home

camstudio_setup_manager.exe

CamStudio

The application camstudio_setup_manager.exe has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.centralheadbits.com and multiple other hosts.
Publisher:
CamStudio

Product:
CamStudio

Version:
2.0.5.a0.1_54063

MD5:
dcc17d86edb1f38cab65bb5ea0197f88

SHA-1:
2e04047b51fa9d3b8329ba52df15bf5e909631f6

SHA-256:
c10b73d24560ebadb5e8e469eaddb719db7488757047504269a29ae16704427c

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/1/2024 4:39:24 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/InstallCore.ACY.gen potentially unwanted application
7.0.302.0

Reason Heuristics
PUP.InstallCore (M)
16.3.21.15

File size:
1 MB (1,048,921 bytes)

Product version:
2.0.5.a0.1_54063

Copyright:
CamStudio

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\camstudio_setup_manager.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:kgQ9oYN84h2dIpcMKepVlbHT4OEm1WCSiwI0pc2mFs6tke+u:kf9z84h24Ke7lbz4O19zYuV+u

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file camstudio_setup_manager.exe has been seen being distributed by the following 50 URLs.

http://www.centralheadbits.com/c?x=O37cpGT1VT5LMs ck1 CgWiphCvVgGoj2t2DbJOwolU=&c=W hebg0/zRa5G24tvhfW1QhPv6mLMMe4eunwNFrEuWKXM0TBoVUg0WRzRWcYhAGYXnPIb4GxgMIBUtfPV4vUAYbTFeF0NDg/sM9r7qZFkDkMveO6fw55pA vUK Aoz0QHa5FvHeRffjiQlhHg/fAD3UK6pH3k/ZwJ3fp Jq5XgtDIlSxglau4BrzG/ZoZBWP&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=Gn0AvPvC 2 yW 6z0B4I6/Zcaux/UXdwu6y/GjxNvyk=&c=Whh1I2nXsgSp4ICx75AGXMDbyBsU4ocMvDRJswsvsliDks1pWgFbBzvYt6EPA4IH4GHPs5Pk4uvvYnWBbaZ6ZG5DIHTmUfni1fnD85JryTZlXQxs4ESxl/lXOXmYDytwnNhfdqpIA73OSTZt13c/twC3EA2HXBvpTqvpGsKq0OMKJ ARJmChMKOgFw0BWe3K&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=U0VAUYZDokhYNdKlA VZOBFmtrZWCY mYyZZHqh53no=&c=Aco hAPj1BFTYTmnAqy8nPRejhdrCNVuvJ9jZ ZV5jlZoMf2n9yGYCyerwRj3fATf0zfCJAPTB1X5TegdSKA1Hhzsyl2F4eqJAtVxrJ/fU3q/g5rA M2Aapdp6MOF0jYWk bZW9IKG/ohY36X2LVN7x4hSeAJl9SBO 7bnWf3LaFUvYWmw3/3fCdRaJmRnXY&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=guIUgINemMpHWs/1ZvU9eHl0295Z7vZyN5E2ApLQfaw=&c=7pG HdXuqrIKn5zKCOUjsYonQGom09V/XuQ9lXSMsIYr1TaL9Xvfd/skDyKcfJHqEnwmJ5HJjuY6IafRM ogFx7vvgfh Un5vG/RcmBQVhNiOqbl2H1PeY7JlPyioT9MiuPW5IRYhglYmAOjJRtbFPDCSGb/lldZwTxsrs1Y2iiNCAQmarNWUhOI9iAfW0P8&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=Z5q/X1dzJNrOmkvST6cX7IodFDw7nwHcwL1oDskNAro=&c=X4yiK01VRVC4stV/lzfZDHguT270q7Shs/MUGWf6 Wmj4iPo67kPiDIqjRlJtN1GtIICgylBptNAsMxoIUEtALFK2fyFNZkjuR/QjqCB1XsFPPPWzzSZkWEn2PkBTr5Hf2KPecXx7Z0VjwQTS8K7veSXJYfUX7KEV22/409F lURi9/wfXNU00XVtGuqPzlk&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=COSdxO0jkK1DtB5eA2Be8GdFqNEMSdyIHvjH6GML/bo=&c=itkFMyznIpd3umn4IHle/xHtkSsF1E8sFGQAfE57ufXowq7BVOqsrHmaTVhTCy4dta6zyGcr8BmeOghXbffN1Rlnsa PjX/gOZCUrLxJK5IsXQxmD2AwfcE/LzOv 8sxmSXyJ3f3xr9AdoEuivOASw==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=Bvr244MT8OGY6WE4NGLZ4UG/1l s5d5Y9gjSdWCBa5c=&c=pLmG1G/IbEY k1xiIpBkSVocSC8afc49qFKl5FmaRwh9od6G n93QXN9 UCcSf/tgEnQGhP9/d/lCG U8rTMS5loXwcgG00PHaJiex0x4MbzTGIQ YKpyNqHgI8COKkwV3eh6QGXyYTRdy2LMBtJYD87GNsi2g//PORXA0yw5W/wyBgXcpZJellhEZcmmh3f&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=4RHEL91eX5ml0SM5vmTLFH4wsage9pdFwVMVj/0WcaM=&c=a7NbHsju9/DUYDJ1/iNKvWsL UnrJ VjC8jNY4xFyAUo2bl/VgkNXi4sV68KrZ3NZGI6WsPzNaSN9sNAmXp7Zp P5BVU17rOLntR8TRemNMLxKHHyDBnDe6E DvQYc8TBAZ5/LbAWD81hcpjDQhGqOgr0uIKK9DFtfUMKCTTOPkmhLMXm6pJxUwpdEhO6m62&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=6K7yEf5XpaZ9ltVMH55DeEAZ0nrcOQeN/rGyYggfjAc=&c=GESPUNYc/WQGcOSdGpD5 Xv2HFwO1VJ Dz9wkMiicwY741gpLUHlQ/X4xhOs7N2KP2ORZw3S0EfYpHG90TVSZJskVbyZck0eAPUCHeRfsXhkYhASe5zzANg0ScFqjQTqoEUdfcgFKWOtGlkYJ4YInQ==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=RRQ4JIwKDRBeArmUMJQ0Mw/ tMFj 0kFaTLc6MFXzus=&c=ktNYrCaqso2tHl71iwlI8kBFB OXqjzqF2hD4Rly0TgnmeEwjesiMIfdmgohGB0pd25phtRTIzD2AU/AcTw5pxzaFLSE5Nxi4Zq6dqt31D kAOzYKNtw44CpejTIa 3le9pQIKRUydeWSDuL3tKGkA8dhXLYsQToFjqawza7b6xfIk/xoue7IJNoh/ SUVOI&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=aICk8n4YBKs5nGeC54 F6pWcB829C3ltVS2yrmE9gu4=&c=fLw0dCUaB3O58psQS7cdzjECRYOxJ8hVUdLIkMqjWpsFsgculADRqyeBeMzirGu5Ij87kRhu B vGlBDRLLfbEBrsfcR6jwZdLiE26S7WeyYfOpwX8F3C3CBHTW/rhAj2ncbijmM7t89HHLW3vq7E0cYecSmLDUPb1uhLJQ41PPbBAvHcV3tye5sNIN6d5MC&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=7jFCSJnpPkUhNJtlA ERqnzrJgTLfkX16c32g0y/dfI=&c=iyVTfrtMI5bFdjs8B5nEtjZ90V2nUWaml0MurkGsa6tVkBReftFri4q9bPKvBb5I0O5RtvD18ZUWjUXcX/ gMIsP1G5P4fBMGseSnR7N WDKsUzwzQ8/q43zq4um0i9vlGz9Vvn0ezCRYWHnp1BiE7y3hZzVJt5RgwoWo5h61gDF87iU3AnTziHJLnw9/F09&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=cuSWEGqH4AzrxNahWR1cYiZSQWmWSXeKB5/h8zbNWEs=&c=B6u HqtG2RN48 JeWFpVVcmhDixzckwguzyqeB03vrP5DorV6wSx3l7s9gBXFo Z3L 9aQS26fmPH8 tfr1ioAX9RSzk7vDOJ9oIbOlT x2/kNptcjmFG6XDBbhI6p71mtA0pxEph4OH1r4n065OFLEWlicAO5Tuh5XSG6jAUnWjyj2OoSj5Z/YWurbXcpS5&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=mSMrutvAmiTwmT7Fef9QUHqvQZ8MHCcSMQyl42l/6YY=&c=qJiTqRvMtZ6u4u2xSKLm6UtGq2k1IXauNzKO7KrOgcWpsaBFR9CsNcYD6uhM94q0vLMF OHDQ5le5CidgDRVJl9dNyRd7ObrBCg3PnfS mdzzMTDQoXZW5KiaQBeQt DaBRoLOBuHQz2DUPl2dXr7g==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=KTrOiy8blGHgUYdZFWuoo/S6 AvGRdp7lQjGEjpA0U8=&c=YKBGUhl7bS0y3nEtTGtbD8CU7tdSmxHiE1zWtoD4lqe6S5IFPYvysIlmRwZ2AcHavuOLGyfGKN7wSr8OncVvRxZEKjr 6EdpEg2Oulc6V8hqVA1O5yqdUrNr WKDd24cl0AtJmvrTagd8QvjuhaFUagZUN2yWvRYfrqIKvZhT1hUflXVp4wBg4OmiQvPbzTd&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=Nriz/2IFIrEv9E WvHvUbER1CTCDrbsnSnfUi9AftD4=&c=BgynvUhTO4Wj1GEAJrVMUPdqMyPmMyeFz/GIp/iDz3gCY5I2sSABQB4oN1jtqjAIpz0acM4g1SOl6fdq8 aRo9WsIvkZo/xIYD6gqNbgLIr/1CZwaOug1TkdtWdwLmPi/tuY51Of2iibh1A6xBXpGQ==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=W8/OquDDxozNGQjx0XamEY2vLC71pWfISi1h9SRbu2w=&c=JqNOBNuMMxDMxhqG3rLbc2eoHJm0p0dBcxxNKCWV4g9OcR4jnPiA7sZRnRVUYZkcW0YsQCDoIZ0fL8 c1YvCqkJaKE3TQCwpaMHzCsTN6a8GQi3G1xGzlWCyuYR7ZtxxBUByGqSXyvdOIlHwW CqAak9Cr4WggPLh9IPKmpduv70FwKsx8VPU2xWxaq8l/Qs&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=Q7wXmc8DRfAEiWrTY0A3aTNX6hSTHP1SWUHP Wa59uE=&c=sqyJaXl3xuLdI1nR7essRgoPsEa9clejtBT2ZDL9/PkfgI8YHfTHpQ8Zr2tWdhf7EPjmDvOYBPwGzK3NjVyK8b0Q2ixpbkuHOpMvk6p0j6Ojg/pDj2tyePKC2SPxpkaviIL7uFCm/OngiJZl E G RaItKY0NJHl7FGL6OYD6SZq8Zz5L2861dJmlk13MQmK&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=SefS3zcwFu6 AF1986HSnXG41fu XMDqo9zSfMkGp6w=&c=S6OxNLmmw2qoEHgyuawrJ8aOuyoShpGzM45abvux JWyKKGbPQm94t LtNPSSUWU/Z20Nbzrf5Vv BvRTu37VY 4n8kYjU7F9wFRRBxelb VUSS5rji/VE/rIafYSAVSGbvy9MiBPuv2tutg8bcf CYDaGTZEjy0BXnTehT SgRmdX8KjTm6llqrvSLIP1Dd&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=VeWFPeeATXK yWwjyfoZHCeL1Sew2KFwPWvxecQgu6E=&c=4r7pDPCVaeOt8Ohx0q407sceWk9CmkjlFuEQsVGvlcsOnedMRQ2NrQo2ukGGN MOqLsJ/5YKXpfRJm85n/GW5QvEFPS2BlmLGzRa8leKpDVN F5ZklD4eIWDwMDrdDWndzHBnQzHuykLMvk0ZEjGlYBJztXmZYbWWWhFBXcCVDZo6gdf3YvIzGf9/sy2LRCY&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=z/6hZNdi2ZypS4nNPhwmM6dVu01OgDLLxQ 9qalz82k=&c=MFX/olGTeD1qV rYEpRxkxisT6lFbnKfJnGns5l fLP0WcxIL4F1ecvkGB nYsh5lLzGAxPCLr2cYVYVuEF6SmBkTfMCEcVNooipPcodCHsnOdX3 UuYZkWQJznrRBWgpZxUdIHHo8UTO4YoSw9quoOuqEDRhFGadqM50wsGhcsVCbVY5u 70rSviXR3xfkE&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=9yIy6g1l 2n4mUS8EsZpsolPP2Xivk4BhQnQDrDVuMk=&c=yekChz1qT37IAf YyBFO8kxGkfs 39bHe7/KMu/zmRmlOaDso19n/iVefeSBBkQdqYqQCJ4Fb vm3AaCB7M6iweldcTMl2LN8mzNorEvEDVanR9FLHH0Qs9DQXi4Sf4myYw6O78DK8q8t4nxQqVCbw==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=bbRa/9ihyBaKuel6iMFBdOgFTaGlqs9eG5IoTBmbXB0=&c=4fOzC3OfLeeaiNqNfJD6Lulbtj095skeaGRcAPUHgZLESd8sQacH0f 3zBTwLwOoJ0iVWzaG3a8BA8fit1ZyeFcWaFsBWz2 nCgt 2yl504AUgKR50sm2bPnLkU0AcLDq91BmXyxcYdsOreAT0nBA==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=iRMA5wzolEKFYZNQ3dClgqiDuuHz6fyLoK55A mMh0w=&c=pVb28IRTQRoT9DddBHV8Fw0IlYvBYgLFcKnDG J8CYTVco PRw3tyGw2dYIbsZtKTafsCAeWstZe8RwQ1dG9El14mrfPb ymREojjg44fAJQ2ZcZe57ZhrDsmN X7GG6ZzpyV3euKuaBc4tfg67PA==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=p uqFvDWb8OlWCcw hv63TWt4EAWlN5JyXURoHebS9A=&c=RZM3ts3knf5cQtckOUTcIYa Qjcgk3Waj5OYa6aEDoMnPCeNAsewyhp2CawFTJgIe72SBa6 svgaGxLXN3Swo67z2xoQ1OtIc1pZuPvbuV117p5mlLXojW05Ch/PQ1CLZJ2WGqD6O5hF9 XimtKBdCSdk/1bLxGThMDdUz59ysa1cGMjimfEjz22D ntczcu&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=YciDe3Vi9NYQkdD8GpddHgqv2enYYIOIX0dfwiRfarg=&c=6dpzFbBP5sxAjC hFHLttweImdaY2a1YG9ayR346rINctv9xyXyECyaAXign60k35bD6IdgqGlOv03rcs0KVBF3MykiE1Qhyx7JxSWd9lna7LaOXmvv5FJjyjSkm8L8niKqKfGaun5TEhUDsNoQ5AQ==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=FwGyNAAAqS1yXPVxLi6LMyuSUCE8lQ2fMpZE5Tnc1YU=&c=bDdc3GsCgAArh5WjNInSfp 0x mRMAKdghS/UNt0WWKnZgRjfB5EEAp2vmd5/2rBytQZ6wEIAaypGeFhb9SXNjdt4IzblWqb erP8KNEliUGTKd MoWvcaU6mpryjU/Nq 0rNYGg9Iv25stSQB8Ykg==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=HU7FHyxGVXZPpWDYW1rZ4H22TikOY0 wmQP8/qxoKYM=&c=osytlCCz906caxnhnZFPosFeXyro8vOfmALxYPWe5/hx9RPCA45UxHzoXgSGjXDv8S6JNPMmAW4/9QRwMaoXxkdD4vKyZGnaV00Ii62GV6/4T2PCzaU7qbAz6MwzgOotDvOb/JmLVl NnfW3pDHXrKUdQrUmw67kwac382SavwSKdHQj32iIxDvJpEJGQ0wO&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=g6B5xh2iIKqsToAwa13wEZpTpdIpYZLTcxEWTWbwqVc=&c=fgMhZJa39H1I64q9CQL8yUMJvXY5N6LmxgKX4UL2D688q0cxvE5s8Ed7LMFDWJYLcwufzoU6Ze7QKRWFDrwuWVjwquPYuA3DXnc6Y436x8DXgB7sEiKaBwTzq3eJe2biCFfbhwCrqGCAI0VxpRCtwA==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

http://www.centralheadbits.com/c?x=loJZ/MulhzIr7azbewlq0mvzeNXDo4JQLe95Z03bAoM=&c=0r9WtlT xmrqy87Gk0HkNnk2fCWh4IdaF2u AVXfet5ky6arHbJ80LnuhCYnC cww8nTen7Cg7o4G5Y5C0C2iKqIslySmc/NXS5Kb kyNELHaHd3eV3ZtnmqCSk3jRzaAAnf8U9xRAtf ry6VeEohQ==&e=0&downloadAs=camstudio.exe&fallback_url=http://.../CamStudioSetup.exe

Latest 30 of 321 download URLs

Remove camstudio_setup_manager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.