REMOTO-DLL-Tecnico-v1[.]1[.]zip

resource
unpack001/desktop_drop_plugin.dll
unpack001/desktop_multi_window_plugin.dll
unpack001/file_selector_windows_plugin.dll
unpack001/flutter_custom_cursor_plugin.dll
unpack001/flutter_gpu_texture_renderer_plugin.dll
unpack001/flutter_windows.dll
unpack001/screen_retriever_plugin.dll
unpack001/texture_rgba_renderer_plugin.dll
unpack001/uni_links_desktop_plugin.dll
unpack001/url_launcher_windows_plugin.dll
unpack001/usbmmidd_v2\x64\usbmmIdd.dll
unpack001/window_manager_plugin.dll
unpack001/window_size_plugin.dll

resource
unpack001/REMOTO-DLL-TECNICO.exe
unpack001/librustdesk.dll

REMOTO-DLL-Tecnico-v1.1.zip

SHA256 761d1771841dc60204d4e76f0e448a55dbe91e4a3a673507e0bb84fb3cf25919
MD5 10db11125675945c0321e875d98d2213
SHA1 8bd86a29081240324569ce295085bddf05fb3455
SHA512 47d5434c82dcedb0fe18780e2cdada966f3a90ba8b2f51f93ab9c5c1712e6b7c3b4a0359c14542c4c66fbcc4ea064dc6b3ddfff58f5ceb93ceff9e3097a7e49b
SSDEEP 786432:oHZa3vvF7/QB5HuPZdaHz90HvGHmKK3JxUGAx07SqniOBmdlU:oE3vN7/45OPM90HvGG5ZmGSINBmdlU
TLSH
T1ED67334ABD344F169E83A9747217ED721BA00E16A8590702CD9CECE67CCACEDC5DAD0D
MD5 SHA1 SHA512 SSDEEP TLSH

REMOTO-DLL-TECNICO.exe

IMPHASH 5f33ba3199eb3a4d19939694bb74beec
SHA256 f2d88db941dc4a90b175c0ef3cf42476eb2c0b366a81338a26065c9b29c59281
MD5 e91ab4bd3623cae279dbe5fb627eea57
SHA1 b720c7acfeb3e98e18babf0454e33f5988f6c72f
SHA512 0d239847c70c8c7d4b07ba67c1eca7df307be9349f6d6c805d62b71ce1de2d67eb4e9f8b723557d8489f03d742093f8527f1354d06bc3ad62e4d80d5179625ac
SSDEEP 6144:k+cyl/IICwlBJuSaPwJ+dU6WcH9WaqThWm0EjW0Vq0TBNk7am8D:FCwlu++dWcH9qT0m0EjW0Vq087x8D
TLSH
T1CB849E1AFBA414F9E1678138CD664945EB727C5A0BA1D7CF23940B962F33AE04E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ee:69:57:42:20:4d:24:4c:af:93:f5:07:f7:5e:d3:c3:1d:fe:f0:5c:b9:75:49:e9:e0:aa:95:eb:c3:71:f2:fb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=DLL Tecnologia,O=DLL Tecnologia,L=Rio de Janeiro,ST=RJ,C=BR

Chains

May 22, 2026

CN=DLL Tecnologia,O=DLL Tecnologia,L=Rio de Janeiro,ST=RJ,C=BR

Subject

CN=DLL Tecnologia,O=DLL Tecnologia,L=Rio de Janeiro,ST=RJ,C=BR

Serial Number

5c:53:ab:96:e8:ec:ab:94:45:63:74:f4:c3:f5:9c:eb

Issuer

CN=DLL Tecnologia,O=DLL Tecnologia,L=Rio de Janeiro,ST=RJ,C=BR

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 21, 2026 - May 21, 2036

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

86140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

desktop_drop_plugin

DesktopDropPluginRegisterWithRegistrar

desktop_multi_window_plugin

DesktopMultiWindowSetWindowCreatedCallback DesktopMultiWindowPluginRegisterWithRegistrar

file_selector_windows_plugin

FileSelectorWindowsRegisterWithRegistrar

flutter_custom_cursor_plugin

FlutterCustomCursorPluginRegisterWithRegistrar

flutter_gpu_texture_renderer_plugin

FlutterGpuTextureRendererPluginCApiRegisterWithRegistrar

screen_retriever_plugin

ScreenRetrieverPluginRegisterWithRegistrar

texture_rgba_renderer_plugin

TextureRgbaRendererPluginCApiRegisterWithRegistrar

uni_links_desktop_plugin

UniLinksDesktopPluginRegisterWithRegistrar DispatchToUniLinksDesktop

url_launcher_windows_plugin

UrlLauncherWindowsRegisterWithRegistrar

window_manager_plugin

WindowManagerPluginRegisterWithRegistrar

window_size_plugin

WindowSizePluginRegisterWithRegistrar

flutter_windows

FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopViewControllerGetView FlutterDesktopMessengerIsAvailable FlutterDesktopViewControllerDestroy FlutterDesktopViewControllerCreate FlutterDesktopEngineGetMessenger FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineReloadSystemFonts FlutterDesktopMessengerLock FlutterDesktopEngineCreate FlutterDesktopGetDpiForMonitor FlutterDesktopResyncOutputStreams FlutterDesktopViewGetHWND FlutterDesktopMessengerUnlock FlutterDesktopEngineDestroy

kernel32

RtlUnwind WriteConsoleW SetEndOfFile HeapSize CreateFileW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetEnvironmentVariableW CloseHandle SetStdHandle GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc HeapFree WriteFile GetStdHandle GetModuleHandleExW ExitProcess DuplicateHandle LoadLibraryExW TlsFree IsDebuggerPresent GetProcAddress LoadLibraryA AttachConsole GetCommandLineW LocalFree WideCharToMultiByte AllocConsole GetFileAttributesW FreeLibrary GetModuleFileNameW GetModuleHandleW SetLastError GetLastError RaiseException RtlPcToFileHeader InitializeCriticalSectionAndSpinCount RtlUnwindEx InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetCPInfo GetStringTypeW LCMapStringEx MultiByteToWideChar DecodePointer EncodePointer TlsSetValue TlsGetValue TlsAlloc EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection

user32

CreateWindowExW MonitorFromPoint LoadImageW DestroyIcon LoadIconW LoadCursorW SetParent SetWindowLongPtrW GetWindowLongPtrW GetClientRect SetFocus SetWindowPos MoveWindow DestroyWindow ShowWindow UnregisterClassW RegisterClassW PostQuitMessage DefWindowProcW GetMonitorInfoW MonitorFromWindow MonitorFromRect GetCursorPos SetCursorPos FindWindowW SetForegroundWindow DispatchMessageW TranslateMessage GetMessageW

shell32

CommandLineToArgvW

ole32

CoCreateInstance CoInitializeEx CoUninitialize

Name

.text

Size

224KB

Virtual Size

224KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

95KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data\app.so

SHA256 620433ab7f4364b1ef4bd17ddac901f22aa3dd5939207f8dbafcdd5b1d85ce2f
MD5 b3319fd9dd796d7d8a5a8ac9188afdf7
SHA1 ed295edf127295ab2f50bae72105cb0dcf518a35
SHA512 648fff82912ec6db786ff0eda84219b92517f4a0bcc69601a8aa97557891a8a3d6e809709590a96fe593e4d68915f9edaa468e2de9b7bbc09d35e1143cdfe060
SSDEEP 393216:3oVyjwwaDfU8zxymnpIMpEiH4oqILCiZqZlj/A9wO:C8wvLH9y7MprH4onW0qZu+O
TLSH
T1ADD64B9FD4F143A1C065B6B1F79EABBA5A187DD84E70A18645EC4B723E93C6007CE132
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64

data\flutter_assets\AssetManifest.bin

SHA256 97bc7c35f33fe899cdf599bec785813ce491a86598bc4229afa63966c9d57eac
MD5 6a636dcc39f3088bda5ec1b222b838e5
SHA1 3d0b132bcf1866c941b39d7f46ef21fab38a4b9d
SHA512 b3000bdee28e60566c62a094eda6c599845e04d579d83a15825f34c90418a60cf0a93cc5bc6998b96164d775902c11658293c7462f4f3f41936362fa62306056
SSDEEP 96:H2S85d9jSVqM1Z24bfiKhwzNZnvjEkviyeyXU2:AuVqM1Z24bfiKhwzNZbEkviyeyXU2
TLSH
T10991782843B116CD6875B4B26CD265CA181A4F895D98F1EF233AC9197585C3A08FFCB4
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\AssetManifest.json

SHA256 c835c522a687509fd89ae501e46027a77d6dd603effeb14de69dcc28003c770c
MD5 321e160bd8e325f4272bdce8cbf8daba
SHA1 96af24c221a56f205236bf08a39665dcc839b3f5
SHA512 05d131680bcbc8623b3fed53f875986741fd2b189b06cdd07e324c0f814caf1adec5604509d20c12293d0a0fb53594da50f8c0bd49a2ae8ff2eee577dd3b4adc
TLSH
T11A717604412122D76C6FB8BA74A369CF0C9D43AA9959F28F333E8D347A45D42616ACFC
MD5 SHA1 SHA512 TLSH

data\flutter_assets\FontManifest.json

SHA256 068f1cc96816fab157a6813ce233731e46bf661ad84d0018381fb58b19396886
MD5 f4f31d18ca443c7bfb50340e84b860d5
SHA1 f97538077e02122cf0377211bba8a4ab0bbbe4f3
SHA512 3da40b86ad28f41e29b44112601a910e4d2def19a0da8de3c272fb59227b025f7d25e713a3f89d22069f5799bf68fa4ac5647e85a71344925d664a61ac3e6ffe
TLSH
T1DDF0540F052519F890DDC595B0E3649370542B47528DE81EE7751FA4ABF0B0027286F3
MD5 SHA1 SHA512 TLSH

data\flutter_assets\NOTICES.Z

SHA256 7bf7ace8e07acb3611dbdb894ecfd8c1338f459f269abd39e19212c92dc02cc4
MD5 b32695e7c61b5124896c7145309caf36
SHA1 382d6945428cda98cdafda7357a2ef80e79675ee
SHA512 7b88090aa97819a4863d0198eac6dbb2285dc110aee6c453351a56c9fb277849f9588fba8f3d962d7bbb8045a35e52975b37977d3fc39b1fd6d18485cf575bb9
SSDEEP 3072:QDLo5DcaNuHLLTcLGLAKPcoAp3u6K5fepDX:QA5DcaNMHqiAIk9KQl
TLSH
T1C8B30284CA698B349C36615B5C2FE20FA53393EF3E27A1F4CBB6EEE455411481A1BA50
MD5 SHA1 SHA512 SSDEEP TLSH

NOTICES.Z

SHA256 5ab7e2180ee3304e721807680ede701eda3b8c61bb603c9c16747a9fe00e5ebc
MD5 2d3f847b59c69166d4dcc56acca527d1
SHA1 bc6d90c1293ff3cb7b4df027ec5f2b61405f6e89
SHA512 1c6c5efbfb60f528aaffc599841466b2456ddb77ddc44e69e87efc0801e7740da37e808c1628bc55aae9f9e2b3f36af359b611b0816ec8cfe9dcc5f963f3cf42
SSDEEP 12288:4vOmkp9NNRmx67zoLdeOezou5zjPzRWvxNoHBsLF3e7ctmSxhYMA395eaWItrDiI:1
TLSH
T1FF95E75F3F1407B228D3C7A27A65A9C4F15EE02E7B236941382DE244276B92DD1FF5A0
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\assets\actions.svg

SHA256 ef6597b20e4578e8a6ddfe62f46a9681a8e4649b132f1f10f9fc5da15018a7c9
MD5 2a43efdc71e95b7db43c1fc5ae34ed87
SHA1 4f93c1bbd67a7ae8c9194a1ff28db0110eedb482
SHA512 307fa2137f0b777b28dc6b52369cbcb0666e30a5e591d6d551870ad1ec33bec1a9e8eb9b5cb7ccc3f1d151b3e0e9e1d029b79e2f9e6947e9d8cfbfe5c7d880e6
TLSH
T14CE02B4409EDA562C49BCB92D77528E4112221C7D67D05ADD9A716287149A47D814D88
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\actions_mobile.svg

SHA256 527c6a251e5053ace7e469d2b1080108448ade654a5641a3b8d4052df94a13cf
MD5 840555746fccec5610779500eec942be
SHA1 bbd33fb5f788bfe6685ba2a0539724af32c7086c
SHA512 10d20eab5a8607e7c8fb0093188ba0bd4803689231536b2a6d4e98ee58f6decfa30b32e3c713a869662a3d581636a976dc25bd4ca5de431d9d12b6ac197f5ba3
TLSH
T116019EF44F7CA81D405F9C37AE25C685622934B9314881E4918FBD3D6643E23E54745C
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\address_book.ttf

SHA256 c725b18176aa78151e013222a9fc9c439a9a9106d6c061e8f617162a80a8b4f7
MD5 612eb0515c3bca0ea7e661cb74c14fcc
SHA1 bfb43b086c2c06933495bdb5f9e6792c6338573c
SHA512 e5d3fdf6c9221e4f2203fe542e76a6be80d6d0033994adc12e0a5a843d55c98e923b0142c8e0fb00d83200920bdb5699922d74c2979862a9d686ecb1697e9195
TLSH
T12931D018C7B49E06E5A7433974BE47156F31E86065A1C38B10D8166E9CE2A944D28376
MD5 SHA1 SHA512 TLSH

data\flutter_assets\assets\android.svg

SHA256 3feb445086c26cc0db5153b5501bfa29d7824cb62f287f2217c51d728ce61522
MD5 2172ec92c0da8b72dfe31565d5cee45c
SHA1 e1f297cc70cd5ff606f0cd2bb64bfaa793a1c71b
SHA512 ded049fc27cb3f19004e266ea286be9912245d5bfb61c326b7722bb177c36fa2ca59d7a2333a6299c2e46d0c12175d43a1e63d9d70c155a37b8395a471c3d592
TLSH
T16A113DB1B6BD300FD26B224D5F5842A5C36EA635728EC9D1599DE3F0450FE26D227C48
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\arrow.svg

SHA256 fe040cf78012f519f391e664c55cd3170be59575520995a4bc143d2943fb1d64
MD5 ef5695b014466fc2f60dc3a201fa9435
SHA1 17719cb0840d6c15ee894dcdb08f3c74d17a82ed
SHA512 1fa6b99512dfffc493b2533f4a82045909845010c515e0b8dbcea46add429891232a84c424cf901225274b09221c69f4f74bba0e55698be569aafa751bf61661
TLSH
T1AFE06164DC0C081EC17E49CED5795444279B5CF43318083D590D3735E003A92E047C4C
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-apple.svg

SHA256 98583b4cf0dc8afe3b5025fce65f261c2f01264afdbea19b591853e8e93d7fbe
MD5 f96f69a4e4e7f5415d0888e249198b8a
SHA1 1c5a79da208fbec599cabca711914f277c3e1dfb
SHA512 927519b1991e0d8f27cefe0dab83e63bcd3855d44fcdf8c25f9927128f2a441642cb9c6b3da93f6b55e4a50168e032d35bda0c16a38362f5cf78f43c8c5c35aa
TLSH
T16F218774C3948374DCEAD7B49723BCB5649F5AAD80E1D35E4368C8A0F2941EC624C8E2
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-auth0.svg

SHA256 65360327073579c1e72626b3dad257913c6653bfc82b1becddd5f49179fa511a
MD5 563377c91144cb7d1a02ff8ee5aa58bb
SHA1 4d66b425ab761ca36548d8d73e699e9129d206c8
SHA512 1f5454acef401c130bb9c4f2374d204c4c6036f22e5dc34decc133149dae5a9968a969b27b77441257cc334ff50bf37f02103368ea7145625930926911a37dce
TLSH
T104D0C2B5626931B9945A231ED27212216F52B1A98FB408D88BB4514C404DE22DB24ACC
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-azure.svg

SHA256 6586f685c555ee5658ca0530075ac3ce4aae6437d2aea9a109fd70ab6dcb7293
MD5 0b862edafb052f0211c3d2faa00531c3
SHA1 0090e57c7836edbe09371e86c1f1e912cbc1f32a
SHA512 4670e99774f6ef600665890988860370bf71690dc64975cbd92dc8e14d2e271f2f4ce5309c9f646d96f180cb34156ff2d072fd764ab9a1d837cb142a4f67d817
TLSH
T15DF002C8DABAE72CE444971B27195C943582E45EF0E118D4C2412336706BFC85595C9D
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-default.svg

SHA256 1e555baf5a32c88d5f1e47648c0fdae13e211e6a743632cd68256cd35aa259e2
MD5 6c1a2702edb372085ca4371c4ef09aa5
SHA1 65452f3e76a9bf03d94cf8f336f0c27b99e08e56
SHA512 8d64bb64403751fba02bfd0de616fb7c0ded7d41ea9feddc429f8079dd935cfea5cc09f4e42bca6c477f5e9025d8c08d808f0892ca76b5316ba96387a2314d74
TLSH
T18CF0E1C4EF84E07C50041451C310859D40BB12BBD6950BAAD2AC8B8127F2C99B80C9D8
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-facebook.svg

SHA256 7d05241541ea2ac9a918a5852ace86c06673d8aa54cc02a274c8bc5ff7efa715
MD5 ee6b89b302080bcef63b9779b6c9bea4
SHA1 36b181f17a4c0a94982a8dfba0a51c3f58c1273f
SHA512 0780d8b981957aca62a328c7f94832b3633a733e125140deed8a633183a1aae9624683bdeccd68699f2051e33ce4e4ebdd356349cec8feea5e866966071b65d2
TLSH
T17FD02B60E1B4E51DDD38573D2E68B4DD006F604D8241417DE488497CA257BDBFC4825E
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-github.svg

SHA256 699aae703998c04758bc8c90ed9e89baaf7cd3ce9b90f6b261cd18b2e9a0b32f
MD5 3c30cd99eb7418fe737b717536672201
SHA1 4748875ff45202607694eba37cdc9ff95fa9b5c5
SHA512 a0722bb178482efd4a93fd6e9d74ad987039d12204290916c03424f36c8592fb9f1693963ead96fa90afe30b4ae26d8d8209e7aa7975a69f4b1d117c2e760fe9
TLSH
T1FBF0F0F9275C65AC254743E5CF1672B4270F69B93186CBF8487FABB091472D4E39B018
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-gitlab.svg

SHA256 976be154f07bed12377690ddfe734bf94ff01858f9ce28a0a526db7617130e5e
MD5 b9b4d037f50930335a0e503cd9a35294
SHA1 91a8e0d1e843f687444a4c90b8ab3720e71e39e1
SHA512 f0d676d130f4a5b0b7e36b5d5dc95a3ba1adc69703ca4b4b3c51d4a92da0d1aa741dc8db72638ad1dc19118263d9bd8f5445d4129507ea6fcb44867f2eec6af2
TLSH
T171012BDC26BD3459990287F0CAEC21D705D7F0B7E10900D9F0481C18FD86B5FD6A7648
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-google.svg

SHA256 442e7678b4ba49a4261222bff05e52c9c892d4b37f5403c974f3ecf79007bc4b
MD5 26dd5d10ffb0d02eb37a3858f2e533f3
SHA1 9e5de4e23ba679f93eb64834cf0289e74c2f0417
SHA512 e4e3ff4610df52ce85bb497c9faaf1df05ab7171e4bf21c9d6fa2fb33354c3c34f1e9f3cb8b5d41bc7c3325540bcccde233040cfc3915da5a70879cd3175b618
TLSH
T16A012FC04B78349DA58A1FD8C7AA32F15312B07D2A2487C010BC376C2F0559EAC11D18
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\auth-okta.svg

SHA256 483911dd70639a6c5c20d7c44b26593a7032fd0c61c824646e5692b019d51fdb
MD5 2f417879cb6ff130f0b6294c6710fa72
SHA1 15d162c2897d4200254a11cd5990a1dfd57b3eb8
SHA512 6442cd248bae0e8dd6b5cc54cb2ce823a8ad7321003a249165494e78b45ba63ba6664a131152bf10ed5dbdaf087f4ee0c868571c25681caae8ac08634c8a0c9a
TLSH
T1EC316979D391E3B8DE55876CEB2264F4A44F91BCC1F1D32A82ACC5A036D28C8F25D4E5
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\call_end.svg

SHA256 a9b2e7de60c87f5289db4eafe78e997a70d76d7a4245d2b2cfa7ccb7ae3605a0
MD5 82190401a712a19798a416252071b2ae
SHA1 425e8fac91df851dd5121e84b81ffe97a10d1306
SHA512 1dcda3cc518bba16a608f48fa92dd71ea562c365adfb91df6239d7fe54ff6b9b1879ae5602c8272d034ea4b639a2f0043547a360d8d7d7b82c00584881af331f
TLSH
T1F201F1A40A1E880D94A7A394CF72F8DDA32F54A4759A00F8E50E7C34B0031A0D453D24
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\call_wait.svg

SHA256 b6bf409d50255048c0b8e73397190a222a6c26f32326ad654dbebb8794525fb4
MD5 ca0cdeaa2a498f901db4973419f56e49
SHA1 479032a98e1f1086a5ab287189baac103430ebd0
SHA512 2d99fda0a8ad128f36e1b2566b743daf53995000c8a33609ca1007406537e840b3bf02303b765b92940805f6611382bd875eeec7662fa43a9503208f4e54376d
TLSH
T1710168F14C3D882CCA074A12FEA72541EB18B5B8304AC9BD9B2D7DF1A022370E483E04
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\chat.svg

SHA256 b59da6aea860332acff94d1b630ee8cc8d2e67aef38227815879e64d7695d3de
MD5 10595dcc8484d6f7f140f54d6db32877
SHA1 2f4e5f20496b2cbfcb489c8e86472f5aaa0d9916
SHA512 e2755e893155865d8b6acca2ce5b7bf26e3c15fd6f3d5a162dced5efc7c3461ae8a9822756bfd009cb934ae803481e6927db1fffd2aaf2afdea37f5b060cc74a
TLSH
T1B80170DC17CC4ACD8027CDB8DF791489271F55AA3C09C058EDAF25B06086B51F553984
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\chat2.svg

SHA256 04095957aab18a9f44044ddb649444e2fdd9454bf07c79f87d47d3d7ce902033
MD5 82fee3bfc120214c67548759d63ce865
SHA1 8d7a6ce0c5ebc5b87e83dc90ea80966a14e9aa97
SHA512 ac5056421e1316a70399b85374297467609e744d9d1929f6ee3d43db03238d465ff3109fccc9b0a30575a73b19e0c806fc8e006d5bb40b6d8c8019789574044f
TLSH
T161F05CE47D1E335D24434448CE7764245B1F1C35722E2099EF4EF16042077E2FA63924
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\checkbox-outline.svg

SHA256 b8520bb0397257021199d933bee9e047cf35347fa56fe615cdfba201294f87c0
MD5 f0d7b636853657cc21df676e2f473e1f
SHA1 637a00346c25c5609b5b9c73519bb47f5600cdeb
SHA512 3f0faec87dddd735ef3b4843ecd53e89b557be2ed2ec0407a6b900db623a9547e883239f048d5cc4a43473124efec34d10109a064937b564278a23ee8595f5e2
TLSH
T17211EF8DD309D079842CD395A0B83890665D50CFC5D3232DC780EE6097A35E42A99FBF
MD5 SHA1 SHA512 TLSH

svg polyglot

data\flutter_assets\assets\chevron_up_chevron_down.svg

SHA256 5b5fd77cd98711d9a4815a761aabec5a97157e4d74eb2cfa61e3b72f527c252c
MD5 9ca13e04aa9ce89f591d775461e827d2
SHA1 c9c36c03f82003a5edcc4d2d681fe7bf9fab3215
SHA512 136bb0a7a0104899704a7cf3e08ab733fa5969d7717600e4f7b96bce3919df067fe0d9f9ceadee388f66fdf6390789c9a1a95ea14661fea0fef4b310b4d3d656
TLSH
T141216348CF1DB971EEEB9740F7F89AA47976109CD9DD8CA881800FB2CC120B44B08CAC
MD5 SHA1 SHA512 TLSH

svg polyglot

data\flutter_assets\assets\close.svg

SHA256 19b67ad30d9024bf95714bba11576eb5a04b6950eb9760c987e4b2773e0544ac
MD5 e2f1a0bd1efe55a14fc21e70d14265e8
SHA1 d5adfc87e45c7d2f828c3e26260f4e32ec8fbe7f
SHA512 02627fe587d140d142f440ec09519b7c52c9d61e84f87a114f6273a15a4d468afa927695ac0cd465bafdf1fbbfd2a946da8e87b16b44dca72c3da85b78607037
TLSH
T15BF065E4BD3BB8CDE2464FD85B545179050514BDA20F04686BBF147CB352695B823D4D
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\device_group.ttf

SHA256 757071e3671adac7f6fca290259e782ddaf8e5a8381cf14b6984b3f05c67412f
MD5 0c14da6ee5eab333bfacf34943d68887
SHA1 3d8a56538a6956f3e2d2380ff671ff75771af2b9
SHA512 9b0617214360e49cf74b9cf117e15c0bf30bbadab712529894498fba8eb7e8365ccc6955f65497507e9ab94efc6a90ac2aaade8d6bb14bc772f7cba2fd8f9139
TLSH
T1C8411220C7F5CD15E597073914AE5F462B32FA601AD0D3CA049852AEDCD2EA84C343A7
MD5 SHA1 SHA512 TLSH

data\flutter_assets\assets\display.svg

SHA256 e8cbf643fa4c34782a94f401504e77adf2610e0145b3c99013c3d69639aa07d5
MD5 bf281b8b99eac956f7ab03028e7c235b
SHA1 5c2d1347a84ec38897c092b64c495b170b9dfb8a
SHA512 e27fe91f72565aca67ee3b0224ceb37a3e1e5f7339e60f00961c3b9932c659eff10ba0e2058862c82750dbd33b459192e4b5b764a772df7f33d703cc5dfab32a
TLSH
T1A80125909E388C0D6595C5B7CF27EAE60A0EB9F63A4880C9D51CFD60B443966E41B848
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\dots.svg

SHA256 a99cad2b4112f6c593657783b25abced982cce342866554cd8e37ffc364b50fb
MD5 10dc01da59bbf56899fe3dfb24de4588
SHA1 441b077e1a4a98159baf62426a6cff6bc20b115d
SHA512 6e5eca966d81da64ca264226df7d167dff4e633a04d32c305bf2ef154b25cbfefdd64f32c8fc67b8b625b84c7fada52e93d707a13d422078cf20c9ba29898de5
TLSH
T1B5F08CAC94FC681DCABFC033D720A0803B8A21B02D1846AC566FD934EC13A62C867D04
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\file.svg

SHA256 4a17002f83a6b30239f172f9d7d7c26e3c6ccfa029c22f11af020981a5f41291
MD5 8e000fe8e15b1ecb0c88d46ee64f6265
SHA1 cf55c8e5cb9f7576cd915ce611337dcf4421bb02
SHA512 329ef884bc7e4c6c2973490ace5c9fe0879d25b3db71c4e7edb8f67e7e4f347be1a8ca97b315a835d91a756a7125b91660ae565bbba91a83b887dcb4fb2b4f15
TLSH
T1F8F02BF4FB686E8D6006ADB5C63530C10BDE6AB431BC0E7CEA8D543A71239A0D963084
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\file_transfer.svg

SHA256 33f79b7d82b7c44a51791f942f12b754f7fdcbbfe6dbcc783af3ac55527edea0
MD5 7530de7176b77ed19834c6dd87a692c4
SHA1 eb5bc3a4018e92a41933e81b4783210ad225ce37
SHA512 08577b07a83328159267a32c572b7d70391e40fc4f91b0c770f1203aabf18aee03d5518c69a09b7cd8d34a6ec7412e3513fb26164d2d02d87527b0bd9a0cda04
TLSH
T11221DC09DB505D37A60593A012381BFDA217DDCDF501F23CD5622B32F246EBA0A4567D
MD5 SHA1 SHA512 TLSH

svg polyglot

data\flutter_assets\assets\folder.svg

SHA256 6a1c84071c3d76e796e06909cb6e338e2d6c07e9784376289234f237711b8b8f
MD5 eeaa976f375cc066c7fb7cc99733cd30
SHA1 5132756684a5656ad788d13c0a59fc93d0bc15ea
SHA512 f84ce7083a69cbc7cfcfcc2aedaffcee575ed45494709adb8feaa3624c6a6e2ea2949f544c91eb33b0ba3085e370909d2d60e5ad4626383960bc7314a781b1ff
TLSH
T1CAF05C95636B9ACD408E0D92DB34B480231E5BD0356806FCADDD36741413C71E863DCC
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\folder_new.svg

SHA256 a8672a3dc43ca1db7b9889c6642e43a7bb818af908dda8754b509233003c39d8
MD5 bf774d77fd7614a7d3f26f98f3e5d8d6
SHA1 713dae3a2467dfb2a66ea5217183c646ae8b66ea
SHA512 7594361d971cfe1caea4327d3ad0581a717b911fa5630b059abcac70ebeb5cf6d36f9b31e58c075b3368f70caa974432155d46ae2e1fc60654758a947baa8db7
TLSH
T138F049F6636F088D900A6936DF39A8C9931E7DE0312A11B45C8D95312093832F043598
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\fullscreen.svg

SHA256 524bfa7c693571d43e298c9a63a1813a4302b9dd40ac34519479a09d21ed08e3
MD5 ddb2613848048e0b1ac089eacd72b8b6
SHA1 1a573e170b05834eaefa3b744002579f076a774d
SHA512 966509c4cf434a410433004ad30bc2cbe78787ed7aa1e35d1f26771d5f36acd0deb58eaacd2d4e7939a78f7fb166fe8a28c094ca2cc427b1cf1c182315fca423
TLSH
T1C731F1F93A2C95CD49E75394FF25E0952B0DC5D230AD8D90C44D4E7660039E4E86BD70
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\fullscreen_exit.svg

SHA256 d06c8eb61ecb9b5ff1c1c91f3e29e9b00e812a131e0fd092be441de79c3b65c7
MD5 e9adde63a9a4613ce646c2b68a81554a
SHA1 a84f95af8b8b169e8de447b143a5a472f65ae5a5
SHA512 f2de000930e52ccee048e0bc7ec91afc0954dc233d6f25d847e0d7c200ac7168ca7889950eea190fd11b01c776f8a5b8140dcc750208e84ed091c5d1d7bb1c95
TLSH
T11231F0FA3E6C968D4CE75290FF20A4693B0EC2C335ED89A4D48D4A7650C3464E89BE70
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\gestures.ttf

SHA256 195ff53b2eff7718dbaa69e30685d63986d5a1ee6cf3de6090989d880f0e3c5c
MD5 a70c60208ba07ce378ed9a5cf8aa586b
SHA1 e20f0627f58927dc4a2e68de4c5f39c3d0bd055f
SHA512 5db7e8106cca99cd5963ade3e660fa94d4f40c9ff1427e006c111a39303c429c5bda06ba1b542abf23c1e6e359785008b742aea1a34f2086a2e2baa5caf7b113
SSDEEP 96:zU3WwHNRbcQ/FpuZqbpjQWTKyZTYo3pniooGeRoLgrehDP804oP8RAhovtvwqDfw:UHNRbnhbZRfPMGeGLYeh780hbW+wG
TLSH
T19FF13A2DA2F54E56EB7F45BE6CEBA2710B70B43C6D10D166D7C4260D7D012E88CB0B6A
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\assets\home.svg

SHA256 02de1b923b3ae4e15b9027db1db70c32717b72ce6c8b52c46e235df6a768d023
MD5 2320ca704fa8dfa8fadedd4c181b1d34
SHA1 91ccfe3ef7a8e335be3e23077e22b655deb57006
SHA512 39e7a9569f87f2bc4e464908d1c6cbdd5dd8fa285edb624b8d301db2a26a62de4d0a2bd99e4fc14c952fed60893e97546ecb7de7f4b44fd13fae7e0c903f736a
TLSH
T11EF097B107AD0BCD802B9264DB2BE0D0674CA3A1777E00A88D0D23241023016E417E94
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\icon.png

SHA256 bf68ede219cfa7856a97594e14590fceb770aa23dee2b4af22a4389aacd23f16
MD5 40daeef2d508ae3a1101a55520a0d682
SHA1 1b6a79353a52cd63134dcda2aa94765f7e1dedea
SHA512 5b3c46326307256a8167bb317023242843dd4d830dcbc46f9a9f16872317ed5d5ac444a10db363ccff518a0ad946a91624c3c5e87fb428b505316f86c7f6f1dd
SSDEEP 384:HyNWSsO5n7q0990cJbZufAvWobRx/KRY9uW/q0OJoF2PvGir6JIp5OsO:SNWSs+O+ZZamFZKRYUWtOXgas1
TLSH
T1F392E11390BDDA1800FCD5EE17EB9CEB15929E8D60887EDD9265C6E8C3BC59E4B44930
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\assets\icon.svg

SHA256 4d6ecc2b45571382576049095435f41576c02e895b8766ef3f300623c35b3488
MD5 9673d0a1dd44d81bc31c76a56857d787
SHA1 3803cf698b3285260cdb2289e680739e5002f55b
SHA512 fb49bc912f408a0ae38da6301ccca9352613b54060f260c0ee80480f7c926e96d4716d86fae6197e98d3aa71294e98beac25ccb4f3d117bc65ddfbb7ba480390
TLSH
T11D2121F7E51CB8EEF48FC69CFEA88049430F647A705183D5C1AADF1848566D1D80BE94
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\insecure.svg

SHA256 b25093ec9bf629995f2ed67603cf10dd98425a318b98c460b9be569aa71a8102
MD5 58385c3079d8d21b891582151147a144
SHA1 443ed9128c78e8ac35374ecceb0c1aa4eb7e1573
SHA512 ab31752e2d9b70245c5ffa7bd612381570cbc3a853bc50eb10ae554c902548491b35c22b94bb8f89f2e6a0ac5ea3a16a9160ae1db4853bd4a8bdf37c9bf53ea4
TLSH
T11CF0DCE1883910E5D0C107F8E318804C232D216D23098206547C07006159EBFA8A3C8C
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\insecure_relay.svg

SHA256 9cb9c44ff9b003bf0a8254c940eb8835846c977035129cc755704b6d5b3cae0b
MD5 459680c84934bd3e0ed583df62617080
SHA1 795ac2d80ef262b7933438502f17fd7f0b374971
SHA512 57e9be8d36bf6c4ba6dadc2a115ce3ad43b89f7d502026f782d6ee58e5f68fd6a57bde49926b65f17c62783a0930d51008f0b4ae27fe65f9f985ef15ce26cb7f
TLSH
T1B30160FCDD312BF4C4C4D3FEA724845E33AE086A322213A5C409034BA98DF6D9880C9A
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\kb_layout_iso.svg

SHA256 fcd844ad1f7b360edef92f1f18a9dd42a87bf436c5a3e2d4d5bcc88bc2da638b
MD5 19463c9f2c8c2ce6db8a57d2bcf206ac
SHA1 2d0bee2df8ec1a6f8d3ae1e3a678a97e8d56c995
SHA512 04521b954bb55dbf8655ab6c79754b55edfb6d2c6c5fc66f8bb62af6d917a7212971121a881543d77eefcaa17f561609093af9020bc395cc86bf31fa6c943282
TLSH
T1475153A873959D5BBBD37945AF17E291C12C127D60EB01A12335C5F0622BFC6EE8DC48
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\kb_layout_not_iso.svg

SHA256 58ca6bbc9f5da46610f5ee7d948d6027458b8e1421422c9acfe43002cb50d513
MD5 c0903bc16f7a3584677d1129c627f79e
SHA1 aa473a060bc2751b1d10dcd91aa8c10e6caf7c4c
SHA512 b65c932e43225bceaa6a5bb7d1a83838522215a57bb67bd5d7993e261ae4d5c2ed4ff152f834a5ecbb9e6c485f10040f412798c43eccfa22690c4c84e9c7eedd
TLSH
T1AE5192A877959D5BBBD77905AF17D291812C12BEA0EB01912334C6F07227FC5EE8DC48
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\keyboard_mouse.svg

SHA256 926010c7049e648ae1c9f0cf87c8b5342da0f5f701db1420629fefdad1c073cf
MD5 0c0566939e5d32b85b3fbdd351e6587f
SHA1 6c9471058d0df1ebcf774fe9db700e5cbc455645
SHA512 5fb7782e1e657c4b8008d435054184fbdda3ae503971ef07ad394552fb3c5802730c4799913fe4614bcd24dec9d0b3cd800e4612885288e5c3df94d40bb9e426
SSDEEP 96:LorGbg4fZE6TPp4swnXmU1ivMd4gzlornrYyR7FC6xUw2pe7rfSyqw2XXnEXQbiB:dNE6rInXAMugzlEnrBRJCa2EXXqwuXEh
TLSH
T15DB1D7F347D882E8525A17ECCC361DD76E873CB63205B44C81A1AC52E5B36D89E1CD1E
MD5 SHA1 SHA512 SSDEEP TLSH

svg

data\flutter_assets\assets\linux.svg

SHA256 ed618b2fc45b47cedd01d63ff3e725158f7287b163b1119cf4992fd524fc6dc4
MD5 94446987e0c95123c5549fb26affdd32
SHA1 a40935bce9d5a7ad01d43c4c60daac94e83ea52a
SHA512 66e69d82dfd128af40f6e5f95fc44610fdca864e8a136d1b86cd809252b0995ffa9b8d135c779578f471c4de2737fa5fb849f012de773ab592246fdac3ff4bc8
TLSH
T1AB2114DC7F34A5E4D0A932B9CB347CD421652099A731CA7CC7B55B8C7243DD19905C9D
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\logo.png

SHA256 68d4e260f9932f1aa428a6a177c77aab95c8648c8603646f3e9cc66e3af8f13d
MD5 1853cf50f647c301965856f0d069a7f7
SHA1 1361324f9c1a251b6368830ac0f61103e0eca5c9
SHA512 8df272181a68bf475c93bf61225354ade59b7733b91146046dbddce1ab0d019b2c0ac153e7375d758fa00038f6a9bd01d6d08a39b4b384008e2ab7f847cdcba1
SSDEEP 6144:vGG+4Aw7r83n4Upoeh6E5MGEVDlwA5y/fVGiCPI7qcyEZ:vX+5w7r83n4UpfG9ZwSyX4il7qcDZ
TLSH
T1E52423E5E6587C38AFC036E2B2D6CBB463A5E95308E481DCE170C4216B5F6D9068ECF5
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\assets\logo_dark.png

SHA256 748142e9fbea114e0e1eb27f3bbf016b3a019df14957075c92366302c00b90e4
MD5 96d21551d830e748716b276ab608c629
SHA1 794e330be7168bff253df8938fa902c4dfe3eef2
SHA512 f27906fe864352364c54367af05fff73353548251e6cbac316c178071bda75fb4d338a6afc965191a81218521022ed3dc5eec76939e27ccb33936b01ad15a967
SSDEEP 6144:RwaGyGb9ElXG7sB4utpi4iBZaK/9+rkVvPWVU9pL5nn:PGb4v414iBZP/9wkBPWs/
TLSH
T13434236B942EDF7A2B32EA825FD7B92B1B5C4B313DC158F5B272E00094380B4C1365B9
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\assets\mac.svg

SHA256 99f529a74e1e8cb086cd338864dbe334a1fa758c5b53faeca2ebb3b57caeb1bf
MD5 aea75d88e94e3feda3a8e85fe8f7e83b
SHA1 86c90e58d968d93b09ff641518fefeee37f07c4c
SHA512 8e9b18bfd58cfc5ca88aaa2a9f82204fa1fbcee68a009df7ffb3e8c3550591883b311bb904ccab244bcdfcf911e37b4a15c6696f42de2d6f2bb8c3ebede0c3d2
TLSH
T1A5F05978D05C53B88C05F3F0DA3D28B17947501CA0079B6A65B28DD0B0A98DE6388CDA
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\message_24dp_5F6368.svg

SHA256 11c36e1555a8f74aeca3de9d259122d51b6206b8ada4872e3259bcd8e6a994f2
MD5 b0f463bd4acc2aa9ead75c7e652a0543
SHA1 4ce7a88afea0ce2539446dd019e70d7b63acefc7
SHA512 ce10a44cd1995d98140073e81c4e25952cb4871237928ffcc99a97ba5cdb9bc2378d6762d7043e30457f0a901f3a65cdeb45d6b940262a800a625bb01d5421f4
TLSH
T14AD0EBB8C2B828042112CA305E8AF1B302E2A0E0394C011A57C00A1C720C4CF7C50608
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\more.ttf

SHA256 54d71ef06045813df9227bd03e97a082c4bf22def1483e8dd5343391508d5740
MD5 d1d2c5484a00438591c383e6ff514747
SHA1 c197bc8ddb51956f10025556b5531154c7faec4e
SHA512 e10a1ea1e5c3d37ef7ab1b69e76661aa42fc4acf074c7463f651001a08d5a25d398326ed44bb2919940bf80c74e5df14e7c9eb54b0bffe7547d5ddb1b8bb84a3
TLSH
T1D6318B54D7B09D01E2A74B3524BF8B456F31F9602961D38B6098676E9CD2E940D283B6
MD5 SHA1 SHA512 TLSH

data\flutter_assets\assets\peer_searchbar.ttf

SHA256 28be41836cefbe1f6f59d2b17d58bd944923285e6c8b9e574e6ec7d7643873d9
MD5 f189a84ff155487e21892166a8a1a49b
SHA1 18022c653139f6d594a81ee0f38f5f858589b1e3
SHA512 3c492c9390a549038b86166227817c4fffcbd882f51a89d50999a9eb457cc5f809f043d88e83308acc50de540c79fdf893c8d2994b3eed5c28acc35ca4b99927
TLSH
T12F41E060D7B4DD01EA934B3864BB4B046B36ED6015A0C3975058A76D9CD6BE40C287AB
MD5 SHA1 SHA512 TLSH

data\flutter_assets\assets\pinned.svg

SHA256 db10b9be0bd09d2a70ccabd1be2145d334ec2ccf135e10058f4e6a628b900c0d
MD5 0a2acd10ced63f0224be16aa8c0f3b5f
SHA1 afef908f1349f97fcb42f3020a15eb795c257358
SHA512 73a993f5eab1331f849faf57eebe55714c03bfa35cc226fb728370c919144f872a73e3710014b6e78704d8b4d1d8390ca00c3515e86bd5ab44e58d2f689d14aa
TLSH
T1B2F0DDD4C97D9A49405FA49AFBF8D08932093CAA3D0E04E89B8C62147193D92BF8A59C
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\rec.svg

SHA256 7b8b348d37bc747db1b78f5ad1f312ac1ee2f7af7ebd9a10d05c41cd9eabcd18
MD5 8cbc54b941a213eee9017f723787b3c0
SHA1 ad7201d97525568db54c257e483657a58ca93a56
SHA512 aa136f1c87f6aab5e72d9285bd8a6f5303b55fee1672cc077ed20bb84daeafe2d50a2b77d1e99e007aa5162fd7f7c77a33cd737ce7f2037eddbaddf38ca2ffff
TLSH
T13851DDE82B6C679CA8EA722D8B32D894730EECB1B6A7D6808D4FC7B49057450F753490
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\record_screen.svg

SHA256 4f8461b4811429f5080acfe3514f9c8cc75caa968e1ee29e5334eff3c6e575bd
MD5 ccb57d890c59dad9e4b7d22422ed9b21
SHA1 6f996e195a70bd62706af89ebf421f721b772f6a
SHA512 86cfb8d684af563459b4225bda89c15d59a1fc6d34270da30afeb9178b389253c3a7166fd2bd7209272052f3abe352105e8f573efc5913b33233bd15ee90411e
TLSH
T1953161DCEB7112F045C367BFEF726DC63A9D6239B6A68689413CC6841982488931C9A0
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\refresh.svg

SHA256 c82401190b54604d878b2c418e54d629369efe77b4ae5be0da76b02c0a541b65
MD5 1d14356f6aec82f5708c1d7bc3538ff4
SHA1 91ba07236e8d9c2e73eae232c9b1e2a966965c87
SHA512 55798e3449f07a67f4ca8a21934fca864b2420c0a7c744431bbf853ede05bab43cf9556da09c9cf1058f9420bb1c2fedd0bbcf71ee81f97ad026ad577a94e85d
TLSH
T1BEF07DA4427DCCEC4017CDDDDFB4B380039FB46AB59D40F8780DA73D000B668A247600
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\scam.png

SHA256 73b10db88c45da3604b2c10492d60452f8d4efcaaf31f953ccd9ee8ecaee0801
MD5 a6d290cead819b6bfe4248b5d542567f
SHA1 89e5ee97e671054b477220ce546d1035f868e619
SHA512 7defb2a0158caf3687a081a0e9a57f9feec458f7514a88b7ef59258f0496d66dc47b9bfb1b7948b1ddf5b93ec8a8c895cfabdc7397780bbbf28be59c85b31c93
SSDEEP 12288:HJAruf2y0LFqo7qE7f9d0tF97uEkC/hEFX1RKCSqpFQVE4tYt78+wL2AS:qrn1LA0MHVoFXuCSHVE4q78hLS
TLSH
T19FD4123C6336211C10988CB323F596E3B36A1399C975A5C77DE52CBC5ABD56C80AC63E
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\assets\screen.svg

SHA256 c25d47a1d34d258629d1826dba784ee6092b705cf328260afa44f4809f0df391
MD5 c6b0ea973c050844c2c2cba27eaffd23
SHA1 8f5178a008932efc555dd510f50789578b7696fe
SHA512 61ee668c083b4ffe8cd36275b253918740cb095bee82ddfe02611769ec6930111363f9d1d18010ee57ec182328ed8cc6c77b9917799031950a332420c1ec92eb
TLSH
T145E0D8CD43BE680DD0EFC577E26B10995E1AF1B8BD4944F9DCDC2AB41210D42E413A48
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\search.svg

SHA256 b7868a196030ea2f7f15dc954057b57f3a80865a92432249505a059b31bbafb5
MD5 492f2847532faf43169300c524aa7ccb
SHA1 2dca35ad2dff7fd4639a3972f14e95efed16bf1c
SHA512 f486a3a88b2b04a08d575387787d2aad3e21d90989a265a23f87744ecc324fb4e6ad0aef27e8e0f32f9caea939323a88a9105a1de1562e9188e1ad58221c132f
TLSH
T16AF084F8226CE89C4307A960EF24A68113AA2470ED0D03A6D02DD63A30D3762D00FEA5
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\secure.svg

SHA256 74082330afa95c3f2c1220efb7a38e420243c7b2cec97091073abe7e199cb2a9
MD5 bf1b40b1a434039d84856285af6708ed
SHA1 0efd29117667bdeb48e404bc6afe2d44ed76e416
SHA512 d2d94b7027fa3c8f6ac718d91eeb5fc39cc946edf86cb1d3c16098906ed54d95247adeed78a11f7b5686b20f9f160d6fd452a16f718de3c804fc254dbd63cd69
TLSH
T1B4E026249414197E182003BE9A34F5CCB8EA286C65264070C3D40B78661386E8F104D8
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\secure_relay.svg

SHA256 1d3be44539e7e1afb79f29359b9dd451e714fd94b9acc382997b749af156a213
MD5 cd3fe0afb93a1978651efc96f723b203
SHA1 07fd23fabe45d42d7b6f13271e47ec5f53560e77
SHA512 8ffc553241e526b30ed25dc82a7bd299a1d33d47a0fff1e4619a056ec257dcfe366996a8b0d2636ee879b6d69223fc401e3e38952a2f44e95cc0c3b67a1df782
TLSH
T1D80120FCDD3027F584C5D3FEA724805E23AE186E362212959449035A9949B5E58408DB
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\tabbar.ttf

SHA256 a17ca0a8f7d5aa5ea3f6380f3a282b98b3d66135bb0cee5d431082f560030db8
MD5 593f286bbe900c64016ed23dc8ba91d6
SHA1 b16152371316906967105660a976f5a57207a082
SHA512 babb596ac057075b4c034e0d92e8a23b9bddbc585a42d7fe6178d781f40c0b2e057e98cdf4e3427ccd7868effa8a49230cd18273842330d9eb4387b1b1ac9471
TLSH
T19B412F149774DE08DA9683B931AF0B587F30FD602970C3CB00D4676A5D8BAF04D243B6
MD5 SHA1 SHA512 TLSH

data\flutter_assets\assets\transfer.svg

SHA256 b0668dbf64e68e88860032eb6510daf5018aef02138d4c13ce544b817fbdb689
MD5 bde9d26182e2684ae721ecb5a55963fc
SHA1 3cc759ae7595b52619dda9834f1a732c79960941
SHA512 e896c4cd4d2619ccac863084a14fbdf06fdc22bc4c54107716a8188a2d91fd52a5b536a3c64b821067500255042ae2491a3e826340db53722b124f7255d951fa
TLSH
T1D6F050ECC61CFC0F51D61472FE76128D722A30F072750467D94FBD985602C11D053354
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\trash.svg

SHA256 cbd53c61f856910fb53b8e184f5aa72f6c356979c047578563461c4559ad6355
MD5 32cb1ca9e5561cc9d545e185d8bf17f1
SHA1 e6d4e49e85bffea1be06e23b622ea0de8da74119
SHA512 79f8963bec04dc0002768e735797551a0b030136a98c360a052813301b1ad24ff6ee4f9fd30d1efaddde2b24b26ca78ee564bb0187a8953fa033a023acfa4b25
TLSH
T10AF020D7EF68CDE9420E4670CF29F7C5230C0985B218C06E358CA3382053F83CC0AA01
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\unpinned.svg

SHA256 5a9e5eaf50ddb4505279fc6c89c9d63f623e5e7423cc40f7d088e2b36c3e4f4c
MD5 d529613e4ab67bc9049861fcd8646606
SHA1 ad26fcb87393347c0686803e3e4eb764fd20bc6c
SHA512 29385db62073372175d5096f8bbfa8197ba8ed0b5b8f45aa7dcf07fdea750b3ccb849e108a0cd46abeecbf52db8fbb4856326a4e391999eae157679cf4c574f9
TLSH
T10FF020E8C27C4A4D86B7854F7D2D5165920E2584E42EC4D8A89D79783303311FD42498
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\voice_call.svg

SHA256 66678adc66d724ca25088ffea6508c5757b5a0012e39a78a45463cced52852c1
MD5 b261a6c0ce34fd6a31bba07f8e32f5fa
SHA1 d1b0f3c2862894dd446d56dd8e0248a47825af63
SHA512 83856aba6ada157ca657526c8728d51982626a72a29476e2390bb27dcaa2c4ed4ee7c4614ba19e6c39a4bf00c14f5f5de52beb1315521299aa4f24329eab2104
TLSH
T1A6416304D9752278D80B83E8C1320AB477ABE5AE7B514368C277C772F15BE99D0804FD
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\voice_call_waiting.svg

SHA256 9fdc429170ecebd5f8aaafde07b20f5a63e9029164c8f857b51b32b39e3330e6
MD5 cbbab0ecd11a1c20ca16ebd41e72d86a
SHA1 0200d0089fc17f8f522fe1d04260e45f0bd03bcd
SHA512 9834cf8afd651ef301451fdbb046aab05cebe80cde02b9085319829522998f2e4b5c93575e1996c066e7867203bd278ef1fef77f23890219fccc0ea774e4237c
TLSH
T16E019004CA879B34338556A8889CA99C7A9FECDF329D637DC3B1C6211C06CD4AB9465C
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\assets\win.svg

SHA256 0ef23580fc65eb8e151e0d2744db1525d8d54258fc5afc51e2719a7e2a5335f6
MD5 e6032ece6ba082b1ab125503577d9525
SHA1 2f9c866e3ecfe294df8518d700e4856f90c1b4ff
SHA512 3bc0750670adf1311a22224e20ccf2221db5c026139d925af28b8afddefca8021d8de5cfeb495837a4d6d36c55ebd9fe7feb9ff7668a00912e71888e7526bd63
TLSH
T1CEC022B044764259491007E0C329668827DB40092780405DD8C2B30838F957A8393460
MD5 SHA1 SHA512 TLSH

svg

data\flutter_assets\fonts\MaterialIcons-Regular.otf

SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
MD5 e7069dfd19b331be16bed984668fe080
SHA1 fc25284ee3d0aaa75ec5fc8e4fd96926157ed8c4
SHA512 27d9662a22c3e9fe66c261c45bf309e81be7a738ae5dc5b07ad90d207d9901785f3f11dc227c75ca683186b4553b0aa5a621f541c039475b0f032b7688aaa484
SSDEEP 24576:PsSIRolMKvGXtkXKLkMp2fXrNsAxI6zD2/qxDoq4eeeDrG2eOeGr2lkzhlTMrRoV:P9njdzbwc9
TLSH
T1787529100276EF4CC1EF507D43B74A48F4C59AFEA53ABB1AF9B64795220BDBDA1C8181
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\packages\dash_chat_2\assets\placeholder.png

SHA256 17e85113e43a4ddba198adf0bdc7502340765782c9d2f85c43e6516e9f395b64
MD5 ce1fece6c831b69b75c6c25a60b5b0f3
SHA1 a3d660a481ea02fefa4f45b1ab69f5f5c90873e5
SHA512 ece7a8aa2f50b368856e1595338bc9d591385157fa5f764c36a7725555ade3e60d7b06f48625ed1a694f50fe0101263af4c30c4012fd5bf05e15268cac37348c
SSDEEP 48:/3PHXppphr1u56xmM2ZNsx1syyHMlnt64g2YGcAUtd5uMCmcghEkzXglLeM6f+T+://M6xmZQ1syyMtnYuMCdghIt6udBH6r
TLSH
T1F1C12A66F0103611E84FD9790EF89D406BE17CF3367607C66A793027A71EF549524B35
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\packages\dash_chat_2\assets\profile_placeholder.png

SHA256 4064371da447aa1fa2d15b63b676bd4c8adf4db3f516f8ed604cc92dcddcb6ba
MD5 77f5794e2eb49f7989b8f85e92cfa4e0
SHA1 b6fa411b3b2f5c0e3d92323bbc7bc4b84fbf7664
SHA512 b6612cf9a1217fb94893f7d51ef89d0de4375bc809595a765a2223c2f2dc1601683059757210d1f6367f5f6d3adc08779b4965fea381c993000cb3c8465cf12e
SSDEEP 768:zAUg66OEdKboc8tWhGG5hB4byvtileFXC1aEAGW83I+qxGbh:TN2K8MI4ubyvti8FXCwN8bh
TLSH
T17DF2CF649B241FC3C42DA73C7AC72B2A3E975A8D2163C3851715297F3E967182F1DD88
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\packages\flex_color_picker\assets\opacity.png

SHA256 8f40db314a0a7eab3ebc1817b78547496fbed922203783a1a8a4adb2afda0976
MD5 49c4f3bcb1b25364bb4c255edcaaf5b2
SHA1 541d338d581fdcdf91168960850d69fbe307de29
SHA512 d75e4d5545f714b58799c79323c5dcb96eaf3bd590c5d53ddf0253404f23d012fe8e2b56049f4dd5cda1b5b3f1e1510301956a1ea42cc7e7f08ce84bd8f97fb0
TLSH
T10CD0228007702E35C3C42A33C321A6408D29D1280342364C1E80A0324C8264ADCCBAA7
MD5 SHA1 SHA512 TLSH

data\flutter_assets\packages\wakelock_plus\assets\no_sleep.js

SHA256 dce4eef0b197b640ad6aaab2228ee1ee7dccf8bd6d6b5de5484dd1bd16430a78
MD5 7748a45cd593f33280669b29c2c8919a
SHA1 e17ecf67de61920504d79194dbee5cd552a01cfd
SHA512 49b3225a5994b724b16b1890e41697c71096402f48c338fe193cb538ac8f88b7d013c0b70e81786d476be3eaf3170049df1ced6cd8957098fffecf11c13b5586
SSDEEP 192:nRG+Fgkw+wi+FrZJqbzr+5rA7wbUCzebIkuHeIabmEWUSiaNRGApaFnoNhCaTLIf:n/gzi+FrZJqbzrarAyUX5uHej27W
TLSH
T1E052B87B25F1BD6ACF77146ACD1D61002C2CA85F8A1E4961BF4C42989FF06309BE5EB4
MD5 SHA1 SHA512 SSDEEP TLSH

data\flutter_assets\packages\window_manager\images\ic_chrome_close.png

SHA256 70fe0130bbbd928d04cd33a49ecde422ec54fd748b7a4e983f4e31be6e73f5f5
MD5 75f4b8ab3608a05461a31fc18d6b47c2
SHA1 d54d970bf54be147f45230d5adf4265d8e6be381
SHA512 3dfd36c0b364f954377b2c8c84a6d77d5b6045f4bd3fcd7e73f6ea2f3555bcead39227348700be16ec6be08c7ca62d49cd9251190aa4ddd4680afaa8b38055c0
TLSH
T14DE0E7DFFA485DBF5D5C043F08579510587B47B7E1134D004717B11A5325D64B8473C0
MD5 SHA1 SHA512 TLSH

data\flutter_assets\packages\window_manager\images\ic_chrome_maximize.png

SHA256 93f2ed012ec01288b78ad4816ef254261e9ff25e8a9858359b45431c9a5de5f4
MD5 af7499d7657c8b69d23b85156b60298c
SHA1 ca38312a38bfc6acceed24961ca4b7f83177eeb3
SHA512 3ef964d7d017088d1227409e74b98b21df381a7db558e868aed7a34780f38b329775c11b8dd77ea8d5e1089ccd6b78fe3ea4397bd54e0c0a19f64ca7119843b3
TLSH
T1F3D0EBC76A0444A7CC0CBC22032A04C2E09B012ADA08B94AB4F2D20C1C484446A41F01
MD5 SHA1 SHA512 TLSH

data\flutter_assets\packages\window_manager\images\ic_chrome_minimize.png

SHA256 0976edbb9977136544af17de125f345a41065694de92036d9365817ea6d8f05a
MD5 4282cd84cb36edf2efb950ad9269ca62
SHA1 28255b717348279c856cb77c632281a47e7896d1
SHA512 3b1fa86fbe4780b9864a3c5f4bc4a456139246d8950ebf6d1ff7ad77349e9be700d57bb7a28b3bb61a9fb76d68e3a9771058ddf45b202c14dd79bafa4fd75e3f
TLSH
T1DBC0C0E1AB080C37C94E442310A11500F0B7147D44102E08AFA1E01403B409C0245690
MD5 SHA1 SHA512 TLSH

data\flutter_assets\packages\window_manager\images\ic_chrome_unmaximize.png

SHA256 3d375930c514ec2ebc0603ad1e1398b4daf458951042a97232d16f17e1c9603b
MD5 4a90c1909cb74e8f0d35794e2f61d8bf
SHA1 24323430f35371e1a32fee930d2b7c075f714bce
SHA512 1a3f91a056cbf8d89102a2790c70b61b5f0d3ff4017340ccd63145abbd5abf05af12700c105100a4684d7bdf44d955cdb6b6d1dc58f2d99b9f1658de6aa34996
TLSH
T183E068D9367C14B4659D8DF5EB9A4254EA1F26341078490A2852E0B6F62E6844D5B2C1
MD5 SHA1 SHA512 TLSH

data\flutter_assets\shaders\ink_sparkle.frag

SHA256 3aa09424d1dc391fd59a9735efe986ff43302b5e5bc310926afe11c68626c3b2
MD5 6d10558fefdc90f0f18050bdc02f2447
SHA1 103fe5fbcf60a7fa5a339bba0de23ebfb520fdc7
SHA512 78146d567bb7d3aef89f5161cf359a22cc6b6afecc953214baa5f95009d8676588836ffbb927168d4e50a3cf652764a90828b4d9cba530f2c45aaf918b6f0b37
SSDEEP 384:acThP2xBwl0ySqljEYr4NksxHKTdPpD/PLmNlkf/M+c3Vp3P9KP:acdP2xBwl0yHljEi4KQAdxD/KNqfWZoP
TLSH
T1E5725408C3E60E62ED166B3D166B21143E3EF09B7B57D3037688BA547F8B317464A5E2
MD5 SHA1 SHA512 SSDEEP TLSH

data\icudtl.dat

SHA256 c12537022ef818991a7bfed41a76d8d6ae962ffbc0e6511ac762a5d0845e7f7c
MD5 692337664e861ad322138061132dddc6
SHA1 8a99bc860eda0772f3b1f4a125fa4d474410e21c
SHA512 3e2e6adb651e37e530734f999634d7c101fa1c45ae380be8ad169bbfb0a047f2878ff6c8d1428d6b9e7301b447ab2f8839484322ddb3831984be71d442829a55
SSDEEP 12288:HMlhw771h0jM7ykPG07+r4c8w0P4N48RkjtYdPHz982VT50q:ahw3zVtjsbGu4RjgPHzfCq
TLSH
T18CF47C03B1D79C9FE0D48636C9A1E37A9A33978C5B7311D67E6D45887F4A0D70282BCA
MD5 SHA1 SHA512 SSDEEP TLSH

desktop_drop_plugin.dll

IMPHASH b39a28c9743a3be9438286195813d922
SHA256 26475cbe3557b43bea8868c56cd61ce3d81c44dbb70f9b1d824b4470d348d7de
MD5 2eafead1e18baf832c62afa00cc93468
SHA1 75036350633d696efc0dff6e2a434c9528a515fb
SHA512 aa2da968ba3b848b6718eb4868a2be62d63fdea81c789b3ac1304118217f8945ea61823af989f875f8d49e06356d870cc2d5ef8a5365c72b2d48c9964fb75a79
SSDEEP 6144:vR4/9uCIvoqJivCriaariRDiKPlHQyEeS:vRvCIRi6DaGhiKPlwypS
TLSH
T16C644B19F7A954BAE167C53CC9634945EBB2BC560BA0D6CB1390075A3F33BE0893E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

76688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopPluginRegistrarGetView FlutterDesktopViewGetHWND FlutterDesktopMessengerSend FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopMessengerSetCallback FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef

kernel32

WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GlobalUnlock GlobalLock WideCharToMultiByte HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlUnwind InterlockedFlushSList RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW

user32

ScreenToClient

shell32

DragQueryFileW

ole32

OleUninitialize RegisterDragDrop RevokeDragDrop ReleaseStgMedium OleInitialize

Name

.text

Size

204KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

92KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

desktop_multi_window_plugin.dll

IMPHASH 9d55e99028f20707a4afb81b8c7e225d
SHA256 2dd80be465814537300174e6ba4992bcf6b8956fdee4a806501de7a9d69011e0
MD5 246b5dc3238e719abe0e76dcbba6699a
SHA1 53ccac9033b4101ed669bb5f9108bd1eefb5d3ab
SHA512 04ac005319203e3b0d660057bfed2faeb6f32f0d4055e7bf4c26701b5d2380b0b6e22c9ab885b613449e80736e305a512a875ff4dbf7a938909753b0ec33cc1d
SSDEEP 6144:8Nu7uzadCZaz372h7Wzr8hg9fL8d35m4PothxEPwlKvWTSn:YaCZaPWmp9fgtshxEPwlKvW+
TLSH
T1FD846C2AFBA404B5E167C138C9774646EA727C894B619BCF2394075A6F33FE04A3E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

105804

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

url_launcher_windows_plugin

UrlLauncherWindowsRegisterWithRegistrar

window_size_plugin

WindowSizePluginRegisterWithRegistrar

texture_rgba_renderer_plugin

TextureRgbaRendererPluginCApiRegisterWithRegistrar

flutter_windows

FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopViewControllerGetView FlutterDesktopViewControllerDestroy FlutterDesktopViewControllerCreate FlutterDesktopEngineGetMessenger FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineReloadSystemFonts FlutterDesktopEngineDestroy FlutterDesktopEngineCreate FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopGetDpiForMonitor FlutterDesktopPluginRegistrarGetView FlutterDesktopViewGetHWND

kernel32

CreateFileW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers CloseHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW VirtualProtect FlsFree GetVersion FreeLibrary WriteConsoleW GetProcAddress LoadLibraryA MultiByteToWideChar FlsSetValue FlsGetValue FlsAlloc GetFileType GetStdHandle HeapAlloc HeapFree GetModuleFileNameW GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError GetLastError RaiseException RtlPcToFileHeader InterlockedFlushSList RtlUnwindEx InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter GetModuleHandleW DeleteCriticalSection UnhandledExceptionFilter RtlVirtualUnwind WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx RtlUnwind EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry

user32

GetAncestor RegisterClassW MonitorFromWindow GetWindow SetWindowLongW GetWindowLongW GetCursorPos GetWindowRect SetWindowTextW SetForegroundWindow ReleaseCapture IsZoomed IsWindowVisible GetWindowPlacement ShowWindowAsync PostMessageW SendMessageW GetMonitorInfoW MonitorFromRect MonitorFromPoint LoadIconW LoadCursorW SetParent SetWindowLongPtrW GetWindowLongPtrW FillRect GetClientRect SetFocus SetWindowPos MoveWindow ShowWindow DestroyWindow CreateWindowExW UnregisterClassW DefWindowProcW

gdi32

CreateSolidBrush DeleteObject

dwmapi

DwmExtendFrameIntoClientArea

Name

.text

Size

233KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

102KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

file_selector_windows_plugin.dll

IMPHASH 455f183f87ffd00f3a1fbe8635527edc
SHA256 dd4f88d09a22986d1ee620855d9155807da471deaf12c8ab71234ed6d64ae13f
MD5 934aa0f4e4f4d7d062c2814807d45266
SHA1 56f4322758a2cb331ebfba46b2ad1c560d5de3da
SHA512 8189353cbf6258a8fd926e9d463bad8d7d9bc42f065b63d4a1de27d136d157a89e6f98a0238489b03731bd4353b66a078f57fbc2ca475ae7a8daff5266ad8244
SSDEEP 6144:yhDy6RwpACl7b97g8SNDRure8UVDR447xHsTC:8KpACdWDNDQelVt447xHsm
TLSH
T1DC746C1AFBA814B9E1678138CDA74945EBB27C464B6197CF23900A5A2F33FE0593E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

92776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopMessengerLock FlutterDesktopMessengerUnlock FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopViewGetHWND FlutterDesktopPluginRegistrarGetView FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopMessengerSendResponse FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerSetCallback

kernel32

TlsAlloc WriteConsoleW CreateFileW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapQueryInformation MultiByteToWideChar WideCharToMultiByte HeapSize HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo GetLastError ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount RtlUnwind TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers WriteFile GetConsoleOutputCP

user32

GetAncestor

shell32

SHCreateItemFromParsingName

ole32

CoTaskMemFree CoCreateInstance

Name

.text

Size

226KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

flutter_custom_cursor_plugin.dll

IMPHASH 2c939c55634dfe52ce4622291d4b3c5a
SHA256 492a2319b18d3cd60d1569f38aeb6fceff60d705327be4c627ab452fcd1f3353
MD5 604af1dcbd455f8aa957a2369e3b239b
SHA1 ca0dcdab438d0aa1271883e3347f176b473c426f
SHA512 0e62ade20d2609f3a519603843a7fa67dd73ddc1f43a0e5502ce013a436086999aa68234e920ad69674798034360e3d3e767f3d3a79d01e0786f8a9cf4928987
SSDEEP 6144:qBvCz6DzEUctTvKfyNPUUP467qaEag0q5:MvCz0+TGytUz67qaEagp
TLSH
T1BA644B1AF7A914BAE167813CCD534945EBF27C524BA4D6CB0390069A3F37BE44A3E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

71856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopPluginRegistrarUnregisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarRegisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarGetView FlutterDesktopPluginRegistrarSetDestructionHandler

user32

LoadCursorW SetCursor LoadCursorFromFileA

kernel32

GetLastError WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx InterlockedFlushSList RtlPcToFileHeader RaiseException RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode ReadFile

Name

.text

Size

198KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

89KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

flutter_gpu_texture_renderer_plugin.dll

IMPHASH ea0a9c166d8c1e1304bb99a0b7952567
SHA256 4ebe417a6262639be3c443a234e0884c190d8b8b762d08b88fb425d2c399a696
MD5 6b67dea716c246f5b516a5129d7d58c7
SHA1 f6150754211814d820d39fae059d046217ec2efd
SHA512 15bd14fb25345b314c5e10fb545995d54319745ccf77afbf12cc8c4d447c676ff0179287fdc4af92fe80a20230bc9c8d79194c6963afc7eacdeb8b3fd4043e1b
SSDEEP 6144:KIqQQVCRW0NZNkzIMe+tfhyKMSbg7Ti4Pw:yQQVCRVZuzi+XyKMv7Ti4
TLSH
T1DD746C2AFBA454BAD167C138C9674945E7B27C4A0B60DACF13A40B5A2F37FE0893D711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

90836

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopViewGetGraphicsAdapter FlutterDesktopPluginRegistrarGetView FlutterDesktopMessengerSetCallback

kernel32

GetCurrentProcessId WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId FormatMessageA WideCharToMultiByte MultiByteToWideChar GetStringTypeW QueryPerformanceCounter QueryPerformanceFrequency LocalFree GetLocaleInfoEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent RtlUnwind InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx InterlockedFlushSList RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapReAlloc

Name

.text

Size

221KB

Virtual Size

221KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

flutter_windows.dll

IMPHASH 43bdba0e433437185a2ca3ff043f1bea
SHA256 b66713715a7aeaa2f88ba18838aa7c245556eaaeb31c82da3f5aebcb71a7715e
MD5 225782e5d02f400a76b8fabe8a6f5cd1
SHA1 e54ef4f664a250808749be2ea9870607c20ace31
SHA512 9e88489361b36970a982329184b7afa9ef403ca86830427c60397e49522e5d38fc652ce4b65e79c54583a50ffee83fb138a02d638e015c9ff53e56164556be76
SSDEEP 98304:xk6EAbHbaq5XHYRpgzYv+tnesH+HjRZtUHTUz8xNCg2wByTjHfZ7FIpoUsxZ33eE:xxHjGgzG+sFGPBIfVmoRf3eIa
TLSH
T15F077C03F59540F9C08DD2B89B5BAA27F671B8490621B5DF278807263FA7BB05B3E750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

13679812

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\b\s\w\ir\cache\builder\src\out\ci\host_release\flutter_windows.dll.pdb

advapi32

RegOpenKeyExW RegCloseKey RegGetValueW RegNotifyChangeKeyValue RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegDeleteKeyW

iphlpapi

GetAdaptersAddresses

ole32

CoTaskMemFree CoTaskMemAlloc CoCreateInstance CoTaskMemRealloc

oleaut32

SysFreeString SysStringLen SafeArrayCreateVector SafeArrayPutElement VarBstrCmp LoadTypeLi SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetVartype VarUI4FromStr VariantClear LoadRegTypeLi SafeArrayGetDim SafeArrayDestroy SafeArrayAccessData SafeArrayUnaccessData SysAllocString SysAllocStringLen VariantInit VariantCopy

psapi

GetProcessMemoryInfo EnumProcessModules

shlwapi

PathIsRelativeW PathCreateFromUrlW UrlIsW

rpcrt4

UuidCreateSequential RpcStringFreeW UuidToStringW

winmm

timeBeginPeriod timeEndPeriod

ws2_32

ioctlsocket freeaddrinfo socket getaddrinfo closesocket shutdown connect setsockopt recv send getsockopt WSAGetLastError WSASetLastError WSARecv WSASend WSASendTo WSARecvFrom GetHostNameW htons ntohs WSAAddressToStringW WSAStartup getsockname getpeername getnameinfo InetPtonW InetNtopW WSAIoctl WSASocketW listen bind

imm32

ImmGetCompositionStringW ImmReleaseContext ImmSetCompositionStringW ImmNotifyIME ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow

user32

GetSysColor SetClipboardData EmptyClipboard GetClipboardData IsClipboardFormatAvailable IsWindow CloseClipboard MessageBeep GetKeyState CloseTouchInputHandle GetTouchInputInfo DestroyCaret ReleaseCapture CreateCaret SetCapture GetMessageExtraInfo DefWindowProcW RegisterTouchWindow SetWindowLongPtrW SendMessageW MapVirtualKeyW PeekMessageW RegisterClassW PostMessageW TrackMouseEvent ScreenToClient GetCursorPos SetCursor DestroyWindow SetTimer SetUserObjectInformationA CreateWindowExW LoadCursorW SystemParametersInfoW ClientToScreen MonitorFromPoint MonitorFromWindow UnregisterClassW CreateIconIndirect ReleaseDC GetDC GetClassInfoW GetClientRect WindowFromDC GetWindowThreadProcessId IsIconic InvalidateRect CreateWindowExA KillTimer GetFocus SetCaretPos PostQuitMessage EnumThreadWindows GetParent CharNextW NotifyWinEvent GetWindowLongPtrW UnregisterClassA OpenClipboard

opengl32

wglGetProcAddress wglGetCurrentContext

bcrypt

BCryptGenRandom

api-ms-win-core-path-l1-1-0

PathCchCombineEx PathCchRemoveFileSpec

ntdll

RtlAddGrowableFunctionTable VerSetConditionMask RtlDeleteGrowableFunctionTable RtlUnwindEx RtlUnwind

oleacc

LresultFromObject

uiautomationcore

UiaRaiseAutomationEvent UiaRaiseAutomationPropertyChangedEvent UiaGetReservedNotSupportedValue UiaGetReservedMixedAttributeValue UiaHostProviderFromHwnd

propsys

VariantCompare

dxgi

CreateDXGIFactory1 CreateDXGIFactory

gdi32

GetPixelFormat SwapBuffers DescribePixelFormat SetPixelFormat ChoosePixelFormat SetDIBitsToDevice PatBlt GetDeviceCaps DeleteDC SetPixel GetPixel SelectObject CreateCompatibleBitmap GetObjectW CreateCompatibleDC CreateDIBSection DeleteObject

d3d9

D3DPERF_EndEvent D3DPERF_GetStatus Direct3DCreate9 D3DPERF_SetMarker D3DPERF_BeginEvent

kernel32

GetCommandLineA GetCPInfo CompareStringEx FlsFree FlsSetValue FlsAlloc LCMapStringEx InitializeCriticalSectionEx EncodePointer RtlPcToFileHeader GetStringTypeW InitOnceComplete InitOnceBeginInitialize GetExitCodeThread SwitchToThread GetFileInformationByHandleEx AreFileApisANSI FindFirstFileExW GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter RtlVirtualUnwind GetProcessHeap GetOEMCP GetACP InterlockedPushEntrySList InterlockedFlushSList CreateThread ExitThread FlsGetValue FreeLibraryAndExitThread RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead GetEnvironmentVariableW SetEnvironmentVariableW GetTempFileNameA GetTempPathA GetDriveTypeW GetFileAttributesExW LoadLibraryExA GetModuleHandleExA GetModuleHandleA LocaleNameToLCID lstrcmpiW SizeofResource LoadResource FindResourceW GetTimeZoneInformationForYear SleepConditionVariableSRW VirtualQuery TlsFree CreatePipe SetEvent Sleep QueryPerformanceCounter QueryPerformanceFrequency WakeAllConditionVariable WakeConditionVariable SleepConditionVariableCS InitializeConditionVariable TryAcquireSRWLockExclusive SetFileTime DeviceIoControl MoveFileW CopyFileExW CreateSymbolicLinkW GetFullPathNameW UnlockFileEx LockFileEx VirtualFree VirtualProtect SetFilePointerEx VirtualAlloc SetFileAttributesW MoveFileExW GetConsoleScreenBufferInfo GetExitCodeProcess CreateNamedPipeW TerminateProcess OpenProcess WaitForMultipleObjects CreateProcessW UpdateProcThreadAttribute InitializeProcThreadAttributeList DeleteProcThreadAttributeList ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetUserDefaultLocaleName GetSystemInfo SetUnhandledExceptionFilter SetCurrentDirectoryW GetCurrentDirectoryW GetQueuedCompletionStatus ReadDirectoryChangesW WriteFile PostQueuedCompletionStatus GetFileType OpenThread CancelIoEx CreateIoCompletionPort PeekNamedPipe HeapSize ReadConsoleW TzSpecificLocalTimeToSystemTime SystemTimeToFileTime HeapFree HeapAlloc GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetModuleHandleExW IsValidCodePage SetStdHandle SetConsoleMode GetConsoleMode GetStdHandle SetConsoleCP SetConsoleOutputCP InitializeCriticalSectionAndSpinCount GetLastError FormatMessageW DecodePointer DeleteCriticalSection LoadLibraryA GetProcAddress CreateEventW RegisterWaitForSingleObject ResetEvent UnregisterWait CloseHandle OutputDebugStringW LocalFree GetCurrentProcess GetModuleHandleW GetCurrentThread SetThreadPriority GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoEx GetCurrentThreadId GetCurrentProcessId CreateToolhelp32Snapshot Thread32Next Thread32First FormatMessageA GetThreadPreferredUILanguages CreateSemaphoreW WaitForSingleObject ReleaseSemaphore WaitForSingleObjectEx RaiseException GetCommandLineW WideCharToMultiByte GetTempPathW CreateDirectoryW CreateFileW DuplicateHandle GetFileInformationByHandle GetFileAttributesW RemoveDirectoryW DeleteFileW SetFilePointer SetEndOfFile FlushViewOfFile FlushFileBuffers FindFirstFileW FindNextFileW FindClose GetFinalPathNameByHandleW GetFileSize CreateFileMappingW MapViewOfFile UnmapViewOfFile CreateWaitableTimerW VerifyVersionInfoW SetWaitableTimer LoadLibraryW FreeLibrary GetModuleFileNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetTimeZoneInformation GetSystemTimeAsFileTime CreateFileA IsDebuggerPresent GetNativeSystemInfo LoadLibraryExW MultiByteToWideChar GetFileSizeEx ReadFile OutputDebugStringA InitOnceExecuteOnce InitializeSRWLock AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive TlsGetValue TlsAlloc SetLastError TlsSetValue InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetFinalPathNameByHandleA SetConsoleCtrlHandler GetConsoleOutputCP WriteConsoleW

crypt32

CertCloseStore CertOpenStore CertEnumCertificatesInStore CertFreeCertificateContext

FlutterDesktopEngineCreate FlutterDesktopEngineCreateViewController FlutterDesktopEngineDestroy FlutterDesktopEngineGetMessenger FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineGetTextureRegistrar FlutterDesktopEngineProcessExternalWindowMessage FlutterDesktopEngineProcessMessages FlutterDesktopEngineRegisterPlatformViewType FlutterDesktopEngineReloadSystemFonts FlutterDesktopEngineRun FlutterDesktopEngineSetNextFrameCallback FlutterDesktopGetDpiForHWND FlutterDesktopGetDpiForMonitor FlutterDesktopMessengerAddRef FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerLock FlutterDesktopMessengerRelease FlutterDesktopMessengerSend FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSetCallback FlutterDesktopMessengerUnlock FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopPluginRegistrarGetView FlutterDesktopPluginRegistrarGetViewById FlutterDesktopPluginRegistrarRegisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopPluginRegistrarUnregisterTopLevelWindowProcDelegate FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopResyncOutputStreams FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopViewControllerCreate FlutterDesktopViewControllerDestroy FlutterDesktopViewControllerForceRedraw FlutterDesktopViewControllerGetEngine FlutterDesktopViewControllerGetView FlutterDesktopViewControllerGetViewId FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopViewGetGraphicsAdapter FlutterDesktopViewGetHWND InternalFlutterGpuTestClass_Create InternalFlutterGpuTestClass_Method InternalFlutterGpuTestProc InternalFlutterGpuTestProcWithCallback InternalFlutterGpu_CommandBuffer_Initialize InternalFlutterGpu_CommandBuffer_Submit InternalFlutterGpu_Context_GetDefaultColorFormat InternalFlutterGpu_Context_GetDefaultDepthStencilFormat InternalFlutterGpu_Context_GetDefaultStencilFormat InternalFlutterGpu_Context_InitializeDefault InternalFlutterGpu_DeviceBuffer_Initialize InternalFlutterGpu_DeviceBuffer_InitializeWithHostData InternalFlutterGpu_DeviceBuffer_Overwrite InternalFlutterGpu_HostBuffer_EmplaceBytes InternalFlutterGpu_HostBuffer_Initialize InternalFlutterGpu_RenderPass_Begin InternalFlutterGpu_RenderPass_BindIndexBufferDevice InternalFlutterGpu_RenderPass_BindIndexBufferHost InternalFlutterGpu_RenderPass_BindPipeline InternalFlutterGpu_RenderPass_BindTexture InternalFlutterGpu_RenderPass_BindUniformDevice InternalFlutterGpu_RenderPass_BindUniformHost InternalFlutterGpu_RenderPass_BindVertexBufferDevice InternalFlutterGpu_RenderPass_BindVertexBufferHost InternalFlutterGpu_RenderPass_ClearBindings InternalFlutterGpu_RenderPass_Draw InternalFlutterGpu_RenderPass_Initialize InternalFlutterGpu_RenderPass_SetColorAttachment InternalFlutterGpu_RenderPass_SetColorBlendEnable InternalFlutterGpu_RenderPass_SetColorBlendEquation InternalFlutterGpu_RenderPass_SetDepthCompareOperation InternalFlutterGpu_RenderPass_SetDepthStencilAttachment InternalFlutterGpu_RenderPass_SetDepthWriteEnable InternalFlutterGpu_RenderPipeline_Initialize InternalFlutterGpu_ShaderLibrary_GetShader InternalFlutterGpu_ShaderLibrary_InitializeWithAsset InternalFlutterGpu_Shader_GetUniformMemberOffset InternalFlutterGpu_Shader_GetUniformStructSize InternalFlutterGpu_Texture_AsImage InternalFlutterGpu_Texture_BytesPerTexel InternalFlutterGpu_Texture_Initialize InternalFlutterGpu_Texture_Overwrite InternalFlutterGpu_Texture_SetCoordinateSystem

librustdesk.dll

IMPHASH 1485a3df40fdd0ad813889fd9e2ee7f1
SHA256 54c01d60839a19e343f72b576288ef88194b76d5f656904f1ffee8bd348013c3
MD5 c39a8ef5aded44cd3f542f11e3f17504
SHA1 258dbe7caf334419fbbfa09edafb5672fdd6a2a9
SHA512 82f1af87ca1fb379fa25d66d9e125c7de4cf10be63594f3ab805a4e0436e53e82bcf08c5f5a3b890ead5d4849e606c791640ac12fcdde8fcb6d57d33f3fd5dc7
SSDEEP 393216:Mv92zVGquhvCCUvGSVtfm47MrnFEiiPyfzxQRcqbN5HedM/L5iVtlLFW/1vg1FfB:M8VG33BwjPsx
TLSH
T17C576B42F75251E8C02AE674826B6E32FB31784D472167EB17E45A313E62BD01B3B7C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e7:be:6b:c8:40:68:6c:11:3b:08:bb:a4:84:c3:0b:de:78:69:2e:b1:1a:a4:b5:93:ba:b0:98:fc:d3:cd:ca:57

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=DLL Tecnologia,O=DLL Tecnologia,L=Rio de Janeiro,ST=RJ,C=BR

Chains

May 22, 2026

CN=DLL Tecnologia,O=DLL Tecnologia,L=Rio de Janeiro,ST=RJ,C=BR

Subject

CN=DLL Tecnologia,O=DLL Tecnologia,L=Rio de Janeiro,ST=RJ,C=BR

Serial Number

5c:53:ab:96:e8:ec:ab:94:45:63:74:f4:c3:f5:9c:eb

Issuer

CN=DLL Tecnologia,O=DLL Tecnologia,L=Rio de Janeiro,ST=RJ,C=BR

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 21, 2026 - May 21, 2036

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

18068900

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

librustdesk.pdb

sas

SendSAS

newdev

UpdateDriverForPlugAndPlayDevicesW

wtsapi32

WTSEnumerateSessionsA WTSFreeMemory WTSQuerySessionInformationW

kernel32

LocalFree CreateNamedPipeW GlobalFree GetProcessId VirtualQueryEx IsProcessorFeaturePresent ConnectNamedPipe OpenFileMappingW VirtualQuery DeleteProcThreadAttributeList WaitForSingleObject GetOverlappedResult GlobalLock ExpandEnvironmentStringsW InitializeProcThreadAttributeList UpdateProcThreadAttribute CreateProcessW WriteFile CreatePipe GetFileType GetNamedPipeInfo SetThreadPriority WaitForMultipleObjectsEx InitializeConditionVariable WakeConditionVariable GlobalUnlock WakeAllConditionVariable CreateSemaphoreW InitOnceBeginInitialize InitOnceComplete GetCurrentThread OpenProcess GetCurrentProcess GetProcAddress LoadLibraryExA GlobalSize GetExitCodeProcess ExitThread FlsAlloc FlsGetValue FlsSetValue FlsFree GetCommandLineA HeapSize GlobalAlloc CreateMutexA ReleaseMutex ResetEvent SetFilePointer ReadFile GetFileTime GetFileSize TlsFree SetEvent CreateThread FreeLibrary LocalAlloc GetFileAttributesW TlsSetValue UnmapViewOfFile CreateFileMappingW CreateEventW MapViewOfFile VirtualProtect CreateSemaphoreA SetEndOfFile EncodePointer GetCurrentProcessId Process32NextW Process32FirstW DuplicateHandle CreateToolhelp32Snapshot CreateEventA CreateFileW ResumeThread QueueUserAPC VirtualAllocEx FormatMessageW GetLastError FlushFileBuffers SetLastError ReleaseSemaphore GetCurrentDirectoryW FindNextFileW FindFirstFileW FindClose GetStartupInfoW GetCurrentThreadId TerminateProcess CloseHandle TlsAlloc HeapFree HeapAlloc GetProcessHeap Sleep WaitForSingleObjectEx TlsGetValue GetTimeZoneInformationForYear DeviceIoControl EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStringTypeW DecodePointer LCMapStringEx GetCPInfo InterlockedFlushSList RtlPcToFileHeader RaiseException RtlUnwindEx RtlUnwind InitializeCriticalSectionAndSpinCount FreeLibraryAndExitThread LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW OutputDebugStringW IsValidCodePage GetACP GetOEMCP SetStdHandle GetFileSizeEx GetTempPathW WaitForMultipleObjects SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW ReadConsoleW SetEnvironmentVariableW DeleteFileW GetFinalPathNameByHandleW SwitchToThread ExitProcess FindFirstFileExW CopyFileExW RemoveDirectoryW GetCommandLineW GetEnvironmentVariableW SetThreadStackGuarantee SetFilePointerEx CreateDirectoryW GetStdHandle GetWindowsDirectoryW GetSystemDirectoryW GetEnvironmentStringsW GetFileInformationByHandle CancelIo GetSystemTimePreciseAsFileTime ReadFileEx HeapReAlloc SetFileInformationByHandle MoveFileExW GetFullPathNameW SleepEx WriteFileEx FreeEnvironmentStringsW CompareStringOrdinal CancelIoEx SetFileCompletionNotificationModes CreateIoCompletionPort GetQueuedCompletionStatusEx PostQueuedCompletionStatus InitializeCriticalSection SetHandleInformation SetThreadErrorMode GetProcessIoCounters GetSystemTimes GetProcessTimes GetLogicalProcessorInformationEx GetTickCount64 K32GetPerformanceInfo GlobalMemoryStatusEx SetConsoleMode GetFileInformationByHandleEx GetConsoleMode GetComputerNameExW SetFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetLogicalDrives WideCharToMultiByte GetLogicalProcessorInformation TryEnterCriticalSection SleepConditionVariableCS DeleteCriticalSection InitializeCriticalSectionEx GetModuleHandleW WTSGetActiveConsoleSessionId WriteProcessMemory GetModuleHandleA GetNativeSystemInfo ProcessIdToSessionId SetConsoleCtrlHandler SetThreadExecutionState LoadLibraryA LoadLibraryExW SetDllDirectoryW GetModuleHandleExA LoadLibraryW VerSetConditionMask FormatMessageA VerifyVersionInfoW lstrlenW GetSystemInfo GetUserPreferredUILanguages lstrcmpiW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetModuleFileNameW GetModuleHandleExW ReadProcessMemory SetErrorMode LeaveCriticalSection

oleaut32

GetErrorInfo SysStringLen SetErrorInfo SysFreeString

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

userenv

DestroyEnvironmentBlock GetUserProfileDirectoryW CreateEnvironmentBlock

comctl32

SetWindowSubclass RemoveWindowSubclass DefSubclassProc

advapi32

LookupAccountSidW SetEntriesInAclW CreateProcessWithLogonW CreateProcessAsUserW ImpersonateLoggedOnUser AdjustTokenPrivileges DuplicateTokenEx LookupPrivilegeValueW DuplicateToken FreeSid EqualSid AllocateAndInitializeSid OpenProcessToken CreateWellKnownSid LogonUserW SetSecurityDescriptorDacl ImpersonateAnonymousToken InitializeSecurityDescriptor GetLengthSid GetTokenInformation RevertToSelf CreateProcessWithTokenW RegOpenKeyExW StartServiceCtrlDispatcherW RegDeleteTreeW RegSetValueExW RegQueryValueExW RegDeleteValueW CloseServiceHandle OpenSCManagerW OpenServiceW QueryServiceStatusEx RegCloseKey RegDeleteKeyW RegEnumKeyExW RegEnumValueW SetServiceStatus GetUserNameW IsValidSid CopySid SystemFunction036 RegisterServiceCtrlHandlerExW

shell32

ShellExecuteA SHGetKnownFolderPath SHAppBarMessage SHAddToRecentDocs Shell_NotifyIconGetRect DragQueryFileW CommandLineToArgvW DragFinish Shell_NotifyIconW ShellExecuteExW ShellExecuteW

user32

ExitWindowsEx GetRawInputData GetMessageW DefWindowProcA AddClipboardFormatListener UnhookWindowsHookEx DispatchMessageA TranslateMessage GetMessageA SetWindowsHookExA SetForegroundWindow SendMessageW GetMenuBarInfo ToUnicodeEx GetKeyboardLayout GetMenuItemInfoW ReleaseCapture SetCapture CreateAcceleratorTableW MsgWaitForMultipleObjectsEx RegisterClassExW DestroyMenu EnableMenuItem RemoveMenu GetMenu CreatePopupMenu CreateMenu SetMenu DrawMenuBar SetMenuItemInfoW DrawIconEx AppendMenuW InsertMenuW SendInput PostQuitMessage CheckMenuItem DestroyAcceleratorTable SystemParametersInfoA CreateIcon GetWindowRect PeekMessageW ReleaseDC GetDC LoadCursorA FindWindowExA GetIconInfo AttachThreadInput TrackPopupMenu KillTimer SetWindowLongPtrW GetWindowLongPtrW RemoveClipboardFormatListener RegisterClassW DestroyIcon RegisterWindowMessageA ScreenToClient MapWindowPoints DispatchMessageW GetClientRect GetWindowLongW ClientToScreen OffsetRect MessageBoxW BlockInput GetWindowDC IsProcessDPIAware LoadCursorW SetWindowDisplayAffinity FillRect SetCursor TrackMouseEvent GetTouchInputInfo DefWindowProcW IsClipboardFormatAvailable EmptyClipboard GetClipboardFormatNameA CountClipboardFormats RegisterClipboardFormatW RegisterClipboardFormatA GetClipboardData SetClipboardData ChangeClipboardChain SetClipboardViewer GetClipboardOwner GetCursorInfo GetCursorPos LockWorkStation AllowSetForegroundWindow CloseTouchInputHandle CloseClipboard OpenClipboard CreateWindowExA RegisterClassExA PostThreadMessageA AdjustWindowRectEx ChangeDisplaySettingsExW EnumDisplaySettingsExW EnumDisplayDevicesW FindWindowA SetCursorPos GetDoubleClickTime ClipCursor RedrawWindow DestroyWindow MonitorFromRect MonitorFromWindow InvalidateRgn SetWindowPos PostMessageW RegisterTouchWindow GetSystemMetrics IsWindow CreateWindowExW ValidateRect ShowWindow MapVirtualKeyExW SetWindowLongW GetSystemMenu VkKeyScanExW PostThreadMessageW RegisterRawInputDevices SetPropW GetKeyboardState wsprintfW GetAsyncKeyState PostMessageA SendMessageA GetUserObjectInformationA GetThreadDesktop CloseDesktop SetThreadDesktop OpenInputDesktop GetMonitorInfoW GetKeyState EnumDisplaySettingsW CallNextHookEx ShowCursor GetClipCursor GetActiveWindow SetTimer SystemParametersInfoW GetUpdateRect GetForegroundWindow DrawTextW MapVirtualKeyW GetWindowPlacement FindWindowW SetWindowPlacement GetWindowThreadProcessId

ole32

CoInitializeEx OleInitialize RegisterDragDrop CoUninitialize PropVariantClear ReleaseStgMedium CoTaskMemAlloc OleUninitialize OleIsCurrentClipboard OleSetClipboard CoTaskMemFree OleGetClipboard CoCreateInstance RevokeDragDrop

bcryptprimitives

ProcessPrng

secur32

QueryContextAttributesW FreeContextBuffer ApplyControlToken DeleteSecurityContext FreeCredentialsHandle AcquireCredentialsHandleA DecryptMessage AcceptSecurityContext InitializeSecurityContextW EncryptMessage

gdi32

DeleteObject SetBkMode CreateSolidBrush DeleteDC SelectObject CreateCompatibleDC CreateDCW SetTextColor GetBitmapBits GetObjectA CreateDIBitmap CreateDIBSection GetDeviceCaps CreateRectRgn CreateCompatibleBitmap GetDIBits BitBlt

dwmapi

DwmEnableBlurBehindWindow

ws2_32

send recv WSAGetLastError getsockopt accept connect WSAStartup getsockname bind WSASocketW ioctlsocket getpeername setsockopt WSAIoctl sendto shutdown recvfrom WSASend socket getaddrinfo closesocket freeaddrinfo WSACleanup listen

setupapi

SetupDiSetDeviceRegistryPropertyW SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupDiGetDeviceInstallParamsW SetupDiSetClassInstallParamsW SetupDiGetDeviceInfoListDetailW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsExW SetupDiGetINFClassW SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupDiCallClassInstaller SetupDiDestroyDeviceInfoList

cfgmgr32

CM_Get_DevNode_Status

winspool.drv

EnumPortsW GetDefaultPrinterW EnumPrintersW XcvDataW ClosePrinter EnumPrinterDriversW UploadPrinterDriverPackageW InstallPrinterDriverFromPackageW AddPrinterW DeletePrinterDriverExW OpenPrinterW DeletePrinterDriverPackageW SetPrinterW DeletePrinter

crypt32

CertVerifyTimeValidity CertFreeCertificateChain CertFreeCertificateContext CertGetEnhancedKeyUsage CertAddCertificateContextToStore CertDuplicateCertificateContext CertGetCertificateChain CertCloseStore CertDuplicateStore CertOpenStore CertDuplicateCertificateChain CertEnumCertificatesInStore CertVerifyCertificateChainPolicy

iphlpapi

GetAdaptersAddresses GetBestInterface SendARP

ntdll

NtQuerySystemInformation NtOpenFile NtQueryInformationProcess RtlGetNtVersionNumbers NtWriteFile NtCreateNamedPipeFile NtReadFile NtCreateFile NtDeviceIoControlFile RtlNtStatusToDosError RtlGetVersion NtCancelIoFileEx

powrprof

CallNtPowerInformation

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

pdh

PdhCollectQueryData PdhAddEnglishCounterA PdhCloseQuery PdhCollectQueryDataEx PdhGetFormattedCounterValue PdhRemoveCounter PdhAddEnglishCounterW PdhOpenQueryA

psapi

GetModuleFileNameExW GetProcessMemoryInfo

bcrypt

BCryptGenRandom

drop_dart_object free_WireSyncReturn free_c_args free_zero_copy_buffer_f32 free_zero_copy_buffer_f64 free_zero_copy_buffer_i16 free_zero_copy_buffer_i32 free_zero_copy_buffer_i64 free_zero_copy_buffer_i8 free_zero_copy_buffer_u16 free_zero_copy_buffer_u32 free_zero_copy_buffer_u64 free_zero_copy_buffer_u8 get_dart_object get_rustdesk_app_name init_frb_dart_api_dl new_StringList_0 new_dart_opaque new_int_32_list_0 new_uint_8_list_0 privacy_mode_hook_keyboard privacy_mode_hook_mouse rustdesk_core_main_args session_get_rgba store_dart_post_cobject wire_cm_can_elevate wire_cm_check_click_time wire_cm_check_clients_length wire_cm_close_connection wire_cm_close_voice_call wire_cm_elevate_portable wire_cm_get_click_time wire_cm_get_clients_length wire_cm_get_clients_state wire_cm_get_config wire_cm_handle_incoming_voice_call wire_cm_init wire_cm_login_res wire_cm_remove_disconnected_connection wire_cm_send_chat wire_cm_switch_back wire_cm_switch_permission wire_get_double_click_time wire_get_file_transfer_max_size_mb wire_get_local_flutter_option wire_get_local_kb_layout_type wire_get_next_texture_key wire_get_voice_call_input_device wire_host_stop_system_key_propagate wire_install_install_me wire_install_install_options wire_install_install_path wire_install_run_without_install wire_install_show_run_without_install wire_is_custom_client wire_is_disable_ab wire_is_disable_account wire_is_disable_group_panel wire_is_disable_installation wire_is_disable_settings wire_is_disable_voice_call wire_is_incoming_only wire_is_outgoing_only wire_is_preset_password wire_is_preset_password_mobile_only wire_is_selinux_enforcing wire_is_support_multi_ui_session wire_main_account_auth wire_main_account_auth_cancel wire_main_account_auth_result wire_main_audio_support_loopback wire_main_change_id wire_main_change_language wire_main_change_theme wire_main_check_connect_status wire_main_check_hwcodec wire_main_check_mouse_time wire_main_check_super_user_permission wire_main_clear_ab wire_main_clear_group wire_main_clear_trusted_devices wire_main_clip_cursor wire_main_create_shortcut wire_main_current_is_wayland wire_main_default_privacy_mode_impl wire_main_device_id wire_main_device_name wire_main_discover wire_main_forget_password wire_main_generate2fa wire_main_get_api_server wire_main_get_app_name wire_main_get_app_name_sync wire_main_get_async_status wire_main_get_build_date wire_main_get_buildin_option wire_main_get_common wire_main_get_common_sync wire_main_get_connect_status wire_main_get_data_dir_ios wire_main_get_displays wire_main_get_env wire_main_get_error wire_main_get_fav wire_main_get_fingerprint wire_main_get_hard_option wire_main_get_home_dir wire_main_get_http_status wire_main_get_input_source wire_main_get_lan_peers wire_main_get_langs wire_main_get_last_remote_id wire_main_get_license wire_main_get_local_option wire_main_get_login_device_info wire_main_get_main_display wire_main_get_mouse_time wire_main_get_my_id wire_main_get_new_stored_peers wire_main_get_new_version wire_main_get_option wire_main_get_option_sync wire_main_get_options wire_main_get_options_sync wire_main_get_peer_flutter_option_sync wire_main_get_peer_option wire_main_get_peer_option_sync wire_main_get_peer_sync wire_main_get_permanent_password wire_main_get_printer_names wire_main_get_proxy_status wire_main_get_socks wire_main_get_software_update_url wire_main_get_sound_inputs wire_main_get_temporary_password wire_main_get_trusted_devices wire_main_get_unlock_pin wire_main_get_use_texture_render wire_main_get_user_default_option wire_main_get_uuid wire_main_get_version wire_main_goto_install wire_main_handle_relay_id wire_main_handle_wayland_screencast_restore_token wire_main_has_file_clipboard wire_main_has_gpu_texture_render wire_main_has_hwcodec wire_main_has_valid_2fa_sync wire_main_has_valid_bot_sync wire_main_has_vram wire_main_hide_dock wire_main_http_request wire_main_init wire_main_init_input_source wire_main_is_can_input_monitoring wire_main_is_can_screen_recording wire_main_is_installed wire_main_is_installed_daemon wire_main_is_installed_lower_version wire_main_is_login_wayland wire_main_is_option_fixed wire_main_is_process_trusted wire_main_is_root wire_main_is_share_rdp wire_main_is_using_public_server wire_main_load_ab wire_main_load_fav_peers wire_main_load_group wire_main_load_lan_peers wire_main_load_recent_peers wire_main_load_recent_peers_for_ab wire_main_max_encrypt_len wire_main_on_main_window_close wire_main_peer_exists wire_main_peer_has_password wire_main_remove_discovered wire_main_remove_peer wire_main_remove_trusted_devices wire_main_resolve_avatar_url wire_main_save_ab wire_main_save_group wire_main_set_common wire_main_set_cursor_position wire_main_set_env wire_main_set_home_dir wire_main_set_input_source wire_main_set_local_option wire_main_set_option wire_main_set_options wire_main_set_peer_alias wire_main_set_peer_flutter_option_sync wire_main_set_peer_option wire_main_set_peer_option_sync wire_main_set_permanent_password wire_main_set_share_rdp wire_main_set_socks wire_main_set_unlock_pin wire_main_set_user_default_option wire_main_show_option wire_main_start_dbus_server wire_main_start_ipc_url_server wire_main_start_service wire_main_stop_service wire_main_store_fav wire_main_support_remove_wallpaper wire_main_supported_hwdecodings wire_main_supported_input_source wire_main_supported_privacy_mode_impls wire_main_test_if_valid_server wire_main_test_wallpaper wire_main_update_me wire_main_update_temporary_password wire_main_uri_prefix_sync wire_main_verify2fa wire_main_verify_bot wire_main_video_save_directory wire_main_wol wire_option_synced wire_peer_get_sessions_count wire_plugin_enable wire_plugin_event wire_plugin_feature_is_enabled wire_plugin_get_session_option wire_plugin_get_shared_option wire_plugin_install wire_plugin_is_enabled wire_plugin_list_reload wire_plugin_register_event_stream wire_plugin_reload wire_plugin_set_session_option wire_plugin_set_shared_option wire_plugin_sync_ui wire_query_onlines wire_send_url_scheme wire_session_add_existed_sync wire_session_add_job wire_session_add_port_forward wire_session_add_sync wire_session_alternative_codecs wire_session_cancel_job wire_session_change_prefer_codec wire_session_change_resolution wire_session_close wire_session_close_terminal wire_session_close_voice_call wire_session_create_dir wire_session_ctrl_alt_del wire_session_elevate_direct wire_session_elevate_with_logon wire_session_enter_or_leave wire_session_get_audit_guid wire_session_get_audit_server_sync wire_session_get_common wire_session_get_common_sync wire_session_get_conn_session_id wire_session_get_conn_token wire_session_get_custom_image_quality wire_session_get_displays_as_individual_windows wire_session_get_edge_scroll_edge_thickness wire_session_get_enable_trusted_devices wire_session_get_flutter_option wire_session_get_image_quality wire_session_get_is_recording wire_session_get_keyboard_mode wire_session_get_last_audit_note wire_session_get_option wire_session_get_peer_option wire_session_get_platform wire_session_get_remember wire_session_get_reverse_mouse_wheel_sync wire_session_get_rgba_size wire_session_get_scroll_style wire_session_get_toggle_option wire_session_get_toggle_option_sync wire_session_get_trackpad_speed wire_session_get_use_all_my_displays_for_the_remote_session wire_session_get_view_style wire_session_handle_flutter_key_event wire_session_handle_flutter_raw_key_event wire_session_handle_screenshot wire_session_input_key wire_session_input_os_password wire_session_input_string wire_session_is_keyboard_mode_supported wire_session_is_multi_ui_session wire_session_load_last_transfer_jobs wire_session_lock_screen wire_session_login wire_session_new_rdp wire_session_next_rgba wire_session_on_waiting_for_image_dialog_show wire_session_open_terminal wire_session_peer_option wire_session_printer_response wire_session_read_dir_to_remove_recursive wire_session_read_local_dir_sync wire_session_read_local_empty_dirs_recursive_sync wire_session_read_remote_dir wire_session_read_remote_empty_dirs_recursive_sync wire_session_reconnect wire_session_record_screen wire_session_refresh wire_session_register_gpu_texture wire_session_register_pixelbuffer_texture wire_session_remove_all_empty_dirs wire_session_remove_file wire_session_remove_port_forward wire_session_rename_file wire_session_request_new_display_init_msgs wire_session_request_voice_call wire_session_resize_terminal wire_session_restart_remote_device wire_session_resume_job wire_session_send2fa wire_session_send_chat wire_session_send_files wire_session_send_mouse wire_session_send_note wire_session_send_pointer wire_session_send_selected_session_id wire_session_send_terminal_input wire_session_set_audit_guid wire_session_set_confirm_override_file wire_session_set_custom_fps wire_session_set_custom_image_quality wire_session_set_displays_as_individual_windows wire_session_set_edge_scroll_edge_thickness wire_session_set_flutter_option wire_session_set_image_quality wire_session_set_keyboard_mode wire_session_set_reverse_mouse_wheel wire_session_set_scroll_style wire_session_set_size wire_session_set_trackpad_speed wire_session_set_use_all_my_displays_for_the_remote_session wire_session_set_view_style wire_session_start wire_session_start_with_displays wire_session_switch_display wire_session_switch_sides wire_session_take_screenshot wire_session_toggle_option wire_session_toggle_privacy_mode wire_session_toggle_virtual_display wire_set_cur_session_id wire_set_local_flutter_option wire_set_local_kb_layout_type wire_set_voice_call_input_device wire_start_global_event_stream wire_stop_global_event_stream wire_translate wire_version_to_number wire_will_session_close_close_session

Name

.text

Size

17.7MB

Virtual Size

17.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10.0MB

Virtual Size

10.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

57KB

Virtual Size

391KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

372KB

Virtual Size

371KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

221KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

screen_retriever_plugin.dll

IMPHASH 8d7b12919fd9cfacadddc745d64b124b
SHA256 5674da26ac91247b8faec18fbed1907f73ea9888fe9069f2972c6c12bb33bf82
MD5 9c3ce606863885ab134f7d1ed1bfb8f8
SHA1 eee4c6b5ab4e89ad9c69d26bff821a209b9eeb17
SHA512 94e9dac6144216a60e3402eadeee9871c81cbefe2e9180a0696f73eb535e92ddf5078ad2b2d95a899668a74117ad3c6bc396a4a2992a9378b5a899093453ee76
SSDEEP 6144:dvMTCn7osApJ245VAhLQzzBzXjEUmo1wOerpzQSUJ+LDf8mIgoz7wqfcgb:dWCn85AizXjjT3+LDfVoz7wqfRb
TLSH
T1D5B46C2AE6AC43B5E167D138C9534506F7B1B84A5761A6CF43E00AAE2F677F04A3F311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

219808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopGetDpiForMonitor FlutterDesktopPluginRegistrarGetView FlutterDesktopPluginRegistrarSetDestructionHandler

user32

GetMonitorInfoW MonitorFromPoint GetCursorPos EnumDisplayMonitors

kernel32

GetLastError WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile WideCharToMultiByte MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetLocaleInfoEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx InterlockedFlushSList RtlPcToFileHeader RaiseException RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc CloseHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode

Name

.text

Size

373KB

Virtual Size

373KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

109KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

texture_rgba_renderer_plugin.dll

IMPHASH f42c50f734cb7a4aedc96a6680e9ff4b
SHA256 57e1b721035d40e30b1b94b9c5e4ef1452f6bea68d011ec7f650439b337fc721
MD5 303708abcfdae0db1e4cc9395f33077d
SHA1 6d4ddca394dc51b411f9f1b6dbee3e7a00557446
SHA512 429ea272f4f34ec6b550c76a28241088ded897411a0dc7f655f5116af68d5bc94998a2c5a5d1f7970246b0f1732c01a495017b831b81bbbf23cdef4889b7bd79
SSDEEP 6144:an6gHCyvN6xlody6G1iYpCyZ7VVhHNXqa:aPCyVhybroyZ7VVhx
TLSH
T17D645B19F7A954B9E167853CC9A34946EBB27C460BA1E6CF13A0075A3F33BE0493E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

77292

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopPluginRegistrarGetView FlutterDesktopMessengerSetCallback

kernel32

InitializeSListHead WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW GetCPInfo WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId RtlUnwind IsDebuggerPresent GetStartupInfoW RtlUnwindEx InterlockedFlushSList RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose

Name

.text

Size

204KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

uni_links_desktop_plugin.dll

IMPHASH a40eefd13ff6d2afd4faa77f48ab2b0d
SHA256 7c7095793b6b9e3019f0cc7026f53127cd830567d51ce67e518d45feb3bb85b5
MD5 6e083e5ce9bb9f1f248bd229da3f1671
SHA1 4439e45e37b4c99c703734c4d37c4f963e61b47f
SHA512 6929061637bfc13d9ec33897a0f4321d700ac2ff2cc63d85100eb0e03d336d3c11cf8735215b3db6d80dac523f60ddeb2344e0c0e38db515e83801facd0c57c5
SSDEEP 6144:1M0C/qiCzuAtgxcojjrz4uvbFZH6YCN1BVvL0oC/Px4CASJryQao7qaEBBvET:1M0PiCz3uvbsZwx9ASJryQao7qaEBBA
TLSH
T15FB47D29F6AC43B5E167E178C9534906E7B1B84A1761A7CF43E046AA2F277F04A3F311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

218512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopPluginRegistrarGetView FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopPluginRegistrarUnregisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarRegisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarSetDestructionHandler

kernel32

RtlPcToFileHeader WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation ReadConsoleW GetCommandLineW LocalFree SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP WideCharToMultiByte MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetLocaleInfoEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx InterlockedFlushSList RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc CloseHandle FlushFileBuffers WriteFile

user32

SendMessageW

shell32

CommandLineToArgvW

Name

.text

Size

373KB

Virtual Size

372KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

111KB

Virtual Size

110KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

url_launcher_windows_plugin.dll

IMPHASH f082b2fd52088ba90dd8d510cae4f097
SHA256 3ecc10fa0afc580a4757c09bb6d9c539c19178fe4b3f134b14bae6e34e1471cc
MD5 df40fc8834e814a92427e4a60fdebc6a
SHA1 206b8a0084deea611cc1e39cca1539f8631e65bd
SHA512 493a9a0e42d1b79b8e2432a3934b63960711c136d900246796eb677971bf94bb6acef59499577fa3f1913352308225f9988113b1fb9d94ffdfb337926305b529
SSDEEP 3072:3g3zhluejvZD8jCZ6GZkCNUlM5wXlc5I+gxYrZzTvrJfc0x2pySGg8jWbzI5W5AJ:w7uWnMFCDOlYgxWprJc0XuM5R7Vnbe
TLSH
T18C645B1AF7A554B9E167C13CC9634945EBB2BC464BA0D6CF1390065A3F37BE08A3E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

80436

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

shlwapi

UrlUnescapeA

flutter_windows

FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopPluginRegistrarGetView FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopMessengerAddRef

kernel32

HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP CreateFileW IsValidCodePage FindNextFileW FindFirstFileExW FindClose MultiByteToWideChar HeapReAlloc ReadConsoleW SetFilePointerEx WriteConsoleW GetACP WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException RtlUnwind InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

Name

.text

Size

207KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

93KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

usbmmidd_v2\usbmmIdd.cat

SHA256 470149c4cf9970ba59070aa7c9409c9f63a15727de99bab53e7e51f55310779f
MD5 e5f60b2f3a491983eac00dc7dc7c408b
SHA1 2566bf2ddc9e58f5262a2b11dda0c451d5ec9468
SHA512 55b31a4da61b837891be7977bdf7b96457e5b54c5216e867bb1aca4580a84145f885896b13fcb72e937d3f424fec1105b4f9c0a9706dfabbec95fb53c7a302f5
SSDEEP 192:o7221lHt5iJCwwvngEw9JPgXkhYCISJ+/wmcVTW1KqnajKswd02FRC:YPmrwvuLh3I9/wmEy4lGswd0ARC
TLSH
T19A32F9A255AC4483F9936C6003E4F5577C3D67CF6820426A25AFF72A1C933C4F71926D
MD5 SHA1 SHA512 SSDEEP TLSH

usbmmidd_v2\usbmmIdd.inf

SHA256 a8750ca15a86742f3012886c9932bb974158cd2d9779cf891c730d976a47726a
MD5 0a09dab1c9a7f2e685cd7f8b5bd43ec0
SHA1 14b5fae8397fbda873dcc9ffd5cc189f14490c28
SHA512 f6cc96686f06f1871ae95ddbe9e553bbff506765965e4c846ee02328c6566730a9f4df493c36ab2104565d41dbd7ea67d054984163e45bc414a8f1efba293368
SSDEEP 96:t+r+1cQwGREmgX6sdtkQI/F7DniOrxr0Wx:t+hQwkb19N
TLSH
T1E7B1B142A3ED0618F1F35E80EAF540B26A273895583CD68D51E4578E29F2E40D8F37B7
MD5 SHA1 SHA512 SSDEEP TLSH

usbmmidd_v2\x64\usbmmIdd.dll

IMPHASH 8cce31b273712b965675a6ee6b242015
SHA256 dc135d675127113915a7e5aa9fe57c84edad6be41d0890b265ef124ab26ea9e3
MD5 ee848c427145609d998725a38e7ad9af
SHA1 6b97d9ab1c3978cdc2d6735c227adca8f0aabddb
SHA512 5bd0eca69d16a6fe32856978047967e44f0d49c59cd611b02e9d24ca59c0d862ad5f8a4d50c6bed816fa11e2f4fee6fabbe3d6d735224084f47161693eee8007
SSDEEP 1536:fNgohwVuXUd9g0TOHISWaxVTYwZVtDEWoG:f32eSNOoSWMVVZVFYG
TLSH
T11B638D597BE448A1E46B9470C4E29E4FFAB1F1422F31969F0374C21D2F637E0A62D366
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

18276

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

X:\Projects\usbmm\usbmmIdd\x64\Release\usbmmIdd.pdb

ntdll

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlPcToFileHeader RtlUnwindEx DbgPrintEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException GetLastError

api-ms-win-core-synch-l1-1-0

SetEvent DeleteCriticalSection WaitForSingleObject CreateEventW InitializeCriticalSectionAndSpinCount

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-processthreads-l1-1-0

TerminateProcess CreateThread GetCurrentThreadId GetCurrentProcessId GetCurrentProcess TlsFree TlsSetValue TlsGetValue TlsAlloc

api-ms-win-core-com-l1-1-0

IIDFromString

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

avrt

AvSetMmThreadCharacteristicsW AvRevertMmThreadCharacteristics

api-ms-win-crt-runtime-l1-1-0

_initterm _cexit _crt_atexit _initterm_e abort _errno _invalid_parameter_noinfo_noreturn _invalid_parameter_noinfo _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv terminate _execute_onexit_table _seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf __stdio_common_vswprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp memset strcpy_s

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary GetProcAddress LoadLibraryExW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedFlushSList

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-crt-heap-l1-1-0

malloc _callnewh calloc free

window_manager_plugin.dll

IMPHASH e25e26fb4fa09968cec4c9e2ff378aaa
SHA256 9a458812b4555b6b08a6dd57d9d9b5a60083de924aaa8ff290c35446391b699b
MD5 35477ffcc1053f2c8007f60ae050722a
SHA1 ca156759216dc64828060062a6a108be713524dd
SHA512 ea8fc2c6335e8eb4f91741d5bea6f50172e1d5ce9e5fe0e13bbcfb0ae366d3d50b3003c5a33e67ec9258366a587715d8453b44062559ecb3b90f8631df289b4d
SSDEEP 6144:1wGFsr3jLCOcPkBBFBMC4wXszJAVK9wM+J2CpssZ17AxGZSE/BWgqJaPqaEiTPI2:PYCO0k0zOysAxGZSogaPqaEiTd
TLSH
T191C47D29A7A843B5E167D138C9474606EBB1B8495761A7CF03E05AAB2F277F04B3F311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

239904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopMessengerIsAvailable FlutterDesktopViewGetHWND FlutterDesktopPluginRegistrarGetView FlutterDesktopPluginRegistrarRegisterTopLevelWindowProcDelegate FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopPluginRegistrarUnregisterTopLevelWindowProcDelegate

kernel32

AcquireSRWLockExclusive WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation ReadConsoleW GetVersion FreeLibrary GetProcAddress LoadLibraryW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers CloseHandle HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType GetStdHandle HeapAlloc HeapFree GetModuleFileNameW GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError GetLastError RaiseException RtlPcToFileHeader InterlockedFlushSList WideCharToMultiByte MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetLocaleInfoEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo ReleaseSRWLockExclusive RtlUnwind WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx

user32

SendMessageW PostMessageW SetLayeredWindowAttributes ShowWindow GetActiveWindow ShowWindowAsync GetAncestor GetMonitorInfoW MonitorFromWindow LoadImageW GetWindow FindWindowExW SetClassLongW GetClassLongW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW GetWindowLongW GetCursorPos GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW SetForegroundWindow TrackPopupMenu GetSystemMenu GetSystemMetrics ReleaseCapture SetWindowPos IsZoomed IsWindowVisible GetWindowPlacement PostQuitMessage

shell32

SHAppBarMessage

ole32

CoInitialize CoCreateInstance

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea

Name

.text

Size

393KB

Virtual Size

393KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

117KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

window_size_plugin.dll

IMPHASH f4d638ec3637ee01b705007f832ef590
SHA256 4a27f3781fb4f269339bcc9848fea9d4333b63494f3c6a87ad41b461dc8cf739
MD5 f7d4b0082f60422bc60c65557cc164fa
SHA1 e3fa732b04e56336fda759624d231a92b779d5c8
SHA512 d7ae35505f123267265dd78a48e730189669881c312673e519a2884f1e4113f83a59951a4006e433bb8a2cdf705e3c8d6e11a2674fa7849aa75aeac054c5200a
SSDEEP 6144:HeWzfLCt3ngLV0n/vFsX+FPoWoezzkwYCTW36jzL45ewqslwOvYPqaqsP9l:HLCtJvFg0no735usmOvYPqaqsP
TLSH
T10FB46C29E7AC43B6E167D138C9534506FBB1784A176196CF43E056BA2F277E04A3F322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

216192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopGetDpiForMonitor FlutterDesktopGetDpiForHWND FlutterDesktopPluginRegistrarUnregisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarRegisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarGetView FlutterDesktopViewGetHWND FlutterDesktopPluginRegistrarSetDestructionHandler

user32

GetAncestor EnumDisplayMonitors GetMonitorInfoW MonitorFromWindow GetWindowRect SetWindowTextW SetWindowPos ShowWindow

kernel32

WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers CloseHandle HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID WideCharToMultiByte MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetLocaleInfoEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlUnwind InterlockedFlushSList RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale

Name

.text

Size

371KB

Virtual Size

370KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

109KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

REMOTO-DLL-Tecnico-v1.1.zip

REMOTO-DLL-TECNICO.exe

PE Signature issue

desktop_drop_plugin

desktop_multi_window_plugin

file_selector_windows_plugin

flutter_custom_cursor_plugin

flutter_gpu_texture_renderer_plugin

screen_retriever_plugin

texture_rgba_renderer_plugin

uni_links_desktop_plugin

url_launcher_windows_plugin

window_manager_plugin

window_size_plugin

flutter_windows

kernel32

user32

shell32

ole32

generic

data\app.so

data\flutter_assets\AssetManifest.bin

data\flutter_assets\AssetManifest.json

data\flutter_assets\FontManifest.json

data\flutter_assets\NOTICES.Z

NOTICES.Z

data\flutter_assets\assets\actions.svg

data\flutter_assets\assets\actions_mobile.svg

data\flutter_assets\assets\address_book.ttf

data\flutter_assets\assets\android.svg

data\flutter_assets\assets\arrow.svg

data\flutter_assets\assets\auth-apple.svg

data\flutter_assets\assets\auth-auth0.svg

data\flutter_assets\assets\auth-azure.svg

data\flutter_assets\assets\auth-default.svg

data\flutter_assets\assets\auth-facebook.svg

data\flutter_assets\assets\auth-github.svg

data\flutter_assets\assets\auth-gitlab.svg

data\flutter_assets\assets\auth-google.svg

data\flutter_assets\assets\auth-okta.svg

data\flutter_assets\assets\call_end.svg

data\flutter_assets\assets\call_wait.svg

data\flutter_assets\assets\chat.svg

data\flutter_assets\assets\chat2.svg

data\flutter_assets\assets\checkbox-outline.svg

data\flutter_assets\assets\chevron_up_chevron_down.svg

data\flutter_assets\assets\close.svg

data\flutter_assets\assets\device_group.ttf

data\flutter_assets\assets\display.svg

data\flutter_assets\assets\dots.svg

data\flutter_assets\assets\file.svg

data\flutter_assets\assets\file_transfer.svg

data\flutter_assets\assets\folder.svg

data\flutter_assets\assets\folder_new.svg

data\flutter_assets\assets\fullscreen.svg

data\flutter_assets\assets\fullscreen_exit.svg

data\flutter_assets\assets\gestures.ttf

data\flutter_assets\assets\home.svg

data\flutter_assets\assets\icon.png

data\flutter_assets\assets\icon.svg

data\flutter_assets\assets\insecure.svg

data\flutter_assets\assets\insecure_relay.svg

data\flutter_assets\assets\kb_layout_iso.svg

data\flutter_assets\assets\kb_layout_not_iso.svg

data\flutter_assets\assets\keyboard_mouse.svg

data\flutter_assets\assets\linux.svg

data\flutter_assets\assets\logo.png

data\flutter_assets\assets\logo_dark.png

data\flutter_assets\assets\mac.svg

data\flutter_assets\assets\message_24dp_5F6368.svg

data\flutter_assets\assets\more.ttf

data\flutter_assets\assets\peer_searchbar.ttf

data\flutter_assets\assets\pinned.svg

data\flutter_assets\assets\rec.svg

data\flutter_assets\assets\record_screen.svg