Analysis
- max time kernel
154s - max time network
182s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 18:24
Behavioral task
behavioral1
Sample
RustPlusDesk-Setup-7.3.3.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
RustPlusDesk-Setup-7.3.3.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
General
- Target RustPlusDesk-Setup-7.3.3.exe
- Size 290.2MB
- Sample260717-w2hlmaev4x
- SHA256 7f134dd85bdc2546bf84b8e7f36de5d35ce32f731ab0fe7ad6e63cd18c8bc119
- MD5 cf3e9f3dd85c0f05bd75ed6bb5dc20db
- SHA1 a705ada86ce59a87820686da05bc1eb129b76823
- SHA512 bdfad1136b843d73d6bdb563533a90f1962f657438a55a62eaded7c89bcf44ff4a6f94bd939940724b96d6c3e78dbf87131f9d8f0a3c2d84ed6d3074925b1778
- SSDEEP 6291456:s5bxfwrHk42Qc7ifi5aR2t95rGhg0vmTLspzxz8S6sWlicOsbC4fZk9CFfto:sTfwd1VfiER2L9GhhcLsFeTsWlDFBEEi
- TLSH T176E833B6F28BEE39C45A523CB770824805FE27F150D6C6432AE484E89F6A4713D2DE5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
pid Process 1784 RustPlusDesk-Setup-7.3.3.tmp 1484 RustPlusDesk.exe - Loads dropped DLL 64 IoCs
pid Process 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA RustPlusDesk.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\RustPlusDesk\System.Reflection.TypeExtensions.dll RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\lang\pt-BR\is-HSEDRDMG69.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\docs\content\commands\is-LREFCMXUCP.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\libnpmfund\lib\is-FX3KKIRNU2.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\npm-profile\is-FMKRTGVTKR.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\socks\build\is-HEJDFFGYWE.tmp RustPlusDesk-Setup-7.3.3.tmp File opened for modification C:\Program Files\RustPlusDesk\lang\ru\System.Xaml.resources.dll RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\is-NOS6SIIZFD.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\is-6F562H36OV.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\lang\cs\is-6G2AACLAVM.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\lib\utils\is-RYEW1XERLX.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\yallist\dist\esm\is-99WQRGDQ5C.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Nature\Mesh\is-BPC51AV61M.tmp RustPlusDesk-Setup-7.3.3.tmp File opened for modification C:\Program Files\RustPlusDesk\lang\ko\System.Xaml.resources.dll RustPlusDesk-Setup-7.3.3.tmp File opened for modification C:\Program Files\RustPlusDesk\lang\tr\WindowsBase.resources.dll RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\Assets\Screenshots\v7.1.5\is-G0WBM2XC3Z.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\minipass-fetch\is-HQIUNEQDJI.tmp RustPlusDesk-Setup-7.3.3.tmp File opened for modification C:\Program Files\RustPlusDesk\lang\fr\System.Windows.Forms.Design.resources.dll RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\docs\output\commands\is-R6PSKY460A.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\cacache\lib\is-LJADPL62ZL.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\glob\dist\commonjs\is-TO99WK7MVC.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Icons\is-3AQMU15XC3.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Monuments\Mesh\Texture2D\is-XHF1SFHKBX.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\is-BV4SEWUIQ9.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\corepack\dist\lib\is-D1Q9YG5E66.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\git\is-V64N5TT5VX.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\postcss-selector-parser\dist\selectors\is-PVVXQH2ZLG.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\safer-buffer\is-DLABTUJK5Y.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\is-5PA3YWZC19.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Monuments\Mesh\is-5PR4QG02QE.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\package-json\is-ZVL5O96Z3S.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Monuments\Mesh\Texture2D\is-PAVQKDUP5K.tmp RustPlusDesk-Setup-7.3.3.tmp File opened for modification C:\Program Files\RustPlusDesk\lang\es\PresentationUI.resources.dll RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\docs\content\commands\is-IQ6KEZ5H86.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Nature\cliff-rocks\is-G5F29C5PB3.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Textures\Backup\is-P6XO9KVY2K.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\cacache\node_modules\tar\dist\commonjs\is-3QJPDNND7P.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\make-fetch-happen\node_modules\negotiator\is-LFRSFZ25ED.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\bin\is-OXLHCMKJV4.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\nopt\lib\is-SHZFL8L3EU.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\util-deprecate\is-PRUIQOUS4V.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\query\is-P6PC1FT2Q2.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\which\node_modules\isexe\dist\mjs\is-1YX71LA0IA.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Icons\map-markers\is-P9H2OE57CX.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Textures\is-J4PXV0X4PL.tmp RustPlusDesk-Setup-7.3.3.tmp File opened for modification C:\Program Files\RustPlusDesk\lang\ar-SA\RustPlusDesk.resources.dll RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\package-json\lib\is-OCE5CPRCXM.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\tar\dist\esm\is-X5DCEI3QVQ.tmp RustPlusDesk-Setup-7.3.3.tmp File opened for modification C:\Program Files\RustPlusDesk\System.Security.SecureString.dll RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\is-GAGEJN7BVN.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\make-fetch-happen\lib\is-BG0A2RZDXB.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Icons\is-WR73PGO1IN.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\is-LTVJ3K40FO.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\glob\dist\commonjs\is-LDTR575PUP.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\gyp\pylib\gyp\generator\is-E4M3C986J8.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-CTI5VUTEC8.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Textures\is-MNDI25X6J1.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\lang\ru\is-1CO2P24FP9.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\promise-spawn\is-X5MTB0UXX4.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Textures\is-HIBDJTXFRG.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\MapParser\Rust_Assets\Textures\Corel Auto-Preserve\is-W25NS18VST.tmp RustPlusDesk-Setup-7.3.3.tmp File opened for modification C:\Program Files\RustPlusDesk\lang\pl\UIAutomationClient.resources.dll RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\is-U40P8GX426.tmp RustPlusDesk-Setup-7.3.3.tmp File created C:\Program Files\RustPlusDesk\Assets\Images\5.5.0\is-JXQBDUWG0E.tmp RustPlusDesk-Setup-7.3.3.tmp - Drops file in Windows directory 4 IoCs
description ioc Process File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2004_1509483443\_metadata\verified_contents.json msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2004_1509483443\manifest.fingerprint msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2004_1509483443\manifest.json msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2004_1509483443\metadata.pb msedgewebview2.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language RustPlusDesk-Setup-7.3.3.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language RustPlusDesk-Setup-7.3.3.exe - Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
resource yara_rule behavioral2/memory/4784-0-0x0000000000830000-0x000000000093B000-memory.dmp innosetup behavioral2/memory/4784-8-0x0000000000830000-0x000000000093B000-memory.dmp innosetup behavioral2/memory/4784-7088-0x0000000000830000-0x000000000093B000-memory.dmp innosetup - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe - Modifies registry class 7 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\rustplus RustPlusDesk.exe Set value (str) \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\rustplus\ = "URL: rustplus Protocol" RustPlusDesk.exe Set value (str) \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\rustplus\URL Protocol RustPlusDesk.exe Key created \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\rustplus\shell\open\command RustPlusDesk.exe Key created \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\rustplus\shell RustPlusDesk.exe Key created \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\rustplus\shell\open RustPlusDesk.exe Set value (str) \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\rustplus\shell\open\command\ = "\"C:\\Program Files\\RustPlusDesk\\RustPlusDesk.exe\" \"%1\"" RustPlusDesk.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1784 RustPlusDesk-Setup-7.3.3.tmp 1784 RustPlusDesk-Setup-7.3.3.tmp - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
pid Process 2004 msedgewebview2.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1484 RustPlusDesk.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 1784 RustPlusDesk-Setup-7.3.3.tmp 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1484 RustPlusDesk.exe 1484 RustPlusDesk.exe - Suspicious use of WriteProcessMemory 20 IoCs
description pid Process procid_target PID 4784 wrote to memory of 1784 4784 RustPlusDesk-Setup-7.3.3.exe 88 PID 1784 wrote to memory of 1484 1784 RustPlusDesk-Setup-7.3.3.tmp 89 PID 1484 wrote to memory of 2004 1484 RustPlusDesk.exe 90 PID 2004 wrote to memory of 2356 2004 msedgewebview2.exe 91 PID 2004 wrote to memory of 1008 2004 msedgewebview2.exe 92 PID 2004 wrote to memory of 1008 2004 msedgewebview2.exe 92 PID 2004 wrote to memory of 1008 2004 msedgewebview2.exe 92 PID 2004 wrote to memory of 1008 2004 msedgewebview2.exe 92 PID 2004 wrote to memory of 1044 2004 msedgewebview2.exe 93 PID 2004 wrote to memory of 1244 2004 msedgewebview2.exe 94 PID 2004 wrote to memory of 1244 2004 msedgewebview2.exe 94 PID 2004 wrote to memory of 1244 2004 msedgewebview2.exe 94 PID 2004 wrote to memory of 1416 2004 msedgewebview2.exe 95 PID 2004 wrote to memory of 1416 2004 msedgewebview2.exe 95 PID 2004 wrote to memory of 1416 2004 msedgewebview2.exe 95 PID 2004 wrote to memory of 1416 2004 msedgewebview2.exe 95 PID 2004 wrote to memory of 1416 2004 msedgewebview2.exe 95 PID 2004 wrote to memory of 1260 2004 msedgewebview2.exe 100 PID 2004 wrote to memory of 1260 2004 msedgewebview2.exe 100 PID 2004 wrote to memory of 1260 2004 msedgewebview2.exe 100
Processes
-
C:\Users\Admin\AppData\Local\Temp\RustPlusDesk-Setup-7.3.3.exe"C:\Users\Admin\AppData\Local\Temp\RustPlusDesk-Setup-7.3.3.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4784 -
C:\Users\Admin\AppData\Local\Temp\is-YOZ9ZDF7RU.tmp\RustPlusDesk-Setup-7.3.3.tmp"C:\Users\Admin\AppData\Local\Temp\is-YOZ9ZDF7RU.tmp\RustPlusDesk-Setup-7.3.3.tmp" /SL5="$500F0,298687661,1033728,C:\Users\Admin\AppData\Local\Temp\RustPlusDesk-Setup-7.3.3.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1784 -
C:\Program Files\RustPlusDesk\RustPlusDesk.exe"C:\Program Files\RustPlusDesk\RustPlusDesk.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1484 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RustPlusDesk.exe --webview-exe-version=7.3.3 --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1484.4872.16630123593064662618 /pfhostedapp:4a06251ba33531b1381abb97db0dc69bfe5699a64⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:2004 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView /prefetch:4 /pfhostedapp:4a06251ba33531b1381abb97db0dc69bfe5699a6 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffaa08d5fd8,0x7ffaa08d5fe4,0x7ffaa08d5ff05⤵PID:2356
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=7.3.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1736 --field-trial-handle=1740,i,16383449182649671173,16890522814584942513,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:4a06251ba33531b1381abb97db0dc69bfe5699a65⤵PID:1008
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=7.3.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2464 --field-trial-handle=1740,i,16383449182649671173,16890522814584942513,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:4a06251ba33531b1381abb97db0dc69bfe5699a65⤵PID:1044
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=7.3.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2512 --field-trial-handle=1740,i,16383449182649671173,16890522814584942513,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:4a06251ba33531b1381abb97db0dc69bfe5699a65⤵PID:1244
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=7.3.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3488 --field-trial-handle=1740,i,16383449182649671173,16890522814584942513,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:4a06251ba33531b1381abb97db0dc69bfe5699a6 /prefetch:15⤵PID:1416
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView" --webview-exe-name=RustPlusDesk.exe --webview-exe-version=7.3.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4448 --field-trial-handle=1740,i,16383449182649671173,16890522814584942513,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:4a06251ba33531b1381abb97db0dc69bfe5699a65⤵PID:1260
-
-
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5560
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\RustPlusDesk\DirectWriteForwarder.dll
- Size 505KB
- SHA256 3a2a918b1508fb0a1177444f4326362607cd896cabc3f5044a368b553e09e272
- MD5 5ab4981417d69c9f9a3e8cc5fd21dd9b
- SHA1 443665e79c22d5b038e51216f846539e16f593b8
- SHA512 6a17144cc3cda721327a0feaf1629ce1661af916d9ed4c03cc65210e1288f629fe3204cbc871661dd808e7a0a978663c46ed39b7d3c835aac71c9552d111f44c
- SSDEEP 12288:o8Y9r3Jm/RXQMkIl0LC0eDS103uaJ+AG3:BY9DJmjJNp+Yu++T
- TLSH T1DEB49D15FAC43793E92D82BE8663CA52D67099F21312E7C7C141CA562E2F3C2D77B096
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\Microsoft.Win32.Primitives.dll
- Size 14KB
- SHA256 190d9e13ec667b7c311c06213cbfae12e4b90528db2f032456f778891ac170ef
- MD5 5aff35fb8eb7897666d36724466db397
- SHA1 3aa7f1cd5568f42c4aa83e1aeeb597a35edd6eff
- SHA512 18ae67a5f7c0b575fd89e977576c864feea3d6c5177ab49d758d2c4ba27a6945a675613094c928a661fd77acb9a8bfb8f17640bf43ebbb2b0bdcf38329c9d0d9
- SSDEEP 192:R1iBpKxVWhPmpW1WCWKie1BzBWseaUW/0R3JKX01k9z3AWCUIVV:niLQVWhPmpWNZlN5jR9zTs
- TLSH T10B624A82CB3C4117EDEB6EB09AA8DD833C3963C749509A1A16D9F1181C63BC5DB3163A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\Microsoft.Win32.Registry.dll
- Size 117KB
- SHA256 4b2e3b646a85c9db904647f57763a7134dee6307ba5866f7ce51d32b914ce1cf
- MD5 130c55013461647a5e6292a46306e504
- SHA1 3a73f284827e5ae76b3e531842735872bfd71354
- SHA512 14111db0f91aa489ff40874e520dd94ce6ff77f6ea3dc42e4cb270ace9fbdb747a2f00b6c02a68c9e0358ea5b3ab3f62f8a048f91922b3f072cbcf03c52d4f15
- SSDEEP 3072:Ya1wNXwrxA7wECisvqzJSvEVcULViU3io1dPo:2NIAFC6zJSvEVzbDC
- TLSH T1DAC32A1177C8430BFAABCA7988628985E172E4871701EECF96C5C15E3F5BBC6E671601
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\PresentationCore.dll
- Size 8.2MB
- SHA256 211d9cddbbbd3280be88e48762dff0a8bf052e21a42c4b839a15dc5fd5728cf7
- MD5 00420f1c21da87b6a4f1e974687ccff2
- SHA1 5e1a0c7c205c49dfaaff6794c350aba6cd9dde75
- SHA512 76b3a5821fc2fabad86eeb39f5b3f66ab09c397546aa7b8fd476aad7911500e3fd53930c512062817345a5de3cd92daa0947a761924caffbd1b48ba800547464
- SSDEEP 98304:SJhAhMO3bBEZhL2Src8n5EsxhP3Ws135PNcQQoWP04cHlKRFqV:SJ7O3b02SrLn5+sZWP0rFKWV
- TLSH T16B867C15B7C40715D2BF86BED2934222E5B0A4635311D0CB746CEB2A2FA3FC1A7F6652
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\PresentationFramework.dll
- Size 15.4MB
- SHA256 6465a8ee9b84837434419596e1fa820b31a93ab04d0e8ef1eff83b63a2d653f4
- MD5 b343dacb8b72ae24b4aa3ae52ec371f1
- SHA1 1f284075e4e2ec2c56f38065be61cc974c930536
- SHA512 30e3c96e02c14ad6c92ab152d49ddfc5778c943abe07f5564a6d7f546742353461acf189c7e7b5d30d5b6c4ad73ff7fd226ae45a62ebbd0b49f4163c85b87247
- SSDEEP 196608:+s/CQJQreoZct7Hg/FjD6xPgsLSrEo+HYA208ZhV2PCu6:+s/CQ2nZqg/FjD6xPgsLS4lJmqPq
- TLSH T172F69E2593DC4A05D37EBEFCD2634102E9F0F4926B32D4CF8916D9092F877C1667AA62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 67629b6aaee39328d02b11e5d85a53b35aa6cea71d4d37a671295a76c02b240e
- MD5 38f9831155956106c61b9885d6113444
- SHA1 8cbc1aaf60edfd4155bb4f10fdb5257d7c4b84f8
- SHA512 e1e3859d83ee49bfdd0ea5b929772426d529e417c7d6d6bbdf251cc3d5ae5a2eaf055d0be62598231a444a5e54a1b0cea5eb60d4140d5e9739210c3b0d667b18
- SSDEEP 24576:/hNpKcF6kPHmTw+MLYpX7T3hjnHFOcJqCPoG5MupGJvaCbztQcfRYQXLFGvHLPa5:/xKcdPHmMLYpX7T35/fPoGPpGFjztQcR
- TLSH T1FC453A22E2E642E5C47FC1B8C646972BFBB07449131C66CB87608B552F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\RustPlusDesk.deps.json
- Size 51KB
- SHA256 04984c64d7f002c1ab9c9f696d43d9c30fbf380fd01f72e91b40d72388af92d6
- MD5 ee8bc4694f64266b42a9c196ad880d91
- SHA1 216b50376f82bf4eaeb2b301633f8a5d3be64115
- SHA512 aedd41de653d15211b6a28362bcf58684770fd7efbaafbc99a120a8f5acdf544f450ca55164ab427eb8d54c420ea36c6b993205281fa8bd3c08b5d383f9ca593
- SSDEEP 768:Q1RvLDy/HT2jcfUanuOxSRrsEiL4kNSm6+4:iZHy/z2jcfUanuOxSRrsE/kNSr+4
- TLSH T1A733E335C9600EE70C36ABEE28355A42F27503AF7086484EB4BC242D9F779BB9055B7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\RustPlusDesk.dll
- Size 27.0MB
- SHA256 00571df27b5f47dcf3abf8044f8db60a380539af2ba83101bb1919b5ae4975aa
- MD5 05455c6ed4446cf59db2d5b965909fbe
- SHA1 5d9002c84a4e7550571250f62bb939c9d33cb086
- SHA512 377c2f35d99b0fd074763dd96e131d5e1e9b817601ee9466439c73db3ee691268fbed91910b348116ed708f1d6575683bb1fa3d70a23150c43103e251b0871c6
- SSDEEP 393216:1beLV/OKoFHeOsRoKFoNJca+qUWjeuVDKiya7Dd/c3aTzQnzx3Qc:heLFOKGUOshqUOeQDKijnRc3aTM3
- TLSH T18457E026D9A4CD27C17AA77EBBA04381E5E197FB42C0CA0B397C599D0F336058419F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\RustPlusDesk.exe
- Size 339KB
- SHA256 31cbc7334d8c1e91d4dc13007229569cb002b6cd9fd998c3aca5ac26ee585a18
- MD5 59f515a2768afc093a66669b0a155e12
- SHA1 861e381c62a3880be23838c6da1cbb64b8eeb5ce
- SHA512 20a81ebc5924820d143c4d9002415c89ee4b847e877b3d51eac00fc76d5672ec95a57260df30509382d26468cf7f85a80448242ac10db20cdc542a15567354a9
- SSDEEP 3072:fqeXA/4yIg9vkNPNu6H6xCYOiVUE265LJC+th2VaVgLaoU3GI8K1dxGRDhhPkPAx:fvgvkNFNaxmNErJ8VuGUvGRD7PaM
- TLSH T1847419069AE5C0AAE059D97DCB629E9092F23CF447E3D2C7EB5084350D56B90BD2CFE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\RustPlusDesk.runtimeconfig.json
- Size 439B
- SHA256 530b9bc1576203237a32db45bfdfca9e87efc133089517cd15c51f18b4d2659a
- MD5 928f0153e1f39bba252f58eb4921ba37
- SHA1 4a3c93f4fad1945f07699e4f347a0da1f6120b94
- SHA512 03fdf82cc658fa35b934ea57ac7ece894916d9446b626152742d41e3f6847c4fa138d6da14a2fde56b5a684e918c5133199b4b438e764c80cdb85e2cacff6c77
- TLSH T1CAF0223AC9246E7714F0277CD02AC1C7FA30236B00040D42B9FD181C2F370A26002F89
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\System.Collections.NonGeneric.dll
- Size 101KB
- SHA256 aba7167d2e95ee23a55a03586588eb01ca3e63942ff2e1392936692bc337c194
- MD5 9a208dbc9f6ea15911a634abde78edd8
- SHA1 df9f0a91436b7d9afe573100603f2b400a4a9659
- SHA512 173b3a02b0cfae84b4f7af22a6de582521024b806321d9e754176891664705ec1cf82e2dc725396255d05697e73e3647634da8a0c4420c13aa875aca5a464b55
- SSDEEP 1536:lWd0tJVDX9LuIbwNC5IQ7XVrMZqz9AZWTUdOoz6Y:lg0dzNuIc+IQLGZqzKZAoeY
- TLSH T19AA3182673D80322C69E6BFC81938A01E6B5F4D26713D1DF1618A9CD1F9BBC2D6B2147
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Collections.Specialized.dll
- Size 101KB
- SHA256 c4b625cf2ec04fc659e86223ca4be5421f843ecac62feb1a2e5e92e7c70eda50
- MD5 ff714375dc1f1ab2bd4c847055d1f78e
- SHA1 8dd5a8798873e1175f386577d27c69d7983d5cef
- SHA512 32427ee8771ae060ac4b1e8978756808b95a188b6f189f56693f7c647c51fbdad001d1bc93a1235d0a096056bd2e8de25854c89138ceaab05ea8bb2bbe82ce89
- SSDEEP 1536:VT6dRfAgP9WSJLeI620hCYCARk4YIAO8xocgL50Gd0VIOblgzYr:VT6fAWpeJDPAOSocgLaGOBblgEr
- TLSH T16EA35B2473D84B22C73E92FC85978981E730F1E31362D2CF1559D9891E8BBC69B7612B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Collections.dll
- Size 253KB
- SHA256 f0fe3fc9cecf713d5c29a2fecdf6aafc50b41efb8130a56af54b8c9330c1ffc1
- MD5 5e013ce9a5a3cb2840b4a0d56f86c849
- SHA1 ce783a1bc6c03b5082059d6935cecfed6944da8c
- SHA512 8041a3486e1e72079a111c2354f242dd74a43ce1ab4e5dc76b05e24e17bc2654f1ad462358be14e2ea2bcc921e79a17c3ccdfecd2398783f95ed0d499989afcd
- SSDEEP 6144:SnxoXLkDXDiKNYX8qTKfAyryS1rIgH3iPt:axCkDXDiQ+jTURrhFXi1
- TLSH T119444A2A778C4E12F56F457EE663C012D7B390A34712D2CB06BEE5840E97BC2BEB6055
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.ComponentModel.Primitives.dll
- Size 77KB
- SHA256 3dc8bfbf3b542c45646a7057d3e945374c7b85db69c37f2a16794e88091a5b06
- MD5 32ca30c430324b105ded9c880e2e9453
- SHA1 1f0945383954c26312190f2059d71ef1591e95a1
- SHA512 02c242e540dd9ff34ef8da2cb9f0d33adc17f8fefc7bf804a7d5904789d95bafb96d9dabceba70c92c6029bd2fb92252515315b9af0c12711dfe5120078473d1
- SSDEEP 1536:+95/UZMu4zhd+Cv8A/oqevD2olsOnbktXzDv:+w43+S85qKD2omOnIv
- TLSH T114734B1823EC0126FBBD46BC9573A821A575F6831713D9CF4AA0D90E1F5BBC2E27152E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Configuration.ConfigurationManager.dll
- Size 1.0MB
- SHA256 74e8df5c1fa4cc47fe46df540d0bb4e463dd92b426cf74436d82a5c352bb4063
- MD5 f225f298861011a44c64a37828cc1a23
- SHA1 fdcf1bded5ed47b6bb3184e4e5d5bb41bdab9e70
- SHA512 72c273fb825493921c50526b8a85b8bfb27b16c3a897c48d96f72d4c0a15cf4417563f736a7cb2db8aad3f3b55f18c0e383dca5523b3fe0dcf62df385c15e279
- SSDEEP 12288:BPHP0JcnrfOsdV0Z8oApKK1sPTdokGH5OTNWLOdN2ZyhtAVv5d6wGGDSxw0aY1Ef:BUmnuEy/6TlGGD6zaIE16r9BH1uB
- TLSH T132354A2663D44B1AF3AA567CC5265501DAF8F8830323C2CF0595BD4E3FA7BC296B1627
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Diagnostics.Debug.dll
- Size 15KB
- SHA256 0d321fb174f9acbeec32d9f9b87f1364989b517a5f7a3b30d96a8e0ef0805389
- MD5 5e180898e0cc2120963c0a4923e4dc5d
- SHA1 0cbd12f2bce340aede9d429d6314820f0d939a25
- SHA512 9552ecbf0b7cb4c05284f54f27ac2a93c15563a0263091129aad997c296825d8016fc9342eab4135ed12d8a9464d8d647db80683ecdcaa0a46e9ee9d24b1f698
- SSDEEP 192:GfRxA68OW2fmW0WCWKie1BzBWsea4WQZIR3JKX01k9z3AWkAV:SgOW2fmWYZlNuZR9zTkS
- TLSH T1F7625B96CB7C5213FDEB6D7086A8DD833C39A7C64C60966A06D5F6091C237C0EB32639
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Diagnostics.Process.dll
- Size 329KB
- SHA256 4ca86970668d670a579db1c5733144048d1e52c2bb2e0892c86f665e39883f8d
- MD5 897a74aba264763a5dd538d26b6c6473
- SHA1 3a11d0853c4833ae9135f07eeee9554307604566
- SHA512 1665540bd61d83a4e14652b33150ea2c01143b3237816efeb7b0d06610de70bbfaef2d6aae8d6bcf3d6cbb2d2b81053dcaaf614e467667b508ca3bf937c26b1b
- SSDEEP 6144:svkD/qaP75vD9eEIdghrT9jb3b41PlmFEEZTdiX2J9:sMD/qAeDdqJg89
- TLSH T140748D247B980506FE6E96388C63D502EB78949707D1EBD743A0DBDA3F4B7C2E632116
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.IO.Packaging.dll
- Size 285KB
- SHA256 d808143e0dac808df22b437fe66ac0477ceee5db51e444ab8478c28daa8bb73a
- MD5 71e9643cfbf6b1d5e0a1ac85f56ffa49
- SHA1 d135a8b15187c9c29e1e8b1973439db0eb16ff51
- SHA512 c16a1318309728d8cadf1c9e04c4be47f678e6f12434b0436f4b29aa40981630b942f0af8faab43ab337ad81f44582957f459ac1bf0ea6d2e9c65846af0f191e
- SSDEEP 6144:G9bGGgTmHmNRF7bLn8qsEYk7GkB1dhjX/:G9FXmNXn8qR7GC5/
- TLSH T12654282677E80607FBBB9A789573E011E638B4921761C3DF46E4948D0F97BC18E71B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Linq.dll
- Size 529KB
- SHA256 1b81642c1ee4f21ebbb57213c14e50df59aabcd7bf91de2eebdf4c0d9f32845b
- MD5 7d69cbd4f96ebaab18b74203e37f5a59
- SHA1 23c4ba0ebd3ae3a8e18e43854e1261d682cc6af8
- SHA512 c7b3edfe8bf9f85115950da6aa6b010ebc9a1327ab99fbcd9313de89655f1cd8d15ae4f5cb16e2c52ae2da693c9d41a88a23ff98d55948dfda51d86622e2eaa4
- SSDEEP 6144:/NYb3/ypY1hh8r4bdhR+JU1/0kxryufbFHJMyS5IHuYzfhMxjCkoTcK:1Yb36S1hh8rwdh8UxeEvAEImH
- TLSH T173B46A2493B80F07C2AF86BFE553E151D7F1859283A2C1CF995DEE961E93BC165BB020
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Memory.dll
- Size 153KB
- SHA256 4d6fe7d23c06b4e81748d83a1314218f31bb1e4ce9b6d1ebc7ba8a78a342833c
- MD5 4807ee6fb0ab7ed7d308d67657af7ed5
- SHA1 c8eb5f273d03097957cd99eb1cd28bd3defa5981
- SHA512 15c4cca2bda3fde1de51e2783afe7dcb4f4d430a16d132594cb4fbe46ebde25eddccea27cab9de2a6e5b83d7aaeed6de2c2f7bf5a7cb3d1dcd494227a5a99725
- SSDEEP 3072:hsyymN/j+0sbFbqX63vwZuIBo7M5F8966oYdACBuqmwvhtTihdNj:gmCb6oIBo7qDGACBuwh0
- TLSH T12DF35B17E2980657DA3FDAFAAD225302D7B36142672192CB4CE4DA441E53BD0FF738A1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Private.CoreLib.dll
- Size 12.6MB
- SHA256 7f48a9493a1d9f6c64a51c3ec357cf8534874ea62240a54c2a1570a5913148a4
- MD5 3f64c06a7c0a7aaf48e7f95b11e16e59
- SHA1 09022ca6e7be1ea52d1cc54af362ec7d915f74a3
- SHA512 5214985658e7a6e3dba89154f57fb759884dc962ab70b5e19189cab2d288cdd459e69265f36dfadd64f41fb03f1ae4588e18c1719f360fa8efcfb113388e1b58
- SSDEEP 196608:zmhH8mtl5F/v/u5ks5OtsFnyQvoNT/k9B5f:lglb/vG5L5OtsFtoNTaJ
- TLSH T186D69E11B3C89F16E56EC27DC2635285F3B1F4A2135296CF980DEA882F13BC15B7B265
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Private.Uri.dll
- Size 253KB
- SHA256 7ce81174fdba93a1e12c596ea3e1ad4bcc9e798710292e1629cbe827ee34458b
- MD5 fad0d4747aa546861652bcb7d37237aa
- SHA1 96c67f217aed07466e4a1b571286939fbab6fa58
- SHA512 bf8ba7d5bc35c3b7ef71b7c2d26217485c495a8963c45101e910ac70c4072cc44e019fe0332a10152bca50ed43d5e7f959dc848e7c3c9cecc38b7dd4b38c4bd0
- SSDEEP 6144:1fAAcZQInBPKCeDc6Ci9MG3CMeVmtG+FsGu6MyN:aFODciMG3HamtG+fuVi
- TLSH T1A7448C25E3844E67F73DC2B981D3D112EAB270665315F7CB0AB5E1821F177C2AA36863
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Runtime.CompilerServices.VisualC.dll
- Size 29KB
- SHA256 1e0d66e081a78b06ef7a9597c8f6926181c417d006059b04a43b48352edd3f2b
- MD5 29a1a4c1a6f0088f144cff595413009d
- SHA1 0a9557131dfdf83132ad14efa1897909d96705cf
- SHA512 5b72e6595e181dcbd5f47db4864286e4528d08d5ee23c016fc3ac452d24a84c890180740916b21b47b7b889d9d167849243c72562736e5d378af54cbff201eda
- SSDEEP 192:XWswLWawXpjGa3HVilUFzExH1lzWViYa3WF+GBTBWsea8WM1UHWX01k9z3AyMTbN:XWswLW1pjxoeSVtulN61jR9zHU
- TLSH T106D27BB19B9CC222DEA70CB98AB5E7433D39F3855B529BDB009DE1065C627C48B31735
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Runtime.Extensions.dll
- Size 17KB
- SHA256 57152f7af36bfa9ab33719b25d11940992cf4261edb6ba73fbd24c15e2f3e75b
- MD5 e47d9737f5a29f6fa7472e287f4a45fa
- SHA1 6a53223232158544c8d6651c8be75153407bec9e
- SHA512 c214006402e4ac9c6550af4c55233686f989b96255f32e008666b4a768bf4351795cf5793c17010048f513bd89ecba0051ab0b94a48ca86d4578142e70571ed8
- SSDEEP 192:GEG/Sj5r0SZ7r1x+4xAlW8SNWaWF+GBTBWseaAW7cpTsX01k9z3AZTCdWB:a/Sj5rt9x+WuW8SNWrlNkoR9z6GdQ
- TLSH T11C825B92DE9C8153DEAB5FB05AB6CA8339B873C25DB1957F40D6E0044853788E73272E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Runtime.InteropServices.dll
- Size 93KB
- SHA256 74a2dd12e1c0f3d9aca3f11e160a1de7a5bd4447ed8be3071377217a516f6874
- MD5 67e5ef7bb29712cd647c9117ae76e48e
- SHA1 0d590615d7d2216ff8a6c6b45f9e15586f4a141d
- SHA512 41541cd2bab6517e79e71480289ab85d8c401238d359326267fcbeb25aac928081bd7a9f3e807c8d256b6572ea0eea76647cf71dccd7445e4906d38163914940
- SSDEEP 1536:nDA6UupEelCtJfKS6+67NspnSPM+l5+ZkmVUKWH0ozkt:nU6p3lCto+dSPM+rCkm+N0o4t
- TLSH T154935A2437D84666CA2A473C8C375D50D9B2F6C613A2E6DF5781885E1D9B7C0C3B23EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Runtime.dll
- Size 42KB
- SHA256 1b56f3da3567ff55f013332ae17796ac6cd067018878d8f322f8425b04b70720
- MD5 987f0dd92a97fb1be99df665ec6dc7cf
- SHA1 1e74284c11aff202de0b52ff2cde89b12ac77db3
- SHA512 0e8142ba5274b9cd60fd2b956d2a392e47287c041d0831621674998ecb5642c7d62aed50299a726444245882ef36e8457f183e73f9346bef133a8e4cfa5941cc
- SSDEEP 768:99q+1fsSED2vCeDQvRzXB3gWql6375IVxedktN7xPBhwsR/JG39QRoNvsh2JcfoQ:99uB/LuYdy50b4b7RSH9Z+BzJ
- TLSH T1BA13C4A5AE485333CD8AAB719C73AC811DF233C4047A5D7ED88FE51913867A48236B7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Threading.Thread.dll
- Size 15KB
- SHA256 565346c61faca21110027638e7af298e0162d587afc3f5bdcb993c80922a1cf0
- MD5 3c67056e3eea95b2f0c8312b012c23cf
- SHA1 09f80cc380cfd32aa7d6189d3a93e64dd0c2a94d
- SHA512 5476a4e3592dac5511c2c71e1a1f8b296c5f1516ad78a4f6b46b7b2e73f2eb5869f64d6dc82b922a58cc6c0f05ad7c98d10fe631d22c0c76ad4f67e0f3378e2b
- SSDEEP 384:uyQv4z2Ee0Z8zWcQ7WllNvGNXuifSR9ziiabS:uvvOGcDlfe9zqO
- TLSH T14C625CD28BAC8183ECA76E7095F8CA433C7977C68C65D61A05D6F05818273C8DF31A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Threading.dll
- Size 81KB
- SHA256 76900e5c96b72e6e74477a90897f86c9f8b78eb2169010298cd4aecec5466ae3
- MD5 a512c2446cdc301ba4598d5f5963bfaf
- SHA1 7b6a72484dad6c24cb4b3f157bffa4c9b0aa9ebd
- SHA512 19f4fe27372e1d4d9373b594013b6557c0fcb74641921c3e47e7ccf5d5a09bd3b5bc5fc0687fe658dbe1d382df5bdcbc458312f0a5ef6c5371c50d9b8bcc319b
- SSDEEP 1536:U+goICPLFImrmODZcUBeZ8j0GEH9wdN3SGRm3LGgCRzy:U+go9PLCFtZ8j0GEH9wdN7R4GgI+
- TLSH T1F0835A1A7BE80416FA7B47F9EA729946C472FCD20710C6DF9059900C2E67BC1DAB2277
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\System.Xaml.dll
- Size 1.4MB
- SHA256 70892fb3431d9bbdca6efde6083e951d8a167c452a9d956ad8d0f83e3ee52713
- MD5 142cdfb67fc4a2d7496cec1bae7ca943
- SHA1 bf870e6e2ebf99344f8f83a37f920608c312d395
- SHA512 d1c164dad547d44be737264a582f3599b1138e301c837b9be333fafb909ade5ddd5957d048dca93664b5270d084183b5e5e5ddd78bfc2cfc35d24d8045c0c61c
- SSDEEP 24576:lUNeQWY7d3p2Zz+I6hMza1IOME36EPQs8dqE+d:lUNaY7d3p8a/FqGQ0
- TLSH T1A1655A2BABD88615CB7A83FD86A28521D5B1E1472321C1CF4411DEDD2F877C3AB7216B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\Velopack.dll
- Size 261KB
- SHA256 b35698f5f66978d7bfd0ab12a2a2899f05912d9a1890d5e64c2dce9bacf2662f
- MD5 2c29bf1bcfe53f779a9f7d785601dc8a
- SHA1 21d134bb5661ebbb4819500aaf829ccfa024a9b4
- SHA512 3acfa65169390a7f9af8ac66dfa9684405bcfcc4e61fc04df80ee3bfa25bea4bc8a41defd7fb9290890285172a97f663d95774a59e274fbcd1f8b5f44d533692
- SSDEEP 6144:qo0g6Hxg1smn4oGalxcB+KQwCyknZylyZ8Sru:qLgAiWHoq9CykclyZz
- TLSH T17A445B0037F48716E2FF6F79FCB0600686B5FA07B8AAE75D0A8458ED1D633509950BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\WindowsBase.dll
- Size 2.2MB
- SHA256 dbc4af0ac938eddc236ffeb5070370a0a723d537f0911da9fcea274f490a3ea3
- MD5 29f8b8b4bafbbfd400772f784b0036b2
- SHA1 2bbf27f4f86c105e416eac20a9a2ab5fc8db3854
- SHA512 573b365e2a17a1b1de666cab25974b2746e63d78f964879aee781fa3869576b495cc68715903dc5005e62d85b95a944c749cc76596c160de31cb8d34b18db6c5
- SSDEEP 49152:aSgZ/oZzKTYMebksxP6AjRIOuou82SxVGG2hFGYrB45gkQ+H:lgfW6A6ou82SxVGG2hFGY8H
- TLSH T1B9A58D1573C40B16CABA86BC91778101E1B1F8525312D6CFAC49EA3D6FD7FC18B7A262
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\clrjit.dll
- Size 1.7MB
- SHA256 93fb93cd74774247d6382d098b228f504373ef2710fe29a32fd9fb086a3182ff
- MD5 29d7843301ca74c6ca6322de811eadcb
- SHA1 6e02eccc0cb5f65fd71f492b1fcce3b247be015b
- SHA512 e2b63f9bf9e88178d039634e1256088e6b2923c66fec716371532ae1b5663239702a339e7e5c231132e641603d5c80ea04cc5e2624e8d775036d9bfffc79d604
- SSDEEP 49152:IQYb2p2Jg/i1yt39nNwE1Q+tLk5YGhJIQioX/8G0EOX4RA1xda:HU+vJ9nO+dMYobDX/8G0EOot
- TLSH T18185AE42A2F845FCD0AF9534C6174A1FEBB2B45913609FCF42F40A96AF237E2162E715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\coreclr.dll
- Size 4.8MB
- SHA256 817a9a5e0ea19ec205e3e0792320b8e03b77955a17953f3ab787db1426b0d930
- MD5 e88e0534557fa57664ff28e1fd41eff3
- SHA1 422e9b9c8d4434a3aed0b631d00f76ada4e62d19
- SHA512 4b0f460bf4f2e932785765fb4248f334bd1ba90a7f0e6db3382c1eccf6231bc3808e7e009772b3d31f528e770d0b78fc2f3828afb920234bc94a20f4fdfcc336
- SSDEEP 98304:LwVUSpxaoKPdZ4tJOkZuMHmXI7nrgAREx+8:3dZwJtuqmXI7nkAREx+8
- TLSH T1E3368D56F2AD00ACC4BAC0B9CAD31A27FBB178591738DBEF06644A651F237D16A3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\hostfxr.dll
- Size 357KB
- SHA256 99bdd77e4fe14ab284c4a335ac13affae11c840506b032462d26273143f0b767
- MD5 214f2e859995128c7ff52c2d3ee52aed
- SHA1 009d8a3a13d2a73d6db26b5b218545e786f3849b
- SHA512 859c39d176a4ac637f14a43b6fcbd20386cf496928048f37da783f0f97eb28871b2fd0371172b740ff4f07b8d012738a2b0bfff04843670343577464df23a7d0
- SSDEEP 6144:UE7Djww5R1Gv0crFfeUtJ9NZFSKJGDjq/2n1NonJLSHD6DPDh+vJpmE0SfxrTZ6g:fMjrFPJ+OyUriJ4ElntXZPt
- TLSH T1CA741816D6E8017CF0B7D679CAB28901EB727C494BB196CF139099661E73BD09E39323
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\hostpolicy.dll
- Size 397KB
- SHA256 a2f6f864b9a41c56ad22490ea882ece574539eb7b23f8913c943613990818e89
- MD5 80bb6eda76ce06e8c4cc0fd0fc65b332
- SHA1 fdf25c9dc5507debd5018030a9dfcbce348d4b1b
- SHA512 824424e5756ed4a5b1ad8f6342b4baf138e30437803bc152dd444764cfb5174e82028374199e06b49b3d3652bef90a0ca62d764d2360411f9ed535a74605b2a1
- SSDEEP 6144:9/P1pnG2PGDYdnPkLoem0Z+1zlBVec2cKTjlMTd4PKkvCG78teytpQDZXadtYyKh:9G25cL0LfecMUZLK4bUyGbCTXoyFrg1
- TLSH T177842916D6AC007CF0B7E6798AB38941EB72784D47B196DF1390896A1F73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\es2015\is-M1TVJJH5UT.tmp
- Size 15KB
- SHA256 450490d136ad99169d360f0c45a317a0ccb083da34602324734491467715baea
- MD5 ed6ed7ab5bd5bcb2a254821e233cdd8c
- SHA1 59dc6ff551a34f3d4cceb0c88231a386e82d9922
- SHA512 2148714b1ab87965f0a71c03aa0a60789c1d9dada5b4ba005b186081b8d191f196a3043964c21e0a33eb45262cc11071d4b658753a42fe91f1fcbee2507fd1c8
- SSDEEP 192:4uyCa20qNgG/kFBEKT4BlvFuTMS8Z4wZQZotVNZl8b2vKO9XuLYRfTAkCwtU1kIj:4ng4LYVNn8b8K+eLWD7GxuzDdVW
- TLSH T15162B3BC008846963D2DE0D4AF64EAD6299D4B4A240CD3365F9BFC3772CA4F4ED994E1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\is-V4DBHZIRG8.tmp
- Size 14KB
- SHA256 07005fd8527ab9ac801d940ee255890039ce8c8960dffbf5ded08c7a8d89bee0
- MD5 b25fe69acc9d8eb982b37d758746e913
- SHA1 782e46467828dfe227704d09830298ae86e52127
- SHA512 99c93da8c70a5ff47a237e0422aba91209680b1413cdecf6339616d12d2d69e1796527596e8859bf505451fc47b6a00302e8a50e1cd0d806da23b5608e82abd4
- SSDEEP 96:49tOjllm4Uh4zutkZyhRA4JUraRFsw7ZpqsFRatj9Fnkz+jmS0WVJK4m1io++Qdm:4bzTgMU4GgawCZleT038n
- TLSH T11252BF708521BE6674B2001B9D541B1FF0A8954BE962EF37979CF19EB345231CAC36F8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\strip-ansi\is-0JH4CHWFKA.tmp
- Size 1KB
- SHA256 fcf1a18be2e25ba82acf2c59821b030d8ee764e4e201db6ef3c51900d385515f
- MD5 b862aeb7e1d01452e0f07403591e5a55
- SHA1 b8765be74fea9525d978661759be8c11bab5e60e
- SHA512 885369fe9b8cb0af1107ee92b52c6a353da7cf75bc86abb622e2b637c81e9c5ffe36b0ac74e11cfb66a7a126b606fe7a27e91f3f4338954c847ed2280af76a5f
- TLSH T1A821961E72551363186613E069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\map-workspaces\is-8QPSNE2A25.tmp
- Size 818B
- SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
- MD5 2916d8b51a5cc0a350d64389bc07aef6
- SHA1 c9d5ac416c1dd7945651bee712dbed4d158d09e1
- SHA512 508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74
- TLSH T14301128A62E62A9055D19F956DA2B89E61CCF0673903681430B4E24CDA7704AC07E414
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\@npmcli\metavuln-calculator\is-SA94I1LF6G.tmp
- Size 754B
- SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
- MD5 d2cf52aa43e18fdc87562d4c1303f46a
- SHA1 58fb4a65fffb438630351e7cafd322579817e5e1
- SHA512 54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16
- TLSH T1DC01208FB2E52AD454D19BA53DA1EC8961C9F0773D43AA0430B4E34CCBB780F98AB404
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\cacache\node_modules\mkdirp\dist\mjs\is-5YY88M9Z92.tmp
- Size 26B
- SHA256 1bf0e53fc74b05f1aade7451fbac72f1944b067d4229d96bae7a225519a250e4
- MD5 2324363c71f28a5b7e946a38dc2d9293
- SHA1 7eda542849fb3a4a7b4ba8a7745887adcade1673
- SHA512 7437cf8f337d2562a4046246fbfcc5e9949f475a1435e94efbc4b6a55880050077d72692cbc3413e0ccd8f36adf9956a6cc633a2adc85fbff6c4aa2b8edac677
- MD5 SHA1 SHA512
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\cacache\node_modules\tar\dist\commonjs\is-37XYQ3EKTT.tmp
- Size 28B
- SHA256 58b55392b5778941e1e96892a70edc12e2d7bb8541289b237fbddc9926ed51bd
- MD5 56368b3e2b84dac2c9ed38b5c4329ec2
- SHA1 f67c4acef5973c256c47998b20b5165ab7629ed4
- SHA512 d662bff3885118e607079fcbeedb27368589bc0ee89f90b9281723fa08bda65e5a08d9640da188773193c0076ec0a5c92624673a6a961490be163e2553d6f482
- MD5 SHA1 SHA512
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\chownr\is-ZVA2T7YARR.tmp
- Size 780B
- SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
- MD5 b020de8f88eacc104c21d6e6cacc636d
- SHA1 20b35e641e3a5ea25f012e13d69fab37e3d68d6b
- SHA512 4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38
- TLSH T1D501418FB2A12A8414D09B643DA1EC8971C9F03B3C43AA153074E258C7BB80F947A400
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\emoji-regex\is-KYPZSWZMOE.tmp
- Size 1KB
- SHA256 f996f6e050e6fc18086162b4b44e301bba345c87deca83f57a27e6d54195556e
- MD5 e0be9e751faf84fbb7c61c63af745e32
- SHA1 48e53e2b46d48cc6ea16f03ab1ecb69a86f5db0b
- SHA512 6686277ceafd63dc89b17315c43134098cd131d16c7d42fad82cee5b7c78e4aa1f7cb199db352b9e54adb3f09dc77b1dc6665a5667c4ab8b3639fa254e20ecce
- TLSH T1D211895FB261137B1C66139069A4AC85B36B715BBDFF2384345DF244231A468D9F7C04
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\exponential-backoff\is-BOJIUUM8GG.tmp
- Size 11KB
- SHA256 5ebd9035b6813650acaea03024934d8b6fb5f62b2887e29dbd0dfcdb34bee88f
- MD5 f277873e88524aadedeaf5febabb401c
- SHA1 57b253a57d7754a23166e48885af91e90b2347a1
- SHA512 1f656a21b323574ba96c81f633e0d778b390ff203337780832297803865e23f480de805ca58f977ed917924aef15c39cdde3424f5818f2cdba0a42ddd2f7359e
- SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8GHfH2:kOu9b01DY/rGBt+dc+aclkT8GH+
- TLSH T1AC32822BBA4903771AF20122AB4764CEF31EA03F37491525315CC1682F7B96183FB69E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\is-fullwidth-code-point\is-9N6835C0HZ.tmp
- Size 1KB
- SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
- MD5 5ad87d95c13094fa67f25442ff521efd
- SHA1 01f1438a98e1b796e05a74131e6bb9d66c9e8542
- SHA512 7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3
- TLSH T18521961D72551363186613A069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\libnpmpack\is-QHYSWK0OTR.tmp
- Size 730B
- SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
- MD5 072ac9ab0c4667f8f876becedfe10ee0
- SHA1 0227492dcdc7fb8de1d14f9d3421c333230cf8fe
- SHA512 f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013
- TLSH T1C001D08FA2D12AD454D59F643DA1BD4861C9F17B7D43AB043074E358DB7744F986A404
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\libnpmversion\is-Y7J7QCZ2NM.tmp
- Size 763B
- SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
- MD5 7428aa9f83c500c4a434f8848ee23851
- SHA1 166b3e1c1b7d7cb7b070108876492529f546219f
- SHA512 c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce
- TLSH T14701F18FB2A16A9454D19B653DA1ED8961CDF0373D43AA143075E258C77780FA46A404
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\is-BHT7FE5EZJ.tmp
- Size 16KB
- SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
- MD5 bc0c0eeede037aa152345ab1f9774e92
- SHA1 56e0f71900f0ef8294e46757ec14c0c11ed31d4e
- SHA512 5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3
- SSDEEP 384:PjFrIA8zJ08TEcGpIuqbI0WXsJY+cHK+34x2WkFUasBq7BmDWC:PjFrIKf8JKjV0DJ
- TLSH T196722F552B9E61229373B77ADD47900FE722141B393F5014B8AC46D02FB99B48B38EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\is-HKIBO9AOT1.tmp
- Size 1KB
- SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
- MD5 d116a360376e31950428ed26eae9ffd4
- SHA1 192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b
- SHA512 5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a
- TLSH T1AB217927DD589D7715B52760A8781603F2635B2F20348C0B75F6012E9FB392B0099BAC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\is-SMKROXCCOL.tmp
- Size 802B
- SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
- MD5 d7c8fab641cd22d2cd30d2999cc77040
- SHA1 d293601583b1454ad5415260e4378217d569538e
- SHA512 278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764
- TLSH T15F01128FB295269419D09B943DA1AC8961C9F0773D43AE153074E248C7AB40EA47A404
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\chownr\is-JNNG3DHQ5B.tmp
- Size 1KB
- SHA256 a638a0768dbec922fd821d0b6cce6275231c4b57cfcddf584defce530fbfbbf5
- MD5 d2d8f56ce3ffe22bb7c65a724b157d71
- SHA1 afe95116aa199ddaf06f9bc666cb82b1e489497a
- SHA512 1bc8e29b05053518b76f473226497804408f14df744c60bc2dd2334e989895f7d3dba84fb8b6466e63e886d4f3a4a749397dc2d5b3456f90b382ced91a886e9d
- TLSH T18F31001E664E975302D041066F43A0AFF60A45BC9B5F02F23496905833B5F2646FF8BC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-3MY933M3LN.tmp
- Size 283B
- SHA256 8090b19632de54991128a7541545eed84d4694e1e9e2cfd69828152ee59c7580
- MD5 2c74b5d37fa89394665fd49fb4bca553
- SHA1 34e34c900aac0f03f190ed5854af56f40f2af2d0
- SHA512 a5a7a81f2a248bd3a280ec20af2434bd44cc4698266b95f0a8045355d3b87973e1bb359bc3304d56749023067fdf8165bb04a5aa850d7d6e26bb16e18489df0f
- TLSH T13CD05E23E9A6126568E2F2A3153F0ECF453596527B6B40F2B268B6CD30578B2D5038E7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-7QYRKQCNCY.tmp
- Size 1KB
- SHA256 3f0cbbcbb68f75e9dbe364c40af79941d2184a665fd244faabae90aa107b1733
- MD5 039024a1cd7662304b13f45055afe174
- SHA1 c34cca081f7c39b13d37b8ccb92defd24fe18c4a
- SHA512 8380542b37c126bc10b32d0f07b3aed33110879cf8842e0660f96026e7efcb8957ca69933a03cb30edf9b03c35f8f94509337e93bb2642f9be9e59ef8619843e
- TLSH T1CA316C42846832061EF3B312D6E9461AC4BE4AD3371820FFF94E26945FB7869D257AD2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-AUHL1PZ3P4.tmp
- Size 340B
- SHA256 1da483c88debd7970eea2e8d6cd8b3600f14103a0d8bf6347ddd548ebdb0498c
- MD5 24b7639474840d25e37a49dcc5daee99
- SHA1 a54054fee9adf1fc7a7ae6afc2c0fee527e78183
- SHA512 c9c163540d2333ceb66cec9130f3cf1ec759431156defed1c719c7f312355e4c0ca4b57092038fbe11a9dc0b511ad7e202cc0b8fe8a28a42ccffc22b10ac55c8
- TLSH T1A5E02663E8913B14ACB46343E1A514560A2399E23A3130FFCCAD451C2073C28D02359B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-AXIT4NWGJJ.tmp
- Size 95B
- SHA256 566ce76d91fc552ec77a04a529c6a932338e7362c611c08e9d5c646ce3ddb8b9
- MD5 faf0e5cdba640d50ee667a5f3f048fd2
- SHA1 19dfd895ab69bb012a2d28d85f6c3a20cd0f9899
- SHA512 9c824f714f6891f645d447ead6b847599a7162eb8be96368fde1deac0dc1e9781bd0217892e0595924b50eef7bc64546352803950869af5bc5e2ba9f5a14ba8d
- TLSH T1B0B0129EA4742461BA710B43C0A24167430144C1B69030ECED8414C9007244DA022D84
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-DH9L92VDQ7.tmp
- Size 508B
- SHA256 f3b9c57819c4ac73589857e8a0f0066561c9ee1ce61033a6817a8526bfb00507
- MD5 3d48c4a2f5bd0e671e3702e668a1deeb
- SHA1 3a432bfb1c9261449e9d2454107b2324b8b1266c
- SHA512 f46a576ed86a437a68067babad9121481ef35e3cda42e33b74c3350137a57d808bdbd478ce32692170daecf62e4448565f6c52e0917ef528804f6df7e4a12603
- TLSH T10CF08222DD3233086CBA9262A9AC0955853097733FB560F2DCC6054C04824ADE5775B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-P6J2FTSRG6.tmp
- Size 3KB
- SHA256 37e91264c16b6a35ac193a7bc20379da660d134d2381bbffcc2cc5b9b17afdb6
- MD5 402b5878d76b260b0e47c575bcaf7756
- SHA1 c771c4a94262cc4fe605f51fb7b36f1264056451
- SHA512 674bca1a1dd50361191eca6a215f34ea59ca379de796134b8e2142ffa471ee44f53652531d9e42cd5627da0a69383f12dbd774f8081ab65ec8f078969aa6b7fa
- TLSH T158616163993113081CFBB361D1BD0986C171DB73AB6720F6FDC61A4C1952099A2BBAF2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\is-TTEK7WLNNL.tmp
- Size 406B
- SHA256 906349978d6f46aa970a2737049469e194a01c2b24ff43d6b50afdedd1a34037
- MD5 3caac6ba922634ead5d1525c42710a93
- SHA1 aac502fe262612f4b25e4cda28ff6a4c7540c84f
- SHA512 8dbddfbd41c5e8788f63110c841e1e72087df03b06b3504e4b8bed3e86d726115095ed0350f50ce4455ceb9987f7839e80b25a827bd6238b93fc0d3d92fe64be
- TLSH T1D7E09263993623081CEBA2A2D0790A8AC1B09A627F6B60F6C6C50648004345AE27B9E3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\npm-audit-report\is-YUJX1JSAB3.tmp
- Size 771B
- SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
- MD5 e9dc66f98e5f7ff720bf603fff36ebc5
- SHA1 f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b
- SHA512 8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b
- TLSH T15F01259A62E56DF46DD19F806DF1B98D70CCF076BC47A91530A8E258C7B704F88AE414
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\read-package-json-fast\is-4N1G9I7D1R.tmp
- Size 771B
- SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
- MD5 1d7c74bcd1904d125f6aff37749dc069
- SHA1 21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab
- SHA512 b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778
- TLSH T14801F18FB2D52A9454D19B653DA1EC8961C9F0773D43AA0530B4E248C7AB40F95BA404
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\sigstore\node_modules\@sigstore\sign\dist\types\is-RW1KZEYVRA.tmp
- Size 79B
- SHA256 ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13
- MD5 24563705cc4bb54fccd88e52bc96c711
- SHA1 871fa42907b821246de04785a532297500372fc7
- SHA512 2ce8d2cf580623358fef5f4f8925d0c9943a657c2503c80048ca789bf16eacdb980bfc8aaaa50101a738e939926fcf2545500484dcad782c700ee206d8c6f9b9
- TLSH T1C4A01201A934C5F1038000C44525E0C1A0C10432006528A55BA84D65440088C5050001
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\socks-proxy-agent\is-SVAJAA4833.tmp
- Size 1KB
- SHA256 22427a9ca2a0ff9c27dde9e26fe6e940529aee030b342a70b435366af0fcc51b
- MD5 0c336e5b6975ed55d323848908249114
- SHA1 805e10789f2077ac4b21852f3e7a1f7167bcf3d2
- SHA512 6372ca65a81f8e0e268ba108858cdd21ab827b551f8523dfdb38be5a933a8d24a39ed09c4a79fa6895b5341af8887ca4b8d9c4a30af9adef2b3b34155a1043e8
- TLSH T1A4219A5F72550773089613A059B55C85B25EB15B7DEB2684349DF248232A428ECFB804
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\tuf-js\node_modules\@tufjs\models\is-RRZ6PSX1C2.tmp
- Size 1KB
- SHA256 6ba2fb4cc004819b1d872168a7ba6ac4a5a07400366680750321058fe21dd36b
- MD5 dfee32877d06166fae6096f9359e68aa
- SHA1 28a83f15648b5088399a0dd3aac207d192bba5f0
- SHA512 ed9b0514e9f8a2204d6900f5b5a6065272b91d70b076c91ec8e101a3288c83f19b139210da6de526e269fc85469708478dfec8664e9c3131408af3818ef128cc
- TLSH T1A711631E735903621C9257A055A9ECC5F12BB14A7E6B1985346DF209132A458C6FF8A4
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\is-50M8U3IAQE.tmp
- Size 151B
- SHA256 2eacd689c758e0aacc3fa3157b6fdc1739598f0fd7ebaca3841849940e290f8c
- MD5 68be8899e939beb38a69939bedb34e35
- SHA1 b80615bd00d82c8bb940a4649611e73ac629741a
- SHA512 fe1debc7171edcc5ef1f67b70037335ff59446407bd1907234beb35a071310aecb0e17b455765f178588278fdccfe2d6cf268fcb7d3cb639d4ff073c8aa184fa
- TLSH T12CC08C8A1AE2F0097712E3D0CA66B421A0899230402C5122D90C839639E08C90E2BCAE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\is-769NOT1Y6X.tmp
- Size 2KB
- SHA256 4b435dcbc2bf9a1afa4f28f7d3fcfd33406eb08c900ac2f967c32b982f39cb0e
- MD5 8be909153b2690e0586043c60dab7e9d
- SHA1 4b80480eba7e42c0020ac5ab93a4eec2b9e6336e
- SHA512 3dca8378b3ef0ac96baa583662a6826f677c11eb30ad817b378c3e77cc23cb8c120d5d8a5ec1ee734947f139d526bb5721f5e6c6f11b4feddac479ea23a394ba
- TLSH T18451699868821562D177B7B9EC5F980DE73214232168C1607D9C92607FB04A8CBBBFED
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\is-95Z2HUXHG0.tmp
- Size 207B
- SHA256 0ee7b5b132cdd64923287705569f0b55e82729319e3a78571a8ce9bc9a62f98f
- MD5 bfe89e5b3b70c5929f1d9c006372f387
- SHA1 dcabeee6f2c06f10659ccea4730b3482cfe75acb
- SHA512 6cd4ef0b1f5c345bca638267e98ec02ab808913ba6433f3659e9c7a1f9ce61850c95fa20f624cb2ccf42c26f34ecfd1a2dcf41a05bab48dab89287dc8fa1d5e9
- TLSH T1C2D022E620882086106F004130F532446F2A0133CBACC1E0E33807BA51FC432BA18A83
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\RustPlusDesk\runtime\node-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\is-BMSCVT0576.tmp
- Size 1KB
- SHA256 9874348297d23c486dfb13b9df158f3fe2f57153ddfd0513507d22f0438ea204
- MD5 22f3ccd48ddf44c54ec73ce7eb06d273
- SHA1 9d116bb5fb98c0c632a58eebdd973ff41a3f4bdd
- SHA512 a230709643067d276776fc8be03edb2cb4be08eafbf95a4a5353947c62c505e23e402b54f9cb2e0b46d2bceb6e44c22b6c5bcc8b288beb2f1c62f26dc1ef2bcb
- TLSH T11A219A5D725607731CE613E06975A885F26F711B7DBF3688345DF248232A428D9FB804
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 ff85f9afa553b36fc918a8b0b6d94ee8c9f9f1189bf7213edf0066e054c19d07
- MD5 3d25a4df7420ca1b3853a927dc4a8c84
- SHA1 a9d89bf39161b4cfea81c939d31ddf55495b681f
- SHA512 759f5f10a123eac7cde7e6710d88730f3acec7368f9a622c4a299b62dfd44ceaeecf286d2af65690c92750e4e9ab3333280d22ad413766bf4c66bce408affb49
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 101b535fe3030a4e7150e8bfffca93c1b261b0c8764133f420ac91567a361a38
- MD5 f178ec942a0c3a982b44714d80d60b68
- SHA1 93299d6cc064902e1979f48f233b9d66ea6161bc
- SHA512 365fb7bdb54f156dac92a98e22df5d00737e3631fa94f94252fa5fadca9b3ab606d60664d431591372051dc4706cbb4d67566dd4014490259831ea88a25f0e4b
- TLSH T10ED0112232A20A38C02030330003B20C0800C22F808A800AB82CCA2E2E088A82A028A2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5bfbd1.TMP
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Preferences
- Size 5KB
- SHA256 0727d6f120d7f411653646497c1880fc79b1cfecc08733b35f67ff35da7d13b6
- MD5 56ce017363f7ad68fa5aec86e084fbc5
- SHA1 536fac4b78193bf40a3fa994ff1ef832d5e5c70b
- SHA512 66948a107e7ebc49110ba3102e9908197be2a39000b02fa6b0eccafd9915e15385e129cdc8a188ebf7bfa6bbe3f820304984c4da987ac1e1775313e660b1752d
- SSDEEP 96:stW/dPGWw4b9OkrEo5h16ZZs7/x+6MhmuecmjekpK+gfw2+28XM1C7K:stO8D5o+sV+Fijwf+G6K
- TLSH T113C196425E68687B4CC6F219FE39BB43E2F9643261D51E58EBF8461C09DB6DC231780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Default\a9791117-ec6e-4238-aef2-e4b4212bf813.tmp
- Size 5KB
- SHA256 7084053a9b3d8ffc70197d4951f0dc110f23b58251453f6c94c7349e2bad0c84
- MD5 2dc43dbde99da53c9e5788ea11d9fa83
- SHA1 fb682f2dc0ff49e1f3e4faad1abc7c9454e4502d
- SHA512 8e10eeae62ce8cdc66d64defc8d5dcb69cc4e6e2623aa7a7fbcbd820c50d54d7a49ec6072fc7d3fdaffb3c86e0fdeebd7f844c2042ce1baf1970c3266699d292
- SSDEEP 96:rW/dPGWw4b9OkrGdo616ZZs7/x+6MhmuecmjekpK+gIF2+28XM1C7K:rO8DfojsV+FijwD+G6K
- TLSH T10BC195425E68687B4CC6F10DBA397B43E2F9643271D52E58EBF8871C08DA6DC231780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\GraphiteDawnCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\GraphiteDawnCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\GraphiteDawnCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\GraphiteDawnCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
- Size 2KB
- SHA256 68119413bdd2230d8e54491c9dff88174f3e808a8e03afc6c591c61160f3b274
- MD5 b51e468d91268ca3936e456688d1680c
- SHA1 2e7e502477e8e5515e868b646c49253df3c07f03
- SHA512 5dd846a32d28b031cd5c9941dd4d4037ac22fa1fc691699fc0b5c1bbcf9c052b40f2447c1eb2b8e3f32a0180c9c7531e534d68b6f256be9ef61f6748459684d4
- TLSH T128517473AC44AE77D9A38505BA4E7E63DA7550669B926F50AADC0B0C02D704D1343C72
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
- Size 3KB
- SHA256 05153d357af418657fc2fa8f120bbfd3f3aff25c0b4d94ecc4fb09ad323931b9
- MD5 035eef3b1d31a752deb4d1f95cccba9d
- SHA1 3fab863bd277f16cc750cb80e0673270b43156ce
- SHA512 0550996c6074f29beb0e455a8fcd90c5c688e42851f550aeffb9675a3c5eaca5f790d43b91974d99b2e19a6c12b9cd7aec727ad1a9aa6aeed3fdf14490940c0b
- TLSH T198819367A8A4AD379DF3D505B98A3F13A7645027AA857F94DAEC0F0C02D72891343C12
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
- Size 3KB
- SHA256 336486ca7f3d3be5f981d56ba130c67eb914272d4e40e299810b125d275161f0
- MD5 c45d9301f81d98192d14db20dbd904b1
- SHA1 06c147de17c6b5c9911ff63ddc6c60fcc9efcc1d
- SHA512 137228460ca7bfbdb6ff85d7056755955dea5c026b6a216bfa317e8d464b686ae713f307f8f8ca5429259094758bb7812cd8fee679e80f31de34a4eeb5e9a228
- TLSH T15F719677ADA4AD379DE39505BD892B52A7A15037EAC17FA4DAEC0F0C02D72881343C12
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State
- Size 16KB
- SHA256 a48e4117f941d505d287385a4ec981b6b60accb946f5ff6ac7a0f49c8c966034
- MD5 2db08fec5e113573feb8e85670f14682
- SHA1 aed4fc6b48acf914ec2bf4ad37737c8b53b6455c
- SHA512 0a22d9eab9d791723d94476312844489be476cf8e488cd63ba758e3486ae4d80c2fc781f6a7581bd2a0e0840828636ff778f56ecd3e0302828d4fb255c0e75c8
- SSDEEP 384:rsrv+89zHqlDNP9oid6NBSHWXJXHDuOPDN+:Arv+4UNbd4JHDZDN+
- TLSH T100728D32E968EA37ACF38245B58BBA477FB4615356C20AD0D9C91F8C42DB4CE2313D12
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\WebView2\EBWebView\Local State~RFe5aca46.TMP
- Size 1KB
- SHA256 0351f5cc0a6ce8d11b8b05d48522783a0ff7227eed91ab0490a70975bd3f0563
- MD5 6d48d23d2b21eff0a990c2d0d1bb0ecf
- SHA1 af4e132de8d9d42cd52a9e9c1effd6efdc993b60
- SHA512 0142480ed888897ef577a36db77f75bf4f3bf69380989ff6c18c03a2a7fd5507645f13483d5584bd030f082e025aa1b35ff45a566523ae3d36f5379a23c9eac3
- TLSH T1E13162B3D8806E72FD939102764ABE979E20147787818F00B6CD4B0C02E704D566BC32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\1ae43e56c3288a7a18e4635392af0e359e7684d8.png
- Size 1KB
- SHA256 3b1b2e793053741b010b2c7b64d75c61a58e64f4c3c81dea17275324e0aaa4fa
- MD5 b55f43246c21dd4b3911cd085f963649
- SHA1 9f4663b62abc8371e32f46a8006252d30dfc2b2f
- SHA512 53db007981e3f70d7cf809fee584849616aa0a3792d7f9da5687a636a0c6f94eebcbd3fcfff360516c181df7ef34b1cfeed6700afa3c8262835a977c32ed58ff
- TLSH T1F221D83D62020DFAF6A9230B75214600DC968EFA2D4795305614F0236331F369F81DE6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\267aafdcc4b35a8bd38c6bd66307b2b658f32686.png
- Size 858B
- SHA256 19140d452df6f9f5350eb922c0fed22e4fbe12eb21324df730ffaabfa756d01e
- MD5 f7da35723b7de2e3f5bd12bbeb821b90
- SHA1 658b6af2f6c2970ba381e15d4b7811e9e5ca2f68
- SHA512 7744d9dbc4d30ca9f93577ecf05e994119dc8c200cc80ef9791ba80488a2602566164f4ce3a4c3031c23e4bfddafed4c9182d56746c0c6b51abe9d2a640946f3
- TLSH T13A1196DE830454B2805513B089837029DDB64D79FA696416432CB8A022BF4A9AE1C853
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\4c1c0ac4d8f1064cb2cdd3167e9f49ad31d8aa0d.png
- Size 674B
- SHA256 6df4b2ce8fcad469fa5ed6e52661a5d2daf53de5ffaf428567a6dd73ed2fbc0b
- MD5 6f17d9bf7084d17ff3827ceb13507c66
- SHA1 70a2d9590d9d42fc20131b29b6097a11bf9356b8
- SHA512 cca761eaef6230a3257676f54a8b484480102bfb19d0a35702073cc73730035445f67f136d400eff2852a87ee29c6414de800a7a2db8ac31b4fa130afd90a6c4
- TLSH T1CC0188CE3110E87C6751BF10A9E002188AF7453933B2500F7F02E230473A06CAF54175
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\4fef1fd79b6c3d77bc58fc08da89417762f0bc0c.png
- Size 1KB
- SHA256 96da6d214f5ddafc93bce7668776495f146168824dbf341ad51de7583f31e43f
- MD5 1a242b4afdef297e0e9fd85c73854fe5
- SHA1 b1392d966e874fff4e37a96f19621b9e610daa21
- SHA512 e301332e8b3e8df8bca2d011d0e8884216bc85f7ecaf3f65142acd504da447a84ddad4770bb9b173fa2e95937c4798ab194e91df85ea517d9c81d34fe725bc7e
- TLSH T17031FA0171E01E7BA33D125E7D20A45BA0658D133B01F905722BFB83CBBC91835DA943
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\681ac9a1723cdc538318a2dc94cdcca938a51620.png
- Size 1KB
- SHA256 208f8dbe3ccb57c518803b3e0530ab6fa423affedb2b80fb385444c4f90ac12f
- MD5 8c182524c86ce91b52a5ff31ce90fb1d
- SHA1 5d31f4b3c1d95ac3af5fe95c4b6268b3af32d96b
- SHA512 68eb5716f133902ee0ef4ce2eeb16a1b1b0b6bd0822fb1db5120c5792bc0a8774bf9eabdf33457552cd88c315ac166cded175cffd885d8e150f4ecd2ad44bae7
- TLSH T1532108A077A5CBA832F8747361A024D7062D870A9BB4B80A4935C02CDC6A46F1D171CB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\6b83680002a6071d8ac4a0518701336ad138623a.png
- Size 1KB
- SHA256 55be1a4d42d2661406e2cf5ce7a4da7ecd704a3c4be9c39a369ffdb68a6ab476
- MD5 f1c39aceac669a860f76bea115ded755
- SHA1 52a6ad16916528e668cf2427aa544042593a7436
- SHA512 7b9c8280a700c94e4c5ba19b20d640f9ae360ec658898429d0f4c8d1e6b8383b1b46a28deb17441be60be4011b8a6bd80757594a1d128451e6711ecbeb81f375
- TLSH T14911E95412B6890CA1E944B9660B55075C0E6D1F2F5B708CA8B878361DFC5FD5C68243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\a718bf303077b24d9971cf3c3226f8db528ed870.png
- Size 1KB
- SHA256 be416ed48c7f32211eda152c1d61c027de1f5e7ec299f47f25f1232ecb3536ce
- MD5 6cb541beaa7475e47acfc86f473d515a
- SHA1 39d732935689ae89cc2282b9d4739bba7b25195e
- SHA512 703739c5e8356242cd778bdbf370ec2771388f3925e9bffe90d9d97b6360aaea6e6af84b2cf834831346be9ec2da1b4772e620d239641d047b5e5cf54f6da07a
- TLSH T1A411B6A2B591A144928086F7E2E3E1C05CD24C143923EA2B221DFCE63072E3D6298A5D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\aad14fdcf2e753aa9761adeee1e556dedbea222f.png
- Size 1KB
- SHA256 852dba8c2273b9a07a31ca6cfc3654d2569b02144ce2e635e7f49312b6bce97e
- MD5 65e2b4309a4ce50d5723966a4e6ca9b7
- SHA1 eb81f7717f635c681987c51e1ab97f71247e0e42
- SHA512 3ff6f55928a5cb0deaa1ab968e428e2fe1dc14a8d75589ad4175590c7d1d77ce6d2dba527d01d6a4fda88c04ad754599853e5fbde764f1e2e26808930dc7cc73
- TLSH T1A511B9E273FC041AD994519735705C104E4FA6117E31844688E79E16D570FE0F449283
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\bd8d29a70b8a0b534a4f09b66466f1e956a8d230.png
- Size 1KB
- SHA256 4ff75ced1e6080599bc81f397abc4321891ede95682d0ea84604ddee345a04ca
- MD5 05e853980c851ed79490811b165eaf89
- SHA1 2629ca415921df8a9f814b8fd68d5c2f4d1d8984
- SHA512 c349c3842ee8c87f4e73076063d100841ec0d5823579e797b9ba9c5fd7d06a40d156d53d46a6549ab57ca609ef719620603df613a7636312823ccf06b91c7d04
- TLSH T19831E9CAE78424E8CA8D4887226299E157717D297636FCD5D8133043AEB652981CC729
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\ce11c2c0b0cdf8a715fbe2d8117e0db2d6926eb9.png
- Size 905B
- SHA256 333044cd6548997f8c7d37d6d38748a65f957487f10bce355811fc0c9016b278
- MD5 c068b1dd16fa8aa7f033c067624b85f4
- SHA1 7d711280e03db36338584d8e8212aa6eea40e3d4
- SHA512 94bb7097f9352fef11192cb463d1871509669535605022f50c8118600adf6f0ee9a57e2a6e83fbf6f370649b5b81511c06b5d91200854fba7d3e26e01cbf0c45
- TLSH T1B811674D4122441A535311B235ACE13CDD33039D2AC157DB9E137074AE90A9DD8855ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\RustPlusDesk\icons\dda2b7fccc7bd8adc8381de946087124b7944996.png
- Size 1KB
- SHA256 2ffdaf087d2be45fd6eab67616c239d45de6c1eeb37a709f60c5fb3ca241af6f
- MD5 7896ec10ebef995a20b3c9a9b6980a73
- SHA1 eda3dcefc9e98edc908bb44a67e25db0a01a4e05
- SHA512 9d907237635c003ada6884235680b6d23fadd6173ae73bde796d2c489aad2a7a54de05785799741d3efd5f870f258a0ad744d0a0af4214b718903220fccf69e1
- TLSH T1DB31DAF24892749B787C58D748E732F5DB272E231001154DA7AEF12096B1948586724D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-YOZ9ZDF7RU.tmp\RustPlusDesk-Setup-7.3.3.tmp
- Size 4.3MB
- SHA256 14940821debd3c5fff2f9309dd8ab0a97109e33dbf0817a0ef85b427daf57d52
- MD5 64af4b17ca746fb20dadd728db375c2c
- SHA1 5368d462ecaf8d0d84b0289489048b2989f89216
- SHA512 a4bb036a4fc6b696db191b93d8a337d9929bbb8df83e690aeda1867c5ff800b97c99bedb59fffabea4a3c02e46ae00d3335f56143099b26966aa28c209b95b44
- SSDEEP 98304:0YU5hnuOajWwMPdCpepI3GrwrA+JQ333V:0xuHjWfZIzk
- TLSH T1FB266D03B288E53ED4571A3E4A3BA280947F7AF135D6CD4B67E4095C8E396406D2EF93
- MD5 SHA1 SHA512 SSDEEP TLSH