home

skype.exe

Mafelobes

MICROMAX STUDIO, S.L.

The application skype.exe, “Mafelobes Setup ” by MICROMAX STUDIO, S.L has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.bundledeliverybits.com and multiple other hosts.
Publisher:
Bemadetuso   (signed by MICROMAX STUDIO, S.L.)

Product:
Mafelobes

Description:
Mafelobes Setup

Version:
4.1.5.1

MD5:
9c93b18dc09215098a8e27f6a0e875f2

SHA-1:
dc8797e03b3207284737b4d8408ec329e1d32fd6

SHA-256:
0d27f634d93e424bf0d1caba3237b357804a1e15a14c11b572f77ea77026e31d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/16/2024 9:19:10 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.MICROMAX.Installer (M)
16.4.16.2

File size:
942.9 KB (965,552 bytes)

Product version:
2.7

Copyright:
Fast

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\skype.exe

Digital Signature
Signed by:
MICROMAX STUDIO, S.L.

Authority:
GoDaddy.com, Inc.

Valid from:
9/1/2015 11:11:38 AM

Valid to:
9/1/2016 11:11:38 AM

Subject:
CN="MICROMAX STUDIO, S.L.", O="MICROMAX STUDIO, S.L.", L=Madrid, C=ES

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
79A6DBFB5606456E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:PW2WIKXCZ/YlZQFk7cZG8K22fs3wUQqoQzfQ4tlK+vJ3Y:PzJVAZU+EP2fCwUPoEfQCK+vJ3Y

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file skype.exe has been seen being distributed by the following 50 URLs.

http://www.bundledeliverybits.com/c?x=jYavo8ES4jLvG5cQ/6u8MfjX0v88pfMsEBr8/0lAGQM=&c=L3MJeqK77Pg4IdaESf4LUSr6 PEdCZeFEa2NZofW7Mmc7kAfPK09/bbJSI4YzrjjT8aXiKreNJvyXsG1fd0mgRYP4vAEtlCEyaPL qdS6U1xZUMjcM/5mVu8XHxhCn01&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.applicationscentertour.com/c?x=rUbtI2ZS4g62RFXmfvKONY7sDfWo9Flw1fJZ1H5cMyE=&c=rWVnbvEjelC3z9XgshiIWtnMhMR1xOufFnlcwo0myQ2bWH1uLLttXoyizbfQo2flkuNg2qoQj03yGuM3gABgeR2cVvxmny1Q/i0TVEbU2gd5OiJlaIhJw9kbJsIX77Mi&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.contentsignssoftware.com/c?x=sIx7nQmQd4G8eEvKVgA draQxnF4qxpRhANKsieZChM=&c=wYeEGm0xbd5An50C5NeushmYzAv6OGWgHzZ1lU08Fh00BExCUrY7Iz8dX69CtMUg2gVH763CYjRmbBlJa8BuleDCMx8IuFpsVuV9jHzZiAJip5GOEkALnq/jjIJCL/co&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.hostingflashmeta.com/c?x=B8QFYmuqcELOfGbxH3vwpxeJnw pNS4cu0fITTTNYH0=&c=fEemOE42Nh1Xomb3iotVy7ajQSHTf8b vEfRI38ozAgVqsDU39OvbbMTkjWiE 18QNEGJbKl/ az5Q4609oi3jt6v1QCBxNryoUAZQNboTTDJRR3XBOpk8ozrdrt9TBH&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.tourpresentapps.com/c?x=1sdOmp867DueGodIHhkRQR6sLWWcx7ceL691tViRVRM=&c=YsWHpQSkjAcuWeR1rymPRGuO5ifnHZp/CKO6VT5 v/Sk9W2j7PrtatH2fRM sZ fvgobMHI2glSwpDIbBYIBu2uiY28X8AvklJFh0sXitAtpG yCGHiemk0soZqeEL4v&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.gifthosttours.com/c?x=P09peloCG80qUHL2NBGCHWKbgsa RgVKCKPIX7Q8YHA=&c=0tc2 Yvo11rkirQDLxzM/ZcWKPMfHHIXDwoaWqDqgfSL4M 5IZn6ziupAQDroRlY6KKJrbcbJcRYdd2LtaRlotL6Vgd6h54cktOcSIvo6fzWV2 mubl0XJ qCRgmCu6G&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.bundledeliverybits.com/c?x=4ewpYBNukp e0zJTzbzboOV/sQ3bOQ0mhBK/R8U 19Y=&c=lfZnoHQyaWeG37J5ttfXrgPKB2A1FxxBuEfLXJTEBtdoJxt1RowLD5mgc9ckfHz7JvLidpM8IUDmdXTvHO6T2TtZVsZtEexpDrzMcY sHF0Uixc1atf RczRVjYgUsY7&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.filesranchtoday.com/c?x=JvkHfbkhwh921hm9q89ikYkaOzcHG5Vf8Nzv Gv YjE=&c=lJxR9BiJxudSnXXJYBq7S iu6u0Iy2Xf fAn3FUElPIfDQekwcY6gGmE 9pGS5iGcMzgEi5haaKNO8hYCNvDCw9KtbnzDF5puopA14U43VXIgtQpJeKZ 4EWC5mUr5Os&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.applicationscentertour.com/c?x=nIrdUZOKkyu787yBol0Q15Lku7yPXfWgu hCnGpN tU=&c=WLaiMVDSSfPxMuxKzjpJGv0S/r72KJCHaWWLgzST/KQinb0XYVtjkJnlxbMgsRqU1XMgg3OajNDJDI/ycq7WLOE1fajqqAXd7swwvmPZcb4N4fFHpIBdSV6I65Ps1hHN&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.applicationscentertour.com/c?x=FIK1cEsColTPnZJErVNPo0lctPSCUw49R3g9tJtqfFM=&c=vPJEd51ly5anwm17PvfZx4ws4pkTz1x0gogGgfA9LHzcpCYdbcWVwGFjTAqAYEgWtBTR Cq7vLriDlYEJA7xoYtZ7b7R4NaR05vpUhBNU8jhvAWxB3y mgSTkDl/wQz/&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.packagesharebits.com/c?x=aO4a4YRmi2ZeKQUSj88xy0PQbCJagEQzjp0br hfJ3Q=&c=sDQbD9QKoKvsQpo1C1DkFEXSbhmKgY5haN17hkVOqZKswshx6CjyjUMy1GAZgb/wmIVhYKICCv6xfxNpE2S7 GhTaGkjwLc76Zhat7eYe26XhK0GM5Vo6MOzuFCvbYcG&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.gifthosttours.com/c?x=3wUeQ7unx7YmamUAmOmdrncxPWAfircnZCALtjYv7Sc=&c=z7cRfCRshNzYgl0bo/U7 0xpR4DoqFnOiOskjTQGFnvdx38UR7NAYUYn3ULAUd2A f5cDWZ/78u2JwGgJ6E8kUkz9YAIKLd7mjJqz6C 2fDymoYTBA 2BqzsFGGp37pp&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.townchuckletours.com/c?x=aQhUvVKxdB81mRdiIw WBUNrO6gFUT ivt7br0mcsc0=&c=ORNSTWxKIsKX gk3tV3MO1ewqNgwaP uUFzF2Ddg23fZGpeC0 CJ0QVbIetd8Wx7yCS8wZErQ57r1j7rk1Yu1tfdzPw1pnlqiDI2Ew7fj2ucDst5fCPUX6ZrSVJymkfh&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.tourpresentapps.com/c?x=V2aeeCyxIWkMWh Pmy6uF4JnPc99w Wz0M2belf4gU4=&c=E/4NWeeaFDG2gSkL4lAnd8NFkN68H0jESeKb9qJAOSuRsa3vTSuYx3DB0WWs4oUA3/Ru1vC3yxhNyCnLq/vDYJrwrjzZSj3tTVjlaTVumi1UnCkyR7RUAN3EK0xChJUF&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.townchuckletours.com/c?x=23Wq1wzxXq7dR6xD3zrBtwOXaocM0Mr9cgHMJRka05E=&c=3ljCMzLdqnFgKErvIFngYmnFgcN3cEOpRu FbwWEbmXT7of4n6mNLijN3LUALRtzWYoy0VTsmY0SAggF5TYGMZSyisGCKhkfMTdsFs6nGJpkZEPj7dPWukEFXhpPa 5f&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.guardappsconcepts.com/c?x=uyw7uh8Pb5iGmZgl1 l7hl1/XZr7yHr3fi4TGv0MrtE=&c=9moB5rYiOoDGzMfdIwSH1nQEPNjMJRi9NzIqJqGWhXJgCBQ1IJsMdy/XfjuZuhUuDUFOlnpOlDgumvo9DOFI4tqqPV1gYimEPaWpym9UXzuAdwvODTCxBkUmA4eLNMK7&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.guardappsconcepts.com/c?x=OnQRvcdzzNomwQ9MGHZiQuLkFqnmGeSwBEFLPOZO9pQ=&c=RC4DWdVEwtzuKx2w1sq5cl/DwvzEKP1/Jo H5c0q83KmvZ/hlvJe5uCpw2ON9KP6cI9u3Jenqqy7LL7VIv5H2sX8dVBLW19j/ib4IVzRoW3k42TN80pyXSYTmisCLqs&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.appfarmpackage.com/c?x=skv5fXWuCvKFWqVCkdTecXZBM2PGaF h/eC4bdv1vtc=&c=fmYxmgdHp9gVvCcObFq4NFJNQmaQKBCaibyTJ0i/m D3lrSJ49xdkkvTb6cVc4w2KAqzV9P2azEi6UPP9b0f74btlrCDMCX yAjisj3bki5ocKAr5y3NvA5UXjYhRiDF&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.bulkapppresent.com/c?x=25eciX nWDn7kyohSRKj6zdGT2U1tS33 dDj8Kr242w=&c=KTgbMmt uL5UhOMTBbfe7WBybUmpKjY1uk WW9AIt VRJtnr62DS6/lbTLTBRaAxXKb9gTtGNFitNCssYvelSTruA4rx6AXQmqXlDTsG9NYgS56TkFjd2A8QvwwrdHYy&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.dlpresentapps.com/c?x=DImSOCvXPl4yv0ZtdEZzfFja71NdhHaCFtt0V8PC9ys=&c=PjGtfZwlzz5tmPnwbYu9IlBXJVjzJKMrEpSgm 9XC3KyNtOd9qZKlyQmtKhlgXWrbOsW7yFTGLDPrpiC yw5FyZ3QxxifrwxrodfWsWlAA0XIFHa0lcOtuZleIwZGyjj&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.filesranchtoday.com/c?x=mQ00TmFdgiV sWDBwpObhySDpB239tzDE4m 32t0F0Y=&c=HDeuMleiwdEm83Zg9oZHsOpVqpZPdvssbL9Orf4CKVft5tEYFsI5jav4pmJECARPq3ZRgbzkAFI8/bYMKaR KZtFgAtsaanrmFI57ifeZpp h6OATO1CYxu3SkcgvOBv&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.safecapitalsend.com/c?x=vqHRoMQZV/xkeja6OiJZwVR9WbnwYfhGT8rN9k qSho=&c=mGn968vbFjHFVPPAZoqrl9R6n llxZjwoDjFqIri9L5EkrIsk6qExNCOECyKMcVJy9eAKT18dpwJnMhafITmyPAm2p6oIxlsePxdmBHEc11YdiirUxs/hHHsiumI6bTl&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.guardappsconcepts.com/c?x=p1Ycd7CFhGYILYy33l74jPAFWyrq1z58/a8JmMfBYg0=&c=rb0RqTxEQ1ZcUlViDeFiEBgc5klINw6tAC5S 9ljG8Msep DflhbEdzwdjf6YCseEetdBfrU/kz7VHfQkZJjaZ6YiC3n9qq9M5gkOxRxK UFwP85q1T7qY54fS0slP1p&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.guardappsconcepts.com/c?x=WCYeU2N8whH30yWxvLxi6se8UcEVVuTUGnsjW/h9758=&c=ASRMpp7FTjJD8EqF ldNTUHmPqrhXLmCV30xVDWwWEsuA1ooBqq1vbN/jKy2fytsMtLa9HS/UAzC/LpTC 60uh4LLvhl1o/f4AaasnhAbQukphjAi8oTYQm Sbr12Ntz&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.guardappsconcepts.com/c?x=5tmlkypJ2AM6DZVHNr2qS0kqnH6PuT0XYT7ftq2NeHU=&c=A4aTfD8JELkylI6RuC3PCAlWxbCBHla23zXF14RjdUb//MR8rM0dMWxCcx 8sMZikQZqpLvoTredtXepcCXOi5pSGFIG4xPd0brXFeDBTc7nl3d2dHoNY5nEwr3xZOQP&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.guardappsconcepts.com/c?x=A7n3n3 IyLvIdCwzsUvTQp2exMwQzULP5AqaHvSYZjk=&c=w5QutIfRaYp3ntZ/KlUjmDTIiku0eWEiOEzLgq0 rnJjWK/xpGQUNGj5d2/iHJ/a4ApaTSQOGo4SaJBPK7KBrrjqqqYLcOrhEw3gsVvbmx95XhAScLGC3g1/xe0kPfEa&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.townchuckletours.com/c?x=F7inGFAWfO9MQCL9g2SHKc DXKrvO3ZeHowJCgipZKA=&c=4f61B4KLFgcAosAktTQeqni9m47JiD8WLZSSYjv1dXM3p/HyQmK7bdpgvG0Ayog/M5QnPu1La0m2/ZzEWflUKKkX/ZX5POucn/tGcxc Kj3bBvu i7gGOAw9zrI4N038&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.bulkapppresent.com/c?x=ytx8xdGPjKrMi3l5NscJanS KYELQrkNx8XXGXQAdns=&c=NeTi/oESeMeR9dsFPeMOgJ3V/o3rQVoDquzbdjnUoMkGGdFnu0pdv7OcVqMXvQXDDMDntIoOWRuXVdwMdkHkccBGtNnWYLnLJSY 6tgU0G5N74GUbGHr0mB 2WzjRQgm&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.guardappsconcepts.com/c?x= l/6YLpWdcQzxKQAltNljz8rTO MYaM1v6P7A/zxPEM=&c=cPq6srGijWjY4w5gR5KtIoOLtDkrUck5J5YJfcYLTWG1Volg/vffzlri0l qF N0PW4ArabsJYWag5o5nxQ2EtVCE26aOtjFLrXgVsnkZ3Krrj1Z4IlBJRVwFTt8Aa T&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

http://www.hostvaultcycle.com/c?x=EMoRua0aFYDY83DJXAOEG1BU8mhx Wyr0zZK84eT Lc=&c=cGy 95DWVHJV5Ve1FmNgGxoSh3bytFC5nYRCfGbishwpm30ys7N7LcyPOwDyp2O8rPn4rm4t8 vEIZFMKCmdA74qu62j7Srwvb08VdFqkxLC JY7ZEWkl1bJ8siOlhsW&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi

Latest 30 of 56 download URLs

Remove skype.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.