home

camstudio.exe

Connector Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application camstudio.exe by Connector Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
CamStudio  (signed by Connector Quality (Fried Cookie Ltd.))

Product:
CamStudio

Version:
2.0.5.a0.1_54946

MD5:
b30db1fc2286014a27700025cf9114d3

SHA-1:
9eb4b574533d1dda7c48a172b17c2c8f19cb0966

SHA-256:
0f6d48b0e12923db1b6efdc1fe4cbfde15a97975c0bc53b0019c6b65eebff00e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/1/2024 4:26:52 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC (M)
16.4.3.20

File size:
1 MB (1,059,800 bytes)

Product version:
2.0.5.a0.1_54946

Copyright:
CamStudio

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\camstudio.exe

Digital Signature
Signed by:
Connector Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 10:17:30 PM

Valid to:
6/29/2016 11:07:09 PM

Subject:
CN=Connector Quality (Fried Cookie Ltd.), O=Connector Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214A88F68EC903582205A06D650E3E0649

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:G7kSHpXu9FEqbjsZgNl6Lye9se4uYa9zsItu:G7VJ+fZbYeNl6mFefL9zsqu

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9042

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file camstudio.exe has been seen being distributed by the following 50 URLs.

http://www.centralheadbits.com/c?x=dmxqNr9cStoCde6gnRGSchXLRLdAeUbtAfkOwvFN8AI=&c=1b DLSgMYs/JNwF5dLV1UyDEXumg/8o1EiN24LmKfvxdziHIZpbyYqLCH4EJ/MU2MGXOHSS/PAqPXYIbv7IMBYzNcdoCR8JEreKXqJ6mu9bryEJPa5/QVxN2m c5kONRm0HtlaO oR2YuTXu76JDK2s14aYr5MMyN3smlT/2bg=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=YZePpbvFKL9VhzvQmYFJ1lJKNwlJlDld0rJl 3mFFf4=&c=e30AcAXqQWrA/9/L9GyibPthGWYG06so6EHsNtvGCa/VGgtwZ8oAA/NaIWG22 deid CrCXfmMupxfwAW8ww 3I579NxjdWGCs94lXKURBq4qHdWC2z7FOuOOzxFeOkyt9C2WaVJo3bh2V1SMck7ad8s4evpns8yo3OzNjg4kdY=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=FSF8usWNrJZijXbOBvftntkTY4koZ/dZyu3zgsg1Zwg=&c=Pd W/RnTE3B4tlhoAv3Qb4iFqLBhVdKcEzLwxJNQFd OJjlT8yRdyj29KvuKiW045Q1he3zteQNM55UMpzERwYazzTJxqBNUvcCUeB7c4GsDJLaGKmTrwouadTIx5TbwtZBkChDgkye/plGTxkLCOWEcOUUG8dOioIssi3HKNC0=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=bUz9YHW44PX/yLdeqST4MjuLkoH8pmEk7pHpEw/KZsM=&c=bNZ6GFwnJBlm0Nm8AsFhSKin uVh2rhxWQKNlmrzTRnxsWsTa6yD3LGNX4X25GaTVcBnDkGE3bwK7E Vol2RLnMDRweJd60GK3VqyHMKN fNwrQRheAFivtbafIorzBsAQXTkQ9Veuolbw8/rA4JNI4lP8i 9uNGrHQs/fQUXBo=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=sU3mcVE6xkByvmjvfW241Qj47CV9D7PgdQrjSyAwyQU=&c=ubuPedakoynpWE71HCF3oUJ7RVSu43XoW387FTYcZY9woCS/UevN5L4zHe8G8foNTI6oE2YpFYk8pOV47gOsuOFNn/r901YY8Lhqnt3sFxDkT0zpmsdItYJe9Xg5FdH961co4441zEiekzlrXg5lwm5ZdqFlmZyyOclkTewqXho=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=0Rpw3iEkTdiRZTYHHH6IAJin4NFxmBwWjr0d3KdrU8c=&c= ldvyoCf4Oxa2PdsQKzS GqWVh7jFV /W0Z4SAtmq0e9fATnogYde/5EXWMKjxhn2mA2tVMvhf3uMR7gxFYY3Svb7jz9lGC 4v006LASGcwc290GiZRSqCPSeCzNFoFnmQ67uCQy4ayUDxkBGBSUJt2FL3lHnFatGW5b7 r7GOCbcPfI1WUCNp1d4HJnfNt8&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=lZfrJX wrOxwBKr56ZV9ykIMiOHCJDXdeL9UdSmJk8c=&c=W0ttZ39XmpgyOglh1BgEL2ytwX2915x7KRalbyTapDO5 pSsS HhRn1nCVYmjd OJ1dtccnDmFj8kCz15WzGzpQouIklfoi9JWwfMXNN9e k1cceZSN03fXxK2Agm0sFbu/Phlr3fjSCWZ7Z43x9PlW5rug7Gay6dEE9CDcgMd4=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=gpWadtpBvYUmgqZOKSKR1Q8PdhX1MhFD4xRfFRbtWR8=&c=6TY279e1PNR8IBH1STQIPCbydJfKyShb9TsrthNKcv9 RXWVdSXpuIIXP8WUmOixfHFZMUtfLwTWlUXEnmakJWojzI dcQJTjcltzmDc6KIcVG2bpo/zoWk LxWfRro2zWS0liQE LgSd8B1WukwTQ==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=ZAWYYhmKTWGxlTV2HvEaV9V92WhbZdyzecrR19VgVAc=&c=/E0ESFng1Y8VKeAk/JOixs4dF/6xQEEI03bv/ueB0aXQuLpwkuv6JgUoQezfEqJ73Z4bSbSDXdp5OEQMlNPKMylgznqNb9KnJUb9e2eUobjt4ZgcIPprz9n2TWorFCRddF0Zl2ZKSPbFRoMbo26hSjdAVW36gue6HlFuZOZsGwsysFhgYnuZNFAz4TA9X97Z&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=jmshqiwW2nu3lQ93QK cnaFlatbh5NPMhgjjwoX7pJ0=&c=fqM 3oPbM5BiOOlI13ugj/THkdvIdyV4nRneRRBSAt1/Yy5gT01oowCYke/vK0eNIGYBrIfBDd7BZTNHp0GkYMBkD9aK30EvW 55XjC9o7ZDVL 4S1wdAbmMSl1CDnOrkibiEMDZELiV3/WKYaHfHWKXrPXHq/Nq7HDx6tl/0w=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=mIJppVaEjgyRX7Ype8OtAF3QQICPuwR8K9H HiTKdI=&c=VrqfRWaGVMysBEmZ3jLCRcgSANV8t3hV1lSsKtmxf5r/XDqOZzayVk8cUXIE Z9ZSgn8RX1wG42ocoIzMkwLo8bmg5LQOtww1adTcObXcmFAQjdXF0x8VAT6KgaOljA VWkSwFOttELeAfQ3yzVlBLHmJ4QOyCIiQ13/wGwpDg4=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=szEBL7x2V5UX4L mPMJzqNqGVAReH s3j4n/7HdQd9c=&c=LHrYk5XyWnRlU0n5Dyp5JlexHVpgLeFAyiMr61qoGf6hqhfveuv9VfOv3CGGuZzwFc6RzGnEwh5uq2mLHsQYaoGlhXCf 6V9QXifjnXMco7xP/hIyRfvqYSEJIWeTx9VBdFrEmxuWdaIcbhfeI WTx7ZgaBtytbrA1iK0i1OEnCoGClEo5QwPZvPdwF6h8oY&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=r2pfZvRI5kvAY6w3iCXnSahH1jLtlxtMdYoBvT1WM1U=&c=4ewAoXQrC4/CpEck bgcfIaYhjgB3VBtKRkRohNvFURoiL5f5UyEHrljLMgpaWv3B 6q3U/ySbTI/dv/Grr8ruxU/eFzMVML/n/f7abR5o0W3VYjkOvoE5CsSyI2XLEMYqgF99ZBPM8TTczSQOmzb6lfques/4WV5vRSi2wllLg=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=TLw2MRJQCd9z5C3849nYw8zB6qURiLBNlfrVXW8cTVM=&c=o9KwXYBwnJ5 DXImrgZYCdwsdKtNPrLlrcGtLaqiC9WmynwnoSUKOilVee3tsylYpBgoEM5cgR3QVJsTg7//jnGYraAVkywPNg4uKhg/uIm0CnuBltG1/xHWD 96z0/Q sLhuCoMubQ3f4b9/w iqxvbZwQVURRXZhSvc3pGobY=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=3IzjsHe7ItA68FbBendUhBhaIZtf6fUIFwRtKdVmeac=&c=FS2ex2XZ/05Xzksbezm/bHVJ5HchVuYlo56Js96GQPJehQfkgKQgXo6jnF VW5P0rdTxixvO7i2WHAwuOUx4CTINjLYnRHYRHUbQ7Yq5JIz5F/LvkbKX /KodgTixpeJagJk4vXi8b3is WzDbWDU0ykkhjlzK0/nzO/aMogLTU=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=qVBaI 3YychQT4oyEjAdGnSrq1UY6lV02QoaIv14srI=&c=y/H993NSiO/OjOIN46Yp5dFfThlZEGOOaprobuhBcZ75irZVGb6 2ThN5Ewza0LjSDovC/wF8zwpTYfymqGdv9KrI6UzB6SlXxFqJ4RQ9qIRK2kw0MJ5QawMvyh8pUBAgwH5ADlqCYieGHsLu7FSDy3QiOBHF/WLETa3lsCuTSk8BBNOLcKoRIQmS8ssTl/u&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=oH8HX09qqzSe 7ebmsjKGKPpPCw7iCtCQ4RoD1ReLOM=&c=7SfkeaZLTZKbX6oVBZAO7oGbaA/uYwIHvU3ywnhoOxB3lzha0DdHxAcS8Sx1TErVBz89y6ERxKHeCeHgeed2Vd81BeD4ziqnj9d4PTFqQguAzguid9EGNzdjnPXQ7w01qHmgDeUt8xLAvmRmAesLHjRk/EpKZsz7uhLr1OIvbmU=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x= P7Y780k/CrXPCc/6pTO/ Jy9uGZso86xqUMYgnyKw4=&c=7E45GX6MvyN7D0KalYmt/mmZqfv/3L3FXYG0QqptC3XXRBuNzRLAdCiRkowgPA2UTfbWAnpqQp8c3MUs0DDlkUqEXbqhAfaKiGCYqmGtBP sR/wkDVjIDx3nwsMp1fN99ouQ2m6eDw0xZMr EMleHi9w2DdwtEicC AVzFTvBOQ=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=p5L9RQwcKQyTOkUY9Wkbu0ndBA1lXoYnrras1Tq5qN8=&c=EL8ym2A FUZ0cKNPAIX2XwwGYg8yx xbSmyUVfn8CzefhHiOWNcAPov4ws0O YYXioHZdAEuP4G3Pss9PuL1sONLS9UJboMhdWLUOAYK34SPDss19l2c2/Ngowdm0sSWFV5/JR5rBupxCD5Np LxvGv/Qhy4diRwftAcbfv2Oq8=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=yQ8z/AOeJzSRYv3S0GqpbsDpzXKipgqXQj/Xb9JW Xo=&c=tP m5ss5Z5FZVqaM08lki61vRHy pEz SDzOp3p7ZCRqrKXlMXH4S1N stMHiogjDg6QpoWX7HxC08JMBPFY/WRt sUyXRNuBAh/pREARXNYsH UqN1B4dO3uARBq2E4/A7RFyPVfzry krHh/5 bpHZhvZMzLKsS W/5kMoV4bxYvBDPOys56NiunJFd1Mu&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=pAsj9tXUmg6/getSeG q7pfd2YBHBlAKSQJBsIinBwM=&c=WKfkhsfhw56I9TW6Jvyjx61jzkiZ3iHWKDIp7M5D0wVfpvgna3MaURpD12CsL/c3/tKH5SrivQB wAqfWQDheLUdF2vbBdOoV YPAV8UwJN6K62xjQpLZ0FifyjS1B zLsnMEIpYFJNYmYVQE930tlBsgeCx36vGeH65KAicr6FJKqioffCyK7w8Zu2 wim0&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=PSu7PQtw lg 5Go67T53IA25nsyskIWDgNsRy/8rNWU=&c=5Ut13e9g8SRAXrzTDW1wRvkxn/97Q7kWJjon0J eQkJfq2/kpBH4KmiV2460qv4cUE0yEEZdxaP/hS4DBgxPEDF u7Jn6JKCxMC7I9oDqlXy1QDraihL7rfvk9GdBBjMkl9ptCapbgNLt6o1bAqz7Q==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=CGkhqe tfywUZvL5z26sL5KTYqWmAAQAhUVelNGUEI=&c=wc75TcOyoBgD7ydnxXLLGVlS3r1QfAoXykXmMtVOsuUVVPXJ/KXNFCd3NsG 0mjhXj7t4OQ7rZwWZKnX TCT41Y4tv9smdyAnwLckpnp9mpMi4i0htGbCzRMSgecLjO0/MjU3cpJKaY8LnFIa0j9VxeNlDw9E0X2oazH1kLZKQEEO aJ7eOVmErmv0wKw/2V&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=on LFpl65vWVO7iwkvIUw4YCsIGPbnqjrCXJfUSaZD0=&c=XZnczYFstpLxiNGWdzq9OEG7ivC0NDF6vz7DeXEDGZSDDF AtLvkHFJhdYiSxaQ6FuSH9axxVyugCxGGJQybAjS0/ afZE2SVv RnAWGRH FOINAXwwSeCUo8sOF21caKnDZK2K M02F5EAnyTVoslGOZqSALUZmgbVGr1/WcBaCPyxfHfHePTw pfbhP6sP&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=yXf dQyiDXYA0AqJYJSG7bFqxrJOu9Yuwui6lUXIk/s=&c=md66BwfvptJzF0TRrSAtCyukFmv7uU7tqELQzSFUcN/LLXx/71v4pYkir4KGUP37VEESjKIou2LtNVYZS0l/pD p/Hp9BVgLSDwYeL1JQj AFFbpDHTqUp/B9zFUty0PjfLCJOKGG2VjVA9RBTLcq4iggNQ9rj0lnqHqmrqzJYw=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=0cetapud3ijKGwNWzF0N/uMJzvZRGhnJvWPzP2BaT c=&c=dWEbeLdvcaNcj7DTIedWA uefth4Xhkk0kM2Drx2CErUTG9VUCMOqsV 1B7w/gbp7zzCsnUa uvBwxbrY92J9juNOcnd3dEAEzGb m3ExuUONo 4C8ToE2y4cvuXhf1veYsSwckMhKthHAbtiiPm8zD6agWkE82NDvDq15FQ1oSjBTxw1ybVERBgXnaRayQP&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=4GJvE5V6oRQ5eqt0W3GlFjorydsNCwfIXRgJtWMOARc=&c=0TSSLfzxqXnuIASL5fGkoJqHrR 2iy53YiU4cG8P8Scccg55R4rX3szPM0LwlggLogLJBPllkOy43mjRMx5DmV9QATG9z7iP1ywLSotuxcY0ze wVDLXZhuQ aXziWKmRFN JtH2EFNnrj477qd5dihVoW3Xx1xra/USU1J2r0G59AQhwtQHVoPhA9bI6QVM&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=eBCO25wBUZDZubrvS2ddbmIKfw37GIImojl5rJ6eKuY=&c=Gxn8TgDJVaMerF5YTkqWLy/PkJeTVvXdPpyWdRjvRy/83iK1OaTUhQU5zoo9BGtsYsDBY3cmHOglWqUqlLqvXwPjdOvfgPKPfW/0JCUPREy0GcjGf36kbPKtfmmpNeVRk248dk0yyXuceCVzkShXr5y7wQluyVMp UrLeIb8Esc=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=FXi7vh3xyzXQj/ ElD7UnHEZY2E0wvLV g3ZCmHtiyM=&c= Qa6FS7AI2iYpz/zmjURgUau2hMqo1hG5tjPsT8SloU62GKF7rwnKsIUXGdG7DdM36gxMstvjF5vqeYuPhFJIYpB4pyFcsd9uf4QmcKXruCe PE03 B3I/wy7b0G66NtYgGJ VG2z9F2BQIrv81WPw==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=BA1ftXcJXTxgCstbqMIkVjuQF0I9wNwjlNiwRTlIABw=&c=OdipKeW4WrLsl7Yn DHGS3f6QkI3z2L1rdSWpk0V1NCfzB9gPCgTs3c0nYgjqWrOCbmY5mknwxCmyWqh3mUrEMIjc5h9jd9hadc7nunRW8HqIHJ2s8GtgM1MXXRw5VLfUoodj1Xt/ooWeHvMaea3p6oRNdcjdeURSwdzMD Z4CE=&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

Latest 30 of 297 download URLs

Remove camstudio.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.