home

camstudio.exe

Path Quality (Alpha Criteria Ltd.)

The application camstudio.exe by Path Quality (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.giftcapitalbyte.com and multiple other hosts.
Publisher:
CamStudio  (signed by Path Quality (Alpha Criteria Ltd.))

Product:
CamStudio

Version:
2.0.5.a0.1_61161

MD5:
6c2a106ecf7275f645cfb47487622a8c

SHA-1:
b26a5f420c16ca2003ccea308a01c08b0d83ed57

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/28/2024 12:26:41 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AC (M)
16.7.20.11

File size:
988.6 KB (1,012,368 bytes)

Product version:
2.0.5.a0.1_61161

Copyright:
CamStudio

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\My documents\downloads\programs\camstudio.exe

Digital Signature
Signed by:
Path Quality (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/31/2015 6:09:15 PM

Valid to:
8/3/2016 8:53:56 PM

Subject:
CN=Path Quality (Alpha Criteria Ltd.), O=Path Quality (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121865442A968BACB1F4EC1956476A3AE8D

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:4TfX+OUopkvQikg+G0uJpX8rv6Wa3BmVTf/XvQyMBTlP0QjcpMXVJoa:4D1pkvqkKCWaYzGpfL

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9327

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file camstudio.exe has been seen being distributed by the following 50 URLs.

http://www.giftcapitalbyte.com/c?x=YOE01uqDiypvLpNnibqE3EJFfy1TfcNhj6BgtlCKp68=&e=0&c=wmWImUezgsWroXKPqb7kXaSIfdZa K25aD6HL12F1ayRzhE4UoMqsWxj/WILTwEeiEBTB0bM4Q99UUmnAAIbUjh7mvAqYTDPTehtUB6mspo7s9l/0bgp63bPRe8D8ZFaFkDQJ/Ur6mKu/donisW5xwZ7zfZj2MpaRfitpB4YdNk=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=TnVbkGNgGeS2TNXKC89agb1GRSUVAa1pASEH4hyRU6Q=&e=0&c=rbslCVC7gUp8ODEooka8UGZTLZeJsZIfifjQUbHHI0VfFEm6BzudOWEPPm7Ou8MPoWe617nNbnkiqpJlXvRLnCDoQLdEDqrhgWamA3Hw3WpFNdMSjYK7voOQrKNvgsaf84UyEIpVlEcTf03ZgfHyiDzApkeeC1bXexKlzyjW31g=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=hbZCMHSqkljSIvD37wJSFevsFW9dizD/FRCNUFCIhds=&e=0&c=L/JyoNfZ7kE/7ym2XgmsC4H2S68KUSx/UMrPp VcmjwPmbIRF6fopIYJGxVmJsgq3DC99B9sumxr0j5zoOlv884YQFVlzCrvCC49Oe1aKyrx8J5dVyftOsS IahBRmyMsC4LUxLwATdsK4EFhyxxDC 2pH2jMWEThtYKct6afQQ=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=aJnQy4/cUbNeNdVSfe9 AmZkLa1Q2WTm 7ItteZq2hc=&e=0&c=BdrMNk7W4vPlCgX2TgKbSI60OR64ISxO3kWWqasgnrjqwUlVQqh7/n5vctgc1n8CV5AM/WHaYR9/GWUc63Kig1tyySTmq69piuzwZ7NKX4ZOaFbGVT2gIdE64FibUes8V NX85R0a4WgRtQo9snDS/ihsq7woQagIlQ0NQJtZts=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=0L9OtVy Q/d78z2F3iSEDdOzef7rB60GeXrPwKhgqFU=&e=0&c=no4mMkGp/2bs378kbca/w0ayNMNLuXbDMCUQCUT 4P97Nup34F4wo5vWlKDPYI5SxHAr9oWW5LsrpaRuv7c327VQ36s5IlZ7OMKBvzJhoEumi6pbIGQi68MgOn/VQ7vh zy1zcgfwM Rg8d88cJmbVbc9rrV2nh6w8tosDHPHn0=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=EuvTscVSfcqhhrR3craSJMRDbTPKbh6NA3zybJ6SRBM=&e=0&c=uY9lOx7te5EKNJyhNAgFyvfwszJeMnAMnP6PVtn3tg9Zej4Uqswas5C Oh8kjTHY9UnLskF9/AoVS2thSJ1zi1bClwJiwMSqNKPPZgEtlhmZHEMAhR73YG3sMiSjkdtmY4KAhW7UccDxV7oSj rr5eRChJTpukQNhVHScmpDous=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=/63nifDaPbaHSzQEu/hYq14FroAb4ohQaZQvGk01Bw8=&e=0&c=DMh9Dan6ifFfyxErlMXD1MJMTKfC1Mf5tFricEzw18VLWlW ZzKPGqgmz5jkrUUtzTgR2mkGvVSor6SYEtP615Z9oU/kM11r0BBypAl3WzBsTU WHHtHZZkn3JVp/AZgnow/EJ7dJlpKGvw6jy/WMRTqBjpVeyR3R K9fqKJ/U=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/3fD5pLN1gMkAXeNm5P1BdAOFmvaHIsWUeeiTyWj8FnDmdK vsAn1VwjifNA20P4nkW7 PTqNRBtr0cIgoB57V1AW8aspWRntV5gWA4ZOMvg3KnGKqneWNOxiSE XjB51J3L5ZRShgAfllT8YEYT6cA4qEE8XRBz7lg0_mH2SZtU60Pm8oFKmvnilr56k5d 0n1BD26Gg-GzAAAMRtbD7PaUzHinBGEQXBRA4cWkRd6E1tHcgbYzSEZ7dGXVqZJ lTew29AA==

http://www.giftcapitalbyte.com/c?x=x5Go6Bd2FC0Yy1cnSwDeuGeoG0M7dfzwz0p8NWw3xTw=&e=0&c=rQiDIYyPs/qPnqKxcAIQlxfIRbEEYtjVpATbE1WIxwp5jc3LVNxJP27HzEojG6eTxRIJP8rPrIHVnUQdhM711x4p9r4itgI3lE2EJoKLMZ9pitVmM6dLlJu4Qa/Nz9JJsLttabIQ9mxQsGEYkmxTT5OSmErmctyYA0jpAPX8Fuc=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=0zcDpUgxUeA5bdh8E2tuYI1EQn8KwhVWV4YRHRpdgOg=&e=0&c=ux7sGWdWsHPMGAWnCSqf2KfAWAn/X9HHg9VdmGKcI73nFDYfZWWyEr/1pKyzB6Q80dIaek6cFESkMTLM6PfTvCtVM2IsLcnkI7mKtnEhebuqy/1JKfvOq9WQEJ3l fOEywg6GgmBidNzwrhx7nq4z0kb1UG7K5d29mXPxkG/8HM=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=tZo8QyjkJP5EcjVlIBYK3AhvYbeuE5ZlSVWP63GP8sM=&e=0&c=9rTGVytCCdkYerCmNUbmN29J9KBA6kE857nEyUS4sIJjXgz4tSvQwRfO1wzs A3CLypLAj/uo2K48MGgU3x77kCoRj0EODNreee5i9PvOIrpD45Vw0w/5JvZ91AVak2dlPc8yP6jQEFRb7gtFW5GVhysHcfpHDOvMR7pm0/1uQQ=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=ooaGfOVbMZK3q0FkUyEGZik6l6t9HlF FVU576ne7AI=&e=0&c=CLeJNY4aLXI/nxRzMmXogaGBUm54LhuNfsAJWT/b8nFU1lZEFWu9S1O1/v19q7A340nNPo9KA4eEzukiq9qXZ5mXxKBOCWryk5hzEWlJBIiXFG3hcWCXpnMu/mF2g2a8yQDukxUq0It2w5HwUIAXynvf1wCW8WGB/uBOl5GYz4M=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=/DRR6gS5hDyvZfb3hjp6mUw4KuHESBmamLgvf67WyTg=&e=0&c=gWmLKQ232JWOuvZyanuRhIa0NTvzcbdeVkom1UnJ5Jn1MzDmxEBscIcAGJZQj0lxW6Omd1RHiDgL0wk5hMq6QnjzGkjx7pV/9j0/Q0tLEzuGe2Fc22XSteh wHTG3K8RzWpiCJwFGtXMyrrZBMItOS5W3LVER2eocfx77J1gyr4=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=l4OsMqOoUuFJ1FXpdYf8OTgKAJdQGuQLyWvQ5SxQEBI=&e=0&c=XndM TEY9pNLYZ9PSfbEaioh 5ctKSf9XogujjJVD6pjuE3F9ObSD9gafgYWTXNAazZNvVPsipTFiMPQ0BzET6Q9bkY0sM xQ12Vm7GNNZGJac JjRZEf8q0FgyVDgJHIb1QVjxvtGK2TpZbXa Zu5VcijaXZNJIYHAWiuVNozs=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=HMS bCmLOTe2GRBPxktk1CLM20NwzpXoEBX5ppskkJU=&e=0&c=PlEzyifL4QeUf8Qi7kwgPoCQeyySpaygRMVMC9VUaH9eao1MBOIB8GY/PGmmApsL25tgLjx64f4ZdrqDE7OB/CcyT2gqtsFg6W1wqXUSuL dVR4tJXJaJzbUL6YcHr1hLApCVnew7K3J9aMe1A4L36iBo9GivCAZcqdx6BSBbUg=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=NTMAZhmmOcuR337RpMOYHrkaKIQIpgzRUW IvhG7nPk=&e=0&c=gkSIHnCZuD6KqJz/1gS4FyIEyE44To4FNtfCDmyMPL/Jpz6w6Gi fvT/3H2SQygKeyWRCKccOydJ/A8JPs/Aq3gDL3/wK//b8lOsOGBhou4eZ1JrQuUhCgb 73Xd7F pvcAsKFILH sDNKyC kAJZS981Usz4HsOF4zVGythSpY=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=WqXbW351P6xbuzwntTe8z9cBgtj5vVmX T5RBktX VU=&e=0&c=H3Y1PMcl9jD0yOMWJtUuctX1kWaYovJFejvkqLd4fUFfXrMmXDRmX6ltqrozyzvv2MsJMUmvPhEoNkw p 70QbZSM9c1InGMOLxjUQ R3Dyy3FCFGIayJJ1Dl3QHrjg5ZkRF72FAHrn9kJ7XlOcI31dQr82/TlKkKJtTN67jAxI=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=24nMUFFHOb56fVLTrwu27VxsKuu4IhCSaGCQHg/pKJg=&e=0&c=QrUXX3veEikkkcnD7jhoybSc3K6KxANkzYKY1KtLWxwTkRJzvR8UKaDjPFInMvtJEBx577awbo1yk4p0E4623s5TEw5NUPEmCLvjV03uCj92C8y6Fr7qE4n4QNojUNF 0gcm6Br6yq4/XNW2M8MYxHdUZDRFVXuzp7vA X5DM58=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=5ohnJqa0hlmcyKuKchMIGs72pPLpSGPYd1P FphLwKw=&e=0&c=7Cj3s1k7deO15JsX1Jh6UIuqoEf9wYfaEzA/EHMLnY6LkVQtfcq NH0Q lXifQKmnzlIBTymxUsuU/k7p4WMWH1auSFev8lgxfQWKpJJUTnxHk 7xVXe1h6vPf08qGHtsty GEk9y6lW 8Av 7gQL 9Ty2CZgcMpS7Gx4FPduYo=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=3bCTM4vrhK4p8k1RUW5VwU9N3SKeJP8t TQyxqyEPHk=&e=0&c=HRpkZmGkEflNwkkcbo2DAK23kAqbC6MLYE 5/7HX4x9CsSM0nm7xSauqap/AqW35TcNE6vNbfkI2jOR76/rBhQGgqaf5xT86W6pgIu3/7dElGpjSwaW1a/LlaMH39SmgMNTubUQD9SeVLZ7CBjecyI2oz uaEvdP1PETaxsPfdM=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=9351o5Wi/z2RiE6V3ivYaj81gXXf/LKykV2L3zlqgew=&e=0&c=gLP1vZ9taXSdTOPtQ4cSFwWIKXZziP1JDHaHlDXwnPp0VzfUVhUpvJvtDKhT3iZwfw5hujO4Dd1IHL46KduawHNBqMzKCVkEDjIVCnLh7/W4dBita7tb iSONO gdQxK17Bhn8TJJcU4aZ1oRrgv7XIo0vHASGYQRnC2MAfOlkM=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=z9y6CKIDCLjL//IPtd6AHFgG8dKc0aWMVRIsLkkqLVk=&e=0&c=ZzebnJu86/rJz3EGRXx5nEsMHDbr8x8p6qAniEhJBxfeeX1t48DKkL77uebn/bcOVNZQUb9J6Zf3uMBJHH68qAf84CCCK368p8l1Ng57x17V28pHURgdmgKEHkBY/YSO2aSK3d7as3z0LyRpABrlPz3o9FLkfx91FdW4yYWg8OA=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/a3jJUtI_SyQIH8eeRPFO4n7Nckzi87IeE8NqcrBryZQ668Gqc2CKNFQNUmBL1VfM5HSN4AoIQLIumwg57Mht2IF7UPSAniADaHZ_YwmYATk3jmkVGW AEGrOswgEFABYpEm8jgghEBsMykKZswwByZCoVWtoSwk4ptiJy7hbIkN0cQmhBDXZCM2gLHMus3uEmxRlL Nn-GzAAAMRtbD7PaUzHinBGEQXBRA4cWkRd6E1tHcgbYzSEZ7dGXVqZJ lTew29AA==

http://www.giftcapitalbyte.com/c?x=Cr/39srwXrl23aa0 8WcOzj0CSnz3IMyqakoybsteWU=&e=0&c=OwRuC5DPubnERXnHM4w7qLdifC0swYnS2BrVbutYJpzBnYYEGr4CT7Tsj7LVVUqhmcoOeqqC1pLuLfLyf0dwr04A1eXkw/14tZ864n7dnkNm4PKj08QTByr2uJyD7 CWhTxdP7Wg4XvDUNnVEiaXOu O9lY1fVVoPx3qi0vj3jc=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=CT2iXp0xcoTs9/qTvE62NZ4JCu/4BCF5B3N57i9wDVk=&e=0&c=GlGo2Re3ZjBMsjRqagSL3sJQ0EX6qRsink4MAD etaPdgFYPaQXBJGiCDMicrUpezv3SaMxKU/flvObXadZU/0Hq 4Lud4txFnBVgehQPh8PylDDWusBgTUw2oAYx5srrGA/BWe2C yChMNDNQkKkxoXEVzRjZp10iXiSG4GQkA=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=hqjVt03dPczeMELUrTObqjAhcL6Lg0GppCjSIwbd0OE=&e=0&c=2uQWjIntUjLIEBEvtWiF6l1w479yT0P68XqARojHR8KdyMRF7uPnBaj qq6zsWT9m4PR57tItUWybLQtFBUZe8kGGaqUEkV9kW91Dyfmx5moUOQbP3xOdoKAbDM0j7LoujbL1aFn RR/10qGng4ld876GeTPWRDYIW5Bq5bXOsw=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=ZBc2e746nUwYyFyXqJjH2Vxj4UEZx1vWdYlViP7IXQo=&e=0&c=kWC5zdyQXrChKOwAsys6AxYqy6v8V0077obY4cvcx0io0nMDswt WJ2jrnznOKGUmTnxBeEwT3IbrzdmRiJLmH8Y6SPoltTPTw6wsU1dymx1mF0XTrHeMCuIlRBr5saQbjvF1fCq7xM/XcKqe4lw0ke5tTUV22cNIGWUC0sMqFI=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=iQO1HpvmdlupUyx98AM RueTtauAAbAobe7KUQNHf48=&e=0&c=UICGO9V1Q33JIn/L10NGcjow9FFGOg9kdBCdVJoggArz7pYxc4/TWyExDUlGSIj03z5TfPNvTGTbeV8WrOt68d3l64fMey0DmCbk/BMFZ5j4r1U6B73UxB4PJy9G9GWKzuMCrYbSQPcNHVpyuNrSQEE2uLF9U3cWVee /3p3zGU=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=NxaAt2ruC/jUtmY7mHKzg95PASR zI61kC8DcMl879k=&e=0&c=2vs8Qz/n0Xm7FQwYI/PjIAc4 1CZqVMsGVO13ctAJJh QuzSNscKdv/ZJe0jtrrxzbFB5xtfV1C3dZQ/tIVd4GwFKjFujNTAsmy9KASEPXMEY27z5UNNviwE39 yadSivpEzeXTwIZRIMcRyPORInS7CMZ2btLeE4zZmP52DG10=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.giftcapitalbyte.com/c?x=e9jqDHe9XewiWbt72wefbbdBGxv4liQlFvbb66pT3qk=&e=0&c=YjMa5823ENW9J3D8pOgEjMBlazf9nDIxIhsgBPIKlDkQP8AuXVvw5ZJjrNDV7Xy02f7RBaC2m5 f22CUDj6eTpnWCqnyH3XxST0r7PX5biAGfstYtml4mfDvAYjkoJKMta5/MExeF0oWxX CmfcBADfqS0SrK9L1nCVX1yb5/pI=&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

Latest 30 of 68 download URLs

Remove camstudio.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.