Analysis

  • user interaction
    yes
  • max time kernel
    251s
  • max time network
    259s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    22/05/2026, 03:19

General

  • Target
    RustPlusDesk-Setup.exe
  • Size 131.6MB
  • Sample260522-dva9vsds9r
  • SHA256 37d8539922c10332fbd8cac8ef59188edaf6f0a245f196be21314ba68c049222
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Uses browser remote debugging 2 TTPs 4 IoCs

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Windows directory 63 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 36 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Kills process with taskkill 1 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\RustPlusDesk-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\RustPlusDesk-Setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2388
    • C:\Users\Admin\AppData\Local\Temp\is-NMHE1.tmp\RustPlusDesk-Setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-NMHE1.tmp\RustPlusDesk-Setup.tmp" /SL5="$5028A,132554813,1021440,C:\Users\Admin\AppData\Local\Temp\RustPlusDesk-Setup.exe"
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1348
      • C:\Users\Admin\Desktop\New folder\RustPlusDesk.exe
        "C:\Users\Admin\Desktop\New folder\RustPlusDesk.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks whether UAC is enabled
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:4500
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=4500.396.17913317921202590995
          4⤵
          • Drops file in Windows directory
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of WriteProcessMemory
          PID:2272
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ff8e89cb078,0x7ff8e89cb084,0x7ff8e89cb090
            5⤵
              PID:4832
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1692,i,1701310079415020757,16862041141864510598,262144 --variations-seed-version --mojo-platform-channel-handle=1688 /prefetch:2
              5⤵
                PID:1264
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1364,i,1701310079415020757,16862041141864510598,262144 --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:11
                5⤵
                  PID:1820
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2280,i,1701310079415020757,16862041141864510598,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:13
                  5⤵
                    PID:4984
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3520,i,1701310079415020757,16862041141864510598,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
                    5⤵
                      PID:1316
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4440,i,1701310079415020757,16862041141864510598,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:14
                      5⤵
                        PID:27380
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=3792,i,1701310079415020757,16862041141864510598,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:14
                        5⤵
                          PID:28692
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=3876,i,1701310079415020757,16862041141864510598,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:10
                          5⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:28900
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=5.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4136,i,1701310079415020757,16862041141864510598,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
                          5⤵
                            PID:29376
                        • C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node.exe
                          "C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node.exe" "C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@liamcottle\rustplus.js\cli\index.js" fcm-register --config-file="C:\Users\Admin\AppData\Roaming\RustPlusDesk\rustplusjs-config.json"
                          4⤵
                          • Executes dropped EXE
                          PID:52232
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-features=Translate,OptimizationHints,MediaRouter --disable-extensions --disable-component-extensions-with-background-pages --disable-background-networking --disable-component-update --disable-client-side-phishing-detection --disable-sync --metrics-recording-only --disable-default-apps --mute-audio --no-default-browser-check --no-first-run --disable-backgrounding-occluded-windows --disable-renderer-backgrounding --disable-background-timer-throttling --disable-ipc-flooding-protection --password-store=basic --use-mock-keychain --force-fieldtrials=*BackgroundTracing/default/ --remote-debugging-port=52735 --user-data-dir=C:\Users\Admin\AppData\Local\Temp\lighthouse.38767423 --disable-web-security --disable-popup-blocking --disable-site-isolation-trials --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus http://localhost:3000
                            5⤵
                            • Uses browser remote debugging
                            • Drops file in Windows directory
                            • Enumerates system info in registry
                            • Modifies data under HKEY_USERS
                            • Modifies registry class
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                            • Suspicious use of AdjustPrivilegeToken
                            • Suspicious use of FindShellTrayWindow
                            PID:18196
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\lighthouse.38767423 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\lighthouse.38767423\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\lighthouse.38767423 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ff8e250c728,0x7ff8e250c734,0x7ff8e250c740
                              6⤵
                                PID:18544
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mute-audio --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1848,i,8832205192969816036,10831553798303768460,524288 --field-trial-handle=2320,i,5475006810467698350,6426202412077728107,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:11
                                6⤵
                                • System Time Discovery
                                PID:20252
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1596,i,18348417699571515607,2414198443408910592,262144 --field-trial-handle=2320,i,5475006810467698350,6426202412077728107,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
                                6⤵
                                  PID:20276
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mute-audio --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=2060,i,7742582718005292888,16911443461216967372,524288 --field-trial-handle=2320,i,5475006810467698350,6426202412077728107,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:13
                                  6⤵
                                    PID:20300
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-background-timer-throttling --remote-debugging-port=52735 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,1197973808928346825,17838608169519364674,2097152 --field-trial-handle=2320,i,5475006810467698350,6426202412077728107,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:1
                                    6⤵
                                    • Uses browser remote debugging
                                    PID:20696
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mute-audio --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --force-high-res-timeticks=disabled --metrics-shmem-handle=5192,i,18124366513343907140,511924068413870861,524288 --field-trial-handle=2320,i,5475006810467698350,6426202412077728107,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
                                    6⤵
                                      PID:23944
                                  • C:\Windows\system32\cmd.exe
                                    C:\Windows\system32\cmd.exe /d /s /c "taskkill /pid 18196 /T /F"
                                    5⤵
                                      PID:25280
                                      • C:\Windows\system32\taskkill.exe
                                        taskkill /pid 18196 /T /F
                                        6⤵
                                        • Kills process with taskkill
                                        • Suspicious use of AdjustPrivilegeToken
                                        PID:25312
                                  • C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node.exe
                                    "C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node.exe" "C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@liamcottle\rustplus.js\cli\index.js" fcm-listen --config-file="C:\Users\Admin\AppData\Roaming\RustPlusDesk\rustplusjs-config.json"
                                    4⤵
                                    • Executes dropped EXE
                                    PID:25820
                                  • C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node.exe
                                    "C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node.exe" "C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@liamcottle\rustplus.js\cli\index.js" fcm-register --config-file="C:\Users\Admin\AppData\Roaming\RustPlusDesk\rustplusjs-config.json"
                                    4⤵
                                    • Executes dropped EXE
                                    PID:29708
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-features=Translate,OptimizationHints,MediaRouter --disable-extensions --disable-component-extensions-with-background-pages --disable-background-networking --disable-component-update --disable-client-side-phishing-detection --disable-sync --metrics-recording-only --disable-default-apps --mute-audio --no-default-browser-check --no-first-run --disable-backgrounding-occluded-windows --disable-renderer-backgrounding --disable-background-timer-throttling --disable-ipc-flooding-protection --password-store=basic --use-mock-keychain --force-fieldtrials=*BackgroundTracing/default/ --remote-debugging-port=53590 --user-data-dir=C:\Users\Admin\AppData\Local\Temp\lighthouse.20772871 --disable-web-security --disable-popup-blocking --disable-site-isolation-trials --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus http://localhost:3000
                                      5⤵
                                      • Uses browser remote debugging
                                      • Enumerates system info in registry
                                      PID:9224
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\lighthouse.20772871 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\lighthouse.20772871\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\lighthouse.20772871 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ff8fe14c728,0x7ff8fe14c734,0x7ff8fe14c740
                                        6⤵
                                          PID:9196
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1636,i,14235086916952620408,8180172071205485403,262144 --field-trial-handle=1952,i,15509486253847289688,12273521281988001823,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:2
                                          6⤵
                                            PID:8724
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mute-audio --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --force-high-res-timeticks=disabled --metrics-shmem-handle=2108,i,17213060200839250055,17060212477454214201,524288 --field-trial-handle=1952,i,15509486253847289688,12273521281988001823,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:11
                                            6⤵
                                            • System Time Discovery
                                            PID:8700
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mute-audio --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --force-high-res-timeticks=disabled --metrics-shmem-handle=2248,i,11458971006312335623,5354862708582645600,524288 --field-trial-handle=1952,i,15509486253847289688,12273521281988001823,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:13
                                            6⤵
                                              PID:8404
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir=/tmp/temporary-chrome-profile-dir-rustplus --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-background-timer-throttling --remote-debugging-port=53590 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3140,i,13957714546574475636,12551117299840344889,2097152 --field-trial-handle=1952,i,15509486253847289688,12273521281988001823,262144 --disable-features=MediaRouter,OptimizationHints,Translate --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:1
                                              6⤵
                                              • Uses browser remote debugging
                                              PID:8396
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe"
                                    1⤵
                                    • Suspicious use of WriteProcessMemory
                                    PID:52476
                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                      "C:\Program Files\Mozilla Firefox\firefox.exe"
                                      2⤵
                                      • Checks processor information in registry
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of SetWindowsHookEx
                                      • Suspicious use of WriteProcessMemory
                                      PID:52488
                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1976 -prefsLen 27098 -prefMapHandle 1980 -prefMapSize 270279 -ipcHandle 2068 -initialChannelId {f14f2350-5bb0-4d00-bfc6-abe548c217f9} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
                                        3⤵
                                          PID:52684
                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27134 -prefMapHandle 2436 -prefMapSize 270279 -ipcHandle 2452 -initialChannelId {a520ad74-9385-40d6-a890-b2fe4f15399e} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                                          3⤵
                                          • Checks processor information in registry
                                          PID:52832
                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3768 -prefsLen 27323 -prefMapHandle 3772 -prefMapSize 270279 -jsInitHandle 3776 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3784 -initialChannelId {13c41891-025b-437e-b422-58dd3bc2168f} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                                          3⤵
                                          • Checks processor information in registry
                                          PID:53060
                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3956 -prefsLen 27323 -prefMapHandle 3960 -prefMapSize 270279 -ipcHandle 4048 -initialChannelId {9eb7f512-99eb-4173-becc-f883eac772c7} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                                          3⤵
                                            PID:53088
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3160 -prefsLen 34822 -prefMapHandle 2620 -prefMapSize 270279 -jsInitHandle 2844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1488 -initialChannelId {fb13eeb4-e083-42d7-ba51-55776e696598} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:14316
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4948 -prefsLen 34822 -prefMapHandle 4940 -prefMapSize 270279 -ipcHandle 4956 -initialChannelId {cb5b6a4e-9648-4d8f-8cc1-5b982fdd089f} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                                            3⤵
                                            • Checks processor information in registry
                                            PID:16252
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3340 -prefsLen 32952 -prefMapHandle 4992 -prefMapSize 270279 -jsInitHandle 2924 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3332 -initialChannelId {28e92dd2-813c-471f-925d-95dd61b0604d} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17596
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5516 -prefsLen 32952 -prefMapHandle 5520 -prefMapSize 270279 -jsInitHandle 5524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4120 -initialChannelId {0ae55976-7182-4784-a975-2da7d0c4e17c} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17612
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5676 -prefsLen 32952 -prefMapHandle 5680 -prefMapSize 270279 -jsInitHandle 5684 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3080 -initialChannelId {10018695-b573-4879-b0c7-20bf32439797} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17628
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1632 -prefsLen 32952 -prefMapHandle 4380 -prefMapSize 270279 -jsInitHandle 1396 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5844 -initialChannelId {b7b353f2-acf0-42b1-afaf-d189a09dac55} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17652
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5928 -prefsLen 32952 -prefMapHandle 5932 -prefMapSize 270279 -jsInitHandle 5936 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4392 -initialChannelId {d450e7c9-94ad-4262-aa55-ff72528f74bf} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17676
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6052 -prefsLen 32952 -prefMapHandle 6056 -prefMapSize 270279 -jsInitHandle 6060 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6064 -initialChannelId {3d95afd1-90d5-4dc4-8c84-7a1d4c03d33f} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17692
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6240 -prefsLen 32952 -prefMapHandle 6244 -prefMapSize 270279 -jsInitHandle 6248 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6256 -initialChannelId {fe2c49bc-5926-4dbc-b24a-691ea4e0c8ea} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17708
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6324 -prefsLen 32952 -prefMapHandle 6328 -prefMapSize 270279 -jsInitHandle 6332 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6340 -initialChannelId {0558ddee-aaa1-41cb-bc4e-a59810ca9268} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17756
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5820 -prefsLen 32952 -prefMapHandle 5816 -prefMapSize 270279 -jsInitHandle 5812 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5804 -initialChannelId {203be33a-c0ca-40ba-924a-4b37430a36dd} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:17820
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6592 -prefsLen 32952 -prefMapHandle 6596 -prefMapSize 270279 -jsInitHandle 6600 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5860 -initialChannelId {5e144b1e-bbfb-4ee7-82c9-94eafe393405} -parentPid 52488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.52488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:18068
                                      • C:\Windows\system32\svchost.exe
                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                        1⤵
                                          PID:25104

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              protocols.json

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                              • Size 3KB
                                              • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 21c0ebf102d096e89024044eda4f442e40ef03de4ecd00a9d454fe4f66c33e79
                                              • MD5 SHA1 SHA512 TLSH

                                              data_0

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\DawnWebGPUCache\data_0
                                              • Size 8KB
                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              data_1

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\DawnWebGPUCache\data_1
                                              • Size 264KB
                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              data_2

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\DawnWebGPUCache\data_2
                                              • Size 8KB
                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                              • MD5 SHA1 SHA512 SSDEEP

                                              data_3

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\DawnWebGPUCache\data_3
                                              • Size 8KB
                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                              • MD5 SHA1 SHA512 SSDEEP

                                              CURRENT

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Extension Rules\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512

                                              MANIFEST-000001

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Extension Scripts\MANIFEST-000001
                                              • Size 41B
                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                              • MD5 SHA1 SHA512

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Network\Network Persistent State
                                              • Size 59B
                                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                              • MD5 SHA1 SHA512 TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Network\Network Persistent State
                                              • Size 111B
                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                              • MD5 SHA1 SHA512 TLSH

                                              SCT Auditing Pending Reports

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Preferences
                                              • Size 6KB
                                              • SHA256 2a45bb9c32c68e36e65b683ab000867a0e718e46af9ac0238874abe3a714845a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Preferences
                                              • Size 6KB
                                              • SHA256 cd8726043ee62efcfd24f2410dfe5ea5ffa7fc83b51bd5dd26c3d056f81b5c51
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences~RFe59f0a0.TMP

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Preferences~RFe59f0a0.TMP
                                              • Size 5KB
                                              • SHA256 c6e5450621098b171c24df01700b7a4da632ff822890c9e095ddd2754983d6d9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
                                              • Size 4KB
                                              • SHA256 524d10ca1975884fda09496927339260df4642cd2436283fed3258961ab1219c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
                                              • Size 4KB
                                              • SHA256 0973a7f5184e3dcefb03f5aa6404a09df4503619d0ce77f7ef280f5e9d6f3f18
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
                                              • Size 17KB
                                              • SHA256 03a264c1f09f78ea526fce2bb7cb31a99479303ed8d0f7da795fe21e7ff2ac8c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
                                              • Size 1KB
                                              • SHA256 fed8ba7e11398ee7df5a3ee6668d179380b855f812d0d0576b5814e99b5dd187
                                              • MD5 SHA1 SHA512 TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
                                              • Size 1KB
                                              • SHA256 beb88068f120648ce001b983a77b85246c634dbea5a4edd64b90732693e6a5d2
                                              • MD5 SHA1 SHA512 TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
                                              • Size 2KB
                                              • SHA256 49475738765d9123c2f24f89ab8a53355704c2d92f8b0966ac3f118e871544ac
                                              • MD5 SHA1 SHA512 TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
                                              • Size 3KB
                                              • SHA256 3bc5b74ffc2423149a1a29c6f08ab7317ccef42192ce20c6ea92fc9ce9ae4fcb
                                              • MD5 SHA1 SHA512 TLSH

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@jimp\custom\LICENSE
                                              • Size 1KB
                                              • SHA256 942eab097945c835cf41abcbf1b9a6659c5d0c3493e60c56796d2e045c219278
                                              • MD5 SHA1 SHA512 TLSH

                                              CHANGELOG.md

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@jimp\plugin-contain\CHANGELOG.md
                                              • Size 2KB
                                              • SHA256 6d8f825bd629e540a0a1fb53f39a5892c65b50026ae5ac1c6f6e4e80d6b4f3c4
                                              • MD5 SHA1 SHA512 TLSH

                                              CHANGELOG.md

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@jimp\plugin-dither\CHANGELOG.md
                                              • Size 2KB
                                              • SHA256 c38afd80fe96c5bf10f064cb3566885b585e8bb1a3396dd107720e6fdb5f99ae
                                              • MD5 SHA1 SHA512 TLSH

                                              babel.config.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@jimp\plugin-threshold\babel.config.js
                                              • Size 773B
                                              • SHA256 b5605e07a11df21f28a90de71a7e591754adda74074f179265cf6c5973d8db7b
                                              • MD5 SHA1 SHA512 TLSH

                                              property.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@liamcottle\push-receiver\node_modules\protobufjs\cli\node_modules\lodash\fp\property.js
                                              • Size 35B
                                              • SHA256 af3533640c8af8f6804e9df53cabeac7767cddf1a619236e7226a784a2e9101a
                                              • MD5 SHA1 SHA512

                                              valueOf.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@liamcottle\push-receiver\node_modules\protobufjs\cli\node_modules\lodash\valueOf.js
                                              • Size 44B
                                              • SHA256 469f0f647beaf4eeca8d316133bcd0a0b3f5e55a4c1a391da1f10baba824ca9d
                                              • MD5 SHA1 SHA512

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@liamcottle\push-receiver\node_modules\protobufjs\cli\node_modules\rimraf\LICENSE
                                              • Size 765B
                                              • SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
                                              • MD5 SHA1 SHA512 TLSH

                                              protobuf.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@liamcottle\push-receiver\node_modules\protobufjs\dist\protobuf.js
                                              • Size 269KB
                                              • SHA256 cb2d277b3410acbfd3dc63e60a6cb7d0012fdbf3b456d8c8375f3e38a46573f7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@protobufjs\codegen\LICENSE
                                              • Size 1KB
                                              • SHA256 a67b34a24a5daddcce46aea68c5004e4442bbfb63690329fa607bf4de4269794
                                              • MD5 SHA1 SHA512 TLSH

                                              .npmignore

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@protobufjs\utf8\.npmignore
                                              • Size 39B
                                              • SHA256 4079c04a07c543f17e143625bd493fad3e195124d255af7b43258b6370563f7d
                                              • MD5 SHA1 SHA512

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\@types\long\LICENSE
                                              • Size 1KB
                                              • SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
                                              • MD5 SHA1 SHA512 TLSH

                                              bit32_out.bmp

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\bmp-js\test\bit32_out.bmp
                                              • Size 29KB
                                              • SHA256 b2348e7be0f01e79ffdc15b334792aa71ff06d64fed5cac20b705b0f39a0b6be
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              license

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\chalk\license
                                              • Size 1KB
                                              • SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
                                              • MD5 SHA1 SHA512 TLSH

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\chrome-launcher\LICENSE
                                              • Size 11KB
                                              • SHA256 7ec9661a8afafab1eee3523d6f1a193eff76314a5ab10b4ce96aefd87621b0c3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              .nycrc

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\es-define-property\.nycrc
                                              • Size 139B
                                              • SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
                                              • MD5 SHA1 SHA512 TLSH

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\es-define-property\LICENSE
                                              • Size 1KB
                                              • SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
                                              • MD5 SHA1 SHA512 TLSH

                                              react.d.ts

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\fast-deep-equal\react.d.ts
                                              • Size 66B
                                              • SHA256 d979def17dea97ee491c975f3d3cb31957b7970a791c1d5a3854ea6cd4cce91e
                                              • MD5 SHA1 SHA512 TLSH

                                              license

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\file-type\license
                                              • Size 1KB
                                              • SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
                                              • MD5 SHA1 SHA512 TLSH

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\find-replace\LICENSE
                                              • Size 1KB
                                              • SHA256 3de0959efc0338fb102e365751fb0a2ff61bea1ac2b5eef2d924836d4e6c199f
                                              • MD5 SHA1 SHA512 TLSH

                                              .eslintrc

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\has-tostringtag\.eslintrc
                                              • Size 43B
                                              • SHA256 0694050195fc694c5846b0a2a66b437ac775da988f0a779c55fb892597f7f641
                                              • MD5 SHA1 SHA512

                                              .nycrc

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\has-tostringtag\.nycrc
                                              • Size 216B
                                              • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
                                              • MD5 SHA1 SHA512 TLSH

                                              dice.png

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\jimp\browser\examples\dice.png
                                              • Size 213KB
                                              • SHA256 af8e81e3089ad082f171266b4de154bd398de4df0d41c90dc592bb12ef5723a6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              each.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\each.js
                                              • Size 39B
                                              • SHA256 4d10bb01d04d58517504ecce768fce382a54fd93f5b04e6f649448af7978ee42
                                              • MD5 SHA1 SHA512

                                              eachRight.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\eachRight.js
                                              • Size 44B
                                              • SHA256 b231b46d2a636cd4e876773316d1bf20fb252ecbffb9a5032c22cbdb2dad822d
                                              • MD5 SHA1 SHA512

                                              entries.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\entries.js
                                              • Size 39B
                                              • SHA256 613eb0b14a3fdf90ad901dc8860aa7f77d752efc8d887a8df246be91501945da
                                              • MD5 SHA1 SHA512

                                              entriesIn.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\entriesIn.js
                                              • Size 41B
                                              • SHA256 963f4202340184bf129c8111fd1958b1ce3a535a760aaff2929347d2774a7ccf
                                              • MD5 SHA1 SHA512

                                              extend.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\extend.js
                                              • Size 40B
                                              • SHA256 32a68951279d8b57c741ab487b5eef543394c802e30f95b0f68d44e366db8aef
                                              • MD5 SHA1 SHA512

                                              extendWith.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\extendWith.js
                                              • Size 44B
                                              • SHA256 1b2704465ff3abb01d67ae8a2315c3bbaf0c386863886c03343c219bb02cc5a8
                                              • MD5 SHA1 SHA512

                                              first.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\first.js
                                              • Size 36B
                                              • SHA256 96a23a435507782b9ee4cbc1d3312f9f2617a40e9bd1b7af838185f40feef657
                                              • MD5 SHA1 SHA512

                                              assoc.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\fp\assoc.js
                                              • Size 35B
                                              • SHA256 b9b1a205d5bd933a2bc29506931ee397b48c87fa3368f98acad8b1f97595a91d
                                              • MD5 SHA1 SHA512

                                              conforms.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\fp\conforms.js
                                              • Size 42B
                                              • SHA256 335495baefaf23607518544bc875a1ef48507d2c5e6bf0f0c1a225fd0e304f46
                                              • MD5 SHA1 SHA512

                                              dissoc.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\fp\dissoc.js
                                              • Size 37B
                                              • SHA256 bf6c3eee53c310992b79f75bade2a125748ca76f7bc1dbe9d642be277fb81e2e
                                              • MD5 SHA1 SHA512

                                              matches.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\fp\matches.js
                                              • Size 39B
                                              • SHA256 c148011a1334aad49cc4fa8700a5395794ca325cf2e0284c9853890311813ea0
                                              • MD5 SHA1 SHA512

                                              pathEq.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\fp\pathEq.js
                                              • Size 47B
                                              • SHA256 e0d5e4b02fdb3d324aa5e10b951acdd185efd13f0d2fefbe3517c480ac84193b
                                              • MD5 SHA1 SHA512

                                              pathOr.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\fp\pathOr.js
                                              • Size 37B
                                              • SHA256 632ce7415594470bd7e1b3af48c916401e4f5c2a486536974a60f4a7dc3a10a8
                                              • MD5 SHA1 SHA512

                                              paths.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\lodash\fp\paths.js
                                              • Size 34B
                                              • SHA256 a29f24c260492e76ea238aa68ebcb18806e6b4da1378a1703072f882f632251d
                                              • MD5 SHA1 SHA512

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\oauth-sign\LICENSE
                                              • Size 8KB
                                              • SHA256 d446a8c73d7bbe4872d6524b15ae206f9a2d7eb53f8c9cb6e6c893a43acc5276
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              protobuf.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\protobufjs\dist\protobuf.js
                                              • Size 291KB
                                              • SHA256 0e3c5660ba61dcda1c52b7c47123a54415fdc035ab17c08d4febe67632223d5e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              light.d.ts

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\protobufjs\light.d.ts
                                              • Size 55B
                                              • SHA256 932cade1c5802123b5831f332ad8a6297f0f7d14d0ee04f5a774408f393e2200
                                              • MD5 SHA1 SHA512 TLSH

                                              .editorconfig

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\side-channel-map\.editorconfig
                                              • Size 145B
                                              • SHA256 f3e9230a5e411831564b0a83313248a7455929098f389c5bc07e8241a754d3fd
                                              • MD5 SHA1 SHA512 TLSH

                                              tsconfig.json

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\side-channel\tsconfig.json
                                              • Size 116B
                                              • SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
                                              • MD5 SHA1 SHA512 TLSH

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\sshpk\LICENSE
                                              • Size 1KB
                                              • SHA256 82f8e8150cc12bb0895291c63ffa618d5652daf6265f63203ce0043955066ba4
                                              • MD5 SHA1 SHA512 TLSH

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\typical\LICENSE
                                              • Size 1KB
                                              • SHA256 b76735564b0f969e78755409689d96d93de2d042dae858175c89297c647a6814
                                              • MD5 SHA1 SHA512 TLSH

                                              README.hbs

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\typical\README.hbs
                                              • Size 1KB
                                              • SHA256 bb9c9a0c11bba75e645820bfdd2d0711578174e2e743c5ce0367ca9c14ab1c17
                                              • MD5 SHA1 SHA512 TLSH

                                              wss.d.ts

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\uri-js\dist\esnext\schemes\wss.d.ts
                                              • Size 108B
                                              • SHA256 fb2f19ae967742423ded567ffc411b2c947a47813750a745e3de5fe3edf8a878
                                              • MD5 SHA1 SHA512 TLSH

                                              uri.d.ts

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\uri-js\dist\esnext\uri.d.ts
                                              • Size 2KB
                                              • SHA256 9f3c5498245c38c9016a369795ec5ef1768d09db63643c8dba9656e5ab294825
                                              • MD5 SHA1 SHA512 TLSH

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\vary\LICENSE
                                              • Size 1KB
                                              • SHA256 bd47ce7b88c7759630d1e2b9fcfa170a0f1fde522be09e13fb1581a79d090400
                                              • MD5 SHA1 SHA512 TLSH

                                              README.md

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\wordwrapjs\node_modules\typical\README.md
                                              • Size 8KB
                                              • SHA256 7790e81c85b7c1de13dfc7e93df3182a2a1150ea737b9d69745443302c44ff69
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              index.js

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\wordwrapjs\node_modules\typical\dist\index.js
                                              • Size 7KB
                                              • SHA256 265c4ffb8b3d63c2d8b3d5dc67e59b5446413b75b7b21404c627977f01d29e19
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              index.mjs

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\wordwrapjs\node_modules\typical\index.mjs
                                              • Size 5KB
                                              • SHA256 ba9df976e6fad6442ed4cf5be7a49fb657891c658c3bd3c2f21f8791a7ceb875
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              package.json

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\wordwrapjs\node_modules\typical\package.json
                                              • Size 1KB
                                              • SHA256 822fcd1ec5ced51a245e485f923c97ca4994ef8bd17bf610f49f4193167b7c75
                                              • MD5 SHA1 SHA512 TLSH

                                              LICENSE.md

                                              • Path C:\Users\Admin\AppData\Local\RustPlusDesk\runtime\rustplus-cli\node_modules\xml-parse-from-string\LICENSE.md
                                              • Size 1KB
                                              • SHA256 fb153e8eaf70c10aa169bc3d7401946a9d51163cafaca23458cea8e67de972f4
                                              • MD5 SHA1 SHA512 TLSH

                                              D3DCompiler_47_cor3.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\D3DCompiler_47_cor3.dll
                                              • Size 4.7MB
                                              • SHA256 a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              DirectWriteForwarder.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\DirectWriteForwarder.dll
                                              • Size 490KB
                                              • SHA256 a8d135a59a84ef85b0a1ee517f2e4f40b45a02a4c4e3d268aef7e29583579c18
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Microsoft.Win32.Registry.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\Microsoft.Win32.Registry.dll
                                              • Size 118KB
                                              • SHA256 7e2c5dde6a8ac83a9075b4ae3052175541d3a3cd57da23f50070f93701e077c8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Microsoft.Win32.SystemEvents.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\Microsoft.Win32.SystemEvents.dll
                                              • Size 94KB
                                              • SHA256 14ace45361807bf37499b4709aea8c310ef913d695f1f7d803cce2ef03654aed
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              PresentationCore.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\PresentationCore.dll
                                              • Size 8.1MB
                                              • SHA256 f27377e45fd2676f7ca1b119113539181726d1bc0150e39f1c477adcabd7e7ea
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              PresentationFramework-SystemXml.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\PresentationFramework-SystemXml.dll
                                              • Size 34KB
                                              • SHA256 f860512d489645ff8d8740a20f852642a73970f471ec4eca01233dea73c1a4a2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              PresentationFramework.Aero2.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\PresentationFramework.Aero2.dll
                                              • Size 438KB
                                              • SHA256 8c2130b6729351398ca93b1794500d5d109546fc1b8bc3d596dfe8e9d73d051f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              PresentationFramework.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\PresentationFramework.dll
                                              • Size 15.4MB
                                              • SHA256 750acfdebb8ab33851b91069b647491806d074a374828c8723b6e034b821ec85
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              PresentationNative_cor3.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\PresentationNative_cor3.dll
                                              • Size 1.2MB
                                              • SHA256 36a4da0eef1dfec37488a065efdac01e7c7757539c5d4b58964a6ba50ae122d9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              RustPlusDesk.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\RustPlusDesk.dll
                                              • Size 23.3MB
                                              • SHA256 55b2668ac916ac4b16d8c0e668adc40f38de4d0f4ac0656db6116f032e56c761
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Collections.Concurrent.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Collections.Concurrent.dll
                                              • Size 270KB
                                              • SHA256 a7d310161f28456c02121ff37e10a156ed61a35fd92173bbb188992706a3d94e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Collections.NonGeneric.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Collections.NonGeneric.dll
                                              • Size 102KB
                                              • SHA256 41ccd641bf2ea9e80a4e3b50178361fc3c425e45260fa0ced110b1f12cb56db4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Collections.Specialized.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Collections.Specialized.dll
                                              • Size 102KB
                                              • SHA256 9060cb537394bec915c1e57b0516725b1a7d5115b995da1857548f271330061f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Collections.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Collections.dll
                                              • Size 254KB
                                              • SHA256 e0c2f5d45c0b99d8afe0234e8527cc1097f220b6aa256ea751611c2d7763742e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.ComponentModel.EventBasedAsync.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.ComponentModel.EventBasedAsync.dll
                                              • Size 46KB
                                              • SHA256 506e037e24f9580c4e01d5524374cbe0cc0e84de137c7e43b25b0e02908c73c9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.ComponentModel.Primitives.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.ComponentModel.Primitives.dll
                                              • Size 78KB
                                              • SHA256 078f044ded212ad3e6f20bd4d1434bcb5c69165e1e128c97c5603e2d8cef58f1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.ComponentModel.TypeConverter.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.ComponentModel.TypeConverter.dll
                                              • Size 730KB
                                              • SHA256 ce6d8dcd842765f56c63518245439bb42c258e6a1577e7e1fe121d857fb23cd3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.ComponentModel.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.ComponentModel.dll
                                              • Size 30KB
                                              • SHA256 fdff94b67d5dbecc4cb17a187575e30b8d6ea137b577ea446502c8f25193a860
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Configuration.ConfigurationManager.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Configuration.ConfigurationManager.dll
                                              • Size 1.0MB
                                              • SHA256 a7eb879d6e3fd7a661735b8a22c0acd15b3394f0f7728066313513e50f87036f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Console.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Console.dll
                                              • Size 170KB
                                              • SHA256 50f75c798ad0b5bff16fdefb1965f93ed841a4499f5590dbaf8f482110809c01
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Diagnostics.DiagnosticSource.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Diagnostics.DiagnosticSource.dll
                                              • Size 406KB
                                              • SHA256 49ecefa3b57b269747dc791e67f6de7644019b88d23a7a2e2508fe41b80c9418
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Diagnostics.FileVersionInfo.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Diagnostics.FileVersionInfo.dll
                                              • Size 46KB
                                              • SHA256 9a704d87f286e72f69ad1c9417d5c6ca7a3af4cd9b056257543e996f48236f29
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Diagnostics.Process.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Diagnostics.Process.dll
                                              • Size 330KB
                                              • SHA256 9c500ae62a3337d1209c9de3fe3fef18077b9eb3e091a591150208f16f2f6e66
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Diagnostics.TraceSource.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Diagnostics.TraceSource.dll
                                              • Size 142KB
                                              • SHA256 3171986ac1851460357b4360e6ed8117aa40c1f135f85899ace3ae8f27d01db2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Drawing.Common.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Drawing.Common.dll
                                              • Size 1.5MB
                                              • SHA256 917189bd456f44516a0dfde374bb62474946f3350c7a57634b451f5a7d8ae827
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Drawing.Primitives.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Drawing.Primitives.dll
                                              • Size 130KB
                                              • SHA256 baf9e3ac2f556fb6bc5b154c2373c6017ebda210baea9c7c79ea98c0350174e8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.IO.Packaging.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.IO.Packaging.dll
                                              • Size 286KB
                                              • SHA256 f3fe995b844e558c2e7a17f2a211846c4710ca095acf6a2380aba23cebcbab11
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Linq.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Linq.dll
                                              • Size 530KB
                                              • SHA256 814d7e5fc33feee1d8820bc7f5e5f47b424872934b3391dd482876b57d8b680a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Memory.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Memory.dll
                                              • Size 154KB
                                              • SHA256 de74fb773a3e814faca816b78194de7d9fede29f2910e834083da87d82e6dc1e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Net.Http.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Net.Http.dll
                                              • Size 1.7MB
                                              • SHA256 3ddb34d2f476543c1c69af3aa1f8145cbdaa8c690dce204977f470259c1bae4f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Net.Primitives.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Net.Primitives.dll
                                              • Size 226KB
                                              • SHA256 f3aea69a4c7654a2c5f40802f3f5f3e3cd30d2713d694064bfd7eabf620b5a94
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Net.Requests.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Net.Requests.dll
                                              • Size 338KB
                                              • SHA256 7dcc705fa786d12ad0225bc7f1a07f4b541f23c2a7e88d1f2a2e6efd34079026
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Net.Security.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Net.Security.dll
                                              • Size 654KB
                                              • SHA256 00ab8c5f575b7072359f9e7aef7344336d6d1a9a341a71cff36a3b64d774099f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Net.Sockets.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Net.Sockets.dll
                                              • Size 534KB
                                              • SHA256 3f0f05a75a32c140c2405338cb544d09e6536692f6e79925c2e985ff953be7f0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Net.WebClient.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Net.WebClient.dll
                                              • Size 166KB
                                              • SHA256 1ad829174debb701de93d21b643d70dc13caaff4f56f388a669aa6452dfcea14
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Net.WebHeaderCollection.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Net.WebHeaderCollection.dll
                                              • Size 66KB
                                              • SHA256 a49230c81d7b5e26a27029b1c63ff95e65dc1fd37834d080fced081123044a32
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.ObjectModel.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.ObjectModel.dll
                                              • Size 78KB
                                              • SHA256 ff432fa3ac22a819e720c6d567124ff88810c6bbf4fa469ec19b1fa775e0a974
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Private.CoreLib.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Private.CoreLib.dll
                                              • Size 12.6MB
                                              • SHA256 20027d6cc9cf4c9c08d24d9c8319cbb233316a7f245c91c6c2ca7cb0f11d062c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Private.Uri.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Private.Uri.dll
                                              • Size 254KB
                                              • SHA256 9fa3db97acb6e635acd24be072678b32f5d6755118b816d928eb4c265c9971ce
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Private.Xml.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Private.Xml.dll
                                              • Size 7.6MB
                                              • SHA256 c16b5d65ef4e6bdeea7f9bbfa91864bcdeca1b388bc4d7f7d2458138bdb4246d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Runtime.CompilerServices.VisualC.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Runtime.CompilerServices.VisualC.dll
                                              • Size 30KB
                                              • SHA256 df2acba7f8f1dbbca2e34865bbad65a61195646784741aeb6d6c2428d5bc9dfc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Runtime.InteropServices.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Runtime.InteropServices.dll
                                              • Size 94KB
                                              • SHA256 3bd73211a2b2ab42f2c67832ea6228577a3dde9ea3975d81459406d6692f498c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Security.Cryptography.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Security.Cryptography.dll
                                              • Size 2.0MB
                                              • SHA256 567f78033312b3b25d64729e0742bd9c682d5f0f332279cda8e4d65d7f81770a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Text.Encodings.Web.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Text.Encodings.Web.dll
                                              • Size 130KB
                                              • SHA256 520ea63e296907bfd8049016be554c7346d75c9778182bc47fe30245d5bdcd41
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Text.Json.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Text.Json.dll
                                              • Size 1.4MB
                                              • SHA256 246cfbc6b0ded01b8b271cc3d0ae7547387cb3128b717d8d83b09a4d3e734c25
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Text.RegularExpressions.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Text.RegularExpressions.dll
                                              • Size 998KB
                                              • SHA256 0652b627743ad6f609bc115a27991c2723bf4fdd5f8d7148236fa5c90e24608c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Threading.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Threading.dll
                                              • Size 82KB
                                              • SHA256 769428cfe7f319abbef27990f0a6bbd3034305271fc7f2a4f409abd15215546f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Windows.Controls.Ribbon.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Windows.Controls.Ribbon.dll
                                              • Size 1.4MB
                                              • SHA256 4b5f181cbfc7a06462fa8ecccd98e2d62d1ecb0fdeee999ae4d1172e83dfa18b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Windows.Extensions.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Windows.Extensions.dll
                                              • Size 114KB
                                              • SHA256 d0749fc8357a23c232ea925043d793cf1b285da928d84693efe9788fd0cdb133
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Windows.Forms.Primitives.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Windows.Forms.Primitives.dll
                                              • Size 2.9MB
                                              • SHA256 c70cc2e0489e1cd2340d10885404c0d09e6cc6b497de1635575dd1d45094ce6a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Windows.Forms.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Windows.Forms.dll
                                              • Size 12.9MB
                                              • SHA256 53853930d5231a5f27116b079de02f79cf3f8e2f57d4fd9ef4f45cbdf3da5f73
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              System.Xaml.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\System.Xaml.dll
                                              • Size 1.4MB
                                              • SHA256 9677126b79d48a86ad1cbaec0b3122592c4804988e6837909827817c0b92bc1a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              UIAutomationProvider.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\UIAutomationProvider.dll
                                              • Size 58KB
                                              • SHA256 e15113539458ab464524f6703fe825db8d2cc2ea0fbd07b3a28e17f8a275d31d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              UIAutomationTypes.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\UIAutomationTypes.dll
                                              • Size 306KB
                                              • SHA256 27b0972dc81447c573321ff02271fe8f0ca48ed62b56bb1dc7d76499dff0461a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              WebView2Loader.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\WebView2Loader.dll
                                              • Size 156KB
                                              • SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              WindowsBase.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\WindowsBase.dll
                                              • Size 2.2MB
                                              • SHA256 ec652aa106ce75cbe84a983294a3705986c1834b8ba3e0dce4425f14817bad6c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              WindowsFormsIntegration.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\WindowsFormsIntegration.dll
                                              • Size 206KB
                                              • SHA256 76f07fc9b8818fcae753c02f334dee5ec3ade44b4de3c0c99a953e421fc5aa85
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              wpfgfx_cor3.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.net\RustPlusDesk\CxNgBxiYDKVmIUkFG3D1GOa6VD34a6A=\wpfgfx_cor3.dll
                                              • Size 1.9MB
                                              • SHA256 5087b22c46f17c25c665d6ddbc851c05da4d9a603e2818a98b3a03dc4364bc1b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              RustPlusDesk-Setup.tmp

                                              • Path C:\Users\Admin\AppData\Local\Temp\is-NMHE1.tmp\RustPlusDesk-Setup.tmp
                                              • Size 3.7MB
                                              • SHA256 0ec7ba9c770c5dd85d06400dfb244684752c7f7cd8b3a735052325b7f2002a07
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              index

                                              • Path C:\Users\Admin\AppData\Local\Temp\lighthouse.38767423\Default\Code Cache\wasm\index
                                              • Size 24B
                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                              • MD5 SHA1 SHA512

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Temp\lighthouse.38767423\Local State
                                              • Size 3KB
                                              • SHA256 cdee7940f3e5d29f07209b83917ac1d25445ca259eb6b1e310cf2949c74c1f70
                                              • MD5 SHA1 SHA512 TLSH

                                              Local State~RFe59e778.TMP

                                              • Path C:\Users\Admin\AppData\Local\Temp\lighthouse.38767423\Local State~RFe59e778.TMP
                                              • Size 1KB
                                              • SHA256 b65601414942519ef463c12a3e4dd7a6fe805bda9f59d90bbdfdd01dc0f810a3
                                              • MD5 SHA1 SHA512 TLSH

                                              data.safe.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 7KB
                                              • SHA256 5a6c5151bdd5842ae033c93d8e3a8ef6dea47154f2f91f7dddf39ff5c46ab9d3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              data.safe.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 6KB
                                              • SHA256 52bf986c367736641a3441aafd5825c2bd17d31d36ed1b393baf5c0278e7d900
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              events

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\events\events
                                              • Size 1KB
                                              • SHA256 babf669e6d09d095d78f8e7918683595e707384b667a433cfb4ba5d5d7fc857d
                                              • MD5 SHA1 SHA512 TLSH

                                              06fe80bc-98ec-46de-9d47-1ed22c2578ed

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\pending_pings\06fe80bc-98ec-46de-9d47-1ed22c2578ed
                                              • Size 235B
                                              • SHA256 22c69384364ebb8a16ff53f5847c92b2be9e66e277e14f63a27e5948d3a0e01e
                                              • MD5 SHA1 SHA512 TLSH

                                              09e7751a-4b5c-48bf-bfd9-1c0544120272

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\pending_pings\09e7751a-4b5c-48bf-bfd9-1c0544120272
                                              • Size 883B
                                              • SHA256 7965f3d3f8ace6a84cf798ba69de4769d1debd2fdb770690fb98256ea550348e
                                              • MD5 SHA1 SHA512 TLSH

                                              31c54d64-cd57-4e71-ab5e-129ed35c44c2

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\pending_pings\31c54d64-cd57-4e71-ab5e-129ed35c44c2
                                              • Size 2KB
                                              • SHA256 1771d65af9150e055ca011fbca6d41963a45972fe3f059591ee8ad642c8e1f55
                                              • MD5 SHA1 SHA512 TLSH

                                              744e5c7a-77c3-48ca-812e-90841016de67

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\pending_pings\744e5c7a-77c3-48ca-812e-90841016de67
                                              • Size 16KB
                                              • SHA256 6faeaacd7d0f35e73362c48e94244cdf29aee88e6b2b947dda31ec1d23f075bd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              aebbaf98-28ee-4059-adb0-e9c9611aec3e

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\pending_pings\aebbaf98-28ee-4059-adb0-e9c9611aec3e
                                              • Size 886B
                                              • SHA256 06d9cba4db6d13b5449202fbdc02938aa15d6793cf3f649893587fbe0783971c
                                              • MD5 SHA1 SHA512 TLSH

                                              f71758c6-cd44-424b-8324-10d8ffd8bacc

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\datareporting\glean\pending_pings\f71758c6-cd44-424b-8324-10d8ffd8bacc
                                              • Size 235B
                                              • SHA256 88a725b2fd2541088b8251e2c09c4b08ec76a6221290e795385a132848ae6515
                                              • MD5 SHA1 SHA512 TLSH

                                              prefs-1.js

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\prefs-1.js
                                              • Size 6KB
                                              • SHA256 d253610630768732bc92f0a78b1b3bae313832001a68e859815fe851092a0b63
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              prefs-1.js

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\prefs-1.js
                                              • Size 6KB
                                              • SHA256 06d21a34ddd78813ca763ac4b8920b07477100250dc5df62cd7575bd8c3243ba
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              prefs-1.js

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\prefs-1.js
                                              • Size 6KB
                                              • SHA256 4af3d0e7e70f3cb06116aa6b5cfcdfc8f6ef20c610aa8f6b2ffc497dc2a9ec75
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              sessionCheckpoints.json.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wvdcag27.default-release\sessionCheckpoints.json.tmp
                                              • Size 288B
                                              • SHA256 b779351c8c6b04cf1d260c5e76fb4ecf4b74454cc6215a43ea15a223bf5bdd7e
                                              • MD5 SHA1 SHA512 TLSH

                                              tracking_settings.json

                                              • Path C:\Users\Admin\AppData\Roaming\RustPlusDesk\tracking_settings.json
                                              • Size 1KB
                                              • SHA256 c0793b7c8ca348a6aca75143b61aec481b309093cd49aafbb71a3d33a59066a6
                                              • MD5 SHA1 SHA512 TLSH

                                              tracking_settings.json

                                              • Path C:\Users\Admin\AppData\Roaming\RustPlusDesk\tracking_settings.json
                                              • Size 1KB
                                              • SHA256 4c1c59919e79c8520e6cf2a7feb9c823089880b8dafa78822887943e5f723b6d
                                              • MD5 SHA1 SHA512 TLSH

                                              is-8HE1T.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\es2015\is-8HE1T.tmp
                                              • Size 15KB
                                              • SHA256 450490d136ad99169d360f0c45a317a0ccb083da34602324734491467715baea
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              is-SE3PO.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\is-SE3PO.tmp
                                              • Size 14KB
                                              • SHA256 07005fd8527ab9ac801d940ee255890039ce8c8960dffbf5ded08c7a8d89bee0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              is-FP8T4.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\strip-ansi\is-FP8T4.tmp
                                              • Size 1KB
                                              • SHA256 fcf1a18be2e25ba82acf2c59821b030d8ee764e4e201db6ef3c51900d385515f
                                              • MD5 SHA1 SHA512 TLSH

                                              is-P9HG4.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\map-workspaces\is-P9HG4.tmp
                                              • Size 818B
                                              • SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
                                              • MD5 SHA1 SHA512 TLSH

                                              is-3FU13.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\metavuln-calculator\is-3FU13.tmp
                                              • Size 754B
                                              • SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
                                              • MD5 SHA1 SHA512 TLSH

                                              is-1EQDV.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\cacache\node_modules\mkdirp\dist\mjs\is-1EQDV.tmp
                                              • Size 26B
                                              • SHA256 1bf0e53fc74b05f1aade7451fbac72f1944b067d4229d96bae7a225519a250e4
                                              • MD5 SHA1 SHA512

                                              is-1HAK8.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\cacache\node_modules\tar\dist\commonjs\is-1HAK8.tmp
                                              • Size 28B
                                              • SHA256 58b55392b5778941e1e96892a70edc12e2d7bb8541289b237fbddc9926ed51bd
                                              • MD5 SHA1 SHA512

                                              is-IGCUU.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\chownr\is-IGCUU.tmp
                                              • Size 780B
                                              • SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
                                              • MD5 SHA1 SHA512 TLSH

                                              is-GGOPH.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\emoji-regex\is-GGOPH.tmp
                                              • Size 1KB
                                              • SHA256 f996f6e050e6fc18086162b4b44e301bba345c87deca83f57a27e6d54195556e
                                              • MD5 SHA1 SHA512 TLSH

                                              is-EQ0J8.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\exponential-backoff\is-EQ0J8.tmp
                                              • Size 11KB
                                              • SHA256 5ebd9035b6813650acaea03024934d8b6fb5f62b2887e29dbd0dfcdb34bee88f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              is-9BH9S.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\is-fullwidth-code-point\is-9BH9S.tmp
                                              • Size 1KB
                                              • SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
                                              • MD5 SHA1 SHA512 TLSH

                                              is-R483H.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\libnpmpack\is-R483H.tmp
                                              • Size 730B
                                              • SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
                                              • MD5 SHA1 SHA512 TLSH

                                              is-SUBVA.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\libnpmversion\is-SUBVA.tmp
                                              • Size 763B
                                              • SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
                                              • MD5 SHA1 SHA512 TLSH

                                              is-B4I2Q.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\is-B4I2Q.tmp
                                              • Size 16KB
                                              • SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              is-L92BG.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\is-L92BG.tmp
                                              • Size 1KB
                                              • SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
                                              • MD5 SHA1 SHA512 TLSH

                                              is-O6NDN.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\is-O6NDN.tmp
                                              • Size 802B
                                              • SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
                                              • MD5 SHA1 SHA512 TLSH

                                              is-IMDLU.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\chownr\is-IMDLU.tmp
                                              • Size 1KB
                                              • SHA256 a638a0768dbec922fd821d0b6cce6275231c4b57cfcddf584defce530fbfbbf5
                                              • MD5 SHA1 SHA512 TLSH

                                              is-0ONU1.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-0ONU1.tmp
                                              • Size 406B
                                              • SHA256 906349978d6f46aa970a2737049469e194a01c2b24ff43d6b50afdedd1a34037
                                              • MD5 SHA1 SHA512 TLSH

                                              is-AF53C.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-AF53C.tmp
                                              • Size 508B
                                              • SHA256 f3b9c57819c4ac73589857e8a0f0066561c9ee1ce61033a6817a8526bfb00507
                                              • MD5 SHA1 SHA512 TLSH

                                              is-IUU3K.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-IUU3K.tmp
                                              • Size 283B
                                              • SHA256 8090b19632de54991128a7541545eed84d4694e1e9e2cfd69828152ee59c7580
                                              • MD5 SHA1 SHA512 TLSH

                                              is-LSLUD.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-LSLUD.tmp
                                              • Size 95B
                                              • SHA256 566ce76d91fc552ec77a04a529c6a932338e7362c611c08e9d5c646ce3ddb8b9
                                              • MD5 SHA1 SHA512 TLSH

                                              is-NPD8O.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-NPD8O.tmp
                                              • Size 3KB
                                              • SHA256 37e91264c16b6a35ac193a7bc20379da660d134d2381bbffcc2cc5b9b17afdb6
                                              • MD5 SHA1 SHA512 TLSH

                                              is-PMG2F.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-PMG2F.tmp
                                              • Size 1KB
                                              • SHA256 3f0cbbcbb68f75e9dbe364c40af79941d2184a665fd244faabae90aa107b1733
                                              • MD5 SHA1 SHA512 TLSH

                                              is-RGM8B.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-RGM8B.tmp
                                              • Size 340B
                                              • SHA256 1da483c88debd7970eea2e8d6cd8b3600f14103a0d8bf6347ddd548ebdb0498c
                                              • MD5 SHA1 SHA512 TLSH

                                              is-R2I55.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\npm-audit-report\is-R2I55.tmp
                                              • Size 771B
                                              • SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
                                              • MD5 SHA1 SHA512 TLSH

                                              is-FJAON.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\read-package-json-fast\is-FJAON.tmp
                                              • Size 771B
                                              • SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
                                              • MD5 SHA1 SHA512 TLSH

                                              is-T3I8P.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\sigstore\node_modules\@sigstore\sign\dist\types\is-T3I8P.tmp
                                              • Size 79B
                                              • SHA256 ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13
                                              • MD5 SHA1 SHA512 TLSH

                                              is-C6233.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\socks-proxy-agent\is-C6233.tmp
                                              • Size 1KB
                                              • SHA256 22427a9ca2a0ff9c27dde9e26fe6e940529aee030b342a70b435366af0fcc51b
                                              • MD5 SHA1 SHA512 TLSH

                                              is-P2797.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\tuf-js\node_modules\@tufjs\models\is-P2797.tmp
                                              • Size 1KB
                                              • SHA256 6ba2fb4cc004819b1d872168a7ba6ac4a5a07400366680750321058fe21dd36b
                                              • MD5 SHA1 SHA512 TLSH

                                              is-5SCAE.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\is-5SCAE.tmp
                                              • Size 151B
                                              • SHA256 2eacd689c758e0aacc3fa3157b6fdc1739598f0fd7ebaca3841849940e290f8c
                                              • MD5 SHA1 SHA512 TLSH

                                              is-K5DQE.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\is-K5DQE.tmp
                                              • Size 1KB
                                              • SHA256 9874348297d23c486dfb13b9df158f3fe2f57153ddfd0513507d22f0438ea204
                                              • MD5 SHA1 SHA512 TLSH

                                              is-KBC7A.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\is-KBC7A.tmp
                                              • Size 207B
                                              • SHA256 0ee7b5b132cdd64923287705569f0b55e82729319e3a78571a8ce9bc9a62f98f
                                              • MD5 SHA1 SHA512 TLSH

                                              is-P6I80.tmp

                                              • Path C:\Users\Admin\Desktop\New folder\runtime\node-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\is-P6I80.tmp
                                              • Size 2KB
                                              • SHA256 4b435dcbc2bf9a1afa4f28f7d3fcfd33406eb08c900ac2f967c32b982f39cb0e
                                              • MD5 SHA1 SHA512 TLSH

                                              manifest.fingerprint

                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2272_1097638298\manifest.fingerprint
                                              • Size 66B
                                              • SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
                                              • MD5 SHA1 SHA512 TLSH

                                              manifest.json

                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2272_1097638298\manifest.json
                                              • Size 135B
                                              • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                              • MD5 SHA1 SHA512 TLSH

                                              manifest.json

                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2272_1493271101\manifest.json
                                              • Size 76B
                                              • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                              • MD5 SHA1 SHA512 TLSH

                                              hyph-as.hyb

                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2272_587349335\hyph-as.hyb
                                              • Size 703B
                                              • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                              • MD5 SHA1 SHA512 TLSH

                                              hyph-hi.hyb

                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2272_587349335\hyph-hi.hyb
                                              • Size 687B
                                              • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                              • MD5 SHA1 SHA512 TLSH

                                              hyph-nb.hyb

                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2272_587349335\hyph-nb.hyb
                                              • Size 141KB
                                              • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              manifest.json

                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2272_587349335\manifest.json
                                              • Size 82B
                                              • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                              • MD5 SHA1 SHA512 TLSH

                                              memory/1264-5087-0x00007FF90D0D0000-0x00007FF90D0D1000-memory.dmp

                                              memory/1316-5180-0x00007FF90D0D0000-0x00007FF90D0D1000-memory.dmp

                                              memory/1348-9-0x0000000002CF0000-0x0000000002CF1000-memory.dmp

                                              memory/1348-8-0x0000000000540000-0x0000000000908000-memory.dmp

                                              memory/1348-4903-0x0000000000540000-0x0000000000908000-memory.dmp

                                              memory/1348-5-0x0000000002CF0000-0x0000000002CF1000-memory.dmp

                                              memory/1348-11-0x0000000000540000-0x0000000000908000-memory.dmp

                                              memory/1348-13-0x0000000000540000-0x0000000000908000-memory.dmp

                                              memory/1348-18-0x0000000000540000-0x0000000000908000-memory.dmp

                                              memory/1348-4657-0x0000000000540000-0x0000000000908000-memory.dmp

                                              memory/2388-4904-0x0000000000950000-0x0000000000A59000-memory.dmp

                                              memory/2388-1-0x0000000000950000-0x0000000000A59000-memory.dmp

                                              memory/2388-7-0x0000000000950000-0x0000000000A59000-memory.dmp

                                              memory/28900-19769-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19775-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19774-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19773-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19772-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19771-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19770-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19757-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19756-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp

                                              memory/28900-19755-0x0000013F1B5F0000-0x0000013F1B5F1000-memory.dmp