home

IskuMonitor.EXE

ROCCAT Isku Keyboard

Roccat GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RoccatIsku’.
Publisher:
Roccat GmbH  (signed and verified)

Product:
ROCCAT Isku Keyboard

Description:
Isku Monitor Application

Version:
1, 0, 0, 1

MD5:
f1e229acade561faced98b423381cedb

SHA-1:
1ffc2acc3044bc28efd815c9eb0120e08a5dc3d4

SHA-256:
f9e45a7cbb411433970cdd9956578c0a616f1eb80b87bdce6dec079e71b3054d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:05:03 AM UTC  (today)

File size:
527 KB (539,688 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2010

Original file name:
IskuMonitor.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\roccat\isku keyboard\iskumonitor.exe

Digital Signature
Signed by:
Roccat GmbH

Authority:
VeriSign, Inc.

Valid from:
6/18/2008 2:00:00 AM

Valid to:
6/19/2011 1:59:59 AM

Subject:
CN=Roccat GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Roccat GmbH, L=Hamburg, S=Hamburg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
786EFBDD2ACFC4697E9F9AFE576D9799

File PE Metadata
Compilation timestamp:
5/11/2011 12:24:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:Y0GXxm9OAjs1iawDLfTcEPdvcc1xMaOqT1iLZ1:Y0G2OtwXBu

Entry address:
0xCB62

Entry point:
55, 8B, EC, 6A, FF, 68, 50, 1D, 42, 00, 68, 8C, 13, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 9C, 01, 42, 00, 33, D2, 8A, D4, 89, 15, C4, CE, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, C0, CE, 42, 00, C1, E1, 08, 03, CA, 89, 0D, BC, CE, 42, 00, C1, E8, 10, A3, B8, CE, 42, 00, 6A, 01, E8, B1, 34, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 7A, 23, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
124 KB (126,976 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RoccatIsku

Command:
"C:\Program Files\roccat\isku keyboard\iskumonitor.exe"


Scan IskuMonitor.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.