o2x42bhVZAeyC 64ejOilRwNIGjPEeutCup00bIjzsGXFUvIoXunSwXlszi1iP/D6ICMg2gIq5M6kVdAVXGjDSx 18kq9DmjAzeLS/9Wys3zNjUVY/.../rFAz0oojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXGwj 8XPavWwllklYyNSrEQ1GyNb G8aZ28zC293p5iNEMJ1WjLKn3fHm9ykZZIGjPEeqtCvNul6trh8ybDR6T/S7/CEHlszi1ivXbvI2B0iMX8Nx1wQlQXzWtDzRn15hgvn7oUSCTQ7ZOkZ61JTxEYrs4PRkNIaS0XHl1ao6Xcgkpz6vnGDQke4Pg2q4/CGOo5AWTyKouFpn esGkfXBb3tO2XuMilQ9Apcikzw3qZfN/.../UlK04Ijvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1GR/zcteQv E8/zq9sGMxwdwEPwC Nu jeDCuyxdSMWmeXbDzCr50yb9q1sSfBguV D3zT0zxsmnqw7WI7IzKmjpBoJEwi1JGV3CvCDU2nsAj7GijDnGSGbZdw4TrMz0VPuBuegoEcKX2UnBtG5WHZk5B2eWhUjhwMNDg2q4/DGOo9h7dl7xmBZivcdClLHtf1dPkRL02lF4f74LvjFrqZel/.../Mz4SXrjoZCTnD4rJLxCRY4vbSZg8L72VF8j0gS7lNdBGT6iXUSz9ojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL3as6Q7qp2uHf14WJwwclKaVXsK7H9NWG90l8bOGCGCbD TKc8gLNiztScBR6avCX8BlSh4Sfqmf6SpNjcm3Eo txw1jYXEDPnFGs9wdEivSH8UHHMCPwFipLzPG4Nab0yJhkKO63 VXE8cs3ENFh72LPvSywkc8b40ucnSDDuoFGMlvlmFpC/ccWqaGNXnMu7F/.../UlK04Ijvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL3as6Q7qp2uHf14WJxwclOdBP1Y/j2PHmuwVdeIGjPEeqtCuxul6trh8yfDR6Q/T3zT0z0smn80qHDpYDSkGgIq5c6kREGRn3kAD9/hsI79WjwXmmLFuUAndXqdD0GbLMgTENGc/qUAz46ONCbbk4wh LuECw3J8bg2q4/CWOo9QORyKArR4C2M8ioZWMJl4HkX7w2lEQf7Iz9hF3/.../JHkHy288YOb2SYjbaRCQoUvMjwps i1W0M1nB3z3dtOAS7jBwr3pIjvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmHxz1cteQv A8/yWn9np5iNENJ1Xma73uNDC2w15KazrYCeLkErc90bhi1s3eDQ b7WyhWFT84XG gLbbrNPK1SdZqtY6gl9QVWSsSTRzntF/oXeuDyGLS/9Wy83zNjAGerJxJR4FIfq/FiM9LdzFfxEjiKHtFiEgeoTz2q4/.../UlK04Ijvig==

http://skype.il.joydownload.com/get_file/wUiS4WnYccXBwj qXP7oQkEsm10kPjuhChOxatrZp7Z rTy893p5ktEPKUfua7n1P3q7yxdSMWmeQrDzCr50ybtq1sefFQfS9S3yHgKzqnD8gfTbvNjKmiBBoJU6kQEbFzb7W3cw1p879WjwX2mLA cViJLzPHQNa7MgbEFbIaSuXHt0O8TILAl00/2wR2Q3c8b40ucnD267oFGMlv1mFs3 YsntZXZWzYbkQ7172F4H5sv3jlLqKPMhhSflCclX/.../wgr4RV2mhGFi79ojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yOn9np5iNEIJ1Xlarr7O3SuyxdSMGmeX621E/Y9wrNyxdSWRAaX9T2uUxqj7TmtgLbbrdPKkGRKs55ziVNIRiPvSmc3wdEipyH7XmOQQr1cy8bnPHQNa7Mgb0FbIaS0XHl1as/NIAkpz6vlEiw3LNyxkbFkRyz47kjE3/VpDoD K4vuOmNXnMu F/.../wgr4RV2mhGFi79ojvig==

http://skype.joydownload.com/get_file/wUia6yjQOMvI2nuzWf/oQkEsmVM8LVv8UVinA4mX8KMouC2rsGMxwd0EPxKvKOK amG3mV5ZNmOJE jH7UyyPpqxcaXFVjIvG kXQ y ietgLbbq9PK0jgC4cAiiBZIV3y1SWchhshw9CrxGWmaSq4akZPzPHQNbrMgLRoPN6/yRHE8csjENE190PWxUDQuO4/x2/80DWCouRnFn/V RMvpYsntZXJWzcC G/.../lSa0AsxP5YSxQXP799WCkW8qZrxRRJY2dA==

http://skype.joydownload.com/get_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjynEB30Y9jXseh152b0sCsrn8kFdE3mY/j2PXmuhBBKOSCGGuO1Gac8gLNjztTEXliD9GzyDkzluXmtgLbbrNPKziBZqtY6hF9QEy/.../DWOo9AObjvQvDpS3YsCsbnZY2NO2XuMglQ9DtNSon1O7ZKtxnT7FWIYdu6TuBzyprcTYzz4rJLxCRY4vbSZg8L72VF8j0gS7lNdBGT6iXUSz9ojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmHxz1cteQv A8/yan9np5ktEPJgTta7Hufyro0l8bOGCGCeikHqc8gLNjztTEXliD9GzyDkzluXmtgLbbqtPKxzoX9Ic7wF9DUHy1aWU81JZKq2 /Gn3MCOlOw4TrNT0VN/.../Q3Dqu5ORnSkrJLxCRY4vbSZg8L72VF8j0gS7lNdBGT6iXUSz9ojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXBwj zXP7oQkEsml0kPjq1E1v4YtbB8ack5ib0o2JgyskFbk3lYqmjfGG3g15fOHHLQrfzR/J00bIjzsedDR7Fpmy4UBe /Tnjmf6SpNzSgyAQ6NVlkV4BXnCtGGgqyJd8vDnxGWmaSq5dz8bzPHQNa7Mgb0FbIaS0XHl1as/.../liimCs9Z7c66RHKquZKaiGp5M6RIBo47M20hsuOgGR1zhVW61NdWUHW1FAaqqZvvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjynERz3ZNTSseh152b0sCsrn8kFdE3mY/j2PXmuhBBKOSCGGuO1Gac8gLNhxMyPU1XSv3OpRQO15Gm0yP/UpMubyioL9Ic7wF9BXmThU2pnn4Aj CHoWGGYR7hb2syiPTENeu9tc0xacb38FXB8ctzPIRowh LuESw3Idymw Z2BGuwoFvNjvQvDpa3YpT3MyRO1IK3HO0ujX5OpMio7g28K prwmTzEcQe5MWxUSaqoZrTkCsqdfEaG9Bifjwxu6GtHhBzzk/.../rFAzwpYjvig==

http://skype.1-136-221747.53f81009cbdc2.jdcdn.net/get_file/aCglaLEPmDrxXg3HDnaWgA/1408769561/1/12/1/.../SkypeSetup.exe

http://skype.joydownload.com/get_file/wUiS4WnYccXBwj qXP7oQkEsm10kPjuhChOxat7Zp6dy/269qGl42docJgTtbLHuaSrglUZTcWmNH O1e 5 g wDkYLYRxLEt3rqBwX9u3GtyKyFvNKBm2JA4p8ziUcEDSK1AX1/ksk7/.../Mz4SXrjoZCXmz4rJLxCRY4vbSZg8L72VF8j0gS7lNdBGT6iXUSz9ojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4coWK4fE9rm/8qHpzyckFbk3hYqmqYC/olRZKOSCGGOO1GbI20bIjzsWXFUzIqz3zT0z0smm iPPDpZrSl2lZ9N1w2hcXRn3 AD9xlMos9i75X2OSA7ZYwtW3bmtSerJxJRkLOb2UDTM/.../z0ecnWjD58gae1bouWIC2M8irZWMfhIj9SPsv3BcX55qizkrzLaBynT7hWpEJsYD4UXKquZKaiG95M6RIHI48Mjwps i1W0M1nB3z3dtOAS7jBwr3pIjvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv I253eq ysyl4pHaAW7erC/NXa20hcDeyPZCeLkErY90fo5kNSWXgaQ9GzyCkzl7iTj36CTvNKbm2BBs5Q3gkdJF3ylACwx0NEivSH7UHGYUrcfwsTrJW5ePKs5bBINOb32VGh0O8TILAl3xOG9UHM3c9z40Ok1B2q8tVPHlfQvDpa3YpT3MyRO1IK3HO0ujX5OpMio7g28K prwmTzEcQe5MSxUT w54Ob2SYmbaRBR4U6PXgxu6GtHhBzzk/.../rFAzwpYjvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXGwj 8XPavWwllklYyNSrEQ1GyNb G8aZ28zC293p5iNEPLU31POK/fy/tiREabnGHWOOiEqd0mPAgkdSWRAaX9T2uUxqj7TmtgLbbrdPKkGRKs55ziVNIRiPvSmc3wdEipyH7XmOQQbtdwcXhPHQNa7MgdkFbIaS0XHh1as/.../UlK04Ijvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjynERj3aN3Xt h152H0sD4rl44cJgTtab/2LRDniRQNUTbIXqm5Tf1i0bIjzsWXFUzIqz3zT0z0smm iPPDpZrSkmlZ58xkkV4BXnCtGDx3lcQt TnxGWmYQLZOnJ6id2tWIfxwcwoEcKXyXGg8I4eOcwkpz6vnGDR8IdHg2q4/.../O IWB5Y2enUguvCmGhtzhVW61NdWUHW1FAaqqZvvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL3as6Q7qp2uHf14WJxwclXdBP1Y/j2PXmuwVZKOSCGGeO1R/YlyPpqw8yPQFXPq3C/T1T8 3G8geeS943KmjpBoJ5ziVZIRjD Xix 18kv9Dn4WGKeRLtOw4TrND0VKOBmPRNMOaz9RHt8ftzFZREghrOgVjQuO4/z2/80HGL5uFzFjqokRMv/.../rFAz0oojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmHxz1cteQv E8/yG6sGMxwdoEP0b1Y/j2O3mulg0EZ3GHWOOmHL8loOIphJP UkjUvzGtRBPlszi1if/D8ZrKmiBBpp8ixAwcACngSSx 18ko/iHoDjraAOANgYKjayUMK7M3JQpMaOa3A2h0O8TILAl00/2wR2Q3c8b40ucnD267oFGMlvxmFsvkJNClLHte1dO8H/sv3BcW55q 1AzqZfN/liflCclX/JLzAyCr5oObwyYhY7ZKR4A1PHkju6GtHhBzzk/.../rFAzwpYjvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4coWK4fE9rm/8qHpzyckFbk3maLHuayr/gAgJeybOR/usW78yyasjn4/dUh6avCX7BlS04S tgKzbr9Kbm2BBs9Np10dJF3yhACx3lsIu izoUSCTQrZOl4TzPHQNb7MgaEFRZ/CwFWh0O8TILAl3xOG9UHM3c9z40Ok1B2y tlzIm/QvDpG3YoL3O2NXnMu F/.../rFAz0oojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjynEB/7Z9zSseh152b0sDErn8kFbk3lYqn9PWG3g15aOHHIX/usW782yath1s3eDQ b7WyhWFT84XG gLbbqNPKxzwX9cBykV4BXnWtGD9yldEivSH4UHHGA65Xi83mPSVAMedmcF9MIaS0XHl1ao6Xcgkpz6vnGDQke4Pg2q4/CmOo5AOTye1nR5i8dMi8DCoVn5TeSK1h3wNApd3vhhvyb6p/.../QI8Bv47 ASX7uNKanyYyJO0KBdEvMjwps i1W0M1nB3z3dtOAS7jBwr3pIjvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjynERv7aNrTsuh152T qHomkphOcRauLfmgLXj/ylFSICDXUqnyCr50yb9q1pDCW1jEvT3zT0z0smm jPTDpZrSkmlZ MxkkV4BXnStGD93hshq9CnwSDzaUrcfwsDrJXBeNu1taFsdOOz9UnBtLpeScwkpz6vlFiw3G967kbhWWy3/8kSa1Kp D9G3c8i8KSgIzcr F 8ujR8X7I/5ikrzLaB3nT7iR91Wrc26SWvooZrTkC8qdfUaEZY2YHUiu6GtHhBzzk/.../rFAzwpYjvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1GR/zcteQv A8/yan9np5ktEPJgTtbLHuaSrglUZTcWmNH O1e 5 g wDkYLYRxLEt3rqBwX9u3Gt0qyFvNKbm2FBs5QykV4BXnStGHoxhshq9CrwSGKLS/9Wy83zd25TerJxJRsFIa70UGh0O8TPJhEw2PinUnp0McCwjf8 TWO/uEiMx7YsUYC2M8ioZWMJl4HkX7w2lEQf7Iz9hF3wb6l3nyflCcxX/.../UlK04Ijvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1GR/zcteQv I253eq ysyl4pHaAW7erC/NXa20hcDeyPZCeLkErY90f85kNSWRAaX9T36DkfwvHytgLbbrNPK1SdZqtY6gl9QVWSsSTR2ntFqp3/oUTqTQbcfwsTrJW5ePKs5bBINOb32VGh0O8TNLAli1fX2GWUve4/g0O4zHGL5uFzFjqokRMv/.../UlK04Ijvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXBwj qXP7oQkEsm10kPjuhChOxatrZp7VpsTGr4Hp5iNENJ1Xmb7ruNDC2xl5KZyvMQqvyCr5uybhkxM6YBwmY S3zT0z0smn80qHDpYDSkGgIq5QwiUcWDTXnVm880YF17CC5UGaTUv8HgYe0JTxEYrs4PUdMIaS0XH11aomXeE99y L2GWUve4/gl7RhHGL5uFzFjv1uBZW5d9ClLHtY1dPrRLVxjRZW54n5h0qbNeM1wk/.../rBwfhoojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXGwj 8XPavWwllklYyNSrEQ1GyNb G8aZ28zC293p5iNENJ1WkMe/uNCq2wV8bOGGGCbbkCr50yb5q1oHEWVjOuGzqBwX9vnGt3r2R95uNg2gSq5Q0g11FVnKiDzx 18kq9Dm8AzeLS/9Wzs3zNTUGb701PRNMOaz9RCMmLNzFZREghrPlEDQuO4/x2/.../V BZG7YsntZXdWzZfiQb1x3Q8eroL h0r5aatnnG sAcVPqoOpSDrjspuCmz4rJLxCRY4vbSZg8L72VF8j0gS7lNdBGT6iXUSz9ojvig==

http://skype.joydownload.com/get_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpqK4fE9rm/4qHpwydoJKUD1Y/j2O3mulg0EZ3GHWOOmHL8loOIphJP UkjUvzGtRBPlszi1jf/D 5GYyCEes55piVRGVH jAzh3ksQivSH8UHHPH AInYXzPHQNa7MgLh8OIaS0XHt/ctyaf1hi0PCtV2R5ao6x2 g/HCrh xqajvQvDpC3Yp3tfXof1ca3D659wUlKqsvvhhvybaBn13XyEcQe5MSxUXjqtYOb2SYjbaQAHNAvMiYpsenkFxlrnE/.../yoYjvig==

Latest 30 of 40 download URLs

Remove skypesetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.