Suspicious
Suspect
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
9780dda0d2688d9e155aa9f22f5d3a34
Sha1
db96ad7d2610b622404e972603d309a753261513
Sha256
0d8c786fe82440d3de583ef72197dc2354c7c399ccc9e449f48d96d78a1a5210
Sha384
2975edbd4d8be0d45074c4657a7a22bb4e3ec75326944912370a916ed0d2bc52b47c082a24af9d083e3ad9e1e3817efc
Sha512
9e0f6b9a9fa551539f3a3d38894722ba45aafe29f2b833bf62b29e5bc937ddd47209ebe1103f044f406f640eaab214883f9663ea13c8c4ce329e24bd3a0cd984
SSDeep
49152:ujET0+TL3Z0Mi963PSuArmh69eWbVypVCTgGu/aYmn1gBG:Mb16Co69eWb0pnGpYmnf
TLSH
9BE5EF01B3E4413AD5FF0634DDBA66219B75BC291364C7AF578879692E737C08A323A3

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
File Structure
[Authenticode]_13070a99.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
FILES
ID:0000
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1036
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Root Entry
䡀䆒䑲
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䕎䒵䠵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䈛䌪䗶䜵
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ScreenConnect.Properties.CommandSendWindowSystemCommandClose.png
ScreenConnect.Properties.CommandSendWindowSystemCommandClose.png-preview.png
ScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png
ScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png-preview.png
ScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png
ScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png-preview.png
ScreenConnect.Properties.CommandUndockControlPanel.png
ScreenConnect.Properties.CommandUndockControlPanel.png-preview.png
ScreenConnect.Properties.CommandDockControlPanel.png
ScreenConnect.Properties.CommandDockControlPanel.png-preview.png
ScreenConnect.Properties.ControlPanelView.png
ScreenConnect.Properties.ControlPanelView.png-preview.png
ScreenConnect.Properties.ControlPanelStatus.png
ScreenConnect.Properties.ControlPanelStatus.png-preview.png
ScreenConnect.Properties.ControlPanelToolbox.png
ScreenConnect.Properties.ControlPanelToolbox.png-preview.png
ScreenConnect.Properties.ControlPanelFileTransfer.png
ScreenConnect.Properties.ControlPanelFileTransfer.png-preview.png
ScreenConnect.Properties.ControlPanelScreenCapture.png
ScreenConnect.Properties.ControlPanelScreenCapture.png-preview.png
ScreenConnect.Properties.ControlPanelParticipants.png
ScreenConnect.Properties.ControlPanelParticipants.png-preview.png
ScreenConnect.Properties.ControlPanelMessages.png
ScreenConnect.Properties.ControlPanelMessages.png-preview.png
ScreenConnect.Properties.ControlPanelMiscellaneous.png
ScreenConnect.Properties.ControlPanelMiscellaneous.png-preview.png
ScreenConnect.Properties.CommandOpenFolder.png
ScreenConnect.Properties.CommandOpenFolder.png-preview.png
ScreenConnect.Properties.CommandSelectQualityMedium.png
ScreenConnect.Properties.CommandSelectQualityMedium.png-preview.png
ScreenConnect.Properties.CommandBlankGuestMonitorTrue.png
ScreenConnect.Properties.CommandBlankGuestMonitorTrue.png-preview.png
ScreenConnect.Properties.CommandBlankGuestMonitorFalse.png
ScreenConnect.Properties.CommandBlankGuestMonitorFalse.png-preview.png
ScreenConnect.Properties.CommandSendMessage.png
ScreenConnect.Properties.CommandSendMessage.png-preview.png
ScreenConnect.Properties.CommandTakeScreenshotToFile.png
ScreenConnect.Properties.CommandTakeScreenshotToFile.png-preview.png
ScreenConnect.Properties.CommandTakeScreenshotToClipboard.png
ScreenConnect.Properties.CommandTakeScreenshotToClipboard.png-preview.png
ScreenConnect.Properties.CommandVideoRecord.png
ScreenConnect.Properties.CommandVideoRecord.png-preview.png
ScreenConnect.Properties.CommandVideoPause.png
ScreenConnect.Properties.CommandVideoPause.png-preview.png
ScreenConnect.Properties.CommandSelectQualityLow.png
ScreenConnect.Properties.CommandSelectQualityLow.png-preview.png
ScreenConnect.Properties.CommandChangeFolder.png
ScreenConnect.Properties.CommandChangeFolder.png-preview.png
ScreenConnect.Properties.CommandSendSystemKeyCode.png
ScreenConnect.Properties.CommandSendSystemKeyCode.png-preview.png
ScreenConnect.Properties.CommandRebootToSafeMode.png
ScreenConnect.Properties.CommandRebootToSafeMode.png-preview.png
ScreenConnect.Properties.CommandRebootToNormalMode.png
ScreenConnect.Properties.CommandRebootToNormalMode.png-preview.png
ScreenConnect.Properties.CommandSuspendMyInputTrue.png
ScreenConnect.Properties.CommandSuspendMyInputTrue.png-preview.png
ScreenConnect.Properties.CommandSuspendMyInputFalse.png
ScreenConnect.Properties.CommandSuspendMyInputFalse.png-preview.png
ScreenConnect.Properties.CommandAcquireWakeLockTrue.png
ScreenConnect.Properties.CommandAcquireWakeLockTrue.png-preview.png
ScreenConnect.Properties.CommandSelectQualityHigh.png
ScreenConnect.Properties.CommandSelectQualityHigh.png-preview.png
ScreenConnect.Properties.CommandVideoStop.png
ScreenConnect.Properties.CommandVideoStop.png-preview.png
ScreenConnect.Properties.CommandManageSharedToolbox.png
ScreenConnect.Properties.CommandManageSharedToolbox.png-preview.png
ScreenConnect.Properties.CommandSendFiles.png
ScreenConnect.Properties.CommandSendFiles.png-preview.png
ScreenConnect.Properties.CommandReceiveFiles.png
ScreenConnect.Properties.CommandReceiveFiles.png-preview.png
ScreenConnect.Properties.CommandReceiveFolder.png
ScreenConnect.Properties.CommandReceiveFolder.png-preview.png
ScreenConnect.Properties.CommandSendFolder.png
ScreenConnect.Properties.CommandSendFolder.png-preview.png
ScreenConnect.Properties.ShareMask.png
ScreenConnect.Properties.ShareMask.png-preview.png
ScreenConnect.Properties.ShareGlyph.png
ScreenConnect.Properties.ShareGlyph.png-preview.png
ScreenConnect.Properties.DropDownGlyph.png
ScreenConnect.Properties.DropDownGlyph.png-preview.png
ScreenConnect.Properties.CommandShareMyDesktop.png
ScreenConnect.Properties.CommandShareMyDesktop.png-preview.png
ScreenConnect.Properties.ParticipantRequesting.png
ScreenConnect.Properties.ParticipantRequesting.png-preview.png
ScreenConnect.Properties.CommandDisconnectParticipant.png
ScreenConnect.Properties.CommandDisconnectParticipant.png-preview.png
ScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png
ScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png-preview.png
ScreenConnect.Properties.ControlPanelShare.png
ScreenConnect.Properties.ControlPanelShare.png-preview.png
ScreenConnect.Properties.ParticipantSendingInput.png
ScreenConnect.Properties.ParticipantSendingInput.png-preview.png
ScreenConnect.Properties.ParticipantGuest.png
ScreenConnect.Properties.ParticipantGuest.png-preview.png
ScreenConnect.Properties.ParticipantHost.png
ScreenConnect.Properties.ParticipantHost.png-preview.png
ScreenConnect.Properties.CommandManageCredentialsSendToScreen.png
ScreenConnect.Properties.CommandManageCredentialsSendToScreen.png-preview.png
ScreenConnect.Properties.ControlPanelSound.png
ScreenConnect.Properties.ControlPanelSound.png-preview.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png-preview.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png-preview.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png-preview.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png-preview.png
ScreenConnect.Properties.ParticipantMicrophoneSending.png
ScreenConnect.Properties.ParticipantMicrophoneSending.png-preview.png
ScreenConnect.Properties.ParticipantSpeakers.png
ScreenConnect.Properties.ParticipantSpeakers.png-preview.png
ScreenConnect.Properties.ParticipantSpeakersSending.png
ScreenConnect.Properties.ParticipantSpeakersSending.png-preview.png
ScreenConnect.Properties.CommandRegenerateParticipantColor.png
ScreenConnect.Properties.CommandRegenerateParticipantColor.png-preview.png
ScreenConnect.Properties.ControlPanelAnnotation.png
ScreenConnect.Properties.ControlPanelAnnotation.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png-preview.png
ScreenConnect.Properties.ParticipantAnnotating.png
ScreenConnect.Properties.ParticipantAnnotating.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png
ScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png
ScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png
ScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png
ScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png
ScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationToolLine.png
ScreenConnect.Properties.CommandSelectAnnotationToolLine.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png
ScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png-preview.png
ScreenConnect.Properties.ControlPanelHelper.png
ScreenConnect.Properties.ControlPanelHelper.png-preview.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png-preview.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png-preview.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png-preview.png
ScreenConnect.Properties.CommandSendClipboardKeystrokes.png
ScreenConnect.Properties.CommandSendClipboardKeystrokes.png-preview.png
ScreenConnect.Properties.NotificationOptionsIcon.png
ScreenConnect.Properties.NotificationOptionsIcon.png-preview.png
ScreenConnect.Properties.StatusGlyphGuestNotConnected.png
ScreenConnect.Properties.StatusGlyphGuestNotConnected.png-preview.png
ScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png
ScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png-preview.png
ScreenConnect.Properties.StatusGlyphBlankMonitor.png
ScreenConnect.Properties.StatusGlyphBlankMonitor.png-preview.png
ScreenConnect.Properties.StatusGlyphMask.png
ScreenConnect.Properties.StatusGlyphMask.png-preview.png
ScreenConnect.Properties.FeedbackBannerLogo.png
ScreenConnect.Properties.FeedbackBannerLogo.png-preview.png
ScreenConnect.Properties.Lasso.cur
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
[Authenticode]_5d6205b9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ScreenConnect.WindowsClient.exe.config
ServiceExeWithoutService
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
䡀䈛㵪䆲䗤䕲
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀䓊㼳䄨䆵䠫
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䕌䄨䈷䒏䇯䕨
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䆒䑲㭾䉨䘤䗯䆒䑲
䡀䈜䘦䈵䅘䈭䗦䠶
䡀䈜䙵䆬㬨䑲䌩䠪
䡀䈜䙵䆬㬨䑲䕷䏲
䡀䈜䙵䆬㲨䖱䄷䏯
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
Overlay_7d669e13.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
CustomAction.config
SummaryInformation
[Authenticode]_319e55aa.p7b
RT_MANIFEST
ID:0001
ID:1033
ScreenConnect.ClientService.dll
ScreenConnect.Core.dll
ScreenConnect.Windows.dll
ScreenConnect.WindowsClient.exe
ScreenConnect.WindowsClient.exe.config
ServiceExeWithoutService
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Deployment.WindowsInstaller.Errors.resources
CustomAction.config
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x2F2000 size 128280 bytes

Info

PDB Path: C:\Users\jmorgan\Source\ScreenConnectWork\Custom\DotNetRunner\Release\DotNetRunner.pdb

Artefacts
Name
Value
PE Layout

MemoryMapped (process dump suspected)

PE Layout

MemoryMapped (process dump suspected)

9780dda0d2688d9e155aa9f22f5d3a34 (3.22 MB)
File Structure
[Authenticode]_13070a99.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
FILES
ID:0000
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1036
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Root Entry
䡀䆒䑲
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䕎䒵䠵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䈛䌪䗶䜵
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ScreenConnect.Properties.CommandSendWindowSystemCommandClose.png
ScreenConnect.Properties.CommandSendWindowSystemCommandClose.png-preview.png
ScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png
ScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png-preview.png
ScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png
ScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png-preview.png
ScreenConnect.Properties.CommandUndockControlPanel.png
ScreenConnect.Properties.CommandUndockControlPanel.png-preview.png
ScreenConnect.Properties.CommandDockControlPanel.png
ScreenConnect.Properties.CommandDockControlPanel.png-preview.png
ScreenConnect.Properties.ControlPanelView.png
ScreenConnect.Properties.ControlPanelView.png-preview.png
ScreenConnect.Properties.ControlPanelStatus.png
ScreenConnect.Properties.ControlPanelStatus.png-preview.png
ScreenConnect.Properties.ControlPanelToolbox.png
ScreenConnect.Properties.ControlPanelToolbox.png-preview.png
ScreenConnect.Properties.ControlPanelFileTransfer.png
ScreenConnect.Properties.ControlPanelFileTransfer.png-preview.png
ScreenConnect.Properties.ControlPanelScreenCapture.png
ScreenConnect.Properties.ControlPanelScreenCapture.png-preview.png
ScreenConnect.Properties.ControlPanelParticipants.png
ScreenConnect.Properties.ControlPanelParticipants.png-preview.png
ScreenConnect.Properties.ControlPanelMessages.png
ScreenConnect.Properties.ControlPanelMessages.png-preview.png
ScreenConnect.Properties.ControlPanelMiscellaneous.png
ScreenConnect.Properties.ControlPanelMiscellaneous.png-preview.png
ScreenConnect.Properties.CommandOpenFolder.png
ScreenConnect.Properties.CommandOpenFolder.png-preview.png
ScreenConnect.Properties.CommandSelectQualityMedium.png
ScreenConnect.Properties.CommandSelectQualityMedium.png-preview.png
ScreenConnect.Properties.CommandBlankGuestMonitorTrue.png
ScreenConnect.Properties.CommandBlankGuestMonitorTrue.png-preview.png
ScreenConnect.Properties.CommandBlankGuestMonitorFalse.png
ScreenConnect.Properties.CommandBlankGuestMonitorFalse.png-preview.png
ScreenConnect.Properties.CommandSendMessage.png
ScreenConnect.Properties.CommandSendMessage.png-preview.png
ScreenConnect.Properties.CommandTakeScreenshotToFile.png
ScreenConnect.Properties.CommandTakeScreenshotToFile.png-preview.png
ScreenConnect.Properties.CommandTakeScreenshotToClipboard.png
ScreenConnect.Properties.CommandTakeScreenshotToClipboard.png-preview.png
ScreenConnect.Properties.CommandVideoRecord.png
ScreenConnect.Properties.CommandVideoRecord.png-preview.png
ScreenConnect.Properties.CommandVideoPause.png
ScreenConnect.Properties.CommandVideoPause.png-preview.png
ScreenConnect.Properties.CommandSelectQualityLow.png
ScreenConnect.Properties.CommandSelectQualityLow.png-preview.png
ScreenConnect.Properties.CommandChangeFolder.png
ScreenConnect.Properties.CommandChangeFolder.png-preview.png
ScreenConnect.Properties.CommandSendSystemKeyCode.png
ScreenConnect.Properties.CommandSendSystemKeyCode.png-preview.png
ScreenConnect.Properties.CommandRebootToSafeMode.png
ScreenConnect.Properties.CommandRebootToSafeMode.png-preview.png
ScreenConnect.Properties.CommandRebootToNormalMode.png
ScreenConnect.Properties.CommandRebootToNormalMode.png-preview.png
ScreenConnect.Properties.CommandSuspendMyInputTrue.png
ScreenConnect.Properties.CommandSuspendMyInputTrue.png-preview.png
ScreenConnect.Properties.CommandSuspendMyInputFalse.png
ScreenConnect.Properties.CommandSuspendMyInputFalse.png-preview.png
ScreenConnect.Properties.CommandAcquireWakeLockTrue.png
ScreenConnect.Properties.CommandAcquireWakeLockTrue.png-preview.png
ScreenConnect.Properties.CommandSelectQualityHigh.png
ScreenConnect.Properties.CommandSelectQualityHigh.png-preview.png
ScreenConnect.Properties.CommandVideoStop.png
ScreenConnect.Properties.CommandVideoStop.png-preview.png
ScreenConnect.Properties.CommandManageSharedToolbox.png
ScreenConnect.Properties.CommandManageSharedToolbox.png-preview.png
ScreenConnect.Properties.CommandSendFiles.png
ScreenConnect.Properties.CommandSendFiles.png-preview.png
ScreenConnect.Properties.CommandReceiveFiles.png
ScreenConnect.Properties.CommandReceiveFiles.png-preview.png
ScreenConnect.Properties.CommandReceiveFolder.png
ScreenConnect.Properties.CommandReceiveFolder.png-preview.png
ScreenConnect.Properties.CommandSendFolder.png
ScreenConnect.Properties.CommandSendFolder.png-preview.png
ScreenConnect.Properties.ShareMask.png
ScreenConnect.Properties.ShareMask.png-preview.png
ScreenConnect.Properties.ShareGlyph.png
ScreenConnect.Properties.ShareGlyph.png-preview.png
ScreenConnect.Properties.DropDownGlyph.png
ScreenConnect.Properties.DropDownGlyph.png-preview.png
ScreenConnect.Properties.CommandShareMyDesktop.png
ScreenConnect.Properties.CommandShareMyDesktop.png-preview.png
ScreenConnect.Properties.ParticipantRequesting.png
ScreenConnect.Properties.ParticipantRequesting.png-preview.png
ScreenConnect.Properties.CommandDisconnectParticipant.png
ScreenConnect.Properties.CommandDisconnectParticipant.png-preview.png
ScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png
ScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png-preview.png
ScreenConnect.Properties.ControlPanelShare.png
ScreenConnect.Properties.ControlPanelShare.png-preview.png
ScreenConnect.Properties.ParticipantSendingInput.png
ScreenConnect.Properties.ParticipantSendingInput.png-preview.png
ScreenConnect.Properties.ParticipantGuest.png
ScreenConnect.Properties.ParticipantGuest.png-preview.png
ScreenConnect.Properties.ParticipantHost.png
ScreenConnect.Properties.ParticipantHost.png-preview.png
ScreenConnect.Properties.CommandManageCredentialsSendToScreen.png
ScreenConnect.Properties.CommandManageCredentialsSendToScreen.png-preview.png
ScreenConnect.Properties.ControlPanelSound.png
ScreenConnect.Properties.ControlPanelSound.png-preview.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png-preview.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png-preview.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png-preview.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png
ScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png-preview.png
ScreenConnect.Properties.ParticipantMicrophoneSending.png
ScreenConnect.Properties.ParticipantMicrophoneSending.png-preview.png
ScreenConnect.Properties.ParticipantSpeakers.png
ScreenConnect.Properties.ParticipantSpeakers.png-preview.png
ScreenConnect.Properties.ParticipantSpeakersSending.png
ScreenConnect.Properties.ParticipantSpeakersSending.png-preview.png
ScreenConnect.Properties.CommandRegenerateParticipantColor.png
ScreenConnect.Properties.CommandRegenerateParticipantColor.png-preview.png
ScreenConnect.Properties.ControlPanelAnnotation.png
ScreenConnect.Properties.ControlPanelAnnotation.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png
ScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png-preview.png
ScreenConnect.Properties.ParticipantAnnotating.png
ScreenConnect.Properties.ParticipantAnnotating.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png
ScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png
ScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png
ScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png
ScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png
ScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationToolLine.png
ScreenConnect.Properties.CommandSelectAnnotationToolLine.png-preview.png
ScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png
ScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png-preview.png
ScreenConnect.Properties.ControlPanelHelper.png
ScreenConnect.Properties.ControlPanelHelper.png-preview.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png-preview.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png-preview.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png
ScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png-preview.png
ScreenConnect.Properties.CommandSendClipboardKeystrokes.png
ScreenConnect.Properties.CommandSendClipboardKeystrokes.png-preview.png
ScreenConnect.Properties.NotificationOptionsIcon.png
ScreenConnect.Properties.NotificationOptionsIcon.png-preview.png
ScreenConnect.Properties.StatusGlyphGuestNotConnected.png
ScreenConnect.Properties.StatusGlyphGuestNotConnected.png-preview.png
ScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png
ScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png-preview.png
ScreenConnect.Properties.StatusGlyphBlankMonitor.png
ScreenConnect.Properties.StatusGlyphBlankMonitor.png-preview.png
ScreenConnect.Properties.StatusGlyphMask.png
ScreenConnect.Properties.StatusGlyphMask.png-preview.png
ScreenConnect.Properties.FeedbackBannerLogo.png
ScreenConnect.Properties.FeedbackBannerLogo.png-preview.png
ScreenConnect.Properties.Lasso.cur
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
[Authenticode]_5d6205b9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ScreenConnect.WindowsClient.exe.config
ServiceExeWithoutService
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
䡀䈛㵪䆲䗤䕲
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀䓊㼳䄨䆵䠫
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䕌䄨䈷䒏䇯䕨
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䆒䑲㭾䉨䘤䗯䆒䑲
䡀䈜䘦䈵䅘䈭䗦䠶
䡀䈜䙵䆬㬨䑲䌩䠪
䡀䈜䙵䆬㬨䑲䕷䏲
䡀䈜䙵䆬㲨䖱䄷䏯
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
Overlay_7d669e13.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
CustomAction.config
SummaryInformation
[Authenticode]_319e55aa.p7b
RT_MANIFEST
ID:0001
ID:1033
ScreenConnect.ClientService.dll
ScreenConnect.Core.dll
ScreenConnect.Windows.dll
ScreenConnect.WindowsClient.exe
ScreenConnect.WindowsClient.exe.config
ServiceExeWithoutService
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Deployment.WindowsInstaller.Errors.resources
CustomAction.config
Characteristics
No malware configuration were found at this point.
Artefacts
Name
Value Location
PE Layout

MemoryMapped (process dump suspected)

9780dda0d2688d9e155aa9f22f5d3a34 > ScreenConnect.Client.dll

PE Layout

MemoryMapped (process dump suspected)

9780dda0d2688d9e155aa9f22f5d3a34 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > Root Entry > 䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵 > ScreenConnect.Core.dll

You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙