CmdID / Files

ScreenCapture.dll

ScreenCapture Module file version info

Library on Windows 1 known copy with hashes

Is it the real ScreenCapture.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Cisco Systems\Cisco Jabber\

Signed byCisco Systems Inc.

ProductScreenCapture Module

DescriptionScreenCapture Module

1 known copy

710, 2011, 5, 18 · C:\Program Files (x86)\Cisco Systems\Cisco Jabber\ScreenCapture.dll · signed by Cisco Systems Inc.

74375cddb9c8feffed034953dabeeb47ccc4c4243e560b8fdd6d279515d3c2d5

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.