home

camstudio.exe

Connector Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application camstudio.exe by Connector Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
CamStudio  (signed by Connector Quality (Fried Cookie Ltd.))

Product:
CamStudio

Version:
2.0.5.a0.1_54063

MD5:
943d7279a659cbab52593bc35c791c50

SHA-1:
5a12b2cdcb2c870f897f2a7b192a58cd85ec89df

SHA-256:
dd5d28614b9e8994d391887336136718a2635bb2ce5a78e97bd1e9423494b4d9

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/1/2024 4:37:15 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC (M)
16.3.15.10

File size:
1 MB (1,058,992 bytes)

Product version:
2.0.5.a0.1_54063

Copyright:
CamStudio

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\camstudio.exe

Digital Signature
Signed by:
Connector Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:17:30 PM

Valid to:
6/29/2016 7:07:09 PM

Subject:
CN=Connector Quality (Fried Cookie Ltd.), O=Connector Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214A88F68EC903582205A06D650E3E0649

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:y5GrKBuSpGRDovcTn6rGNkZvsaB+kXmklgYcA5QTFVPMx38yp2jOM5OIvBVlKhCi:y5yvovcT6rPRXX1x52Mx38h5fvBVsIt

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9136

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file camstudio.exe has been seen being distributed by the following 50 URLs.

http://www.centralheadbits.com/c?x=kPriwv9CXzV6sTxBOEwyHXo00yWayayGoms9q0Zyddw=&c=K3cV 1GqGqoXD1I7UgsNI4H320KrW Zdm09etnT814CXcBKbXlbvgLp83vQtd9RdtIPpoTLYgE3u sbTJQMt03U2Se7fPFh5LKjqqYHRKpAiG64EOPhf6aGzfRxX75xvaLqj1sx2EJz39RGYn89ys2pBloYrjc1xZZHowB7UGD0=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=PN03ChtZEhEku1IG1TBleoZ311QWQoFHohMMgjrFdKA=&c=2UPrITIKOOTbC2H4FXKfhNCmef3Uw09rHxf9I2c1eRKehXJcQgrNVWUAM/gqoFUIzWjdt9tvrUqM M3qvV90n1B7zRSqjGAixxrM2K2RPk6/lamVonY5q 7SmaVQJV3eSomdHiWIVo/aCBDqzSW1K42lSXunVv 9Jou6jlq3n2I=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=DvO0OQh F4vzwb/EG3k1DfUfi7Y/lz1hiB2GaLsiSgs=&c=p5vfCu8e/cxYPKPhuKJoOpELU8KBQktyQp0oDmhYEdFJh8Xd8rdy mtWonluvwzRQRiTt6253FhMpQooKVWXBk4s4epeKSy1P9D dP6djqP7c4cBwbtp9sj e8ZbZz5AQPdR8TfmLyjEqmTh/irs4LIhxSDMh60slgDBIO7Qgr0=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=yOVwqsIhJoIPDEEB9PUE7OR2vIo8nIjCbyDIWviD608=&c=rkKlhq33NN1b7wpyBe9BlqK/cedEN5nChp/W4fKjLWLNJegXKfDMgWW9yYYaUz8tQ85Xe3c7a9hYS4eRnJBhWZEvHtcEG3oSORH6uyMjK iW5g2OsLEbRNwC Pl6DRJWszJRFq0IiF2uyzmLq0BsmITDsv8ixNoskUbMndmlvfc=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=ocdySpYI W/w7meRRHJBWRudTZNCjFeCAEN2a1NVizw=&c=2K8Zilk9ek2afNdLQTbxU3PA3IGYDO7bEaIVh7Gz7iCKE1Kat2pDD3jXPCiyfrMAbDXtqxE5qF2xrnCMLH1g76bPutWtcrY7dDzA8u/vkwz8ELZP6HPnpEj9H38XX4 b&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=UdL1IDwdIemO/bCaMpRHJIEmhaPe8zdMrWO5Vuxk8jA=&c=KUyKrWeMH60WvPXjDMGaKDo/QACqNgL5Qn H4S7xXdTz3cvHaEBn7BYHcHGXjcbe RgMuJpAjc2kpeyinjFaJ7fz6Gc2gzJr2P kyHvVXg9e2oLSxZ4/5TAzydtJ/0HtcFVy3eQipUMT2tXHRm Ycn9yomDOpXuTvv1fUgklemg=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=o33lz4ONUAUdgURuxFozaIKcAYbPrlHI1ZvY6p/dz1M=&c=9nL/4NENlW7EjxmolMWIeRUuuWgCglCeWnjm/Isq8JTOKoyTzBHy5VFOj5wunkki38YzIDmrBzc8kmjEeB skJH5YesTLDUIZ2rk/KrXGhJD0asgS6797EhJ5t0Sem6W364cNUbb2JVGWeJYZtXgFA==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=BeqZzT0K46wGxay/qI3il0uR3B577TF6UQopE072dtY=&c= 4y9cak701gWy9l9g17s6bhnbWfImPeU2Gd7fPC/hLehV8PYKGGgQvMNfrVT9BeGzpNaaNQyFCbpcR WG0B 8xwvf6Ut7Lh43MwWSEDSEiMr6c6eVhTWVl/stjtioB5ib5NXzlTguZ lQb/R gFiw==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=EiVO9Jsa9iw4oV AgAMTQKTW1/5RfZ2mMNwHbVEOjmY=&c=CNprNvSuAsZqjdXTkNuLJutXBBpAIM 3jg dsHf/A/wQefJ5Shi5opKJ5Mk1dqSZSqNSzqmN4os9k Rk64TeSNENgwdVHCk8I1c/VFoY/tzHtpywNjIocQYH5XANUohr0ra4puIDcsWMm2QVs9AUm77fIiqDYRkHTKnDm1vWcAQ=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=KdzY/E9jkkGLKvqnnixDFtPlzuN3Rr/Q9MGZaTTrZAw=&c=xuzLexLhOdZRgg3RTXhCRvHi034EY8Be6 GyJVlOQVgpcVkrJxTIUd/i0r0dGPEyEpZWKatCewEm8c4kXTAahAeR4d1DrbtrE34CGfIAgB4EJPhgJPSv4l5L15FAhIKkVRFM4hVtW0C/jCzOddbrO9Z/RPuENfKBJZJ1ys2N9/U=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=nI9d7qAwc2nLYzMOup0rO7qXM215kbU9N cXjXbUjmk=&c=OP4MuvZA06t6 xqfpDC GKxwDldn1pw9Eoi2yTyG4GFSjkyWg6Nrvg2iEPFHmczae6rcJBz3vWaDbOzNYAaJEqID4KLcnZE8pMTrPiuqOcHm eIVk81OCtRVnHmOvQ1Hvexc01wic5jfES yabxPOMw6Q62CQsPK8 DSlBZDetY=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=vX46PNvkzFCEODsBJcVYHN8rqAa22wxudOMdmZNLSns=&c=n2zsF9vKPIWhBSnPDDxGv4iLjTNj2Ye6KvGRnNrvKPPnP82S0oWLGZ6lTpt525hmD9DTEJwEKAUP04NscVQDJkEPTkhSP1Csw4IpQbGopfd2tpRiljlSiFjb1L4fe8M 72hr1I kv H8kaWvrMw2dUYw0JAIvRf6UN/Tu3tFyc8=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=DrqylqwoB9HTxgJiJWZxBWX6d6fDY5Yvs48cfwod9Iw=&c=bnHFv6tJZ9knjbVXEBK3ck6JRNRTU2OJi4y1NI4hwNOSH6Rv7iXziQSCt/UkMrw/hkDS/yelEDQjyTQbaAfC4iQCOuO3f7AIlrIbtRqCRznAK6EFg7GO8NbT Qrxa3mizomCY W372fG80TwLUK5WFsck5sX/JHG4Ls4s80/5zw=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=ruvi7ZKhKJd4Kj3f/tNHVS Czz2L/vRnb2nnWs4708E=&c= CG cXcC0k9ywzWUKCkPZEPv5BeC8s4CUD11jdNXQvIJ9srO30D4vp9x5GJjnKCrEWkfCJ3Ei3yMo/L0X9Ovg L4tOJA31lAmGxD74kCtDQBSrfoRng0ukpnkbAX2NenpOI5wTuV6HF7m6dqUeBgcg==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x= Nd79IhoOh UkshgRPcEOuIQO9AlEXdx894rGnth8ks=&c=9NRUMEQkcpUiYk ZFCtlvDbKNEBFm HSDhxInCk8KR36Gai4IUyLanjj/v0xGvo ErzeZ7ONmbgj9QvIl7evRVO0ET4/hA/a9WivoF2Cf0TrIXRadzmq1bGP hhqYWUDkxeDHujGiXZDsrEbteEya5sj1xd h89kRzd vWgmx08=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=wcRP15LBcAvF4RZ0NhBjhZgGtL17r4hAKj1HPOKxK9k=&c=yGoZOtJuqUcb4R69S8MK9UmJMsAlYbd5YT9cEsuqPzRPHGZ3HGGJRyg4bMgRsfmw3pDZTUux1OioHLmNxZFPo3NNur16aEB 9/6b1NJwdMVJKWlN8u6MCSpRuSH6V44D zfJR1lcewxDsTDLeWOZulHk zKbCIAkpzfeKnCyNZs=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=O9CqiCKvpKSdYCvp5TLvlVJKBIwqr9XabvqSVs75t A=&c=dObvkrM0oKZLqitQLXIiMEtLwB3Kqq2v t3sdFLm5kF2tSNQqyTevZnXmYoIE4ogkX4HjIzodHOJ7iOhiEw2kAukGqfjhJZRlZSRIAy5eFV3lu1rDgK/BoSVGXEZmp30FNlDexoSGytGYtMYk82KM2V3FLJe ZShqjddf SommI=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=Qy/crbKrOwHkUzbxXxQ7pksJ9T07h Mk3LpUcejsdiw=&c=ezyAk9QIhIn0GcQLdw5hakK3W5gTvT1RW6VTSjMpbB07Vyj1dAnh4IuxZfSZy51SJfujxWRQm5UgzowmlqygskgxNMMhWRjQxOXF6Rbc0jkF 3xHzPwh1tNrZGkIH57IPoOt2CI3yV2bOEUYffyhcw==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=1oRUHB2qwJOPJflpB0QvN L9aggo3CVcpa7EQT4WxHY=&c=OWtNFJAIHCmkltdVh4he89Gg9ezluewjaJ2gE5YU5t7409BswbmuotOHbMHMcijtQ9l3lccJYG1acSLdw4b2xZ8nZUsMFsjqkbE/sGN4DZCG/yfA99Ie6Rgf8Y8BxWaMi1ZABCgzt4UFUvFKnKgr8FCvI1D99D84yJTHThwmsUY=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=lBiBXS7owLm RPE3UNV M8i4IXGLsA6nigN60U4QhC8=&c=wVBAUgHrHX9qM mBY2SvVR6lYDqHRxOFKWUPZjwALrzZrEcfhH0iTYBsrrwW4EWsQYWYEAxis4Y/86FfGTrxosyegcJ7CLpLd8BalcYkkOaipt0zMHYBRf2w2KtNudZ/7S548vUBu6TrUmCVypQFJz CJiZK o9Af1GjwUWv5ho=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=Fi6AuXiR12fW68xmoa3QvVVJ2YN6GAm/bPpF1J1tqng=&c=6gaj6WqO1wy2MW3vJH7XLqfNNWvlRRRxk0T/PbKgjKANeFyQ B6UxvjaN/76kzktN0A4hCTEhS7qCOdcyH9z iiO euyh1Vis/VxufI8UeFAouJbW7j MpVpRt2VXv/dKlU7pcyWvoPwoRN36FN468AkYmwpyxSPo1pZ10M/nUU=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=BQtm0Uwbz5G9msJtUmo/1Q9tm1PgpAF9qKh44e7VAhA=&c=ugYWhs5wuau3IKWGkExzcQ6mdRCvrxK9vsJwNkZusxKnzSw7QpXi32l8RomXcInkn4s2TbQSwaSFQ8uueFZ7sNdZqPAZgX8wB5KUcPAk9s D7rrl8vkI4ZpD mrTEi4Pvx h1YSYEeLATzkpIPOysn8zEdSeEkbI6j/NApz5yfM=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=Dcd2FoJlP4IfBlIbo9vCiGzHKmaA4CpHQQTQtlw8x28=&c=dJg 7r 3YRBs gtQAwDbladmki9UAgfJOrc8814RXQetT61YAZPwkwfiopQWYIN/EgEHN4WvKzz7JGkx1FzGA8VZaNFqAjEHgwb6w54MtexHeBkVhA6ZIpwBq657dMARI128MmFD6wfvPZ7VJx87oTb8Mw QLJh7VPqrbzPr/UY=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=SfCLiDYo9C8iUm0g3TzY3OJIgCpcNfaryLr/cUrrDKE=&c=DfPnQMB8X/2umy6qqX6Uf5eHhvelFBxs2MnPD1mWckP79Ji/jUQjJsqT5KGIqVSLshYVgXVq8DlFt5/oi TsJdO7/FzBP/cPCtdbNwe54yUaGK8mYfx9RBk3ohhtlJE71MZMPsosAx9KubOopcW5Pz21 U8m5Bbqilh5hJ1BmXE=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=WXIeswQQWqIbiaTYJBIclp2EBQbZCXg04bSoNvDhnLA=&c=FFY3sxA1oHJNUa7VtHkffEoOm090VNT9UoH/fHwijiqW8qBIgzp7Rg2U45s5M4JZ0D8dvpdtKiDtvhQ 6tpGOBuSuo5zsiqITXa9k99hMcBytGGgeZiA74ssvQhB5fhb8rnDB6B6eetRKaNG9t hOTjRyJfOPYFaV7Um/eZosc=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=G8pthonv27JktNE2CjtAOoGX5O7nEtxP/uE2HqZ2wqU=&c=zQhZYBA7cEYfiePu2bsR1Ceu9vHrY/RW2RXAb cY2O6XTdDY0sbQyVQIAQp1UItfmoWLV8SAWsGLfA5L9sEUpIFiH7xhdxHYzcvNY5kK8FhhTgGKFFhETimtQZtOqYwe3LAJe1PoJIdc2Qx3LTxggH1vgMAE7gIDEzc58OhtJUA=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=lEqaMLu2HNdMIJJOAJVe543bldOpQFMDg7mPNvtRxdU=&c=2jFTnU8eTC6ohv/vtih4MkV/6hVkCESdTume EIIXtd05bFeMdYX 0duYv23nIsYKlxV6iku6wqjqnE00swMR6so5RglaAgJxoj3kCQSbIPvZLimneB1BAeqQM4skiUiKlXCsx6Wj6uezSWZ2knjfnkas86Fixoj AnhXf mg=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=iM uv5Pj2AvK5w4Iofo7gwAyMuZgTDw3P 5oeteKI58=&c=NU27X8vRo9dofLQbn5sctTs7u2XoA6dx6MeYqT3iKTF7I4cOOD5aWf1DK06KsCDqC10qb Hs4zPjhbsBfETUAC5Oc/t XFtuWzv2mVziUnLjl9TQ21uuwggwPuKJORiLY4E/8z x7xW6l60KV4ZzRhKbvIqq5h23ZVQcripdlC0=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=3fZ2AoU5 qamZHGeoJavO4E7YeQPF0r MYWEIDK343Q=&c=PL0/EqwDXyYb4Ugf hK/49gIoFljX70UflFfeKF4PngnWnb0eQmea/vFtyCafWOjvQFDc4yNNtH k4gh3cbZxUIWaIOPxUBOQLhiY3PpU2KMua2stWvXkveSh esjDFXjnY4uI33Q78qVvpb lsxH2gJ7hIzF5RQdNHhS8v2z0=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=BIa0xOQjKcDgx7psPgtbkerIkUmMRK5RvVkiuAf0U50=&c=gwyTlAbl Ag uIYvBbHabd3RpTS9mPlKehAgs8tQHW27LcD2S2Spf950Wiw5P3RORVn6UCQGrk8wUf2M6 f2K cO82N6JHqRdoPPPbzJzY2GJb9EAG1f6 IsBwkgBMhEX5nS/zKooGqmArIX42JOdlTjlFawfdjJhTb5m5g2 xA=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

Latest 30 of 344 download URLs

Remove camstudio.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.