Overview

overview

8

Static

static

5

SplitCamSetup_x64.msi

windows10-2004-x64

8

SplitCamSetup_x64.msi

windows11-21h2-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    162s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    29/04/2026, 22:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SplitCamSetup_x64.msi
  • Size 467.5MB
  • Sample260429-2tkc5shs2v
  • SHA256 090618c3913178419ba2008ad04b4a9451f28ed58f81e4b44763b37336ac2dc3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistenceprivilege_escalationransomware

Malware Config

Signatures

  • Drops file in Drivers directory 8 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 17 IoCs
  • Loads dropped DLL 64 IoCs
  • Badlisted process makes network request 5 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 32 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 24 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
    persistenceprivilege_escalation
  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 63 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\system32\msiexec.exe
    msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\SplitCamSetup_x64.msi
    1⤵
    • Badlisted process makes network request
    • Enumerates connected drives
    • Event Triggered Execution: Installer Packages
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:3348
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Badlisted process makes network request
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4228
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2360
    • C:\Program Files\SplitCam\10\setup.exe
      "C:\Program Files\SplitCam\10\setup.exe" /install
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3780
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c ""C:\Program Files\SplitCam\10\exe\x64\devcon.exe" remove *splitcam*"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4612
        • C:\Program Files\SplitCam\10\exe\x64\devcon.exe
          "C:\Program Files\SplitCam\10\exe\x64\devcon.exe" remove *splitcam*
          4⤵
          • Executes dropped EXE
          • Checks SCSI registry key(s)
          PID:436
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c ""C:\Program Files\SplitCam\10\exe\x64\devcon.exe" remove *scaudio*"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3676
        • C:\Program Files\SplitCam\10\exe\x64\devcon.exe
          "C:\Program Files\SplitCam\10\exe\x64\devcon.exe" remove *scaudio*
          4⤵
          • Executes dropped EXE
          • Checks SCSI registry key(s)
          PID:1504
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c ""C:\Program Files\SplitCam\10\exe\x64\devcon.exe" install "C:\Program Files\SplitCam\10\driver\video\x64\Win10\splitcam_hd_driver.inf" splitcam_hd_driver"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5036
        • C:\Program Files\SplitCam\10\exe\x64\devcon.exe
          "C:\Program Files\SplitCam\10\exe\x64\devcon.exe" install "C:\Program Files\SplitCam\10\driver\video\x64\Win10\splitcam_hd_driver.inf" splitcam_hd_driver
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          PID:4668
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c ""C:\Program Files\SplitCam\10\exe\x64\devcon.exe" install "C:\Program Files\SplitCam\10\driver\audio\x64\Win10\scaudio.inf" Root\scaudio"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2168
        • C:\Program Files\SplitCam\10\exe\x64\devcon.exe
          "C:\Program Files\SplitCam\10\exe\x64\devcon.exe" install "C:\Program Files\SplitCam\10\driver\audio\x64\Win10\scaudio.inf" Root\scaudio
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          PID:4764
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c "regsvr32.exe /s "C:\Program Files\SplitCam\10\res\virtualcam.dll""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3096
        • C:\Windows\SysWOW64\regsvr32.exe
          regsvr32.exe /s "C:\Program Files\SplitCam\10\res\virtualcam.dll"
          4⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          PID:3688
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c "regsvr32.exe /s "C:\Program Files\SplitCam\10\res\virtualcam_x64.dll""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3376
        • C:\Windows\SysWOW64\regsvr32.exe
          regsvr32.exe /s "C:\Program Files\SplitCam\10\res\virtualcam_x64.dll"
          4⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:3416
          • C:\Windows\system32\regsvr32.exe
            /s "C:\Program Files\SplitCam\10\res\virtualcam_x64.dll"
            5⤵
            • Loads dropped DLL
            • Modifies registry class
            PID:2164
    • C:\Program Files\SplitCam\10\splitcam.exe
      "C:\Program Files\SplitCam\10\splitcam.exe" /run="C:\Program Files\SplitCam\10\splitcam.exe" /user="Admin"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2280
    • C:\Program Files\SplitCam\10\splitcam.exe
      "C:\Program Files\SplitCam\10\splitcam.exe" /initialize
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4888
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:4988
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
    1⤵
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Suspicious use of WriteProcessMemory
    PID:2512
    • C:\Windows\system32\DrvInst.exe
      DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{3669c75a-383f-334e-9dab-af9e6d13eb18}\splitcam_hd_driver.inf" "9" "451955273" "0000000000000148" "WinSta0\Default" "0000000000000158" "208" "c:\program files\splitcam\10\driver\video\x64\win10"
      2⤵
      • Drops file in System32 directory
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      • Modifies data under HKEY_USERS
      PID:2520
    • C:\Windows\system32\DrvInst.exe
      DrvInst.exe "2" "211" "ROOT\MEDIA\0000" "C:\Windows\INF\oem3.inf" "oem3.inf:ac0d5538be381ad6:splitcam_hd_driver:18.17.41.776:splitcam_hd_driver," "451955273" "0000000000000148" "8f33"
      2⤵
      • Drops file in Drivers directory
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      • Modifies registry class
      PID:4680
    • C:\Windows\system32\DrvInst.exe
      DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{13ef0fce-3b86-7b46-a667-87e3cfab8182}\scaudio.inf" "9" "4f41fcc77" "000000000000015C" "WinSta0\Default" "000000000000017C" "208" "c:\program files\splitcam\10\driver\audio\x64\win10"
      2⤵
      • Drops file in System32 directory
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      • Modifies data under HKEY_USERS
      PID:992
    • C:\Windows\system32\DrvInst.exe
      DrvInst.exe "2" "211" "ROOT\MEDIA\0001" "C:\Windows\INF\oem4.inf" "oem4.inf:f1d9700266dde071:scaudio_Device:16.10.24.612:root\scaudio," "4f41fcc77" "000000000000015C" "8f33"
      2⤵
      • Drops file in Drivers directory
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      PID:1216
  • C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe -k CameraMonitor
    1⤵
      PID:3860
    • C:\program files\splitcam\10\splitcam.exe
      "C:\program files\splitcam\10\splitcam.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3848
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "wmic cpu get name /format:list"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:3744
        • C:\Windows\System32\Wbem\WMIC.exe
          wmic cpu get name /format:list
          3⤵
            PID:3156
        • C:\program files\splitcam\10\setup.exe
          "C:\program files\splitcam\10\setup.exe" /address kernel32.dll LoadLibraryA
          2⤵
          • Executes dropped EXE
          PID:1248
        • C:\program files\splitcam\10\cefnoti.exe
          cefnoti.exe
          2⤵
          • Executes dropped EXE
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:1032
          • C:\program files\splitcam\10\cefnoti.exe
            "C:\program files\splitcam\10\cefnoti.exe" --type=gpu-process --no-sandbox --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1628 --field-trial-handle=2248,i,9147033162467005803,14240740188316441515,131072 /prefetch:2
            3⤵
            • Executes dropped EXE
            PID:4556
          • C:\program files\splitcam\10\cefnoti.exe
            "C:\program files\splitcam\10\cefnoti.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --proxy-server=http://142.93.101.208:3131 --video-capture-use-gpu-memory-buffer --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache" --mojo-platform-channel-handle=1732 --field-trial-handle=2248,i,9147033162467005803,14240740188316441515,131072 /prefetch:8
            3⤵
            • Executes dropped EXE
            • System Time Discovery
            PID:5060
          • C:\program files\splitcam\10\cefnoti.exe
            "C:\program files\splitcam\10\cefnoti.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --proxy-server=http://142.93.101.208:3131 --video-capture-use-gpu-memory-buffer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache" --mojo-platform-channel-handle=1940 --field-trial-handle=2248,i,9147033162467005803,14240740188316441515,131072 /prefetch:8
            3⤵
            • Executes dropped EXE
            PID:4512
          • C:\program files\splitcam\10\cefnoti.exe
            "C:\program files\splitcam\10\cefnoti.exe" --type=renderer --display-capture-permissions-policy-allowed --event-path-policy=0 --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache" --first-renderer-process --no-sandbox --autoplay-policy=user-activation-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2984 --field-trial-handle=2248,i,9147033162467005803,14240740188316441515,131072 /prefetch:1
            3⤵
            • Executes dropped EXE
            PID:1068
          • C:\program files\splitcam\10\cefnoti.exe
            "C:\program files\splitcam\10\cefnoti.exe" --type=renderer --extension-process --display-capture-permissions-policy-allowed --event-path-policy=0 --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache" --no-sandbox --autoplay-policy=user-activation-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3012 --field-trial-handle=2248,i,9147033162467005803,14240740188316441515,131072 /prefetch:1
            3⤵
            • Executes dropped EXE
            PID:2220
          • C:\program files\splitcam\10\cefnoti.exe
            "C:\program files\splitcam\10\cefnoti.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --proxy-server=http://142.93.101.208:3131 --video-capture-use-gpu-memory-buffer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache" --mojo-platform-channel-handle=4248 --field-trial-handle=2248,i,9147033162467005803,14240740188316441515,131072 /prefetch:8
            3⤵
            • Executes dropped EXE
            PID:4764
          • C:\program files\splitcam\10\cefnoti.exe
            "C:\program files\splitcam\10\cefnoti.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --proxy-server=http://142.93.101.208:3131 --video-capture-use-gpu-memory-buffer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache" --mojo-platform-channel-handle=820 --field-trial-handle=2248,i,9147033162467005803,14240740188316441515,131072 /prefetch:8
            3⤵
            • Executes dropped EXE
            PID:4752
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004EC
        1⤵
          PID:340

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              e593b89.rbs
              • Path C:\Config.Msi\e593b89.rbs
              • Size 183KB
              • SHA256 453eb1308a6be3bff2e69ec615ffcdb00c1f5a9904c59aac004f29f9e6715a82
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              OpenCL.dll
              • Path C:\Program Files\SplitCam\10\OpenCL.dll
              • Size 539KB
              • SHA256 7837ff537a68f27dc0f50ea399b6befc012d29ed8eea178851c3b61838c81f69
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              avcodec-61.dll
              • Path C:\Program Files\SplitCam\10\avcodec-61.dll
              • Size 17.6MB
              • SHA256 6a9c7f5372b98044659a97a6c242ad27eca50313841769bbd29a06825aab4481
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              avformat-61.dll
              • Path C:\Program Files\SplitCam\10\avformat-61.dll
              • Size 3.2MB
              • SHA256 e719e58c025321ddab1759248d570ce00ff858d46428f89b366a5c63bb2183c7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              avutil-59.dll
              • Path C:\Program Files\SplitCam\10\avutil-59.dll
              • Size 1.7MB
              • SHA256 efc21b241c5b39a5e59abba8e56c92dc6ff8c969c55833404aecd02d671a505d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              scaudio.inf
              • Path C:\Program Files\SplitCam\10\driver\audio\x64\Win10\scaudio.inf
              • Size 5KB
              • SHA256 698aa00020f85cd991d53676097069de8d15578efec07059a40fcc5b5d311c67
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              splitcam_hd_driver.inf
              • Path C:\Program Files\SplitCam\10\driver\video\x64\Win10\splitcam_hd_driver.inf
              • Size 4KB
              • SHA256 ef0b04d25246467369fdd25414ce76ee1a6e1ac9ffa157f0469303577c5b7da2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              devcon.exe
              • Path C:\Program Files\SplitCam\10\exe\x64\devcon.exe
              • Size 79KB
              • SHA256 2af417cc08ef6754c8d2f9d82f727e8215e49b5e9a224f32d2535f5b2ceff36e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libaom.dll
              • Path C:\Program Files\SplitCam\10\libaom.dll
              • Size 8.3MB
              • SHA256 7b1eb4a6a1fcd3a5841dfdbf24bfe2024e97180f997cb2d684ff7e07eebe8388
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libfdk-aac-2.dll
              • Path C:\Program Files\SplitCam\10\libfdk-aac-2.dll
              • Size 1.3MB
              • SHA256 a4a33655b52b9dac13e474a80d10874f178658ccb7aefa4236d07aa0b6fc807c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libiconv-2.dll
              • Path C:\Program Files\SplitCam\10\libiconv-2.dll
              • Size 1.1MB
              • SHA256 cff1653d6768a66b5186585d99b971c09615d5dd72f6526ebc35a8032b59b90a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              liblzma-5.dll
              • Path C:\Program Files\SplitCam\10\liblzma-5.dll
              • Size 193KB
              • SHA256 c68fce4b29b80480fe1e001378a34dcce60c437fa71e96c3d2b6601a2773605c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libva.dll
              • Path C:\Program Files\SplitCam\10\libva.dll
              • Size 279KB
              • SHA256 7c57590b235d3ea58c399e7c092ef68941ea96a26cc0bb0005c23331d16098f0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libvpl-2.dll
              • Path C:\Program Files\SplitCam\10\libvpl-2.dll
              • Size 465KB
              • SHA256 8410671fa0781948c4aa957230ee71bbcf7f71f28ac2ddab1a3a7fc3508905b0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libvpx-1.dll
              • Path C:\Program Files\SplitCam\10\libvpx-1.dll
              • Size 3.8MB
              • SHA256 33543a2948ac3ca1dccfae45e77ade2f2fb40fc92e033595d82fb32e97e1b26d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libx264-164.dll
              • Path C:\Program Files\SplitCam\10\libx264-164.dll
              • Size 1.9MB
              • SHA256 cf3b8a332aebffe2f240ce9dcd2f50a379661c793bbfc01c7caa6bf9c91750aa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              fusion.theme
              • Path C:\Program Files\SplitCam\10\res\fusion.theme
              • Size 9KB
              • SHA256 998fe6c219b396fce7e4fc17204d13e0aaf4b70859ac0cc9335cfe3536e9eeef
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              {43419413-4844-4A72-9414-10FBC72FE193}.jpg
              • Path C:\Program Files\SplitCam\10\res\preview\miscellaneous\{43419413-4844-4A72-9414-10FBC72FE193}.jpg
              • Size 168KB
              • SHA256 0db20f4623e3e07f233a6033483a7e1cfc3a40678aebfb57c763172026328a22
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              {64D8FF44-04D8-4BDE-BC6A-48B0BEAFAE51}.jpg
              • Path C:\Program Files\SplitCam\10\res\preview\miscellaneous\{64D8FF44-04D8-4BDE-BC6A-48B0BEAFAE51}.jpg
              • Size 119KB
              • SHA256 99fbbf274509a95e3e84c36dde61ef9fce5c417904adb57d299135e8d2dbabf1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              {E4F22DF0-BED9-4B8D-A9AD-137C5C7D53D0}.jpg
              • Path C:\Program Files\SplitCam\10\res\preview\miscellaneous\{E4F22DF0-BED9-4B8D-A9AD-137C5C7D53D0}.jpg
              • Size 33KB
              • SHA256 b6e897dbe8e8e1eae71e6036fa5bf757a1bf205e93f6164161538665307bc4af
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              virtualcam.dll
              • Path C:\Program Files\SplitCam\10\res\virtualcam.dll
              • Size 389KB
              • SHA256 3a11ed3f402369876df45ecca63e4504be1069e1e8a2e7bc62f7ebbc44bbc07d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              virtualcam_x64.dll
              • Path C:\Program Files\SplitCam\10\res\virtualcam_x64.dll
              • Size 520KB
              • SHA256 9b50a9a8c497d094d513895b508286ee129eea6f34c5f5d827ed491f9add3673
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              setup.exe
              • Path C:\Program Files\SplitCam\10\setup.exe
              • Size 470KB
              • SHA256 a41457cec3e5e168151fbeb36c90a103295f1f238d554dd1a22af5c1382c33ff
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              swresample-5.dll
              • Path C:\Program Files\SplitCam\10\swresample-5.dll
              • Size 243KB
              • SHA256 ef3f64365a5c4e4a1cb00393862b151e8f7cb9cf5dbed9f942499ea309aac987
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              swscale-8.dll
              • Path C:\Program Files\SplitCam\10\swscale-8.dll
              • Size 910KB
              • SHA256 b849cb4955e436bba8b3b8b22e2eec0287d77919a93664bc35caaa2b2cf2bbca
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              357F04AD41BCF5FE18FCB69F60C6680F_D1CDB3AB4B9AE970AA3A4BEBFD057F5A
              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_D1CDB3AB4B9AE970AA3A4BEBFD057F5A
              • Size 1KB
              • SHA256 7bddaf1d2e6f8ae903d5ee536b6692435fc315d3eb9e0d9cb526891cd7efb915
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
              • Size 1KB
              • SHA256 744e8c3d8ac7233db43733484a09d0b201233fc71e6825671f9b168fd228de99
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              357F04AD41BCF5FE18FCB69F60C6680F_D1CDB3AB4B9AE970AA3A4BEBFD057F5A
              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\357F04AD41BCF5FE18FCB69F60C6680F_D1CDB3AB4B9AE970AA3A4BEBFD057F5A
              • Size 536B
              • SHA256 d067342d47ef6e4d549fa12f32823f4bd7e88d4a74641b05fb5ab0cef86f71ed
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
              • Size 536B
              • SHA256 b1bf79ae248ec3afe9516d92955f9b7d96872435ac92436977a5400f7e13eafd
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              MANIFEST-000001
              • Path C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache\Default\Extension Scripts\MANIFEST-000001
              • Size 41B
              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
              • MD5 SHA1 SHA512
              Submit Download

              Preferences
              • Path C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache\Default\Preferences
              • Size 3KB
              • SHA256 05b573cfb1f64d24ef0e2045c9c2aa98de75e1669616700e0a91a46ef9abf885
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              Preferences~RFe5a6a73.TMP
              • Path C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache\Default\Preferences~RFe5a6a73.TMP
              • Size 3KB
              • SHA256 b933c21e47652e59212d846b9837dc9eac37642e68d6d1afcd5555114a2ce574
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              CURRENT
              • Path C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache\Default\Site Characteristics Database\CURRENT
              • Size 16B
              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
              • MD5 SHA1 SHA512
              Submit Download

              Local State
              • Path C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache\Local State
              • Size 1KB
              • SHA256 9d8f407c286b222eabb4fe3bf126e6f34e2ec7aad46174fedacc7838e0afa370
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              Local State~RFe59f543.TMP
              • Path C:\Users\Admin\AppData\Local\Splitcam\cache\cef\cef_cache\Local State~RFe59f543.TMP
              • Size 795B
              • SHA256 0584544bdfcbbfbb71f02201aefdead6c9a461e8542cda39c71d66c428ad9081
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              _EF06DBBE38DB1CC66298DE.exe
              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Installer\{30058EB0-CD50-4958-8B22-D1897E502994}\_EF06DBBE38DB1CC66298DE.exe
              • Size 34KB
              • SHA256 8cfa25fb8f1df5352923ac341ca8e2f9530081e8fd1c6aa333d97a43e73210f2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              c_media.PNF
              • Path C:\Windows\INF\c_media.PNF
              • Size 12KB
              • SHA256 56e92c16886c56f1e684a749dad5951d8750ba2d4c794ac08b9871f926d8d30e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dberr.txt
              • Path C:\Windows\System32\CatRoot2\dberr.txt
              • Size 104KB
              • SHA256 ebac3bda91328917a44f51ff1e0383d670d46978974082264acc39be5e1e9010
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              metadata-2
              • Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
              • Size 24.6MB
              • SHA256 ee5531a9c4f573031e950072e5bcb12492bbcdc980a5440dcacb4437130ab1b7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              {f93fa545-3f86-4a2f-8b28-69c22eeb001e}_OnDiskSnapshotProp
              • Path \??\Volume{a37a13d3-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{f93fa545-3f86-4a2f-8b28-69c22eeb001e}_OnDiskSnapshotProp
              • Size 6KB
              • SHA256 1b6fb1188a1f7747ae369df8b5b60553afcc9c73db7f3f9093bc57a9fea5e682
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              scaudio.sys
              • Path \??\c:\PROGRA~1\splitcam\10\driver\audio\x64\win10\scaudio.sys
              • Size 53KB
              • SHA256 9da7de37a004c5c40869b999f571d1a53692db4f3e9b33361aad76e6b8e1f02c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              splitcam_hd_driver.sys
              • Path \??\c:\PROGRA~1\splitcam\10\driver\video\x64\win10\splitcam_hd_driver.sys
              • Size 48KB
              • SHA256 191946f74e4cf34d04baa9a79f3a387eda13056123afe0c971a5409369c8fa77
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              scaudio.cat
              • Path \??\c:\program files\splitcam\10\driver\audio\x64\win10\scaudio.cat
              • Size 10KB
              • SHA256 80533957e3ec48068887c2528213bbe4ff1e2fe35e53591886b546da2532ed57
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              splitcam_hd_driver.cat
              • Path \??\c:\program files\splitcam\10\driver\video\x64\win10\splitcam_hd_driver.cat
              • Size 10KB
              • SHA256 4c1cadb66eb75a1d3c5bf2e3fad989d7974ba9febd5761f95e6b3417f5ee79d7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              memory/992-1066-0x000001A410550000-0x000001A41055C000-memory.dmp
              Download

              memory/2280-1119-0x00007FFB1D5A0000-0x00007FFB1D5EA000-memory.dmp
              Download

              memory/2280-1118-0x00007FFB1D5F0000-0x00007FFB1D626000-memory.dmp
              Download

              memory/2280-1114-0x00007FFB1E2C0000-0x00007FFB1E593000-memory.dmp
              Download

              memory/2280-1116-0x00007FFB1D750000-0x00007FFB1D89E000-memory.dmp
              Download

              memory/2280-1123-0x00007FFB31860000-0x00007FFB31884000-memory.dmp
              Download

              memory/2280-1128-0x000002A825340000-0x000002A82534C000-memory.dmp
              Download

              memory/2280-1124-0x00007FFB176B0000-0x00007FFB18AA2000-memory.dmp
              Download

              memory/2280-1127-0x00007FFB2A840000-0x00007FFB2A860000-memory.dmp
              Download

              memory/2280-1126-0x00007FFB32920000-0x00007FFB3292D000-memory.dmp
              Download

              memory/2280-1125-0x00007FFB319A0000-0x00007FFB319B6000-memory.dmp
              Download

              memory/2280-1111-0x00007FFB1E5A0000-0x00007FFB1F724000-memory.dmp
              Download

              memory/2280-1110-0x00007FFB1F730000-0x00007FFB20CE1000-memory.dmp
              Download

              memory/2280-1117-0x00007FFB1D630000-0x00007FFB1D749000-memory.dmp
              Download

              memory/2280-1122-0x00007FFB1CE60000-0x00007FFB1D14E000-memory.dmp
              Download

              memory/2280-1112-0x00007FFB2A860000-0x00007FFB2A89C000-memory.dmp
              Download

              memory/2280-1113-0x00007FFB1E1E0000-0x00007FFB1E2B5000-memory.dmp
              Download

              memory/2280-1120-0x00007FFB1D520000-0x00007FFB1D598000-memory.dmp
              Download

              memory/2280-1115-0x00007FFB1D8A0000-0x00007FFB1E149000-memory.dmp
              Download

              memory/2280-1121-0x00007FFB1D150000-0x00007FFB1D51C000-memory.dmp
              Download

              memory/2520-993-0x000001CBBCE40000-0x000001CBBCE4C000-memory.dmp
              Download

              memory/3348-1179-0x000001D329180000-0x000001D32918C000-memory.dmp
              Download

              memory/3348-0-0x000001D329180000-0x000001D32918C000-memory.dmp
              Download

              memory/3416-1080-0x0000000000880000-0x00000000008FA000-memory.dmp
              Download

              memory/3848-1226-0x000001A59B490000-0x000001A59B4A2000-memory.dmp
              Download

              memory/3848-1164-0x00007FFB1F730000-0x00007FFB20CE1000-memory.dmp
              Download

              memory/3848-1173-0x00007FFB1D5A0000-0x00007FFB1D5EA000-memory.dmp
              Download

              memory/3848-1167-0x00007FFB2A860000-0x00007FFB2A89C000-memory.dmp
              Download

              memory/3848-1168-0x00007FFB1E1E0000-0x00007FFB1E2B5000-memory.dmp
              Download

              memory/3848-1165-0x00007FFB1E2C0000-0x00007FFB1E593000-memory.dmp
              Download

              memory/3848-1169-0x00007FFB1D8A0000-0x00007FFB1E149000-memory.dmp
              Download

              memory/3848-1178-0x000001A598720000-0x000001A59872C000-memory.dmp
              Download

              memory/3848-1171-0x00007FFB1D630000-0x00007FFB1D749000-memory.dmp
              Download

              memory/3848-1174-0x00007FFB1D520000-0x00007FFB1D598000-memory.dmp
              Download

              memory/3848-1176-0x00007FFB1CE60000-0x00007FFB1D14E000-memory.dmp
              Download

              memory/3848-1172-0x00007FFB1D5F0000-0x00007FFB1D626000-memory.dmp
              Download

              memory/3848-1166-0x00007FFB1E5A0000-0x00007FFB1F724000-memory.dmp
              Download

              memory/3848-1170-0x00007FFB1D750000-0x00007FFB1D89E000-memory.dmp
              Download

              memory/3848-1177-0x00007FFB176B0000-0x00007FFB18AA2000-memory.dmp
              Download

              memory/3848-1175-0x00007FFB1D150000-0x00007FFB1D51C000-memory.dmp
              Download

              memory/4228-22-0x00000163E5D10000-0x00000163E5D1C000-memory.dmp
              Download

              memory/4668-1001-0x000001C7C4D40000-0x000001C7C4D4C000-memory.dmp
              Download

              memory/4764-1074-0x000001B0D05B0000-0x000001B0D05BC000-memory.dmp
              Download

              memory/4888-1143-0x00007FFB176B0000-0x00007FFB18AA2000-memory.dmp
              Download

              memory/4888-1142-0x00007FFB1CE60000-0x00007FFB1D14E000-memory.dmp
              Download

              memory/4888-1135-0x00007FFB1D8A0000-0x00007FFB1E149000-memory.dmp
              Download

              memory/4888-1130-0x00007FFB1F730000-0x00007FFB20CE1000-memory.dmp
              Download

              memory/4888-1141-0x00007FFB1D150000-0x00007FFB1D51C000-memory.dmp
              Download

              memory/4888-1140-0x00007FFB1D520000-0x00007FFB1D598000-memory.dmp
              Download

              memory/4888-1139-0x00007FFB1D5A0000-0x00007FFB1D5EA000-memory.dmp
              Download

              memory/4888-1144-0x000002ADE9420000-0x000002ADE942C000-memory.dmp
              Download

              memory/4888-1138-0x00007FFB1D5F0000-0x00007FFB1D626000-memory.dmp
              Download

              memory/4888-1132-0x00007FFB1E5A0000-0x00007FFB1F724000-memory.dmp
              Download

              memory/4888-1131-0x00007FFB1E2C0000-0x00007FFB1E593000-memory.dmp
              Download

              memory/4888-1133-0x00007FFB2A860000-0x00007FFB2A89C000-memory.dmp
              Download

              memory/4888-1134-0x00007FFB1E1E0000-0x00007FFB1E2B5000-memory.dmp
              Download

              memory/4888-1136-0x00007FFB1D750000-0x00007FFB1D89E000-memory.dmp
              Download

              memory/4888-1137-0x00007FFB1D630000-0x00007FFB1D749000-memory.dmp
              Download