51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f.zip
- SHA256 2f2b03d3814e506a97bfeb4a4b255f3063e2f0df7a9a7927ca77e24d4db9dec0
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f.zip
- Size 13.7MB
- Sample260702-qrybfafs6v
- SHA256 2f2b03d3814e506a97bfeb4a4b255f3063e2f0df7a9a7927ca77e24d4db9dec0
- MD5 d8dd5b41071cde6839e9f772f045f8d6
- SHA1 9562cbff9e06b89c0ea01cf15425f10218d484a1
- SHA512 c795d5f4c8007d15b5f8f84ff9e4533309586144fc0f2b19aafab944b0f70b52adfa9bd81eee13f2b0af5131c9d2d62ce764310a4bace9de9472c20eb5aac94d
- SSDEEP 393216:fzyevbT9oOPphUg6MDV1V7NyxbAIVb5gJ2Zg5etLgZ:7TvbTLPpefsVTpyeQG8G/
- TLSH T1C4E6337D07A5CBCB06067B5CE4D78B6881161B30727FA9B11EE8279E39BC661D132DC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Detect suspicious telegram bot 1 IoCs
Detect suspicious telegram bot.
resource yara_rule static1/unpack001/51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f suspicious_telegram_bot
File Explorer
-
51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f.zip.zip 13.7MB
-
51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f.dll 33.7MB
51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f
- IMPHASH b3589c973ca0fdf198b117583bfc05fc
- SHA256 51edfe02efabecb05fefd61d80965c4e4465510ca0856499b7efe5e64890c82f
- MD5 0976f10aa4955faf3e3720a812c2c947
- SHA1 c3636761d395621ed359c735e891cf77880d0974
- SHA512 7d0ce94fd4da8ca845628476a50b6a5193205d734d3c321b8980eabc2a6fd7f27080ce05a255e9bbba65386458843f4699c094dcd806d35ad546c76fb1f226f0
- SSDEEP 393216:hePlskQIXgM/5mPQhII5cm9M5go1QaBfUdhnxntBMQjQW7kR+bZCn9nokYKffKGJ:h4hWM4gBPtIpPs4
- TLSH T1AA777C46F25651E8C42AE574826B6E22FBB13C4D43316BEB17E05A213E63BD05B3F784
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect suspicious telegram bot
Detect suspicious telegram bot.
Password
infected
Digest
bf:e2:1d:0a:29:41:21:d8:0a:c4:0c:95:01:d5:20:81:85:d3:32:79:54:3c:d1:d6:59:c9:8b:e5:fe:6b:19:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Bayside Computer Systems Inc,O=Bayside Computer Systems Inc,ST=Texas,C=US
Chains
Mar 19, 2026
CN=Bayside Computer Systems Inc,O=Bayside Computer Systems Inc,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bayside Computer Systems Inc,O=Bayside Computer Systems Inc,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Bayside Computer Systems Inc,O=Bayside Computer Systems Inc,ST=Texas,C=US
Serial Number
40:fd:ee:d0:a8:f3:41:ae:64:17:2d:3c:95:c8:ff:91
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB
Serial Number
a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 27, 2025 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
22809268
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
sas
SendSAS
newdev
UpdateDriverForPlugAndPlayDevicesW
wtsapi32
WTSQuerySessionInformationW
WTSEnumerateSessionsA
WTSFreeMemory
oleaut32
SysFreeString
SysStringLen
GetErrorInfo
SetErrorInfo
kernel32
Process32FirstW
GetOverlappedResult
ConnectNamedPipe
CreateEventW
LocalFree
CreateNamedPipeW
Process32NextW
VirtualAllocEx
QueueUserAPC
ResumeThread
GetExitCodeProcess
CreateEventA
DeviceIoControl
CreateFileW
CreateSemaphoreA
CreateThread
FreeLibrary
LocalAlloc
CreateFileMappingW
MapViewOfFile
GetCurrentProcess
DuplicateHandle
UnmapViewOfFile
VirtualProtect
CreateToolhelp32Snapshot
FlushFileBuffers
SetLastError
ReleaseSemaphore
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitThread
PeekNamedPipe
FlsAlloc
FlsGetValue
GetCurrentDirectoryW
Sleep
SleepConditionVariableSRW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileSize
GetFileTime
ReadFile
SetFilePointer
ResetEvent
ReleaseMutex
CreateMutexA
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
GlobalFree
VirtualQueryEx
GetProcessId
OpenFileMappingW
FlsSetValue
FlsFree
GetFileSizeEx
VirtualQuery
ExpandEnvironmentStringsW
HeapSize
HeapQueryInformation
SetEndOfFile
FindFirstFileExW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
IsProcessorFeaturePresent
CreateProcessW
WriteFile
GetFileType
GetNamedPipeInfo
CreatePipe
SetThreadPriority
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CreateSemaphoreW
WakeConditionVariable
InitializeConditionVariable
InitOnceBeginInitialize
InitOnceComplete
WakeAllConditionVariable
InitializeSRWLock
GetCommandLineA
SwitchToThread
GetFullPathNameW
EncodePointer
SystemTimeToTzSpecificLocalTime
OpenProcess
GetCurrentProcessId
TerminateProcess
SetEvent
GetProcessAffinityMask
MoveFileExA
MoveFileExW
GetLastError
WaitForSingleObject
GetCurrentThreadId
GetCurrentThread
GetStartupInfoW
CloseHandle
GetProcAddress
LoadLibraryExA
FormatMessageW
TryAcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
HeapFree
HeapAlloc
GetProcessHeap
GetTimeZoneInformationForYear
lstrcmpiW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
GetStringTypeW
GetLocaleInfoEx
DecodePointer
LCMapStringEx
GetCPInfo
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
RtlUnwindEx
RtlUnwind
InitializeCriticalSectionAndSpinCount
FreeLibraryAndExitThread
GetConsoleOutputCP
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
OutputDebugStringW
IsValidCodePage
GetACP
GetOEMCP
GetTimeZoneInformation
SetStdHandle
GetUserPreferredUILanguages
GetTempPathW
ReadConsoleW
GetWindowsDirectoryW
WaitForMultipleObjects
ReadFileEx
ExitProcess
CancelIo
CopyFileExW
GetFinalPathNameByHandleW
RemoveDirectoryW
DeleteFileW
CreateDirectoryW
GetFileInformationByHandle
HeapReAlloc
SleepEx
WriteFileEx
SetFilePointerEx
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
GetEnvironmentStringsW
SetWaitableTimer
CreateWaitableTimerExW
SetThreadStackGuarantee
CompareStringOrdinal
FreeEnvironmentStringsW
CancelIoEx
SetFileCompletionNotificationModes
GetQueuedCompletionStatusEx
CreateIoCompletionPort
PostQueuedCompletionStatus
SetHandleInformation
GetProcessIoCounters
GetSystemTimes
GetDriveTypeW
GetProcessTimes
K32GetPerformanceInfo
GlobalMemoryStatusEx
GetTickCount64
SetConsoleMode
GetFileInformationByHandleEx
GetComputerNameExW
SetFileTime
GetLogicalDrives
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetThreadErrorMode
GetSystemDirectoryW
GetSystemTimeAsFileTime
InitializeCriticalSection
WideCharToMultiByte
SetInformationJobObject
AssignProcessToJobObject
CreateJobObjectW
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
WriteConsoleW
GetConsoleMode
GetStdHandle
GetLogicalProcessorInformation
TryEnterCriticalSection
SleepConditionVariableCS
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
FileTimeToSystemTime
SetErrorMode
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameW
GetModuleHandleExW
ReadProcessMemory
SetThreadExecutionState
GetModuleHandleExA
LoadLibraryW
ProcessIdToSessionId
LoadLibraryExW
SetDllDirectoryW
GetNativeSystemInfo
LoadLibraryA
GetModuleHandleW
WTSGetActiveConsoleSessionId
WriteProcessMemory
GetModuleHandleA
SetConsoleCtrlHandler
VerSetConditionMask
FormatMessageA
VerifyVersionInfoW
lstrlenW
GetSystemInfo
MultiByteToWideChar
comctl32
SetWindowSubclass
RemoveWindowSubclass
DefSubclassProc
shell32
CommandLineToArgvW
Shell_NotifyIconW
ShellExecuteW
SHAddToRecentDocs
SHAppBarMessage
SHGetKnownFolderPath
Shell_NotifyIconGetRect
DragQueryFileW
DragFinish
ShellExecuteA
ShellExecuteExW
advapi32
SetEntriesInAclW
CreateWellKnownSid
GetLengthSid
InitializeSecurityDescriptor
EqualSid
AllocateAndInitializeSid
LookupAccountSidW
DuplicateToken
LogonUserW
GetTokenInformation
SetSecurityDescriptorDacl
FreeSid
AdjustTokenPrivileges
DuplicateTokenEx
ImpersonateLoggedOnUser
RevertToSelf
ImpersonateAnonymousToken
LookupPrivilegeValueW
CreateProcessWithTokenW
CreateProcessAsUserW
OpenProcessToken
CreateProcessWithLogonW
RegOpenKeyExW
RegSetValueExW
StartServiceCtrlDispatcherW
RegDeleteValueW
RegDeleteTreeW
RegisterServiceCtrlHandlerExW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
SetServiceStatus
GetUserNameW
SystemFunction036
IsValidSid
CopySid
RegQueryValueExW
userenv
DestroyEnvironmentBlock
GetUserProfileDirectoryW
CreateEnvironmentBlock
user32
MapVirtualKeyExW
GetKeyboardState
GetRawInputData
SystemParametersInfoW
ReleaseCapture
SetCapture
MsgWaitForMultipleObjectsEx
SetPropW
AdjustWindowRectEx
RegisterRawInputDevices
RegisterClassExW
SendInput
PostQuitMessage
SystemParametersInfoA
CreateAcceleratorTableW
DestroyAcceleratorTable
GetKeyState
IsProcessDPIAware
AppendMenuW
InsertMenuW
AllowSetForegroundWindow
GetDoubleClickTime
CreateWindowExW
LoadCursorA
FindWindowExA
IsWindow
RegisterTouchWindow
GetDesktopWindow
CreatePopupMenu
MessageBoxW
CreateMenu
ToUnicodeEx
EnumDisplaySettingsW
AttachThreadInput
DestroyMenu
DrawTextW
FindWindowA
EnumDisplayDevicesW
FillRect
EnumDisplaySettingsExW
SetForegroundWindow
GetWindowDC
OffsetRect
MapWindowPoints
ExitWindowsEx
ShowWindow
GetMenuBarInfo
GetMenu
SetMenu
GetActiveWindow
DrawMenuBar
RemoveMenu
SetMenuItemInfoW
DrawIconEx
CheckMenuItem
RemoveClipboardFormatListener
EnableMenuItem
BlockInput
ReleaseDC
GetDC
GetIconInfo
CallNextHookEx
ClipCursor
SetCursorPos
PostThreadMessageA
SetWindowDisplayAffinity
GetSystemMenu
IsClipboardFormatAvailable
EmptyClipboard
GetWindowPlacement
InvalidateRgn
SetWindowPlacement
ChangeDisplaySettingsExW
GetUpdateRect
MapVirtualKeyW
GetMonitorInfoW
SetCursor
LoadCursorW
GetWindowRect
SetWindowPos
MonitorFromWindow
GetSystemMetrics
CloseTouchInputHandle
GetTouchInputInfo
DestroyWindow
TrackMouseEvent
MonitorFromRect
ClientToScreen
GetWindowLongW
ScreenToClient
GetMenuItemInfoW
DefWindowProcW
PostThreadMessageW
PeekMessageW
SendMessageW
GetClipboardFormatNameA
ValidateRect
GetClientRect
TrackPopupMenu
CountClipboardFormats
RegisterClipboardFormatW
RegisterClipboardFormatA
GetClipboardData
RedrawWindow
DispatchMessageW
GetMessageW
GetWindowThreadProcessId
GetForegroundWindow
SetTimer
KillTimer
SetWindowLongPtrW
GetWindowLongPtrW
AddClipboardFormatListener
PostMessageW
LockWorkStation
GetCursorInfo
RegisterClassW
SetClipboardData
UnhookWindowsHookEx
DispatchMessageA
TranslateMessage
GetMessageA
ChangeClipboardChain
SetWindowsHookExA
DefWindowProcA
GetCursorPos
SetClipboardViewer
CreateIcon
DestroyIcon
GetClipboardOwner
CloseClipboard
OpenClipboard
CreateWindowExA
RegisterClassExA
VkKeyScanExW
SetWindowLongW
ShowCursor
GetClipCursor
OpenInputDesktop
SetThreadDesktop
FindWindowW
CloseDesktop
GetThreadDesktop
GetUserObjectInformationA
SendMessageA
PostMessageA
GetAsyncKeyState
wsprintfW
RegisterWindowMessageA
GetKeyboardLayout
ole32
OleInitialize
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleIsCurrentClipboard
OleGetClipboard
RevokeDragDrop
StringFromGUID2
CoInitializeEx
RegisterDragDrop
OleSetClipboard
CoUninitialize
OleUninitialize
CoCreateInstance
PropVariantClear
secur32
EncryptMessage
DecryptMessage
InitializeSecurityContextW
ApplyControlToken
FreeContextBuffer
AcceptSecurityContext
QueryContextAttributesW
DeleteSecurityContext
FreeCredentialsHandle
AcquireCredentialsHandleA
ws2_32
accept
connect
listen
getsockname
socket
WSASocketW
send
recv
WSAGetLastError
getsockopt
WSAStartup
ioctlsocket
getpeername
shutdown
recvfrom
sendto
setsockopt
WSAIoctl
closesocket
WSACleanup
freeaddrinfo
getaddrinfo
WSASend
bind
gdi32
CreateRectRgn
DeleteObject
SelectObject
DeleteDC
BitBlt
GetDIBits
CreateDCW
CreateCompatibleDC
GetBitmapBits
CreateDIBitmap
CreateDIBSection
CreateSolidBrush
CreateCompatibleBitmap
GetDeviceCaps
GetObjectA
SetTextColor
SetBkMode
crypt32
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertDuplicateCertificateChain
CertFreeCertificateChain
CertDuplicateCertificateContext
CertCloseStore
CertVerifyTimeValidity
CertGetEnhancedKeyUsage
CertDuplicateStore
CertFreeCertificateContext
CertOpenStore
winspool.drv
EnumPrintersW
GetDefaultPrinterW
EnumPrinterDriversW
DeletePrinterDriverExW
DeletePrinterDriverPackageW
EnumPortsW
OpenPrinterW
XcvDataW
ClosePrinter
SetPrinterW
DeletePrinter
UploadPrinterDriverPackageW
InstallPrinterDriverFromPackageW
AddPrinterW
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiGetClassDevsExW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInfoListDetailW
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiGetINFClassW
dwmapi
DwmEnableBlurBehindWindow
cfgmgr32
CM_Get_DevNode_Status
iphlpapi
SendARP
GetAdaptersAddresses
ntdll
NtQueryInformationProcess
NtReadFile
NtWriteFile
NtCreateFile
NtCancelIoFileEx
RtlNtStatusToDosError
RtlGetNtVersionNumbers
NtDeviceIoControlFile
RtlGetVersion
NtQuerySystemInformation
powrprof
CallNtPowerInformation
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory1
bcrypt
BCryptGenRandom
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
pdh
PdhCloseQuery
PdhCollectQueryDataEx
PdhCollectQueryData
PdhAddEnglishCounterA
PdhGetFormattedCounterValue
PdhAddEnglishCounterW
PdhOpenQueryA
PdhRemoveCounter
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
drop_dart_object
free_WireSyncReturn
free_c_args
free_zero_copy_buffer_f32
free_zero_copy_buffer_f64
free_zero_copy_buffer_i16
free_zero_copy_buffer_i32
free_zero_copy_buffer_i64
free_zero_copy_buffer_i8
free_zero_copy_buffer_u16
free_zero_copy_buffer_u32
free_zero_copy_buffer_u64
free_zero_copy_buffer_u8
get_dart_object
get_rustdesk_app_name
hwcodec_av_log_callback
hwcodec_log
init_frb_dart_api_dl
new_StringList_0
new_dart_opaque
new_int_32_list_0
new_uint_8_list_0
privacy_mode_hook_keyboard
privacy_mode_hook_mouse
rustdesk_core_main_args
session_get_rgba
store_dart_post_cobject
wire_cm_can_elevate
wire_cm_check_click_time
wire_cm_check_clients_length
wire_cm_close_connection
wire_cm_close_voice_call
wire_cm_elevate_portable
wire_cm_get_click_time
wire_cm_get_clients_length
wire_cm_get_clients_state
wire_cm_get_config
wire_cm_handle_incoming_voice_call
wire_cm_init
wire_cm_login_res
wire_cm_remove_disconnected_connection
wire_cm_send_chat
wire_cm_switch_back
wire_cm_switch_permission
wire_get_double_click_time
wire_get_local_flutter_option
wire_get_local_kb_layout_type
wire_get_next_texture_key
wire_get_voice_call_input_device
wire_host_stop_system_key_propagate
wire_install_install_me
wire_install_install_options
wire_install_install_path
wire_install_run_without_install
wire_install_show_run_without_install
wire_is_custom_client
wire_is_disable_ab
wire_is_disable_account
wire_is_disable_group_panel
wire_is_disable_installation
wire_is_disable_settings
wire_is_incoming_only
wire_is_outgoing_only
wire_is_preset_password
wire_is_preset_password_mobile_only
wire_is_selinux_enforcing
wire_is_support_multi_ui_session
wire_main_account_auth
wire_main_account_auth_cancel
wire_main_account_auth_result
wire_main_audio_support_loopback
wire_main_change_id
wire_main_change_language
wire_main_change_theme
wire_main_check_connect_status
wire_main_check_hwcodec
wire_main_check_mouse_time
wire_main_check_super_user_permission
wire_main_clear_ab
wire_main_clear_group
wire_main_clear_trusted_devices
wire_main_clip_cursor
wire_main_create_shortcut
wire_main_current_is_wayland
wire_main_default_privacy_mode_impl
wire_main_device_id
wire_main_device_name
wire_main_discover
wire_main_forget_password
wire_main_generate2fa
wire_main_get_api_server
wire_main_get_app_name
wire_main_get_app_name_sync
wire_main_get_async_status
wire_main_get_build_date
wire_main_get_buildin_option
wire_main_get_common
wire_main_get_common_sync
wire_main_get_connect_status
wire_main_get_data_dir_ios
wire_main_get_displays
wire_main_get_env
wire_main_get_error
wire_main_get_fav
wire_main_get_fingerprint
wire_main_get_hard_option
wire_main_get_home_dir
wire_main_get_http_status
wire_main_get_input_source
wire_main_get_lan_peers
wire_main_get_langs
wire_main_get_last_remote_id
wire_main_get_license
wire_main_get_local_option
wire_main_get_login_device_info
wire_main_get_main_display
wire_main_get_mouse_time
wire_main_get_my_id
wire_main_get_new_stored_peers
wire_main_get_new_version
wire_main_get_option
wire_main_get_option_sync
wire_main_get_options
wire_main_get_options_sync
wire_main_get_peer_flutter_option_sync
wire_main_get_peer_option
wire_main_get_peer_option_sync
wire_main_get_peer_sync
wire_main_get_permanent_password
wire_main_get_printer_names
wire_main_get_proxy_status
wire_main_get_socks
wire_main_get_software_update_url
wire_main_get_sound_inputs
wire_main_get_temporary_password
wire_main_get_trusted_devices
wire_main_get_unlock_pin
wire_main_get_use_texture_render
wire_main_get_user_default_option
wire_main_get_uuid
wire_main_get_version
wire_main_goto_install
wire_main_handle_relay_id
wire_main_handle_wayland_screencast_restore_token
wire_main_has_file_clipboard
wire_main_has_gpu_texture_render
wire_main_has_hwcodec
wire_main_has_valid_2fa_sync
wire_main_has_valid_bot_sync
wire_main_has_vram
wire_main_hide_dock
wire_main_http_request
wire_main_init
wire_main_init_input_source
wire_main_is_can_input_monitoring
wire_main_is_can_screen_recording
wire_main_is_installed
wire_main_is_installed_daemon
wire_main_is_installed_lower_version
wire_main_is_login_wayland
wire_main_is_option_fixed
wire_main_is_process_trusted
wire_main_is_root
wire_main_is_share_rdp
wire_main_is_using_public_server
wire_main_load_ab
wire_main_load_fav_peers
wire_main_load_group
wire_main_load_lan_peers
wire_main_load_recent_peers
wire_main_load_recent_peers_for_ab
wire_main_max_encrypt_len
wire_main_on_main_window_close
wire_main_peer_exists
wire_main_peer_has_password
wire_main_remove_discovered
wire_main_remove_peer
wire_main_remove_trusted_devices
wire_main_resolve_avatar_url
wire_main_save_ab
wire_main_save_group
wire_main_set_common
wire_main_set_cursor_position
wire_main_set_env
wire_main_set_home_dir
wire_main_set_input_source
wire_main_set_local_option
wire_main_set_option
wire_main_set_options
wire_main_set_peer_alias
wire_main_set_peer_flutter_option_sync
wire_main_set_peer_option
wire_main_set_peer_option_sync
wire_main_set_permanent_password
wire_main_set_share_rdp
wire_main_set_socks
wire_main_set_unlock_pin
wire_main_set_user_default_option
wire_main_show_option
wire_main_start_dbus_server
wire_main_start_ipc_url_server
wire_main_start_service
wire_main_stop_service
wire_main_store_fav
wire_main_support_remove_wallpaper
wire_main_supported_hwdecodings
wire_main_supported_input_source
wire_main_supported_privacy_mode_impls
wire_main_test_if_valid_server
wire_main_test_wallpaper
wire_main_update_me
wire_main_update_temporary_password
wire_main_uri_prefix_sync
wire_main_verify2fa
wire_main_verify_bot
wire_main_video_save_directory
wire_main_wol
wire_option_synced
wire_peer_get_sessions_count
wire_plugin_enable
wire_plugin_event
wire_plugin_feature_is_enabled
wire_plugin_get_session_option
wire_plugin_get_shared_option
wire_plugin_install
wire_plugin_is_enabled
wire_plugin_list_reload
wire_plugin_register_event_stream
wire_plugin_reload
wire_plugin_set_session_option
wire_plugin_set_shared_option
wire_plugin_sync_ui
wire_query_onlines
wire_send_url_scheme
wire_session_add_existed_sync
wire_session_add_job
wire_session_add_port_forward
wire_session_add_sync
wire_session_alternative_codecs
wire_session_cancel_job
wire_session_change_prefer_codec
wire_session_change_resolution
wire_session_close
wire_session_close_terminal
wire_session_close_voice_call
wire_session_create_dir
wire_session_ctrl_alt_del
wire_session_elevate_direct
wire_session_elevate_with_logon
wire_session_enter_or_leave
wire_session_get_audit_guid
wire_session_get_audit_server_sync
wire_session_get_common
wire_session_get_common_sync
wire_session_get_conn_session_id
wire_session_get_conn_token
wire_session_get_custom_image_quality
wire_session_get_displays_as_individual_windows
wire_session_get_edge_scroll_edge_thickness
wire_session_get_enable_trusted_devices
wire_session_get_flutter_option
wire_session_get_image_quality
wire_session_get_is_recording
wire_session_get_keyboard_mode
wire_session_get_last_audit_note
wire_session_get_option
wire_session_get_peer_option
wire_session_get_platform
wire_session_get_remember
wire_session_get_reverse_mouse_wheel_sync
wire_session_get_rgba_size
wire_session_get_scroll_style
wire_session_get_toggle_option
wire_session_get_toggle_option_sync
wire_session_get_trackpad_speed
wire_session_get_use_all_my_displays_for_the_remote_session
wire_session_get_view_style
wire_session_handle_flutter_key_event
wire_session_handle_flutter_raw_key_event
wire_session_handle_screenshot
wire_session_input_key
wire_session_input_os_password
wire_session_input_string
wire_session_is_keyboard_mode_supported
wire_session_is_multi_ui_session
wire_session_load_last_transfer_jobs
wire_session_lock_screen
wire_session_login
wire_session_new_rdp
wire_session_next_rgba
wire_session_on_waiting_for_image_dialog_show
wire_session_open_terminal
wire_session_peer_option
wire_session_printer_response
wire_session_read_dir_to_remove_recursive
wire_session_read_local_dir_sync
wire_session_read_local_empty_dirs_recursive_sync
wire_session_read_remote_dir
wire_session_read_remote_empty_dirs_recursive_sync
wire_session_reconnect
wire_session_record_screen
wire_session_refresh
wire_session_register_gpu_texture
wire_session_register_pixelbuffer_texture
wire_session_remove_all_empty_dirs
wire_session_remove_file
wire_session_remove_port_forward
wire_session_rename_file
wire_session_request_new_display_init_msgs
wire_session_request_voice_call
wire_session_resize_terminal
wire_session_restart_remote_device
wire_session_resume_job
wire_session_send2fa
wire_session_send_chat
wire_session_send_files
wire_session_send_mouse
wire_session_send_note
wire_session_send_pointer
wire_session_send_selected_session_id
wire_session_send_terminal_input
wire_session_set_audit_guid
wire_session_set_confirm_override_file
wire_session_set_custom_fps
wire_session_set_custom_image_quality
wire_session_set_displays_as_individual_windows
wire_session_set_edge_scroll_edge_thickness
wire_session_set_flutter_option
wire_session_set_image_quality
wire_session_set_keyboard_mode
wire_session_set_reverse_mouse_wheel
wire_session_set_scroll_style
wire_session_set_size
wire_session_set_trackpad_speed
wire_session_set_use_all_my_displays_for_the_remote_session
wire_session_set_view_style
wire_session_start
wire_session_start_with_displays
wire_session_switch_display
wire_session_switch_sides
wire_session_take_screenshot
wire_session_toggle_option
wire_session_toggle_privacy_mode
wire_session_toggle_virtual_display
wire_set_cur_session_id
wire_set_local_flutter_option
wire_set_local_kb_layout_type
wire_set_voice_call_input_device
wire_start_global_event_stream
wire_stop_global_event_stream
wire_translate
wire_version_to_number
wire_will_session_close_close_session
Name
.text
Size
22.3MB
Virtual Size
22.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rodata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10.6MB
Virtual Size
10.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
50KB
Virtual Size
512KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
456KB
Virtual Size
456KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
261KB
Virtual Size
261KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=215, id=261, version=33145,
count=34, id=259, version=33145,
count=10, id=253, version=35207,
count=15, id=259, version=35207,
count=18, id=260, version=35207,
count=89, id=261, version=35207,
count=78, id=260, version=33145,
count=71, id=260, productName=VS2019 v16.8.3 build 29335, version=29335,
count=921, id=260, version=35223,
count=47, id=261, version=35223,
count=11, id=257, version=33145,
count=763, id=1, productName=Unmarked objects,
count=409, productName=Unmarked objects (old),
count=1, id=256, version=35223,
count=1, id=258, version=35223,