Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Resource
win10v2004-20230220-en
Target
rustdesk-1.1.9-host=ub.51share.fun,key=k6nq80SKxn7e9+elnMnttz6RSKyrizTJBElCfmh8t2c=.exe
Size
12.3MB
MD5
05faf8732ecbfe6dac79f748649948e7
SHA1
879d21ec37a6db70405c3de16a4d65449dba8bbb
SHA256
bc191c0f4732ab1dc3df89acbeb756e4fbd2ab821344da9214aa50eb5c4e34c5
SHA512
b6d140d7832df69b35c183845ba326ff629302df2458c5f73ed63e6db6236e761a40cecbf6a80718a7b3b4562879896daaedc548706c8c45425c3070f9bbd71b
SSDEEP
196608:DGhT/DrkkaMt+YMQ+R272Fd/Lh7lYjm4QyhfSwrqNz:DGphfMQOd/Ym4QyhfnrqNz
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Zhou Huabing,O=Zhou Huabing,ST=Central Singapore,C=SG
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
GetFullPathNameW
FindNextFileW
CreateDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
DuplicateHandle
CreateThread
ReadFileEx
SleepEx
WriteFileEx
WaitForMultipleObjects
CreateEventW
CancelIo
ExitProcess
QueryPerformanceFrequency
FindFirstFileW
DeleteFileW
MoveFileExW
RemoveDirectoryW
CreateSymbolicLinkW
SetHandleInformation
GetComputerNameExW
VerSetConditionMask
ProcessIdToSessionId
OpenProcess
VerifyVersionInfoW
WTSGetActiveConsoleSessionId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
LoadLibraryExW
WideCharToMultiByte
GetSystemTime
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
ResetEvent
CreateSemaphoreW
ResumeThread
TlsFree
GetComputerNameW
CompareStringW
GetNumberFormatW
GetCurrencyFormatW
GetSystemDefaultLCID
GetUserDefaultLCID
OutputDebugStringW
MulDiv
GetTempPathA
GetTempFileNameA
AllocConsole
GetModuleFileNameA
LoadLibraryExA
DebugBreak
FormatMessageA
SetErrorMode
GetQueuedCompletionStatus
GetFileType
RegisterWaitForSingleObject
UnregisterWait
SetNamedPipeHandleState
PeekNamedPipe
GetNamedPipeHandleStateW
QueueUserWorkItem
GetFileSize
SetEndOfFile
SetFilePointer
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
GetCPInfo
FreeLibrary
LocalSize
CreateFileA
GetNumberOfConsoleInputEvents
GetFileInformationByHandle
ReadConsoleW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
WriteConsoleInputW
UnregisterWaitEx
LCMapStringW
CopyFileW
CreateHardLinkW
GetLongPathNameW
GetShortPathNameW
ReadDirectoryChangesW
DecodePointer
RaiseException
InitializeCriticalSectionEx
GetLogicalDriveStringsW
GetVolumeInformationW
GetStartupInfoW
LoadLibraryW
lstrcmpW
SetThreadPriority
GetThreadPriority
GetTickCount
GetVersionExW
GetFileTime
WakeConditionVariable
SleepConditionVariableCS
InitializeConditionVariable
WakeAllConditionVariable
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFileSizeEx
EnumSystemLocalesW
IsValidLocale
GetCommandLineA
GetConsoleOutputCP
SetFileAttributesW
GetFileAttributesExW
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetStringTypeW
LCMapStringEx
EncodePointer
SleepConditionVariableSRW
InitializeSRWLock
GetNativeSystemInfo
GetExitCodeThread
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DeviceIoControl
GetModuleFileNameW
GetCommandLineW
GetTempPathW
SetEnvironmentVariableW
GetEnvironmentVariableW
RtlCaptureContext
CreateMutexA
LoadLibraryA
ReleaseMutex
WaitForSingleObjectEx
GetCurrentProcess
GetCurrentDirectoryW
WriteConsoleW
TlsAlloc
GetCurrentThread
GetProcAddress
GetModuleHandleA
CreateNamedPipeW
SetFileCompletionNotificationModes
CreateIoCompletionPort
CancelIoEx
WriteFile
PostQueuedCompletionStatus
GetOverlappedResult
ReadFile
TryAcquireSRWLockExclusive
GetFinalPathNameByHandleW
SetLastError
GetQueuedCompletionStatusEx
SetConsoleCtrlHandler
CreateSemaphoreA
TerminateProcess
GetUserDefaultLocaleName
GetModuleHandleW
GetCurrentThreadId
GlobalFree
GlobalAlloc
MultiByteToWideChar
WaitForSingleObject
GlobalUnlock
GlobalSize
GetSystemInfo
GlobalLock
GetLogicalProcessorInformation
FlushFileBuffers
LocalAlloc
ConnectNamedPipe
GetExitCodeProcess
LocalFree
SetFileTime
GetLogicalDrives
FindClose
ReleaseSRWLockShared
GetTimeZoneInformation
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FormatMessageW
lstrlenW
ReleaseSemaphore
QueryPerformanceCounter
WaitForMultipleObjectsEx
SetEvent
CreateEventA
TlsSetValue
TlsGetValue
SetFilePointerEx
GetFileInformationByHandleEx
GetStdHandle
HeapReAlloc
SetThreadStackGuarantee
AddVectoredExceptionHandler
Sleep
GetLastError
SetConsoleMode
GetConsoleMode
CreateFileW
GetSystemTimeAsFileTime
GetCurrentProcessId
CloseHandle
SwitchToThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
AcquireSRWLockShared
HeapAlloc
GetProcessHeap
ReadConsoleInputW
HeapFree
HeapSize
SendSAS
WTSQuerySessionInformationW
WTSEnumerateSessionsA
WTSFreeMemory
AcquireCredentialsHandleA
DecryptMessage
QueryContextAttributesW
InitializeSecurityContextW
AcceptSecurityContext
ApplyControlToken
EncryptMessage
FreeCredentialsHandle
DeleteSecurityContext
FreeContextBuffer
PropVariantClear
RegisterDragDrop
RevokeDragDrop
DoDragDrop
ReleaseStgMedium
CoInitializeEx
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
OleSetClipboard
OleGetClipboard
OleIsCurrentClipboard
CoUninitialize
CoTaskMemFree
CoCreateInstance
OleInitialize
CoCreateGuid
CreateStreamOnHGlobal
OleUninitialize
EnumClipboardFormats
MapVirtualKeyW
SetWinEventHook
UpdateLayeredWindow
GetQueueStatus
MsgWaitForMultipleObjects
DispatchMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
CountClipboardFormats
SetClipboardViewer
ChangeClipboardChain
RegisterClipboardFormatA
GetClipboardFormatNameA
InvalidateRect
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetCapture
IsWindowUnicode
GetDesktopWindow
RegisterClipboardFormatW
GetClipboardSequenceNumber
FindWindowW
SetCaretPos
DestroyCaret
CreateCaret
MessageBoxW
SetActiveWindow
LoadStringW
GetClipboardOwner
CreateIconIndirect
SendInput
GetForegroundWindow
GetWindowThreadProcessId
GetKeyboardLayout
MapVirtualKeyExW
VkKeyScanExW
GetFocus
GetActiveWindow
SetFocus
CallMsgFilterW
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowPlacement
MoveWindow
FlashWindowEx
DestroyWindow
IsChild
IsWindow
PostQuitMessage
EndPaint
RegisterWindowMessageW
MessageBoxA
UpdateWindow
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
DestroyCursor
LoadCursorFromFileA
LoadCursorW
GetSysColor
UnhookWindowsHookEx
GetAsyncKeyState
PostMessageA
SendMessageA
PeekMessageA
GetUserObjectInformationA
GetThreadDesktop
CloseDesktop
SetThreadDesktop
OpenInputDesktop
RegisterClassExW
MapVirtualKeyA
EnumDisplaySettingsExW
GetKeyState
LockWorkStation
GetCursorPos
GetCursorInfo
EnumDisplayDevicesW
CallNextHookEx
ToUnicodeEx
GetSystemMetrics
BlockInput
MsgWaitForMultipleObjectsEx
GetUpdateRect
PostThreadMessageW
PeekMessageW
ValidateRect
GetRawInputData
TrackPopupMenu
SetForegroundWindow
DefWindowProcW
PostMessageW
RegisterWindowMessageA
DestroyMenu
AppendMenuW
CreatePopupMenu
SendMessageW
InvalidateRgn
SetWindowPos
AdjustWindowRectEx
GetMenu
GetWindowLongW
RedrawWindow
RegisterClassW
CopyIcon
DestroyIcon
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
RegisterRawInputDevices
SetWindowLongW
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
SetWindowTextW
GetMessageA
SetWindowsHookExA
SetClipboardData
EmptyClipboard
BeginPaint
IsWindowEnabled
AnimateWindow
MessageBeep
GetDoubleClickTime
NotifyWinEvent
MonitorFromPoint
GetScrollInfo
SetScrollInfo
LoadIconW
SetWindowsHookExW
GetWindow
EnumThreadWindows
GetParent
SetClassLongW
GetClassLongW
IsRectEmpty
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
SetCursor
GetWindowRect
GetClientRect
GetMessageTime
GetIconInfo
GetDC
ReleaseDC
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
GetWindowTextW
EnumDisplayMonitors
EnableWindow
DrawIconEx
GetOpenFileNameW
PrintDlgW
GetSaveFileNameW
CommDlgExtendedError
InternetOpenA
InternetCloseHandle
InternetErrorDlg
HttpQueryInfoW
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionW
InternetQueryOptionW
InternetReadFile
InternetConnectA
BCryptGenRandom
RtlNtStatusToDosError
NtDeviceIoControlFile
NtCancelIoFileEx
NtCreateFile
OpenServiceW
CryptGenRandom
CryptReleaseContext
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
FreeSid
SetSecurityDescriptorDacl
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetUserNameW
OpenSCManagerW
CryptAcquireContextW
CloseServiceHandle
SystemFunction036
CreateProcessAsUserW
OpenProcessToken
ImageList_Destroy
ImageList_GetIconSize
ord410
ord412
ord413
ImageList_DrawEx
CertCloseStore
CertDuplicateCertificateContext
CertOpenStore
CertAddCertificateContextToStore
CertDuplicateStore
CertEnumCertificatesInStore
CertGetCertificateChain
CertDuplicateCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateContext
D3D11CreateDevice
CreateDXGIFactory1
DeleteDC
BitBlt
GetDIBits
DeleteObject
GetObjectA
GetBitmapBits
CreateCompatibleDC
CreateDCW
CreateCompatibleBitmap
GetDeviceCaps
AddFontMemResourceEx
GetObjectW
SetMapMode
StartDocW
EndDoc
StartPage
EndPage
CreateSolidBrush
GetStockObject
SetLayout
CreateDIBSection
CreateBitmap
GetGlyphIndicesW
CreateFontW
EnumFontFamiliesExW
GetFontUnicodeRanges
StretchDIBits
GetClipBox
RestoreDC
SaveDC
SetViewportOrgEx
SelectObject
ImmGetContext
ImmReleaseContext
ImmAssociateContextEx
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCandidateWindow
ImmIsIME
GetAdaptersAddresses
SysAllocStringLen
SysFreeString
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreateVector
ShellExecuteExW
SHAddToRecentDocs
CommandLineToArgvW
SHGetKnownFolderPath
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ord727
ord74
DragQueryFileW
ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW
PathIsRelativeW
CloseThemeData
DrawThemeBackground
SetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
OpenThemeData
ord203
WSARecvFrom
WSARecv
htons
WSASend
send
recv
WSAStartup
freeaddrinfo
getaddrinfo
WSAIoctl
recvfrom
sendto
accept
listen
ioctlsocket
getsockopt
shutdown
connect
select
WSACleanup
WSASocketW
WSASetLastError
getsockname
WSAGetLastError
getpeername
bind
closesocket
setsockopt
socket
CreateEnvironmentBlock
DestroyEnvironmentBlock
GdipSetPenDashArray
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateFromHDC
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipDeleteGraphics
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipResetWorldTransform
GdipMultiplyWorldTransform
GdipTranslateWorldTransform
GdipGetWorldTransform
GdipSetPathGradientPresetBlend
GdipTransformPoints
GdipDrawLine
GdipDrawArc
GdipDrawRectangle
GdipDrawEllipse
GdipDrawPie
GdipDrawPath
GdipGraphicsClear
GdipFillRectangle
GdipFillRectangleI
GdipFillRectanglesI
GdipFillEllipse
GdipFillPie
GdipFillPath
GdipDrawImageRectRect
GdipSetClipRect
GdipSetClipRectI
GdipSetPenDashStyle
GdipSetPenStartCap
GdipRestoreGraphics
GdipBeginContainer2
GdipEndContainer
GdiplusStartup
GdiplusShutdown
GdipDeleteFontFamily
GdipGetEmHeight
GdipGetCellAscent
GdipGetLineSpacing
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetFamily
GdipGetFontSize
GdipCreateBitmapFromGraphics
GdipCreateHBITMAPFromBitmap
GdipDrawImageI
GdipDrawDriverString
GdipDeletePen
GdipSetPathGradientCenterPoint
GdipCreatePathGradientFromPath
GdipMultiplyLineTransform
GdipSetLineWrapMode
GdipSetLinePresetBlend
GdipCreateLineBrush
GdipCreateSolidFill
GdipCreateTexture
GdipDeleteBrush
GdipCloneBrush
GdipGetMatrixElements
GdipShearMatrix
GdipRotateMatrix
GdipScaleMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix2
GdipCreateMatrix
GdipIsVisiblePathPoint
GdipGetPathWorldBounds
GdipAddPathRectangleI
GdipAddPathArcI
GdipAddPathLineI
GdipAddPathEllipse
GdipSetPenDashOffset
GdipSetPenLineJoin
GdipSetPenMiterLimit
GdipGetClipBoundsI
GdipAlloc
GdipFree
GdipCreatePen2
GdipCreatePen1
GdipSetPathGradientTransform
GdipSetPenEndCap
GdipSaveGraphics
GdipCreatePath
GdipClonePath
GdipDeletePath
GdipResetPath
GdipSetPathFillMode
GdipStartPathFigure
GdipClosePathFigure
GdipAddPathLine
GdipAddPathArc
GdipAddPathBezier
GdipSetPathGradientWrapMode
GdipSetPageUnit
timeBeginPeriod
timeGetTime
timeKillEvent
timeSetEvent
timeEndPeriod
AccessibleObjectFromWindow
LresultFromObject
ScriptFreeCache
ScriptItemize
ScriptShape
ScriptPlace
ScriptBreak
ScriptApplyDigitSubstitution
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ