home

camstudio.exe

Path Quality (Alpha Criteria Ltd.)

The application camstudio.exe by Path Quality (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.conceptspresentmeta.com and multiple other hosts.
Publisher:
CamStudio  (signed by Path Quality (Alpha Criteria Ltd.))

Product:
CamStudio

Version:
2.0.5.a0.1_60682

MD5:
61bbb8090cd4f56bafc5ecf77fd33c35

SHA-1:
70c4512f94b80818c70475d26299268addf71e1d

SHA-256:
8c548dc3e98ed535ee3233d7a83346b5c7c673fa41e07708d98a56b260a0d62a

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/28/2024 12:39:41 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AC (M)
16.7.10.14

File size:
990 KB (1,013,792 bytes)

Product version:
2.0.5.a0.1_60682

Copyright:
CamStudio

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\camstudio.exe

Digital Signature
Signed by:
Path Quality (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/31/2015 6:09:15 AM

Valid to:
8/3/2016 8:53:56 AM

Subject:
CN=Path Quality (Alpha Criteria Ltd.), O=Path Quality (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121865442A968BACB1F4EC1956476A3AE8D

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:51QPcnADHUAApXfhY/91+Q/C7vMFvaBEi5wsItQ:56ZepXfDQN17sqQ

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file camstudio.exe has been seen being distributed by the following 40 URLs.

http://www.conceptspresentmeta.com/c?x=Y238nYnnYOGTnIpgRSpNXqcxWTR6bxyquTXhsbQpgO4=&e=0&c=AEzP5MmtEtrlsTpLoQdEynP7wV/dCShkF9N4H 2pwzAm6n6V/I78Odo0Ns7Xqetub78lVI3lQf8IiaINnzDTup/pJUvRWN8pRTBAzOuPzZ9KBsDJhs2OtVbZKVpp3A4/zzz54GhDZAW9CK5CHXQZ4UzkIAQq0k/QiqfPaDcMpgE=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=CHW1JA/fLVkltiOcRM1zXV89mOqUdiQhl1beA36FuqE=&e=0&c=bRn/2zLQB/gszGjLuZyQw7gE02yRV3GzD3lR9kWv12Ths0XFkNcrefJtdDenpJbj7/cDLaVsC8Gc0xQH8GiKZUgE/6oSXqIp ADGBTkGM2B2 OkzuxgTDb1sykVZimM8DBdasxPr/ZraR8QQ FeHW9dM8QuHjj1FxiwjxEG52BU=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=iUEKIyS4yoJ4ISmwwwLRdiGUMMZLFRGwuK04QGGRPu4=&e=0&c=30P2/Ry SG5fDPzHbes 4ft6vGCH7VmaNO1JfsB4mBUz01bko0tziMeOwHBsuSbqrjKtDoveWWMXJcMqG8KA3E/ZO4LOo4kzmUpBnYiN/0i3NKAPAY8sA0gxep21BESTc6GBgHvznVZbmFE4Wh7T1P63aYlOOz54ibL4gyhOHgk=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=YLSfVIMmW9wsS ZgxGe9IJeBWgw5aP0ooGrNF3RqQKE=&e=0&c=InIMIKmbeHhUZKun9Y6gkUl6AFzOZ9rOzF DU16hf4O8dYI5YhKtf8YIalwiMfNNATBXMQFO8vVotZ66myrdz1YhtRJcB0dWASoJj q3simKuZ8upjqYe0co3yNK81lBoDfGoMpjGf ZtxQ85Ylf9dfH 2rYUzerP/hEld3WGi0=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=3lRKDupj5rRwH0Lov49ILsRqp7kGszGR8cMwzfGsF6E=&e=0&c=MYH64LSrGOvgpJY1Yj/LFQ15DzpHj55wX7FpnP rfWQc0oDfb4xNylCbPFGCgrAVhP1/ijjy0k/l9y5e5qtJS2k4TkqWTFvvKCaz4CR9L2KIGr0DpAZjd3HRQGT sJIhXs8gh4kMyYFm0xD/lvzbOEbS1RuEzpuvXCLMKsAvxOc=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=qRpsybYz09DhQbOOx3JGl3w oMxUrMe5/68g7jwslPY=&e=0&c=qGrYktKV2 ulfsRVxgjYZeI4cw1VDDFxZLs TvR5IxTPeysxovJnkELml66jzTkfKDx RGl9oqt3Sz8eHRE44hQemZ23nxOHLJMr2ETZSaxIqmLpuHlh7TAwWIn5bYrJxVohAPuyZ4TIq9PNOk PrSy4 iM0SQFNl4mQYXZo4QI=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x= S95HJbwYkB3K7sDFsvaKMNY7JIHeBkN0kLGjRuDksI=&e=0&c=PUK1S3JtAiwxM5s7WFR4sbV2N4irECxGK533nvIDslBDb/nabb06lIxng67UNTWTAgNBZa9Mchs0aGrigdM5WKRWMwnMne4POZN9Nd5XK9g4kDmYmhjlMy7i3XO/fA IiKX7Lxf34Sw1J LkT2qB/ryrDaYiAR3AWqwyJ71n/M=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=jeUpBUpb ea/pStZBkIUDZpof/wLXMTI5nHGNos6ChI=&e=0&c=s4jckDV5/AErWlg05hrsiEgZoUFEN3haWVyq6esfkjlzzFd7602X3ctPB2Rw0zMqe1ASiPW0yC ghUN4uedvbVRrzmNBJtP9VOJUTktF4jT69q8imYbmE207zX9Hsb4DK5TD1Xl 1 3Z/0F/8hmWjeTEJztNLANQ1jl3yLy6vpg=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=0m2guSgQnSLXEyQJVMlHnMrEXRuOQ8XNJvuQq6WKrZ0=&e=0&c=TASx/S7D7yh4G/TNCtI1TZJB/NDFrfWPT0wQMDrAj4n0OxSLhBFQIzuRxP1uHaxQs12FsuEcv3x AZ bPbVyV/zOZ7Az8zhaKxnh5t 7gkPmyc3J1MQRLPim/0K5PBxxoUV4yBg4FvJ1lz7euFbjEp7GYiCCcBhtjEvi5ixuNhg=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=NjeDhCCKNeA5JJHNDGUPWma7YTouqVq8 dPtBTXpd5w=&e=0&c=/FmDM0UAH4QVYax homAXas DYTYPcp0eoPNw1JfmfFcCZwN3pcl739GVUeWGfrhpz02MHfaF6L08k3yrHe0zwyA4JDuKb87GdbTJZHXGxmrnc26 wH6oirsexZQaW5kPEYACemKN2Ky023Qj3kNIVYi1UqqMR2Mnumuui0pXV4=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=QZKPvtdosN3HZd4R LOSMnV70XOQP2w m8Dl2ZwUaNQ=&e=0&c=7ARi4FziBOjDZACCkWqVsrmU3URWk8dH33Z6SFH2cCHuodeedyzymH5CE5sHtX7dC6WSZ94lwGlMgpZP6cOL7A/qs8 5HoL9zG1HP wjLiHsXgZKXfLsShOq6OJobRtOXu8vOTZJTCeXqWP1OQaSCuLMjzJlNv9GL89s0NG7gRs=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=HAJ7hw/LwOrC1eLVup2ceNYt 2rbaDGumPBUjG76Tq0=&e=0&c=dtHkGOfmLAWONfwgJUVao9RmqYvuj9vkv1cxFw9hT ZXg65jXDr/IQaMuDy6 WGXRz2wxdPxiqYCKsxtrqdvAwF/DUiWH HJ9Cy5LV6cJhLd7WMIiTeH6ix66S1UUZxGTebsRw0BSBqPTF/xnMH/Li2ApveKnxqrXsQr3CNggpo=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=P4NygJvPFL1d2XDrlTpuvgmB1C9ed5oTDwZNgaEt3 g=&e=0&c=kRzanGt AIKH5nnYqezG52rcKTHoDQJqkPq17VwtHfmDxWdc2loihH39zwC/y8uYIWDTdp5YPKyTA6CxrnbEwybGZ3EnO8ubJ7YeY7eYevD1mqQwPI2VaKrxigr/u1fIDgb7/seXGlOoaql2K07RLScKYW/Hw8mjEDfIpTZB/NE=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=as bKflf6E0fvVp6TIIiNfzk1WGwBP3Ip15jAKKZp/o=&e=0&c=1wI379SAfslqudGtfanZirFuN FJAoMkcmF6KK2o5YZ6OL/CKT571y UJPlDjtw4vP9Ng C kGkEdo3dBkk8yYKPJmwuV1ZSdbtCWma01a5wIqEqvya dSBaxPG6BmNGvvWXYulTbO9GeT88pBn7hFsMbZByLZiJBE434B2wJsY=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=W1KlAexkwdEKWzAnxS Q/y3MFCHUgIcuXlzHNObSlXg=&e=0&c=M/rDbF8Xs0IXeo238H9bNGRhli5/PcCG OL6aGnqlIYH8N8BGIEIalzyMlB7manMiC6g3eh3KB7anPVcjoyxNFKnqDcDIGa3WBejM4rUZIMseNUmu4sqK6X /O9HXfVqq6uMY2zot2zASQfjwdvfyiXeyt0r4pyIPrgpJSa0rmY=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=tTeG19ZizAF1KZT8lhfZoJPdBx 5tnRtC7LejiurxQc=&e=0&c=U3vUWDoMjSWfCEFBX5SVYAjbRqS/rdLE 8LL1mhuBQRgbfOpCZrh/Oaz7t/RyD/qvjNNmBRftMz6uSCRblEjHl S67LBqm92iZCIwqN/pm59ifwDGXKXVbqq0GWglHXR7cSrb0DZbK3t5HTdD6lJ4/C1f80zJ1 /d9AvtV Vr3A=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=7KxX5 79ej9SrHRlnk9uAu9eYEvGNqdOjEmKKIOER8Q=&e=0&c=EYleeZtInwYU7QvqG3SRRv9wf7mHvb2EGdFnLB3PpUyejZ/H0qJIzrnDp5sDyefPYrB vxC5HQoFzGsP4lISWGmb4eIslPKG9MD3Br7kgUfTAltZ71L8jrOYxFNEWwSj/OX1VoyZcjX4SqlSr8R32n9ubXty7HV8MXk1TvJEp34=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=kz6CQP/R2PG2hkKYwEXjkbFRdUA6z7q spn1q87eOk8=&e=0&c=kYWfBq4frjujXsUsRQuRPZMF/LTrWHyCWh7w2ptlx4Vc6eKtGbAzYqzkq/zJpolaSU0DM1abI3COCUn7KTTZFhGbBUFrxky5YO Xt98 yS6yi1Z 0scYncYURrRQqlM1gPV5h9ujkgpPMh0ZltrXCZyAHEhivOA1ltnz8ez/AD0=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=8Bos2axO7IZ/INnOqOKLpJK44fszVWe5/6dDTMIogOI=&e=0&c=HoRON2rh23U0LQybSoPJK0eoPxiKBvNR93mEoa//2uOCOw8pl5S 6BU3LYrQAD0QXeXB9tHLSyBJTYUwr41wy09rvK/wNcqAfsgz7vy1ekYSHOu/AYRtDzXZju6lzBOgSR3css9DQRMUpwx6Kng4c9Ns2fk3/p4JbKUcMraLc/k=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=qEgUMBgGN8msXtKvhdTJ9grONLbsTA5DD9APDht8VIs=&e=0&c=wj28TfTqq/joqH2w/vCU/KYc2HR5SOd/mSQ5yHj3vbBxXP9n1ClAEDo37QxzblzL9eH3tVa726JwPVvVhkeYB3SSoFfH92q0I4acF4cuXRbMF2AWn5uorGqc8FqP8ALQM3RetRbs1rtxEK6RsYK/A3P8s9vRzMTk5pXXHKE7kPo=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=42vEuSAk088CN7wJozSFe/7Nxo0j/NeCJcezLuHktak=&e=0&c=WQgeMe8cA05p/0Q4Wi//fmG79f6ZQkyVBrXzxYJ3jNd7caTXpGX/KuEnyxthzRo5vlu7Ts4EqfD95gNPKVNLAj9I8ELtWcqi7wEEJgI/jdCUpcEmrkEjqtew a9iPxo1ClEn9VaIfimpq5iG2apbFHRZG6WCwsS/Qxmrj8pQhrU=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=GZNtCi fLEsVumJoZaspTLemfcik4lIBmqnJWyMOXvg=&e=0&c=FLWHJEyYDI8IaoZpJ8qXFVR0L3b69TMVW9N6DBBI2tlX2Iwv7TrCd gy7hkoWT2m 3J0lPr5sm8mqp8O7uLy4fZxKyAIYoYK1hrQzfudehxA 3Ijdt9nrSDD6Xc4AHvkm cuyehGFLmkjAknCWZgwF34vSJVqOiwFuw2Dw 7MCE=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=NBv3NqAQfE64thSXGYi cGhZ6hb/HIp7n5C1jMQAcLg=&e=0&c=SAjIQBRRo1anYJPBw2GvqXRrjhpeyd48KohIntuNvzqKAMSuoP6NXO0ifdVVZMI7pQBYs9zHV3HVhk6PItjtS6ygNQzxDTqLSr4j14htJqfk/UYu0xSOf0r8LqwpLyDWxaNIiJweDumG/EF9JMPzqsWwGaSIeJ7yNSB27G1TJuc=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x= ed8GnW/G9mNagNxq57NHTN1rFUgydq4xW71KL7A1R8=&e=0&c=iM5tGaeXSyiJkwtDm Fbp7e9ghIo3D3zJnajRXW7b9qLQOXIGe1uJtmdgKLNhHcxrVWCRDPzKu5E9lMhzyvMQDOHStiKukDKtd0LvrVlkZwXJeL T YVbKB8IQCiryNonrBzCAXnI4gh l6gyf/Eun/shoG9vJxyRM2zs8kUukg=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=RGyPei9zdd pLYiETyecSm4rO2xCgo1Jrnpptu4lp3Q=&e=0&c=qwFE2Hq3FwQwZmBA5RQfdqx1P/1AZ8BC8HPTGlctSREsfvHbg4zXIkeRkcZjvt3cn2ekUvthTYpyDh6MZjdShIN1vS51m5fCBFDFSRzoBmIoWzCYAmDmVC8eAPHDNbdaYJUy6QcNsslSCrraOHTbaFcdq6tQCnw4sUyedtqtAGM=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=Q8zMs32WsMqkWIGtp4p5ffM g4spaTS6iR0KFEZsoBw=&e=0&c=YlCu3MIsvSYIJ8/SfNU0lEMWk7b/l33SJw84BfzInAGu f6ajMB8OwCzqxS6BU2b9lYgdjkhCVRq6WMtU2rG3CFmVA TPUOght8/XDNAw3hTeptX9a0MnfZJ JgMrtjLG3t3y7GmOU5Q58cjmkovKYw4LkSasKZ5S3vxAkNfBw=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=LIh76CvTnP9yyIJxvsyyhY7cBCZ0hGBTMD g8mcd8Xc=&e=0&c=tkctjfLai4twC1kMma7N3axnWEqXQCXVqcrpArIpyAQzOwU90TXqdkopn6LCWzF j9OBeV/WPMCS5sT7kPnOKuahY8AqjOr8RhgFgxdJNaMSE oyKHbnWBdgc3Y4Qqr gbyl7cotxiCA04IKawSXpVhtS X2m3302KUhqSb1PFo=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=u2kiduvTBXWJacR 8z9CU53 ysnY/phTkWCrcH9Kni0=&e=0&c=vpTrfak0P4H/jZUqndstvcnbfCAc7kn4IXeegWOugZZeYAdEVDZjFtCj4VzsOS4qUbcl1vJXKKylXbzl34kYeHVp2BNxxoSz73GU5dKPMGddRGaQVhtiZxawmzmyX5Rr rF4I7VhNB9cOUXReKl3I6U6v7 OHQehX56snsWGdV4=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=CM10NlxehfLc2U0ybX9 5lMzu8Lsto0HRVkM6w2qv/M=&e=0&c=uvj0wwRVG8/3Crb6WoE22VV4oObsea3dA4nN/exxGKJtMd2ulmlL4uUDtK8Y3I/h/VFG pRCMjM1YW7k32EP0IP4cZ3ihBPDvzbB 0pvtOm558sS8FgX/DlEDfvk6fFYB8Ym8zijdfmTiswnmR0dLfcD9RZb6rLk1NitsqbZvJc=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.conceptspresentmeta.com/c?x=BGPMX6q6dohfQsQUeV2LUJn3CahbkVvuv9H6c4ppauM=&e=0&c=VNuwg6tOa/8D0uhu62jCLhbIEqQ7rOq2ezY6dmErNugkKHW9xur 6rK1f tremX uGUMFBEm6/ lgEfqcpr6aE8u8ZANLUv/0ZdJqnA7EnpQ7XLZmpO9lksSDzGbLQTvJ55 fKoLVloYiQURyVm a8qQXE7F7rv5IZQZLJ/DPUs=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

Latest 30 of 40 download URLs

Remove camstudio.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.