home

skypesetup.exe

Skype

RICH MEDIA SYSTEMS INC.

The application skypesetup.exe by RICH MEDIA SYSTEMS INC has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from skype.joydownload.pl and multiple other hosts.
Publisher:
RICH MEDIA SYSTEMS INC.  (signed and verified)

Product:
Skype

Version:
1.0.0.0

MD5:
e7bafbab9665fc3e0feccda66a56b00a

SHA-1:
c67f4e8b89ae91fa6a254ef4862596b89e62082d

SHA-256:
13ea975a86158b8a3f3f3d267088a72099d2704c855d41eea55a6c3ab7a7a0be

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/17/2025 11:51:01 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.RICHMEDIASYSTEMS.Installer (M)
16.1.12.10

File size:
415.8 KB (425,752 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\skypesetup.exe

Digital Signature
Signed by:
RICH MEDIA SYSTEMS INC.

Authority:
Symantec Corporation

Valid from:
2/17/2015 1:00:00 AM

Valid to:
2/18/2016 12:59:59 AM

Subject:
CN=RICH MEDIA SYSTEMS INC., O=RICH MEDIA SYSTEMS INC., L=HENDERSON, S=Nevada, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3F87144C25AF8BCF29F29C5A1FEEF4BA

File PE Metadata
Compilation timestamp:
5/20/2013 1:53:00 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:XiucV6hLCNl9z1rKDMp/zzIu1vyu/Vhx33xjQW0GSnsxuSg7uj1+12/UkKd7Nn:XiuRLC39zpLztMEDx3hCVJc+12MkaNn

Entry address:
0x331C

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 30, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, BC, 70, 40, 00, 55, FF, 15, AC, 72, 40, 00, 6A, 08, A3, 98, 92, 42, 00, E8, A8, 2E, 00, 00, A3, E4, 91, 42, 00, 55, 8D, 44, 24, 34, 68, B4, 02, 00, 00, 50, 55, 68, 90, 06, 42, 00, FF, 15, 7C, 71, 40, 00, 68, 7C, 93, 40, 00, 68, E0, 81, 42, 00, E8, 13, 2B, 00, 00, FF, 15, 34, 71, 40, 00, BB, 00, 40, 43, 00, 50, 53, E8, 01, 2B, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
24 KB (24,576 bytes)

The file skypesetup.exe has been seen being distributed by the following 50 URLs.

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklYyNSrkQ1GyNZ G8aZ28zC293p5iNEMJ1WjLKn3fHm9ykZZIGjPEeutCup00bIjzsGXFUvIoXunSwXlszi1iP/.../xp5P2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpyK4fE9rm/9qHpzyN0cJgTtarHuYDCuyxdSNWmeXLD5TOpwgKtrh8yeDR7SpnvqBx/9uXq0yP/.../xp5P2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghz7cteQv U8/zC24jEwnskFdE3mbL75P3C1yVNYOSCGGOO1W xj0bI5zsecDE b/SXqUwXlszi1jP/D6YCGxTwM4oc7wF9BXmTnU2pnn4Aj/SHoW2CfUrcfwsbhPSVTMfpyc0lGdu2rRHE8csvENFh5xeGxAC1mcoH4w7tsUjyouRnFnftmFtHmOYL7LCQYmoGjSKFxjRZW54v3nx6hOrh 1CagCd1f7MW7Qnv7uNKamCYyI/.../rBAfhoJ32zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPD 1E1v4ZNbB47pquHf14WJzz9EcbhyuKO6/ajf5gEoNejaeEKqtG78lheA01s3eDQqb7S36Dkb2umm0yP/XpMuN2SMS48AiiAxIVXKiCTd8kMMr/SC5UGCTUv8FnNXqbj0GabJxJRoFIfC0RHE8csnENFx70vW7VWU3c8b41 cnWDbm5g NjvQvDpG3YsCqZmNXnMu/F/.../yoJz2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVY9fDKkEgq0OYjBvqA862/soGpwy9oMP0ykYr32LSb0gA0aZ3GHQuOmHLAyxb1mxsOaDE b/SXqUwXlszi1jP/D6YCGxTwM4oc7wF9EXmTxVWIhwYE79WjwWWmLQrhV2syiPTMNeu9rc00dOOz9V351ao2Vb1t3z/SgV2Y7Lc2nw Z2BGuwoB6LjvQvDpO3YsO8ZDJW3MuvRLBwjRZW54r3n1v/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklYyNSrkQ1GyNZ G8aZ28zC293p5iNEMJ1W4K6n3fHm7ykYfaz3YRK7kCr50ybpq1p/EUx6avCX6BlT0v2m0yP/SpMueyDdZqtY6hV9QVnSlCj93hshq9C3wSDXGHOgJitXqdD0EYqswKxEdOOz9UHBtLYaOf1l3nqq9GCchfYz10Og8DmGx8VDMlu0vXcave5ukbnBXnMu/F/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghz7cteQv A8/yOn9np5iNEIJ1Xlarn8PnGuyxdSM2OGCb3 W/VrkvAlhpqPDE b iXqTx2 C6tgLbbrdPK0Tofs55ziVZIRnekDCx 18kq9DmjAzeLS/9Wys3zNDAVY/.../qtUnNmLcG3kfNgRjyouRnFnvV QNave4GkbntO3tO2XuMnlQ9WtNzvhgHyb6t 1CakCd0CrdWwAHPuuYPXw3J0OPEAV49 M3kporfvXUMj2wS7jtdFFynpAAX7q5nszEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklYyNSrkQ1GyNZ G8aZ28zC293p5iNEMJ1W4K6n3fHm7ykYfaz3YRK7kCr50ybpq1p/EUx6avCX6BlT0v2m0yP/XpMuOzj8f9NciiBZIV3y1CDp8hshq9CjwSCXAFK5Xi83nPSUFarsyLhodOOz9VHBtPIrcLVgojav2EzQuO4/02/.../dl6ZmBZa4dMKubXJb3cr F oujV1MuZr2zlL7ZLh0lCq0CIxX78exUS2w8NHMy2VlJepRTsc3PHUx87nuXU9zhVW61NdWUHW1FAaqqZvlzEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv c8/zOn/j1gwJgELEPtevindjPpgwEcdyOSTqHyCr50yb9q1pPVR1XTqj3zVUz2vH6 jPPXqtDcmiBBp58i1QoeACPlGDU2nsAj7Cn U3GSA7ZewtWlcyUMK7MzJQoOIaS0XHl1ao6Xcgkpz6vnGDQke4Pg2q4/D2mwoA6W378wVdv4Mp68ZDJW2suvXrJt30gH5sv3jlLqN/.../MS8UXKquZKaiGp5M6RIBo47M20hsuCnHBhzhVW61NdWUHW1FAaqqZvlzEI=

http://skype.joydownload.pl/get_azure_file/.../Y9xbNyxsSfBw2T7SS7BkX9qjvm3 fa7dPbm3FKopMiiBZIUny1XGEpwJZr7CC5UGCTUr5YwdXqdD0DYqtkdkRaIaS0XHt7ctyNfVJi2eKxVmNlZtC6hP8 TWO5uEiMxat D8u3ccOlLHte1dP5Wfsv3BcU55r8n1O7ZKt1nT7yWowdspbyBju1oZrTkCkqdfUYDMRoK3RguuCtD0UinB3z3dpOAWu4WFms5Nn2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghz7cteQv A8/zyn9np5iNEMJ1Xkb6n3fHm/ykYbazeeELCtGbQ8gLNiztTZQx6avCX5BlT2qnD8gfTRpMuMyCAL/cR5xhceRn3kADt/hoByt2uvSGjaSr9W2oe4YyUMK7MxJQoOMKnlXTl1fMTccEJ 2bPvUSwkfI/.../zopj2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVY9fDKlEgq2JM7Y9uk353f/sGMxwdkEPxikerC/NXS20hMBbDfTXKq1E/Y9wLNygp/JFQfS9SnyHkT1unu iefa7dPcm3Ed MllkV4BXnejACw2z4ppq2ivHibZXukUndXqdD0GaLMge0FMc/OmHz89JNzFZREnhrOnSW9lLZf5kuczBHvv hqW3qp D8u3ccaraXdc3cW/GeJnlRsf/.../yoJz2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL3as6Q7qp2uHf14WJxwclXdBP1Y/j2PXmuw1NKOSCGGOO1WOxj0bIjzsWXFQ2S T3zT0zxsmnqw7WI7IzKmjpBoJE1gFBEUH nAjU2nsAj7GijDnGSGbZdycyiPTUNev12PRNMOa79RHttc43EJREwyviwAC1mcoP4w 83DGm7sEjE3/VuDoDiM9ClLHtb1dP6RLdwwFpW/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghz7cteQv U8/zC24jEwnskFdE3mbL74OHO8yFZeOSCGGOO1Xuxj0bIjzsCXFQ6T/S/5DlT8 3G8geeR943KmiBBop8iglZERn3kAD1/hppwqjnxGWmbSq5fz9XqdD0FYqt2awoEcKX2XGh asWNLBkonv6nAC1mcoL4w6psUD3l9Rndl7xmB5ivM5v6fXoF1cC8FqoumxcHu9Gh2ErzLaB0kya0QJQUrpL4Fj2s84/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVY9fDKhEgqkP4CH4KEk5ib0oWJgyd8HP0ykYrj2LTPllEZTcWmPEfumG7MlyPpqwMyPUVXNqj3zT0z2vHGtyK6Y7oybxCcO4YtlywBQXzWtDDRnwYtpp2mvSGjASr1YzcDnNT8GYbk5bBIMOb2uDy5tc43EJBEwj6b2GWUve4/.../0UrzLaBwnT7lWIYdu9WwAHPruYPU3j4rJLxCT5Y8K3RguuCtD0UinB3z3dpOAWu4WFms5Nn2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghz7cteQv A8/yOn9np5iNEIJ1Xlarn8PnGuyxdSMGmeX621E/Y9wrNyxdSWRAaV9T2uVRqiqnD8gfTVpMubyioL9NZlxxACSiPvXyx 18kq9DmjAzeLS/9Wys3zNDAVY/o4LRIdbOzlXTl1f8TcYUJ82P6jUTQuO4/x2/91Vz2ouRnFn/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpyK4fE9rm/9qHpzyN0cJgTtabv2LSflgxQEYyrJWbW1E/Y9xrNyh53UR1mD9GzyD0zl yLrmf6IpNjZmiBBop8ixQwWRn3kADh/hsEr/Cv7WHGSA7ZawtW0f3deKuwgJEEFMqvyVHJ4fcfNLhBhhqXuAHB8JNDg2q4/D22woBmU1b85R8f5NYKwOjkJzcr F 8ujUtKsdyoz0rzLaB2nT6kB8ZP5YSxQXP77NKCkW8qYLxRAt1jbSBk8/.../rBAfhoJ32zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqlGBnwcteQv I253eq ysyl4pHaAW7erC/NXa20hcDeyPZCeLkErc90f0k1s3eDQ2b7S7qBwX9unGt1LbDpZrSlmlZ5sxu1woFF2SsSTRzntF8tmujGDaLS VWycPkNDECbr87KRNMOan9RCwgJJqbZAkpz6vnGDQnfIzg2q4/DWOo8gObjvQvDpG3YsOtaWNXnMu F/tnxkkH5tH3jFnzLaBxnT7wWpMI/.../rBAfhoJ32zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghz7cteQv U8/zC24jEwnskFdE3mbL75PXO7xlRcOSCGGOO1Xuxj0bIjzsCXFQ6T/S/5DlT8 3G7geeH94WNg2gIq5Q0iUcBDz/nX30g0IZp4H6yD3GSA7ZfwtW4bmMVY/o4LRIdMKjlXTl1e8TcZUJ2nqq9GCckc8b40ucnTjDuoFGMlvxmFpO dtClLHte1dP5Wfsv3BcU55r8n1O7ZKh/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVY9fDKmGBLgNIWQ9b9npCC8/np5iNELJ1WkM/K8amG3g15eOHHZU6n WuAlyOBqxcKYAQqY/if7BU20sni1mbOI svT0mlNq4cygVdCVXS1AX1/lsk7oWjoUSCTR7ZOj56/Y2hAK6s5bBIJOb2hCSYrLYzcLVgoj6v2ECIsao6x2 8/HC3 oFGMlv5mFpOve4GkbHtOn5jpD JnlR4f/4n i0rzLaB2nT7/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL3as6Q7qp2uHf14WJ0wclYchuzPfnuNDC2w15KMGeFCeLkErc90eYj1s3eDQub7WihUhKo/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPD 1E1v4Y9bB9rpi/26nqGlzwJgELk31LuKoLXj/ylJSIGGOGemmGqc8gLNmztTLWFDFqm3qBwX9u3GtifHYvNKbm2VBs8B4wwwAAWSsUzR0kMUp/i75W2ebS/9WzM3zYW5bPas5bBION6XlFSE2OJuNc19nzL xWnM3c8b40ucnTjDuoFGMlvxmFpO dtClLHte1dPiXvsv3BcS55q61AasMe02hSflCc1X/IP/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPD 1E1v4Y9bB9rpi/26nqGlzwJgELk31KOKoLXj/yldSIGKPHfusW781yas/h9SWRAaW9T2/VRij5zz8mf6SpNvSgycPs55ziVRIRne1AX1/lcMj7H jGSPFEfUZipvzPHQNbbMgbENGc/.../zopj2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPD 1E1v4Y9bB9rpi/26nqGlzwJgELk31KOKoLXj/yldSIGKPHfusW781yaskgNSWRAaQ9T35Hk20sni1mbOI svT0mlNq4cygVdCVXS1AX1/kMk7qHKmD3GSA7ZdzM3zdGxOKOxxelxKc7GiHi9tc43EJBEw0 L2GWUvf4/glrRrWjb98UjE3/VqDoDoOIL3LSRO1Ji3HO0hmRgX64D iVO7ZKx/.../2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqlGBnwcteQv c8/zOn/j1gwJgELEPtevindjPpgwEcdyOSTqHyCr50ybtq1oLZFQfS9S7yHkflszi1if/D8ZrKmiBBpp8ixAwcACngSSx 18kv9DmvEiPAAulOw57rNjMBaLgxKh4ONKS0XHx1apiRek93zrPvUSwmcpfw1eQnBSqwsVDdxaY4Fpn esCkfXJbzcr F gklQ9BtMu90QmxK gphSflCcpX/.../yoJz2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsm10kPjuhChOxatrZp7VpsTGr4Hp5iNENJ1XlbLLuNDC2wVRSIDfVWKn7SfxygeVyz4WXAgaDvHSxTBPlszi1j//D ICExHFA4p8xh19QFy3uSms2wYdsvjWvEjaLS/9Wzs3zYn9HMftnPRNWOa7zU3l3e8fJJRMpz6vnGDRmIdHg2rQ/.../hS6kAc9c7NWwAHPruYPU3j4rJLxCT5Y8K3RguuCtD0UinB3z3dpOAWu4WFms5Nn2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yWn9np5iNENJ1Xma73uNDC2w15KdDrYCeLkErM90btixsacBR6avCX BlSh5yfr3rfDpZrSkmlZo5E5kV4BXnCtGGs91JprqznxA2mYRLlZzMPnPj8AY/o4LRIdd vlXTl1ecTcJwkpz6vlEiw3LNyxkbFkRyz47kjE3/VpDoD K4vuOmNXnMu5F/.../4O h1n8ZLg2zGXmVowIqoL7XSyh5oOb2SYjbaQaHNAvMjwpsui1Hh1zhVW61NdWUHW1FAaqqZvlzEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqlGBnwcteQv c8/zOn/j1gwJgELEPtevindjPpgwEcdyOSTqHyCr50ybpq1oXEUx6apiX5DU20snq/.../yoJz2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVY9fDKlEgqtI87Y9ukx53e5 zYmlJxNP0ykYr32LSXjnAANcHGHWOOkEqc1x7Byz4WXBgyb7XuhTwar6TL6yanDpZrSlGlZ4s55wwBQXzWtDDRnwYtpp2mvSGjASr1Yzc7mNj4GbLg5bBIMOb2uDy5tc43EJBEwj6b2GWUve4/gkbRhHGL5uFnFjv5vAoC2M8isZWMYm9O2XuMllQ8U/.../zopj2zEI=

http://skype.joydownload.pl/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPD 1E1v4ZtbB4Kt2tCersGMrwdoKKELibbL5Onu3g15bOHHPQr21E w9wrhrh8yfDR7OvD3zT0zwsmn40quF8Z6bg2gIq5M6kQMdCCLySCx 18kq9Dn4XmqLS/9Wys3zc3MVY/o4LhIdMr38FXB7ctyYf0d3nqqnGCchcpexiqR1Wyrv9h PgqokUYC2M8itZWMahpWvFqoumRcH74r/.../yoJz2zEI=

Latest 30 of 69 download URLs

Remove skypesetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.