Analysis

  • max time kernel
    142s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2022, 21:01

General

  • Target

    iScreenKit.exe

  • Size

    28.3MB

  • MD5

    a197d19a71443b4e9214ce2ff11cd8d5

  • SHA1

    481b429e469e75bcb10ce01821e8a8b3852d121b

  • SHA256

    4432678c8a337e4bdf3fca48acbe7f1e5da4dfbdb9eea5959c7636ab7d0cab58

  • SHA512

    687aa2e20b61756f3d10ce4ae914c09bfce473cdf987674f03e7bf328a16e13860e52fc8f444f23ce86475b12935b1ab21383408c23f7a389d9d32aab6e9f169

  • SSDEEP

    393216:UXaHM4BfsmDxD8+vxr60kTgOX49fEJsanLH3hBvJC5SMOkpb5N0UCRBuplNzzg3y:UXasKxpWJHsaLRyFpFNVlNHU5bs

Score
8/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 32 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\iScreenKit.exe
    "C:\Users\Admin\AppData\Local\Temp\iScreenKit.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Users\Admin\AppData\Local\Temp\is-NT128.tmp\iScreenKit.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-NT128.tmp\iScreenKit.tmp" /SL5="$C003A,28899390,1046016,C:\Users\Admin\AppData\Local\Temp\iScreenKit.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2188
      • C:\Program Files (x86)\iScreenKit\ScreenKit.exe
        "C:\Program Files (x86)\iScreenKit\ScreenKit.exe" -firsttime
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:1272

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Program Files (x86)\iScreenKit\CONCRT140.dll

          Filesize

          236KB

          MD5

          0f6c09576b20b65b1dab828d160636ba

          SHA1

          7132482cb9550aa08abda60862613e59876093eb

          SHA256

          1bb96885bc823f33d85e5cc0e99562511a103b48a218441d700c29a181c6e694

          SHA512

          03f2bc63eb915c2802ecf60b953626a0ecb6be258b1835836aa81893b8eb8c6099c6181be1f1180bdb1ade9be5e2ae593e745962157e2ae13f48ea2e864fb762

        • C:\Program Files (x86)\iScreenKit\LIBEAY32.dll

          Filesize

          1.3MB

          MD5

          a724f5da0a0184b5668ef2d85a7346e0

          SHA1

          7181fffaa6b8f0f29cf7cdd1b1b859c2b956d399

          SHA256

          7f2284d3cca6171e50b47eabc4fddc8cd2c9641cab4edb12b26694427f559848

          SHA512

          d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2

        • C:\Program Files (x86)\iScreenKit\Languages\translation_en-US_English.qm

          Filesize

          6KB

          MD5

          49c0d57e19d91071bf446968237b3f6b

          SHA1

          ec0e4188f7a348c13f17d26b64f65b34d3fbd4d1

          SHA256

          0dde88bd688d37e735af0bf9adac09e3498be1c8345c8c08ebc3d79771aaf04d

          SHA512

          767c5433e215c83c9543b33ddb5a0c65bce89051991f54e0e66ed68efc30c971a40e2ed4a8dd0de634293d42e8d83d92029938ea8001d1d8f596c5ae8f04e3ed

        • C:\Program Files (x86)\iScreenKit\MSVCP140.dll

          Filesize

          429KB

          MD5

          61414859fcb6ca5e03aedcb990bc5e50

          SHA1

          b37dbd2dbbf3e45b3aed711c0fa8050cee969d7a

          SHA256

          242db44cbd857272b66267f52afe8ecad9fbf6a7e1ffef4d1bd4beb5c1b6290f

          SHA512

          1e1f6e71f017b37e051e8b2168d9832cc5b05d279cc2525f5ce9297cd0b9bdaaf5d515151f32a9810434bacbfef59d5fe1ee8f76be5acf07fcc5226aeddec366

        • C:\Program Files (x86)\iScreenKit\Qt5Core.dll

          Filesize

          4.6MB

          MD5

          8897bb5341e8c47ca5882365ca15c24c

          SHA1

          0676a57f129591beed3826eb9cea530d9111ef9c

          SHA256

          8a518ead59386b7f1912e043c498e0c08c4a6cca02013068c6454dae0fc87d1d

          SHA512

          0f6c60f859ff11dca220b85fe79387d344e4fa28cfc78d4423453f8c4e9c20d93bc35b18d41bdcd7af98b04dfc7e506f13c447659d566ecd811777d00cf30312

        • C:\Program Files (x86)\iScreenKit\Qt5Core.dll

          Filesize

          4.6MB

          MD5

          8897bb5341e8c47ca5882365ca15c24c

          SHA1

          0676a57f129591beed3826eb9cea530d9111ef9c

          SHA256

          8a518ead59386b7f1912e043c498e0c08c4a6cca02013068c6454dae0fc87d1d

          SHA512

          0f6c60f859ff11dca220b85fe79387d344e4fa28cfc78d4423453f8c4e9c20d93bc35b18d41bdcd7af98b04dfc7e506f13c447659d566ecd811777d00cf30312

        • C:\Program Files (x86)\iScreenKit\Qt5Gui.dll

          Filesize

          5.0MB

          MD5

          ca96d2e79499528faad1e3636ed0d3a8

          SHA1

          4edfd718318c4a016009f0325f1b442340b7a551

          SHA256

          2ec2c15ae82a3c402d9d3f7e4dd2d4da3b295ecb9e495b04eec7c098793af952

          SHA512

          e85e685ab3eb6910f6e9459df41a600b4f4c56d8eadb76e31ef90228838036f8826117d043ca86eaf2c97f9f25d158b9d80030069193b38bde81bff5edb24891

        • C:\Program Files (x86)\iScreenKit\Qt5Gui.dll

          Filesize

          5.0MB

          MD5

          ca96d2e79499528faad1e3636ed0d3a8

          SHA1

          4edfd718318c4a016009f0325f1b442340b7a551

          SHA256

          2ec2c15ae82a3c402d9d3f7e4dd2d4da3b295ecb9e495b04eec7c098793af952

          SHA512

          e85e685ab3eb6910f6e9459df41a600b4f4c56d8eadb76e31ef90228838036f8826117d043ca86eaf2c97f9f25d158b9d80030069193b38bde81bff5edb24891

        • C:\Program Files (x86)\iScreenKit\Qt5Multimedia.dll

          Filesize

          568KB

          MD5

          14bd82df0f84d7a561324ec6898576fe

          SHA1

          560c23def2a0715e2462b75a7ebd7db5f2dc4b8e

          SHA256

          8219e39bfb8ac7d97436555e53b66838812f9b166bb8198fd56e073b7209b14d

          SHA512

          e3f05add40702edfe6eaab758e15d64af5ca4157613254aeeb132a4adbd0e92760f9b0c5a7a8428e1ce8d9617547aae381e4449c2d88160c35863019c709726c

        • C:\Program Files (x86)\iScreenKit\Qt5Multimedia.dll

          Filesize

          568KB

          MD5

          14bd82df0f84d7a561324ec6898576fe

          SHA1

          560c23def2a0715e2462b75a7ebd7db5f2dc4b8e

          SHA256

          8219e39bfb8ac7d97436555e53b66838812f9b166bb8198fd56e073b7209b14d

          SHA512

          e3f05add40702edfe6eaab758e15d64af5ca4157613254aeeb132a4adbd0e92760f9b0c5a7a8428e1ce8d9617547aae381e4449c2d88160c35863019c709726c

        • C:\Program Files (x86)\iScreenKit\Qt5MultimediaWidgets.dll

          Filesize

          81KB

          MD5

          bf564383974a15f0eb47370169974cb7

          SHA1

          31b9a84b40b7f1d94558ef7a5a03750298e3a8a9

          SHA256

          1193d334e10b8d831e8f6d90390fb0693eae9c67a98869ad6363d26c8c0a7ace

          SHA512

          8bcb7e713ac14f8bf2456c94a040a65953ddf4ff514ab5b94c72921dd68e317a2f0a9504ca37d08a0bce53c700ae0220e63623ce3adde6bcc590e6b7f84cea3b

        • C:\Program Files (x86)\iScreenKit\Qt5MultimediaWidgets.dll

          Filesize

          81KB

          MD5

          bf564383974a15f0eb47370169974cb7

          SHA1

          31b9a84b40b7f1d94558ef7a5a03750298e3a8a9

          SHA256

          1193d334e10b8d831e8f6d90390fb0693eae9c67a98869ad6363d26c8c0a7ace

          SHA512

          8bcb7e713ac14f8bf2456c94a040a65953ddf4ff514ab5b94c72921dd68e317a2f0a9504ca37d08a0bce53c700ae0220e63623ce3adde6bcc590e6b7f84cea3b

        • C:\Program Files (x86)\iScreenKit\Qt5Network.dll

          Filesize

          961KB

          MD5

          f9d294fce83647f2db52271455ef3358

          SHA1

          d5a1e2c5cb6df88e4289b61cb447037f0ab8dc6b

          SHA256

          f104638510c03618edb54b717b8c25d6e5feb2a40e2b8f7df6ce52a211efb62b

          SHA512

          0638a7731ebc2c9aabb6691559af5dba968e20625cecd9a5e6f358284a5213e6a1a0b6e839f3e5b2bac77a9d676167391c831f226a6330af96736e5e1b829ec0

        • C:\Program Files (x86)\iScreenKit\Qt5Network.dll

          Filesize

          961KB

          MD5

          f9d294fce83647f2db52271455ef3358

          SHA1

          d5a1e2c5cb6df88e4289b61cb447037f0ab8dc6b

          SHA256

          f104638510c03618edb54b717b8c25d6e5feb2a40e2b8f7df6ce52a211efb62b

          SHA512

          0638a7731ebc2c9aabb6691559af5dba968e20625cecd9a5e6f358284a5213e6a1a0b6e839f3e5b2bac77a9d676167391c831f226a6330af96736e5e1b829ec0

        • C:\Program Files (x86)\iScreenKit\Qt5OpenGL.dll

          Filesize

          265KB

          MD5

          2c90f93068ed78ace01868ae99a50abf

          SHA1

          0db600241e8ae50cf4041374b214ff3a520b9321

          SHA256

          25b07afb02d92c83ef198028a0f8717058cbf2512bb8649927b91668db95e209

          SHA512

          2db296c1d404d941008912dd2fb78d3858bd23290d673dfc68cdc5fee7e017976dfe2528de0ffd241a2ca01a98b055a6c4e5da3eb4d1b16dded88d1cd6691a35

        • C:\Program Files (x86)\iScreenKit\Qt5OpenGL.dll

          Filesize

          265KB

          MD5

          2c90f93068ed78ace01868ae99a50abf

          SHA1

          0db600241e8ae50cf4041374b214ff3a520b9321

          SHA256

          25b07afb02d92c83ef198028a0f8717058cbf2512bb8649927b91668db95e209

          SHA512

          2db296c1d404d941008912dd2fb78d3858bd23290d673dfc68cdc5fee7e017976dfe2528de0ffd241a2ca01a98b055a6c4e5da3eb4d1b16dded88d1cd6691a35

        • C:\Program Files (x86)\iScreenKit\Qt5PrintSupport.dll

          Filesize

          260KB

          MD5

          cdd156de5c42e46e957394672aae9ee2

          SHA1

          ce7129ade04876a143541518158b6b164e3bb30a

          SHA256

          077339d4017bc8fb3a8cd0e3233775f3ae5df0f8f18507b4539f92e133965b38

          SHA512

          7401b2f5cae46a4545cef80f082dacd03326b8f80446a566720ab0f6effe581f79f174651bb90bea4e53cf0a44791452c2fd495a1eaf6711c3647e3693e37bb0

        • C:\Program Files (x86)\iScreenKit\Qt5PrintSupport.dll

          Filesize

          260KB

          MD5

          cdd156de5c42e46e957394672aae9ee2

          SHA1

          ce7129ade04876a143541518158b6b164e3bb30a

          SHA256

          077339d4017bc8fb3a8cd0e3233775f3ae5df0f8f18507b4539f92e133965b38

          SHA512

          7401b2f5cae46a4545cef80f082dacd03326b8f80446a566720ab0f6effe581f79f174651bb90bea4e53cf0a44791452c2fd495a1eaf6711c3647e3693e37bb0

        • C:\Program Files (x86)\iScreenKit\Qt5Widgets.dll

          Filesize

          4.2MB

          MD5

          0204db097c94b3c7fa22105c8f921111

          SHA1

          1fb8f70bdd3b2351a7503300350b9246487462f2

          SHA256

          efc6ac346c11dbbc68e30038898f3a05e875f9c3958954978c52ccec17bb0410

          SHA512

          b09ecd2750b4867cd52973b14ff56cf51615482906292018ad7547d2fff0ea0fd9789b936c2140d8b208f66295bfee73bce31582aeff46b6b08b8fb1aa6bf1d4

        • C:\Program Files (x86)\iScreenKit\Qt5Widgets.dll

          Filesize

          4.2MB

          MD5

          0204db097c94b3c7fa22105c8f921111

          SHA1

          1fb8f70bdd3b2351a7503300350b9246487462f2

          SHA256

          efc6ac346c11dbbc68e30038898f3a05e875f9c3958954978c52ccec17bb0410

          SHA512

          b09ecd2750b4867cd52973b14ff56cf51615482906292018ad7547d2fff0ea0fd9789b936c2140d8b208f66295bfee73bce31582aeff46b6b08b8fb1aa6bf1d4

        • C:\Program Files (x86)\iScreenKit\Qt5WinExtras.dll

          Filesize

          228KB

          MD5

          60b6d42c961d17c52d9a3f59ea0bfe4d

          SHA1

          68baf91d3478021a6c3759e46403677e09e105e5

          SHA256

          28ac8a83f083a7cfddcbb0d19cd1b7a31d582ed93883de72da9761b6ead58ec0

          SHA512

          060d8ccbb4e417649d91f99fce2a79562a0cf67d5a4c54b2f5d8901f7b0fd9a8edd3ed8fb8be0d9f6fdd84c7cf9c66d2a527b974954359dab3261dfa41f85bf4

        • C:\Program Files (x86)\iScreenKit\Qt5WinExtras.dll

          Filesize

          228KB

          MD5

          60b6d42c961d17c52d9a3f59ea0bfe4d

          SHA1

          68baf91d3478021a6c3759e46403677e09e105e5

          SHA256

          28ac8a83f083a7cfddcbb0d19cd1b7a31d582ed93883de72da9761b6ead58ec0

          SHA512

          060d8ccbb4e417649d91f99fce2a79562a0cf67d5a4c54b2f5d8901f7b0fd9a8edd3ed8fb8be0d9f6fdd84c7cf9c66d2a527b974954359dab3261dfa41f85bf4

        • C:\Program Files (x86)\iScreenKit\ScreenKit.exe

          Filesize

          5.1MB

          MD5

          51790f9ca72eb4e121389d98f256efa6

          SHA1

          8eb13d2a9dac68ffea6a64108525d0ab2268df1d

          SHA256

          1c3ceafc260fa540dbdff4d632c786f140e2c0385493c5d370979b9922f7dace

          SHA512

          e8af1cac85c5dc05ff06564fe6e92280ff4d43d9fb3c82bf216101212a1292208e66d2a0e6f68fbb447a7f7adbf369cd0c1e175419bec6566068f777b1f3b2e3

        • C:\Program Files (x86)\iScreenKit\ScreenKit.exe

          Filesize

          5.1MB

          MD5

          51790f9ca72eb4e121389d98f256efa6

          SHA1

          8eb13d2a9dac68ffea6a64108525d0ab2268df1d

          SHA256

          1c3ceafc260fa540dbdff4d632c786f140e2c0385493c5d370979b9922f7dace

          SHA512

          e8af1cac85c5dc05ff06564fe6e92280ff4d43d9fb3c82bf216101212a1292208e66d2a0e6f68fbb447a7f7adbf369cd0c1e175419bec6566068f777b1f3b2e3

        • C:\Program Files (x86)\iScreenKit\VCRUNTIME140.dll

          Filesize

          81KB

          MD5

          c3b569faa8871739efe0a67e177adeab

          SHA1

          a83a4ec70176d0dc0ac74de6bfa28890c18f1d25

          SHA256

          2db24a9659e7f74fe5c5ad742bbd8350c8f5be460f9adf1c9fa11e0f3b4571be

          SHA512

          1040f16e2fd068a7fcf0d2229a61a2c36e1493a1ff06d5289347b127e7dab9fa17c06dee59512b374b55a23f32cb8d6fa7a93fde994f3af194f8513a9b239ae3

        • C:\Program Files (x86)\iScreenKit\avcodec-57.dll

          Filesize

          13.0MB

          MD5

          7dc78de2fbde9442978f432f9c7f8642

          SHA1

          8e41aafd0385f06fb9e9ec036d60982e61811670

          SHA256

          5c1857684e3e9143fb3999bb2bc03e674a9789bcb44881d20748117393443fc8

          SHA512

          b41d8a97205747af615c5cb9b03d255b5ea7ef029cb989bb061ed3c2e32b480d916c55ae0e08302213889f0f508278c9d7ebc8c36b5dd3ad839384ce5dacd337

        • C:\Program Files (x86)\iScreenKit\avcodec-57.dll

          Filesize

          13.0MB

          MD5

          7dc78de2fbde9442978f432f9c7f8642

          SHA1

          8e41aafd0385f06fb9e9ec036d60982e61811670

          SHA256

          5c1857684e3e9143fb3999bb2bc03e674a9789bcb44881d20748117393443fc8

          SHA512

          b41d8a97205747af615c5cb9b03d255b5ea7ef029cb989bb061ed3c2e32b480d916c55ae0e08302213889f0f508278c9d7ebc8c36b5dd3ad839384ce5dacd337

        • C:\Program Files (x86)\iScreenKit\avdevice-57.dll

          Filesize

          560KB

          MD5

          74ff20be95539fb673bceff2d5d150f6

          SHA1

          20e87bfa84abf4543fcca8ce626fac08e3b694d3

          SHA256

          38dc5275a395cd733dac65b1e8d9387899565998882a5b233d2ab229b4ed112a

          SHA512

          cdc0d48856f9347eb85d52a217bd0bcecb220e82f08c49161cc5ad55fdd3b57631865e0c259065b0ea607be69cc2220af55e9bb20b02b30147efcb697c81bcdc

        • C:\Program Files (x86)\iScreenKit\avdevice-57.dll

          Filesize

          560KB

          MD5

          74ff20be95539fb673bceff2d5d150f6

          SHA1

          20e87bfa84abf4543fcca8ce626fac08e3b694d3

          SHA256

          38dc5275a395cd733dac65b1e8d9387899565998882a5b233d2ab229b4ed112a

          SHA512

          cdc0d48856f9347eb85d52a217bd0bcecb220e82f08c49161cc5ad55fdd3b57631865e0c259065b0ea607be69cc2220af55e9bb20b02b30147efcb697c81bcdc

        • C:\Program Files (x86)\iScreenKit\avfilter-6.dll

          Filesize

          2.6MB

          MD5

          c02a9f49b6d9040d60535a0f2e540440

          SHA1

          349697d630f1b1472b8a39db0c50181f76d1d40b

          SHA256

          9274a10cc40ed77f4cd0a9d97607421621e375e277d806e153d48d454d79cdc7

          SHA512

          e0cec21b656d49d63949f87ac30b4111a009e4953eb50e65f286c40b0d3aed57d63cb29b356575a059d0a1c1e5b0ee02e827aaae4388bd2365217602c26e677e

        • C:\Program Files (x86)\iScreenKit\avfilter-6.dll

          Filesize

          2.6MB

          MD5

          c02a9f49b6d9040d60535a0f2e540440

          SHA1

          349697d630f1b1472b8a39db0c50181f76d1d40b

          SHA256

          9274a10cc40ed77f4cd0a9d97607421621e375e277d806e153d48d454d79cdc7

          SHA512

          e0cec21b656d49d63949f87ac30b4111a009e4953eb50e65f286c40b0d3aed57d63cb29b356575a059d0a1c1e5b0ee02e827aaae4388bd2365217602c26e677e

        • C:\Program Files (x86)\iScreenKit\avformat-57.dll

          Filesize

          2.5MB

          MD5

          5fa67482430aaac3e4fe740e5dc7591e

          SHA1

          1b62e1418a39ab6755ae910432921baa841e369d

          SHA256

          e4a8ec03ff4c83cf08f06b40fd1af6065b31b34e0987a3d53149bfd48d753c77

          SHA512

          d0489a7c7bd4dd5ee8cf5eddf88d25233e60434f485e432ef7f77d92f376210c866b8441581e484382d92354f0effe59baae60afecc2b406a36307187fcb6baf

        • C:\Program Files (x86)\iScreenKit\avformat-57.dll

          Filesize

          2.5MB

          MD5

          5fa67482430aaac3e4fe740e5dc7591e

          SHA1

          1b62e1418a39ab6755ae910432921baa841e369d

          SHA256

          e4a8ec03ff4c83cf08f06b40fd1af6065b31b34e0987a3d53149bfd48d753c77

          SHA512

          d0489a7c7bd4dd5ee8cf5eddf88d25233e60434f485e432ef7f77d92f376210c866b8441581e484382d92354f0effe59baae60afecc2b406a36307187fcb6baf

        • C:\Program Files (x86)\iScreenKit\avutil-55.dll

          Filesize

          1.0MB

          MD5

          f0f1d9e78a6a80571c504c0a4c0a1656

          SHA1

          02d8a190e982cc75349a66079a1e06d88ca0f079

          SHA256

          feeb656ca635d2d36c23ded04f79427ab27b2ae4289869247ef2685d4ef5cf7f

          SHA512

          6ec06134bd0e71834fd27cf5ccc8d44b6e6e3bf744f00efc9e6fe89925902b4fc3a1284cd17f8f70aeeee26cba2c6aaa57227b6eb993be54fb08a1d6a2bd0f95

        • C:\Program Files (x86)\iScreenKit\avutil-55.dll

          Filesize

          1.0MB

          MD5

          f0f1d9e78a6a80571c504c0a4c0a1656

          SHA1

          02d8a190e982cc75349a66079a1e06d88ca0f079

          SHA256

          feeb656ca635d2d36c23ded04f79427ab27b2ae4289869247ef2685d4ef5cf7f

          SHA512

          6ec06134bd0e71834fd27cf5ccc8d44b6e6e3bf744f00efc9e6fe89925902b4fc3a1284cd17f8f70aeeee26cba2c6aaa57227b6eb993be54fb08a1d6a2bd0f95

        • C:\Program Files (x86)\iScreenKit\bearer\qgenericbearer.dll

          Filesize

          38KB

          MD5

          36a2dd7ac440f438545b5f56e9b7c292

          SHA1

          9b4ba7df5ed60b25235ebb0fbb734b882dc2e2f7

          SHA256

          7c4e49b8b32ebef7fda9bfa0b9fcc8259a3e5249a2411231671f0edd6e84070f

          SHA512

          707149c409f57928a78a867a1bae1a1b3765f66d27674794fee27ca0ddc58edd1bab6b21e35aa11b87ab96a339bedcf4f30e61f83f723b9af5093d878282684a

        • C:\Program Files (x86)\iScreenKit\bearer\qgenericbearer.dll

          Filesize

          38KB

          MD5

          36a2dd7ac440f438545b5f56e9b7c292

          SHA1

          9b4ba7df5ed60b25235ebb0fbb734b882dc2e2f7

          SHA256

          7c4e49b8b32ebef7fda9bfa0b9fcc8259a3e5249a2411231671f0edd6e84070f

          SHA512

          707149c409f57928a78a867a1bae1a1b3765f66d27674794fee27ca0ddc58edd1bab6b21e35aa11b87ab96a339bedcf4f30e61f83f723b9af5093d878282684a

        • C:\Program Files (x86)\iScreenKit\concrt140.dll

          Filesize

          236KB

          MD5

          0f6c09576b20b65b1dab828d160636ba

          SHA1

          7132482cb9550aa08abda60862613e59876093eb

          SHA256

          1bb96885bc823f33d85e5cc0e99562511a103b48a218441d700c29a181c6e694

          SHA512

          03f2bc63eb915c2802ecf60b953626a0ecb6be258b1835836aa81893b8eb8c6099c6181be1f1180bdb1ade9be5e2ae593e745962157e2ae13f48ea2e864fb762

        • C:\Program Files (x86)\iScreenKit\imageformats\qico.dll

          Filesize

          26KB

          MD5

          5fb41b2556022b4af4f4d5472fbf337d

          SHA1

          8bbd5aed52021c3b4948d0a10971e3a09b8d7bec

          SHA256

          c69ac7dbf15eab7b7142d9a119dc26a2894bc8973b8f408e2e9be1917cb3af1b

          SHA512

          18bcaadeda1af69a84d90b1c3f223e900905737540460e17710d6e937aa2f8e84b83632cf6f341619c1b634629a4e95179bb5b2fb78864592d27099036308877

        • C:\Program Files (x86)\iScreenKit\imageformats\qjpeg.dll

          Filesize

          290KB

          MD5

          3d1914b09f0074666753d9b5c904a03b

          SHA1

          f25e61e382fc58d1c3d1c906e2b63f15d182c2cd

          SHA256

          6e17316baeb68e777ccb6dd15737a20cfe44e286fbc04e4f46a7930f771f5641

          SHA512

          65ba07c492cb43cd5393ee54431e1854ecae8e17af7e90abe31cd77b87043cad00f93270f9374eb4353bf0a5ad110c6725ac559d06e8fe5cf4c79b6285dfae2f

        • C:\Program Files (x86)\iScreenKit\libeay32.dll

          Filesize

          1.3MB

          MD5

          a724f5da0a0184b5668ef2d85a7346e0

          SHA1

          7181fffaa6b8f0f29cf7cdd1b1b859c2b956d399

          SHA256

          7f2284d3cca6171e50b47eabc4fddc8cd2c9641cab4edb12b26694427f559848

          SHA512

          d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2

        • C:\Program Files (x86)\iScreenKit\libvlc.dll

          Filesize

          174KB

          MD5

          72910ea101c97d85aaa12ca69c48ffa5

          SHA1

          e082fc176d9e24ee04d3c8d90134963191c2fc08

          SHA256

          5c225a931136c4ce812c5c7253f0a4b4618f83872280560073c78a130168cef2

          SHA512

          bf90e138e22365c6a6d4a69c3c286fbbdb3869668b4d6d338fad74bb9ec730d98191dd00352490cccec32e2413b2f999c3244cfcf2a20b4bdad503fcb76ba7b6

        • C:\Program Files (x86)\iScreenKit\libvlc.dll

          Filesize

          174KB

          MD5

          72910ea101c97d85aaa12ca69c48ffa5

          SHA1

          e082fc176d9e24ee04d3c8d90134963191c2fc08

          SHA256

          5c225a931136c4ce812c5c7253f0a4b4618f83872280560073c78a130168cef2

          SHA512

          bf90e138e22365c6a6d4a69c3c286fbbdb3869668b4d6d338fad74bb9ec730d98191dd00352490cccec32e2413b2f999c3244cfcf2a20b4bdad503fcb76ba7b6

        • C:\Program Files (x86)\iScreenKit\libvlccore.dll

          Filesize

          2.5MB

          MD5

          2e4347a3f5726431b0da97a7735be154

          SHA1

          2aeaa1c23ee68958e25cc40807b09e13dc3abc5c

          SHA256

          9ef725ea9e38058391f04761466ce9d3a0fae09b045807ad05605f64b6fdd266

          SHA512

          894c2842182f85f7501bcb94f034fe88cf8dd69301b0d4a68abb801d846ef33f250037e1a89d7d95f78b322525d507b0f15b9c996e4f46897f28a60faccefda4

        • C:\Program Files (x86)\iScreenKit\libvlccore.dll

          Filesize

          2.5MB

          MD5

          2e4347a3f5726431b0da97a7735be154

          SHA1

          2aeaa1c23ee68958e25cc40807b09e13dc3abc5c

          SHA256

          9ef725ea9e38058391f04761466ce9d3a0fae09b045807ad05605f64b6fdd266

          SHA512

          894c2842182f85f7501bcb94f034fe88cf8dd69301b0d4a68abb801d846ef33f250037e1a89d7d95f78b322525d507b0f15b9c996e4f46897f28a60faccefda4

        • C:\Program Files (x86)\iScreenKit\msvcp140.dll

          Filesize

          429KB

          MD5

          61414859fcb6ca5e03aedcb990bc5e50

          SHA1

          b37dbd2dbbf3e45b3aed711c0fa8050cee969d7a

          SHA256

          242db44cbd857272b66267f52afe8ecad9fbf6a7e1ffef4d1bd4beb5c1b6290f

          SHA512

          1e1f6e71f017b37e051e8b2168d9832cc5b05d279cc2525f5ce9297cd0b9bdaaf5d515151f32a9810434bacbfef59d5fe1ee8f76be5acf07fcc5226aeddec366

        • C:\Program Files (x86)\iScreenKit\opencv_core2413.dll

          Filesize

          1.9MB

          MD5

          f9bee761cafcde8fc5deb86c6cbf0ecf

          SHA1

          2493e43d79fc84e41f3f2c4da4d47af3f2c01508

          SHA256

          3d2dcb7f7207b7bfe4dedccda8792571c3e7d66715fd986afe46050990302bd2

          SHA512

          d270e47b494275afa14f584c1803197bd111160445dc5ed3eb9db74f8a6eeee7c365d4d4529d878c01510d6899379508f994185e2da43f02e78a9bc46483ea5f

        • C:\Program Files (x86)\iScreenKit\opencv_core2413.dll

          Filesize

          1.9MB

          MD5

          f9bee761cafcde8fc5deb86c6cbf0ecf

          SHA1

          2493e43d79fc84e41f3f2c4da4d47af3f2c01508

          SHA256

          3d2dcb7f7207b7bfe4dedccda8792571c3e7d66715fd986afe46050990302bd2

          SHA512

          d270e47b494275afa14f584c1803197bd111160445dc5ed3eb9db74f8a6eeee7c365d4d4529d878c01510d6899379508f994185e2da43f02e78a9bc46483ea5f

        • C:\Program Files (x86)\iScreenKit\opencv_imgproc2413.dll

          Filesize

          1.7MB

          MD5

          c922564534c024c9078719b395d31154

          SHA1

          9752d125f2563f041f7126f153fbc1facea6da70

          SHA256

          e12a5af5fd97642c85a4b762d3faa9c06aa5938cc9ed58ab80e1d64cb1c7a579

          SHA512

          d87f7e1194886b2c50d532be1453943f9444c32758d304fea27b8ee94eeaa8e617ab5b341fc0c4561d278f517b1be92d167e2d9ffdcfd260feea0b5f72d4d117

        • C:\Program Files (x86)\iScreenKit\opencv_imgproc2413.dll

          Filesize

          1.7MB

          MD5

          c922564534c024c9078719b395d31154

          SHA1

          9752d125f2563f041f7126f153fbc1facea6da70

          SHA256

          e12a5af5fd97642c85a4b762d3faa9c06aa5938cc9ed58ab80e1d64cb1c7a579

          SHA512

          d87f7e1194886b2c50d532be1453943f9444c32758d304fea27b8ee94eeaa8e617ab5b341fc0c4561d278f517b1be92d167e2d9ffdcfd260feea0b5f72d4d117

        • C:\Program Files (x86)\iScreenKit\platforms\qwindows.dll

          Filesize

          1.1MB

          MD5

          59de5b2731e4d2f4f50da052dbba33f8

          SHA1

          717ab8dbf1bc7fece41bf27bfd75b35dd0745a1f

          SHA256

          81602b9cce99c0da22aff13febf7c4c86036602e5c1b5f4ee77ecf0f02547a1f

          SHA512

          4f1a28d8244cbc560c00a452b245ca8c0a5c834fd80f2bebf4eec8e685f9cdad64f86e4164f808607145b298e4dc4e007b90147941b972f769a005a2813a4b11

        • C:\Program Files (x86)\iScreenKit\platforms\qwindows.dll

          Filesize

          1.1MB

          MD5

          59de5b2731e4d2f4f50da052dbba33f8

          SHA1

          717ab8dbf1bc7fece41bf27bfd75b35dd0745a1f

          SHA256

          81602b9cce99c0da22aff13febf7c4c86036602e5c1b5f4ee77ecf0f02547a1f

          SHA512

          4f1a28d8244cbc560c00a452b245ca8c0a5c834fd80f2bebf4eec8e685f9cdad64f86e4164f808607145b298e4dc4e007b90147941b972f769a005a2813a4b11

        • C:\Program Files (x86)\iScreenKit\ssleay32.dll

          Filesize

          330KB

          MD5

          d34ecd24706dcfff478fe6fbe79026a9

          SHA1

          e11540244a99a5d7c95643f14cce042de1710ac7

          SHA256

          4a55ba7288d61c50d5f852c1d07877da46b036c49559e648006839a3cb932a55

          SHA512

          16de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915

        • C:\Program Files (x86)\iScreenKit\ssleay32.dll

          Filesize

          330KB

          MD5

          d34ecd24706dcfff478fe6fbe79026a9

          SHA1

          e11540244a99a5d7c95643f14cce042de1710ac7

          SHA256

          4a55ba7288d61c50d5f852c1d07877da46b036c49559e648006839a3cb932a55

          SHA512

          16de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915

        • C:\Program Files (x86)\iScreenKit\styles\qwindowsvistastyle.dll

          Filesize

          120KB

          MD5

          440d85d6f630184f6a62233aa29366b0

          SHA1

          32b3c7daf4b4727fdc1020b1eec978869e84aa37

          SHA256

          03510febc456b68ad326bf13a9633fd1bbedb26550de62233c3bce3e68b4cb19

          SHA512

          c6f1d800f455753d0ef36e8175dd11888f62020b8813615e3b2ca0e5ae9195ae0389955a71ffc929358030d2128249ac0a44e6e5e73960d7f3c3948b8e350e6e

        • C:\Program Files (x86)\iScreenKit\styles\qwindowsvistastyle.dll

          Filesize

          120KB

          MD5

          440d85d6f630184f6a62233aa29366b0

          SHA1

          32b3c7daf4b4727fdc1020b1eec978869e84aa37

          SHA256

          03510febc456b68ad326bf13a9633fd1bbedb26550de62233c3bce3e68b4cb19

          SHA512

          c6f1d800f455753d0ef36e8175dd11888f62020b8813615e3b2ca0e5ae9195ae0389955a71ffc929358030d2128249ac0a44e6e5e73960d7f3c3948b8e350e6e

        • C:\Program Files (x86)\iScreenKit\swresample-2.dll

          Filesize

          510KB

          MD5

          9fabd2b05e234dab5753b0939b16174f

          SHA1

          bf3c4a7f32af2142496d352a8af8c142d891f85c

          SHA256

          8b14cee55ca73d3ae9545f02f066edcac9eb7e5213a050b486228a47140c5a88

          SHA512

          eb6042ce5d8660fa9179e8b7d6379c9f37553b62f09a2d5e8ddeef65382db4596fbb444717d09da268149a15588585503c6497bb3722ad04149d03bec22b33d4

        • C:\Program Files (x86)\iScreenKit\swresample-2.dll

          Filesize

          510KB

          MD5

          9fabd2b05e234dab5753b0939b16174f

          SHA1

          bf3c4a7f32af2142496d352a8af8c142d891f85c

          SHA256

          8b14cee55ca73d3ae9545f02f066edcac9eb7e5213a050b486228a47140c5a88

          SHA512

          eb6042ce5d8660fa9179e8b7d6379c9f37553b62f09a2d5e8ddeef65382db4596fbb444717d09da268149a15588585503c6497bb3722ad04149d03bec22b33d4

        • C:\Program Files (x86)\iScreenKit\swscale-4.dll

          Filesize

          936KB

          MD5

          b7c4cf1db25e98a958866db76d30f5ac

          SHA1

          57633ab77fa87cd5c0c6f7c8b156a07e051a39bc

          SHA256

          020671faa0c6139409fc8287e4bc188ae3882e3881802d37daade686de0471ce

          SHA512

          8f70172d50d9ea39d3a8428c5ea93ef35b21cf9db62c5eb80b654b1acfbc03ed13b78e905d19a444b2cb5c77918b665e2c882a8562e367d12672b70ec3c08321

        • C:\Program Files (x86)\iScreenKit\swscale-4.dll

          Filesize

          936KB

          MD5

          b7c4cf1db25e98a958866db76d30f5ac

          SHA1

          57633ab77fa87cd5c0c6f7c8b156a07e051a39bc

          SHA256

          020671faa0c6139409fc8287e4bc188ae3882e3881802d37daade686de0471ce

          SHA512

          8f70172d50d9ea39d3a8428c5ea93ef35b21cf9db62c5eb80b654b1acfbc03ed13b78e905d19a444b2cb5c77918b665e2c882a8562e367d12672b70ec3c08321

        • C:\Program Files (x86)\iScreenKit\vcruntime140.dll

          Filesize

          81KB

          MD5

          c3b569faa8871739efe0a67e177adeab

          SHA1

          a83a4ec70176d0dc0ac74de6bfa28890c18f1d25

          SHA256

          2db24a9659e7f74fe5c5ad742bbd8350c8f5be460f9adf1c9fa11e0f3b4571be

          SHA512

          1040f16e2fd068a7fcf0d2229a61a2c36e1493a1ff06d5289347b127e7dab9fa17c06dee59512b374b55a23f32cb8d6fa7a93fde994f3af194f8513a9b239ae3

        • C:\Program Files (x86)\iScreenKit\vcruntime140.dll

          Filesize

          81KB

          MD5

          c3b569faa8871739efe0a67e177adeab

          SHA1

          a83a4ec70176d0dc0ac74de6bfa28890c18f1d25

          SHA256

          2db24a9659e7f74fe5c5ad742bbd8350c8f5be460f9adf1c9fa11e0f3b4571be

          SHA512

          1040f16e2fd068a7fcf0d2229a61a2c36e1493a1ff06d5289347b127e7dab9fa17c06dee59512b374b55a23f32cb8d6fa7a93fde994f3af194f8513a9b239ae3

        • C:\Users\Admin\AppData\Local\Temp\is-NT128.tmp\iScreenKit.tmp

          Filesize

          2.7MB

          MD5

          93ad40cb8951e3a6c94c35358fed70f6

          SHA1

          8446707ef9ae92d49d45e0c6b59fc8b593fc4580

          SHA256

          796cea842e091a8865349ce458a6198f2a3deedabe7c5a98543852fbe6d7cdfc

          SHA512

          46d1bd9ce79b14ca5107f581b8673ccfff7dea0fdba0a7f78fe38a682c770313056afd8e93343df44ef695c89adb490044d79985686d5955c0ec9172ecc9e6f6

        • C:\Users\Admin\AppData\Local\Temp\is-NT128.tmp\iScreenKit.tmp

          Filesize

          2.7MB

          MD5

          93ad40cb8951e3a6c94c35358fed70f6

          SHA1

          8446707ef9ae92d49d45e0c6b59fc8b593fc4580

          SHA256

          796cea842e091a8865349ce458a6198f2a3deedabe7c5a98543852fbe6d7cdfc

          SHA512

          46d1bd9ce79b14ca5107f581b8673ccfff7dea0fdba0a7f78fe38a682c770313056afd8e93343df44ef695c89adb490044d79985686d5955c0ec9172ecc9e6f6

        • memory/1336-139-0x0000000000400000-0x000000000050D000-memory.dmp

          Filesize

          1.1MB

        • memory/1336-135-0x0000000000400000-0x000000000050D000-memory.dmp

          Filesize

          1.1MB

        • memory/1336-140-0x0000000000400000-0x000000000050D000-memory.dmp

          Filesize

          1.1MB

        • memory/1336-205-0x0000000000400000-0x000000000050D000-memory.dmp

          Filesize

          1.1MB