CamStudioPortable_2.0_English.paf.exe

CamStudio Portable

Rare Ideas, LLC

This is a portable setup version of the software. The portable version is a open source and free platform that has been modified so that a full setup/installation is not required. This is typically downloaded through the portableapps.com website. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from camstudio-portable.en.softonic.com and multiple other hosts.
Publisher:
PortableApps.com  (signed by Rare Ideas, LLC)

Product:
CamStudio Portable

Version:
2.0.0.1

MD5:
2c915773ce4a298a1f9e536d2c7ef934

SHA-1:
2b57aa8bda679f62ef37520a153a8643d9065f0a

SHA-256:
e78375eced37c673512671171b48117ff2e9bd7b1b97d88a4ae87919e97bd802

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/23/2024 7:33:59 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Win32.Generic.127A0CEB!309988587
23.00.65.14425

Trend Micro House Call
PAK_Generic.005
7.2.117

Trend Micro
PAK_Generic.005
10.465.27

File size:
1.4 MB (1,433,632 bytes)

Product version:
2.0.0.1

Copyright:
PortableApps.com Installer Copyright 2007-2010 PortableApps.com.

Trademarks:
PortableApps.com is a registered trademark of Rare Ideas, LLC.

Original file name:
CamStudioPortable_2.0_English.paf.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Digital Signature
Signed by:

Authority:
The USERTRUST Network

Valid from:
2/16/2010 1:00:00 AM

Valid to:
2/17/2011 12:59:59 AM

Subject:
CN="Rare Ideas, LLC", O="Rare Ideas, LLC", STREET=PO Box 227, L=New York, S=NY, PostalCode=10009, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
1A3526A1CAB8A8D6926EFF44E133238B

File PE Metadata
Compilation timestamp:
4/10/2010 2:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:qmJvSBHj6m1k7iDCtlvdqWUHj5GoIzr2Xo3B2bYHV+K+gj3QsMWDoBs0KzBY0:qBBD6m4ielvdT0jxIHMyB2bY1d+gjnTN

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file CamStudioPortable_2.0_English.paf.exe has been seen being distributed by the following 28 URLs.

https://camstudio-portable.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANyD/nHXpj BX0jrodTBLp8nWC0gku9MYmCX2jqWhYS5mesVhqGznjjTqXWG7/NzZQPZHQrX7FipmPmfTSKprkBu3cbINthxKaMug9wir0X3g6XQ6oPFBZ5NoD2zg7hrQLWuTuEyrkVe6qWpqlo0xv0XRjcAw4cp8TEgLJYTStTxDEIgBRZZeRPFF8MyBjRwgkhKuFlRsV8chm6//i23dgo6nwg701D3iGQ 8lFRjQksbcWoKiiGXU4qMTnVVnxPLJCHf6Hx57H2JLsfRfyAlZVZBa0qZeUcgzaARG8F5gfVMKI elUik/3WRm0gmleb7R Mld69mCVmh51ynr/D33M HCpDSbCzr58rAQC31jcfvM5bMuwmNsTI6eynBunqDogV27HwJafmMQzWxNem2nIAwKxwjKgWNNKJRdoTl80WPX0qXnhjFzl0Cq6JnfmJMg4JpbO4xmR5fzaP7uyhKk7rMRZAmFNW8kc59z/6n8lZBWJEV1 Vag2mjx7bGxGBulzi qbuAakkfT3cflOGPhB9 nDBrf18uiJCgoOCjNzhY/5XAJ7m5c4FMdSZF3b7HwDQU1xWhw8cO wMVNh8hn1fhE/28NLbAFVllruLNi/.../obum80Ao=

http://camstudio-portable.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANyD/nHXpj BX0jrodTBLp8nWC0gku9MYmCX2jqWhYS5mesVhqGznjjTqXWG7/NzZQPZHQrX7FipmPmfTSKprkBu3cbINthxKaMug9wir0X3g6XQ6oPFBZ5NoD2zg7hrQLWuTuEyrkVe6qWpqlo0xv0XRjcAw4cp8TEgLJYTStTxDEIgBRZZeRPFF8MyBjRwgkhKuFlRsV8chm6//i23dgo6nwg701D3iGQ 8lFRjQksbcWoKiiGXU4qMTnVVnxPLLWOB5 id1Xp5nqg/yZx0UETz7CxP9 IbQ/n9xk4uyaT4fAG5BVePcHpVKnD6dD01Z4fY1E6hhMu6njJ4Msrtnk8GkHNn4ZX4XNFfKz5x3HdbrRvVUi69mxO3b7nZprXfbTZ5Tc5nnCAA1JDq 5wsnpIiXWbAw7NfvnP26xWzcgHG8s4Gzf/4Mhc/B5PQPC5t28vAm/xWlXjoo/4gu5LcNTv9joRsrVhcyjuKgpkwoxZ Wv BPPfDIs9LFngXop2Odzi qbuAakkfT3cflOGPhB9 nDBrf18uiJCgoOCjNzhY/5XAJ7m5c4FMdSZF3b7HwDQU1xWhw8cO wMVNh8hn1fhE/28NLbAFVllruLNi/.../obum80Ao=

https://camstudio-portable.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANyD/nHXpj BX0jrodTBLp8nWC0gku9MYmCX2jqWhYS5mesVhqGznjjTqXWG7/NzZQPZHQrX7FipmPmfTSKprkBu3cbINthxKaMug9wir0X3g6XQ6oPFBZ5NoD2zg7hrQLWuTuEyrkVe6qWpqlo0xv0XRjcAw4cp8TEgLJYTStTxDEIgBRZZeRPFF8MyBjRwgkhKuFlRsV8chm6//i23dgo6nwg701D3iGQ 8lFRjQksbcWoKiiGXU4qMTnVVnxPLIpJbBaqP30y2y2NDN6SSzZ4fPgYJ9Bx6FnL8q3opPaJgHpi2lr5F0qkHos5ti6EUSjoToJi1nAkTHUnVNQXRWE/Z4E4Hif4wsY5Uab6rCm/YDnhNwEgGizPQLjOCucnrozN5pCkR/I2Jyhyqx/JBdgM6iT4Nvn0Ny9a2rKZZYGYGYKXSsmmhA7HWWfOYT7KDxdNtWbi4464dGChMrI8WopjpzOAhb YhYtrdusu8RRVx4Va2NxYd6Z1IxPoAWZzm1zi qbuAakkfT3cflOGPhB9 nDBrf18uiJCgoOCjNzhY/5XAJ7m5c4FMdSZF3b7HwDQU1xWhw8cO wMVNh8hn1fhE/28NLbAFVllruLNi/.../obum80Ao=

https://camstudio-portable.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANyD/nHXpj BX0jrodTBLp8nWC0gku9MYmCX2jqWhYS5mesVhqGznjjTqXWG7/NzZQPZHQrX7FipmPmfTSKprkBu3cbINthxKaMug9wir0X3g6XQ6oPFBZ5NoD2zg7hrQLWuTuEyrkVe6qWpqlo0xv0XRjcAw4cp8TEgLJYTStTxDEIgBRZZeRPFF8MyBjRwgkhKuFlRsV8chm6//i23dgo6nwg701D3iGQ 8lFRjQksbcWoKiiGXU4qMTnVVnxPLJsI/Ot798F62E9MCDA1iIbVpiT7lbx0lu3p86wEuW4Sef7fNYKniP0MyIca96JWN6uJiHag9keibcZFJQYbK9U1OkM/hf1tSPhvzRwqH/gDVfC3I9AcJl6gEa5dWB1G2O44Zkc0w06QpOpWCf23ZkQn99CN5JdB8BxKwwcFCZ7w5peBLVxE1opfufDHQeiHqOrYNnyfy8QINGB216/5AfEYaZjFvWSt2XeJMi0woiyq7jQEK0Jo5uaVG8TAPVi8fVzi qbuAakkfT3cflOGPhB9 nDBrf18uiJCgoOCjNzhY/5XAJ7m5c4FMdSZF3b7HwDQU1xWhw8cO wMVNh8hn1fhE/28NLbAFVllruLNi/.../obum80Ao=

https://mega.nz/temporary/.../IJ8EwAza

http://gsf-cf.softonic.com/2b5/7aa/.../file?SD_used=0&channel=WEB&fdh=no&id_file=315737&instance=softonic_pl&type=PROGRAM&Expires=1483078019&Signature=VB7X4lXfMQ0pBqxBcOKlhIuoHASPnRP7pshY6VpFIKk7c8R8fTq663-dS3qN6Wd1aAAB2Xuf6LJiLfvPnIPbWL25lu2LhgZc9PgstAfPOrtEQtDSKb30KS~Oj9lLWgVjDb4oN-F93B9OdPjfwZyV7iyWkTsi8gD0QJ307FupkZU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CamStudioPortable_2.0_English.paf.exe

http://gsf-cf.softonic.com/2b5/7aa/.../file?SD_used=0&channel=WEB&fdh=no&id_file=315737&instance=softonic_en&type=PROGRAM&Expires=1476962487&Signature=P86bvY-UHu~xqfYg3My~cLQItVr9PNuSyIU~KQHWJySCjXrjxsiriCm52DcuXOf8rfV7dCI86sKi4gFXSkCiNRHo2pRZW35uIir6CFq358sq9FiPutJec2LDWs0mD~NfH-moUfb7V3CRHMfzn4iC~NNE6NpPTiOs8v6Ik1Ugtd8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CamStudioPortable_2.0_English.paf.exe

http://gsf-cf.softonic.com/2b5/7aa/.../file?SD_used=0&channel=WEB&fdh=no&id_file=315737&instance=softonic_pl&type=PROGRAM&Expires=1431916149&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XfZqs7pZTxRaj4EuLaP2HOxP3v9k8Yhb42FVZnIuqTWRi5FQy0v6EKHB3KW~k5m0dsQtiBhYyL2ja~qofwybp1jT1rSpcYnpArHv27Kp~f6tB~d6m~MnnsITkyY3fOHSoBVgU4xN0JkpHKOhH-k6QlXlbp5lQ1tu~Ry80LlqSmI_&filename=CamStudioPortable_2.0_English.paf.exe

http://download646.mediafire.com/p32mvzlepe8g/.../CamStudioPortable_2.0_English.paf.exe

http://gsf-cf.softonic.com/2b5/7aa/.../file?SD_used=0&channel=WEB&fdh=no&id_file=315737&instance=softonic_en&type=PROGRAM&Expires=1477100329&Signature=N7~RwXzE647e6eWeJjbw8PaRqauogS-1TyY3T~gbjKjir2alVnnCpq0wRcyygqadNG1LqlxSvZH2D5JvxUa6-nhR70gDl-uGpwAFXcbJs4aOzyQsix3h-eRJUrHH2D2Qbm~o~XEUWjbkPBo6zd8Sq8fz9fgqrOI600OVUXEMdS4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CamStudioPortable_2.0_English.paf.exe

http://gsf-cf.softonic.com/2b5/7aa/.../file?SD_used=0&channel=WEB&fdh=no&id_file=315737&instance=softonic_en&type=PROGRAM&Expires=1478552346&Signature=ZytlIA9gmZwbbImBI~vXxPNY7Su1ulJvKKwFjPOo17iUrL4L-AxqAe5J-EQFFrHVEEZCX7WVBGdlfOJnySC5mQ~iaasvMfRPozjT8u6zcPeSbCtcg02IjPi4fw3YI0uoi5gKqBH5q28GylWEuNlfJGozo-lXp-GUdT8~yXGjLLs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CamStudioPortable_2.0_English.paf.exe

http://gsf-cf.softonic.com/2b5/7aa/.../file?SD_used=0&channel=WEB&fdh=no&id_file=315737&instance=softonic_en&type=PROGRAM&Expires=1476432512&Signature=Hix6wNl6960M-Ia8QApj1MYugnenzOPJTqPrtk68YnEfkJ4-sjCXFJjqbxjSoTgUB5aLMx8dni6ulJAbY4MAbs-x6ZkGntQm48MRMcBSXRrc8dGBmvsdqq1Ymt2YC8YZxmSgNhrgIohgGxwAjS8G1i~3cm7qTetkqoX1qrNCJgM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CamStudioPortable_2.0_English.paf.exe

http://gsf-cf.softonic.com/2b5/7aa/.../file?SD_used=0&channel=WEB&fdh=no&id_file=315737&instance=softonic_pl&type=PROGRAM&Expires=1453936367&Signature=FvAXkfI97J9gAczP9TC5a4j7~GDxUuDVyfAzRTiPBJOUfz8iysEIxRLQYXWEOeHUY2gFedROFd0PXvbqutid3xM22iOOIRaHKMHv2mbHW9Ocpef4ct1IGaXEdf0IUHH5SygdcHjHifqobtFoky53q1Pjj-WAtDPb83r2ksRvoZo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CamStudioPortable_2.0_English.paf.exe

temp:CamStudioPortable_2.0_English.paf.exe

Scan CamStudioPortable_2.0_English.paf.exe - Powered by Reason Core Security