Windows Analysis Report
rustdesk-1.2.2-x86_64.exe

Overview

General Information

Sample Name: rustdesk-1.2.2-x86_64.exe
Analysis ID: 1315930
MD5: f78e62330c6757d845aa9b348f33e784
SHA1: 8d42a07fa3f1fd0d2345a5d97a91847e5fc9f663
SHA256: 7d8790e65a906706a93734b91efa6dfdb732f9897e04707233fe48033bd5654e
Infos:

Detection

BazaLoader
Score: 45
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Compliance

Score: 32
Range: 0 - 100

Signatures

Yara detected BazaLoader
Multi AV Scanner detection for submitted file
Query firmware table information (likely to detect VMs)
Queries the volume information (name, serial number etc) of a device
Drops certificate files (DER)
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to query locales information (e.g. system language)
May sleep (evasive loops) to hinder dynamic analysis
Uses code obfuscation techniques (call, push, ret)
Creates files inside the system directory
PE file contains sections with non-standard names
Detected potential crypto function
Contains functionality to query CPU information (cpuid)
Sample execution stops while process was sleeping (likely an evasion)
Contains functionality to dynamically determine API calls
Found dropped PE file which has not been started or loaded
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Abnormal high CPU Usage
Enables debug privileges
Creates a DirectInput object (often for capturing keystrokes)
EXE planting / hijacking vulnerabilities found
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Installs a raw input device (often for capturing keystrokes)
DLL planting / hijacking vulnerabilities found
Sample file is different than original file name gathered from version info
Drops PE files
Tries to load missing DLLs
Uses cacls to modify the permissions of files
Detected TCP or UDP traffic on non-standard ports
Binary contains a suspicious time stamp
Uses taskkill to terminate processes
Found large amount of non-executed APIs
Creates a process in suspended mode (likely to inject code)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Name Description Attribution Blogpost URLs Link
BazarBackdoor, bazaloader BazarBackdoor is a small backdoor, probably by a TrickBot "spin-off" like anchor. Its called team9 backdoor (and the corresponding loader: team9 restart loader).For now, it exclusively uses Emercoin domains (.bazar), thus the naming. FireEye uses KEGTAP as name for BazarLoader and BEERBOT for BazarBackdoor.
  • UNC1878
 https://malpedia.caad.fkie.fraunhofer.de/details/win.bazarbackdoor

AV Detection
barindex
Multi AV Scanner detection for submitted file
Source: rustdesk-1.2.2-x86_64.exe Virustotal: Detection: 7% Perma Link
EXE planting / hijacking vulnerabilities found
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe EXE: icacls.exe Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe EXE: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe EXE: taskkill.exe Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe EXE: C:\Users\user\AppData\Local\rustdesk\RuntimeBroker_rustdesk.exe Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe EXE: cmd.exe Jump to behavior
DLL planting / hijacking vulnerabilities found
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: SAS.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: WINMM.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: WTSAPI32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: bcrypt.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: Secur32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dcomp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dxva2.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dwmapi.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\window_manager_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CRYPTSP.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\url_launcher_windows_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3d11.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3dcompiler_47.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: UIAutomationCore.DLL Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\librustdesk.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: urlmon.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3d10warp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: TextInputFramework.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: WINMMBASE.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\uni_links_desktop_plugin.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\window_size_plugin.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\screen_retriever_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dbghelp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dwrite.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\WindowInjection.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: libmfxsw64.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\dylib_virtual_display.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: SAMCLI.DLL Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: pdh.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: PROPSYS.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: GLU32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: SSPICLI.DLL Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\desktop_multi_window_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: version.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: userenv.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: amfrt64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: nvcuda.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CRYPTBASE.DLL Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\flutter_windows.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CoreUIComponents.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\texture_rgba_renderer_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: OPENGL32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: IPHLPAPI.DLL Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: edputil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: netapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3d11_1sdklayers.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\flutter_custom_cursor_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: iertutil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3d9.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dxgi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: NETUTILS.DLL Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\desktop_drop_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: OLEACC.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CoreMessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: WindowsCodecs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CLDAPI.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\RustDeskIddDriver\RustDeskIddDriver.dll Jump to behavior

Compliance
barindex
EXE planting / hijacking vulnerabilities found
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe EXE: icacls.exe Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe EXE: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe EXE: taskkill.exe Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe EXE: C:\Users\user\AppData\Local\rustdesk\RuntimeBroker_rustdesk.exe Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe EXE: cmd.exe Jump to behavior
DLL planting / hijacking vulnerabilities found
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: SAS.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: WINMM.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: WTSAPI32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: bcrypt.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: Secur32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dcomp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dxva2.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dwmapi.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\window_manager_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CRYPTSP.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\url_launcher_windows_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3d11.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3dcompiler_47.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: UIAutomationCore.DLL Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\librustdesk.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: urlmon.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3d10warp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: TextInputFramework.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: WINMMBASE.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\uni_links_desktop_plugin.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\window_size_plugin.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\screen_retriever_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dbghelp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dwrite.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\WindowInjection.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: libmfxsw64.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\dylib_virtual_display.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: SAMCLI.DLL Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: pdh.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: PROPSYS.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: GLU32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: SSPICLI.DLL Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\desktop_multi_window_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: version.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: userenv.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: amfrt64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: nvcuda.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CRYPTBASE.DLL Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\flutter_windows.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CoreUIComponents.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\texture_rgba_renderer_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: OPENGL32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: IPHLPAPI.DLL Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: edputil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: netapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3d11_1sdklayers.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\flutter_custom_cursor_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: iertutil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: d3d9.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: dxgi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: NETUTILS.DLL Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\desktop_drop_plugin.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: OLEACC.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CoreMessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: WindowsCodecs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe DLL: CLDAPI.dll Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe DLL: C:\Users\user\AppData\Local\rustdesk\RustDeskIddDriver\RustDeskIddDriver.dll Jump to behavior
Source: rustdesk-1.2.2-x86_64.exe Static PE information: certificate valid
Source: rustdesk-1.2.2-x86_64.exe Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: Binary string: C:\b\s\w\ir\cache\builder\src\out\host_release\flutter_windows.dll.pdb source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0B1C8000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA062FE000.00000002.00000001.01000000.0000000F.sdmp
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CDF32C _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,FindClose, 8_2_00007FF685CDF32C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB9198 FindFirstFileExW, 8_2_00007FFA14BB9198
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CBA4F4 FindFirstFileExW, 8_2_00007FFA14CBA4F4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData\Roaming\RustDesk\log Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData\Roaming\RustDesk Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData\Roaming Jump to behavior
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.3:49798 -> 155.138.247.159:21116
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/1085
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/1452
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/1452expandIntegerPowExpressionsThe
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/1512
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/1637
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/1936
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2046
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2152
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2152skipVSConstantRegisterZeroIn
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2162
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2273
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2517
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2894
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2970
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/2978
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3027
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3045
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3078
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3205
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3206
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3246
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3246allowClearForRobustResourceInitSome
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3452
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3498
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3502
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3577
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3584
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3586
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3623
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3624
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3625
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3682
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3682allowES3OnFL100Allow
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3729
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3832
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3862
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3965
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3970
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/3997
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4214
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4267
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4324
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4384
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4405
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4428
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4551
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4633
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4646
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4722
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/482
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4836
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4901
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/4937
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5007
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5007disableDrawBuffersIndexedDisable
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5055
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5061
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5281
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5371
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5375
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5421
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5430
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5469
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5535
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5577
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5658
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5658forceGlErrorCheckingForce
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5750
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5750forceRobustResourceInitForce-enable
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5881
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5901
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/5906
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6041
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6041forceInitShaderVariablesForce-enable
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6048
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6141
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6248
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6439
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6651
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6692
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6755
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6860
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6876
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6878
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6929
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/6953
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7036
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7036~
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7047
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7172
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7279
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7279cacheCompiledShaderEnable
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7370
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7406
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7488
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7527
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7553
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7556
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7724
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://anglebug.com/7724disableAnisotropicFilteringDisable
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: rustdesk.exe, 00000003.00000003.893956987.000002B023131000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0
Source: rustdesk.exe, 00000003.00000003.893733946.000002B022EBD000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootG3.crt0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: rustdesk.exe, 00000003.00000003.893956987.000002B0230C7000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://canonicalizer.ucsuri.tcs/680074007400700073003a002f002f00700069006e0067002e002e00630068006500
Source: rustdesk.exe, 00000003.00000003.893956987.000002B0230C7000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000003.00000003.893956987.000002B0230FC000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://canonicalizer.ucsuri.tcs/680074007400700073003a002f002f00700069006e0067002e002e006e0061007600
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/1094869
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/110263
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/1144207
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/1165751
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/1165751disableProgramBinaryDisable
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/1171371
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/1181068
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/1181193
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/308366
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/403957
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/550292
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/565179
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/642227
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/642605
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/644669
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/650547
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/672380
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/709351
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/797243
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/809422
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/830046
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/849576
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/883276
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/927470
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/941620
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://crbug.com/941620allowTranslateUniformBlockToStructuredBufferThere
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: rustdesk.exe, 00000003.00000003.893691185.000002B022FA1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: rustdesk.exe, 00000003.00000003.893956987.000002B023131000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crl07
Source: rustdesk.exe, 00000003.00000003.893733946.000002B022EBD000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG3.crl07
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: rustdesk.exe, 00000003.00000003.893956987.000002B023131000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootG2.crl0
Source: rustdesk.exe, 00000003.00000003.893733946.000002B022EBD000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootG3.crl0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://issuetracker.google.com/200067929
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://labs.creativecommons.org/licenses/zero-waive/1.0/us/legalcodeRegularVersion
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://ocsp.comodoca.com0
Source: rustdesk.exe, 00000003.00000003.893956987.000002B023131000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000003.00000003.893733946.000002B022EBD000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://ocsp.digicert.com0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://ocsp.digicert.com0A
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://ocsp.digicert.com0C
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://ocsp.digicert.com0X
Source: rustdesk.exe, 00000003.00000003.893956987.000002B023059000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://ocsp.msocsp.com0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://ocsp.sectigo.com0
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: http://www.w3c.orghttp://dev.w3.org/CSS/fonts/ahem/COPYING
Source: rustdesk.exe, 00000003.00000003.945585869.000002B0299BD000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://admin.rustdesk.com
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://admin.rustdesk.comrustdesk.com/api/audit/
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://admin.rustdesk.comrustdesk.com/api/audit/P
Source: rustdesk.exe, 00000003.00000003.945585869.000002B0299BD000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://admin.rustdesk.comt
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/4674
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/4849
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/5140
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/5536
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/5845
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7161
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7162
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7246
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7246enableCaptureLimitsSet
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7308
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7319
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7320
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7369
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7382
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7405
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7489
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7604
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7714
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://anglebug.com/7899
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://bugs.fuchsia.dev/p/fuchsia/issues/detail?id=107106
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://chromium.googlesource.com/angle/angle/
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/1042393
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/1046462
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/1060012
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/1091824
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/1137851
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/1300575
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/593024
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/593024selectViewInGeometryShaderThe
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/650547
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/650547callClearTwiceUsing
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/655534
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/655534useSystemMemoryForConstantBuffersCopying
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/705865
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/710443
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/811661
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://crbug.com/848952
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA0260A000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://docs.rs/flexi_logger/latest/flexi_logger/error_info/index.html#
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA0260A000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-supportCalling
Source: rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://github.com/dart-lang/sdk/blob/master/runtime/docs/compiler/aot/entry_point_pragma.md
Source: rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://github.com/flutter/flutter/issues.
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://github.com/flutter/flutter/issues.Invalid
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://github.com/rustdesk/rustdesk/wiki/Headless-Linux-SupportDesktop
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA0260A000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://github.com/rustdesk/rustdesk/wiki/Headless-Linux-Supportenc_idkey_pairkey_confirmedkeys_conf
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/161903006
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/166809097
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/184850002
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/187425444
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/220069903
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/220069903emulatePixelLocalStorageEmulate
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/229267970
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/250706693
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/253522366
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0AC4B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp, rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/de/manual/mac/#berechtigungen-aktivierenHilfeFehlgeschlagenJemand
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/en/manual/linux/#login-screenWayland
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/en/manual/linux/#x11-required
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/en/manual/linux/#x11-required0Z
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA0260A000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/en/manual/linux/#x11-requiredrustdesk
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/en/manual/mac/#enable-permissionsAjudaHa
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/en/manual/mac/PagalbaNepavykoPavykoKa
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA0260A000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/en/rustdesk
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/fr/manual/mac/#enable-permissionsAider
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/hu/manual/mac/#enable-permissionsSeg
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/ru/manual/mac/#
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/zh-cn/manual/mac#%E5%90%AF%E7%94%A8%E6%9D%83%E9%99%90
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA02099000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://rustdesk.com/docs/zh-tw/manual/mac/#
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884526076.000001BC06F2B000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886245785.000001BC08EF5000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.885186102.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://sectigo.com/CPS0
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA0260A000.00000002.00000001.01000000.00000011.sdmp String found in binary or memory: https://streams.videolan.org/upload/
Source: rustdesk.exe, 00000003.00000003.893956987.000002B023059000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.ng.c/A
Source: unknown DNS traffic detected: queries for: rs-ny.rustdesk.com
Creates a DirectInput object (often for capturing keystrokes)
Source: rustdesk.exe, 00000003.00000003.893913862.000002B022FB9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/> memstr_0ac82f4e-0
Installs a raw input device (often for capturing keystrokes)
Source: rustdesk.exe, 00000008.00000002.898520164.00007FFA0260A000.00000002.00000001.01000000.00000011.sdmp Binary or memory string: RegisterRawInputDevices memstr_5ffb3f80-4
Drops certificate files (DER)
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\RustDeskIddDriver\rustdeskidddriver.cat Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\RustDeskIddDriver.cer Jump to dropped file
Creates files inside the system directory
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File created: C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\RustDesk Jump to behavior
Detected potential crypto function
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CC3D10 8_2_00007FF685CC3D10
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CDE5F4 8_2_00007FF685CDE5F4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CD7848 8_2_00007FF685CD7848
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CE07A4 8_2_00007FF685CE07A4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CDF32C 8_2_00007FF685CDF32C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CDC2AC 8_2_00007FF685CDC2AC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CD6A00 8_2_00007FF685CD6A00
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CDBA00 8_2_00007FF685CDBA00
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CD19FC 8_2_00007FF685CD19FC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CE3480 8_2_00007FF685CE3480
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CD34AC 8_2_00007FF685CD34AC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CD14A4 8_2_00007FF685CD14A4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CE1BF8 8_2_00007FF685CE1BF8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B9253C 8_2_00007FFA14B9253C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B814C0 8_2_00007FFA14B814C0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BBC4C8 8_2_00007FFA14BBC4C8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B884D4 8_2_00007FFA14B884D4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BA74D0 8_2_00007FFA14BA74D0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BA5698 8_2_00007FFA14BA5698
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BBD674 8_2_00007FFA14BBD674
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B825DC 8_2_00007FFA14B825DC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B7D79C 8_2_00007FFA14B7D79C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BA275C 8_2_00007FFA14BA275C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB886C 8_2_00007FFA14BB886C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B76836 8_2_00007FFA14B76836
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB9198 8_2_00007FFA14BB9198
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BA518C 8_2_00007FFA14BA518C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BBB128 8_2_00007FFA14BBB128
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B710E0 8_2_00007FFA14B710E0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B7F290 8_2_00007FFA14B7F290
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B8B238 8_2_00007FFA14B8B238
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B95384 8_2_00007FFA14B95384
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B803A8 8_2_00007FFA14B803A8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB5300 8_2_00007FFA14BB5300
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B9730C 8_2_00007FFA14B9730C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B85320 8_2_00007FFA14B85320
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BA3328 8_2_00007FFA14BA3328
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB62D8 8_2_00007FFA14BB62D8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B7D2F8 8_2_00007FFA14B7D2F8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BAD478 8_2_00007FFA14BAD478
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B993DC 8_2_00007FFA14B993DC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B90D88 8_2_00007FFA14B90D88
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB2D3C 8_2_00007FFA14BB2D3C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B97D64 8_2_00007FFA14B97D64
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B8DD18 8_2_00007FFA14B8DD18
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B88D34 8_2_00007FFA14B88D34
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B75CE8 8_2_00007FFA14B75CE8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B94E94 8_2_00007FFA14B94E94
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB0E54 8_2_00007FFA14BB0E54
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B68DC0 8_2_00007FFA14B68DC0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B84DD0 8_2_00007FFA14B84DD0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB8F8C 8_2_00007FFA14BB8F8C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B79F3C 8_2_00007FFA14B79F3C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BAEEBC 8_2_00007FFA14BAEEBC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B8C07C 8_2_00007FFA14B8C07C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB198C 8_2_00007FFA14BB198C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BA3958 8_2_00007FFA14BA3958
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B88904 8_2_00007FFA14B88904
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B868C0 8_2_00007FFA14B868C0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B8A8E0 8_2_00007FFA14B8A8E0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B96A58 8_2_00007FFA14B96A58
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B89A5A 8_2_00007FFA14B89A5A
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B659E0 8_2_00007FFA14B659E0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B919E0 8_2_00007FFA14B919E0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BA79EC 8_2_00007FFA14BA79EC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B74C50 8_2_00007FFA14B74C50
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B73BC4 8_2_00007FFA14B73BC4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B79BD8 8_2_00007FFA14B79BD8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BABBD0 8_2_00007FFA14BABBD0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C5159C 8_2_00007FFA14C5159C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C44620 8_2_00007FFA14C44620
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C2F788 8_2_00007FFA14C2F788
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C3C058 8_2_00007FFA14C3C058
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C4F008 8_2_00007FFA14C4F008
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C44900 8_2_00007FFA14C44900
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C018C0 8_2_00007FFA14C018C0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C4BA6C 8_2_00007FFA14C4BA6C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C133B8 8_2_00007FFA14C133B8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C47B48 8_2_00007FFA14C47B48
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C99D50 8_2_00007FFA14C99D50
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CB3524 8_2_00007FFA14CB3524
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CBA4F4 8_2_00007FFA14CBA4F4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CACE60 8_2_00007FFA14CACE60
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CBE5BC 8_2_00007FFA14CBE5BC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CB26C0 8_2_00007FFA14CB26C0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CBC070 8_2_00007FFA14CBC070
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CB77D0 8_2_00007FFA14CB77D0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CB48D4 8_2_00007FFA14CB48D4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CAB210 8_2_00007FFA14CAB210
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C979C0 8_2_00007FFA14C979C0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CAD36C 8_2_00007FFA14CAD36C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CBA2E8 8_2_00007FFA14CBA2E8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CAACA4 8_2_00007FFA14CAACA4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CB6C58 8_2_00007FFA14CB6C58
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CA9C68 8_2_00007FFA14CA9C68
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CBD410 8_2_00007FFA14CBD410
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CB0BD4 8_2_00007FFA14CB0BD4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14D3332C 8_2_00007FFA14D3332C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14D294DC 8_2_00007FFA14D294DC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14D4C4C8 8_2_00007FFA14D4C4C8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14D374D0 8_2_00007FFA14D374D0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14D3569C 8_2_00007FFA14D3569C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14D4D674 8_2_00007FFA14D4D674
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14D2263C 8_2_00007FFA14D2263C
Abnormal high CPU Usage
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process Stats: CPU usage > 49%
Sample file is different than original file name gathered from version info
Source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.884729151.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameflutter_hbb.exe8 vs rustdesk-1.2.2-x86_64.exe
Tries to load missing DLLs
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: nvcuda.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: amfrt64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: nvcuda.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: amfrt64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: libmfxsw64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: libmfxsw64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: nvcuda.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: nvcuda.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: d3d11_1sdklayers.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: d3d11_1sdklayers.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: libmfxsw64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: libmfxsw64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: libmfxsw64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Section loaded: libmfxsw64.dll Jump to behavior
Source: rustdesk-1.2.2-x86_64.exe Virustotal: Detection: 7%
Source: rustdesk-1.2.2-x86_64.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM RuntimeBroker_rustdesk.exe
Source: C:\Windows\System32\taskkill.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe C:\Users\user\AppData\Local\rustdesk\.\rustdesk.exe
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\icacls.exe "icacls" C:\ProgramData\RustDesk /grant *S-1-1-0:(OI)(CI)F /T
Source: C:\Windows\System32\icacls.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\icacls.exe "icacls" C:\ProgramData\RustDesk\shared_memory_portable_service /grant *S-1-1-0:(OI)(CI)F /T
Source: C:\Windows\System32\icacls.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe "C:\Users\user\AppData\Local\rustdesk\rustdesk.exe" --portable-service
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe "C:\Users\user\AppData\Local\rustdesk\.\rustdesk.exe" --check-hwcodec-config
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\cmd.exe cmd" /c "taskkill /F /IM RuntimeBroker_rustdesk.exe
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe "C:\Users\user\AppData\Local\rustdesk\rustdesk.exe" --run-as-system
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\taskkill.exe taskkill /F /IM RuntimeBroker_rustdesk.exe
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM RuntimeBroker_rustdesk.exe Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe C:\Users\user\AppData\Local\rustdesk\.\rustdesk.exe Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\icacls.exe "icacls" C:\ProgramData\RustDesk /grant *S-1-1-0:(OI)(CI)F /T Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\icacls.exe "icacls" C:\ProgramData\RustDesk\shared_memory_portable_service /grant *S-1-1-0:(OI)(CI)F /T Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe "C:\Users\user\AppData\Local\rustdesk\rustdesk.exe" --portable-service Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe "C:\Users\user\AppData\Local\rustdesk\.\rustdesk.exe" --check-hwcodec-config Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\cmd.exe cmd" /c "taskkill /F /IM RuntimeBroker_rustdesk.exe Jump to behavior
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\taskkill.exe taskkill /F /IM RuntimeBroker_rustdesk.exe Jump to behavior
Source: rustdesk.exe, 00000009.00000002.914536413.00007FFA021F0000.00000002.00000001.01000000.00000011.sdmp Memory string: rustls::msgs::handshake
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32 Jump to behavior
Source: C:\Windows\System32\taskkill.exe WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = &quot;RuntimeBroker_rustdesk.exe&quot;)
Source: C:\Windows\System32\taskkill.exe WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = &quot;RuntimeBroker_rustdesk.exe&quot;)
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File created: C:\Users\user\AppData\Local\Temp\shared_memory-rs Jump to behavior
Source: classification engine Classification label: mal45.troj.evad.winEXE@21/416@487/2
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CC4F50 LoadCursorW,GetModuleHandleW,LoadIconW,RegisterClassW,MonitorFromPoint,FlutterDesktopGetDpiForMonitor,GetModuleHandleW,CreateWindowExW,CoCreateInstance, 8_2_00007FF685CC4F50
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File read: C:\Users\desktop.ini Jump to behavior
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5396:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7140:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4208:120:WilError_01
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File read: C:\Windows\System32\drivers\etc\hosts Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File read: C:\Windows\System32\drivers\etc\hosts Jump to behavior
Source: rustdesk-1.2.2-x86_64.exe Static PE information: Image base 0x140000000 > 0x60000000
Source: rustdesk-1.2.2-x86_64.exe Static file information: File size 20102832 > 1048576
Source: rustdesk-1.2.2-x86_64.exe Static PE information: certificate valid
Source: rustdesk-1.2.2-x86_64.exe Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0x12baa00
Source: rustdesk-1.2.2-x86_64.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: rustdesk-1.2.2-x86_64.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: rustdesk-1.2.2-x86_64.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: rustdesk-1.2.2-x86_64.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: rustdesk-1.2.2-x86_64.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: rustdesk-1.2.2-x86_64.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT
Source: rustdesk-1.2.2-x86_64.exe Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: rustdesk-1.2.2-x86_64.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: C:\b\s\w\ir\cache\builder\src\out\host_release\flutter_windows.dll.pdb source: rustdesk-1.2.2-x86_64.exe, 00000000.00000003.886004919.000001BC0B1C8000.00000004.00000020.00020000.00000000.sdmp, rustdesk-1.2.2-x86_64.exe, 00000000.00000003.887862532.000001BC0C1D6000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000008.00000002.899555436.00007FFA062FE000.00000002.00000001.01000000.0000000F.sdmp
Source: rustdesk-1.2.2-x86_64.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: rustdesk-1.2.2-x86_64.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: rustdesk-1.2.2-x86_64.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: rustdesk-1.2.2-x86_64.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: rustdesk-1.2.2-x86_64.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BF8727 push rdx; ret 8_2_00007FFA14BF872B
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CAFCFA push rdx; ret 8_2_00007FFA14CAFCFB
PE file contains sections with non-standard names
Source: rustdesk-1.2.2-x86_64.exe Static PE information: section name: _RDATA
Source: uni_links_desktop_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: url_launcher_windows_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: window_manager_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: window_size_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: desktop_drop_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: desktop_multi_window_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: dylib_virtual_display.dll.0.dr Static PE information: section name: _RDATA
Source: flutter_custom_cursor_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: flutter_windows.dll.0.dr Static PE information: section name: _RDATA
Source: librustdesk.dll.0.dr Static PE information: section name: .rodata
Source: librustdesk.dll.0.dr Static PE information: section name: _RDATA
Source: rustdesk.exe.0.dr Static PE information: section name: _RDATA
Source: screen_retriever_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: texture_rgba_renderer_plugin.dll.0.dr Static PE information: section name: _RDATA
Source: RustDeskIddDriver.dll.0.dr Static PE information: section name: _RDATA
Source: RuntimeBroker_rustdesk.exe.0.dr Static PE information: section name: .imrsiv
Source: RuntimeBroker_rustdesk.exe.0.dr Static PE information: section name: .didat
Contains functionality to dynamically determine API calls
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CC3D10 LoadLibraryA,GetProcAddress,GetProcAddress,FindWindowW,DispatchToUniLinksDesktop,ShowWindow,SetForegroundWindow,AttachConsole,IsDebuggerPresent,CoInitializeEx,GetMessageW,TranslateMessage,DispatchMessageW,GetMessageW,CoUninitialize,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn, 8_2_00007FF685CC3D10
Binary contains a suspicious time stamp
Source: RuntimeBroker_rustdesk.exe.0.dr Static PE information: 0x96E0391B [Sat Mar 19 04:31:23 2050 UTC]
Drops PE files
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\url_launcher_windows_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\flutter_custom_cursor_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\desktop_multi_window_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\librustdesk.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\window_manager_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\uni_links_desktop_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\desktop_drop_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\window_size_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\screen_retriever_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\flutter_windows.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\RuntimeBroker_rustdesk.exe Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\WindowInjection.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\texture_rgba_renderer_plugin.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\dylib_virtual_display.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe File created: C:\Users\user\AppData\Local\rustdesk\RustDeskIddDriver\RustDeskIddDriver.dll Jump to dropped file
Uses cacls to modify the permissions of files
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\icacls.exe "icacls" C:\ProgramData\RustDesk /grant *S-1-1-0:(OI)(CI)F /T
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process information set: NOOPENFILEERRORBOX Jump to behavior

Malware Analysis System Evasion
barindex
Query firmware table information (likely to detect VMs)
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe System information queried: FirmwareTableInformation Jump to behavior
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe TID: 5328 Thread sleep time: -50000s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe TID: 6940 Thread sleep time: -254745s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe TID: 7300 Thread sleep count: 326 > 30 Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe TID: 7296 Thread sleep count: 2009 > 30 Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe TID: 7296 Thread sleep time: -30135s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe TID: 7312 Thread sleep count: 405 > 30 Jump to behavior
Sample execution stops while process was sleeping (likely an evasion)
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\rustdesk\WindowInjection.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\rustdesk\dylib_virtual_display.dll Jump to dropped file
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\rustdesk\RustDeskIddDriver\RustDeskIddDriver.dll Jump to dropped file
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Window / User API: threadDelayed 792 Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Window / User API: threadDelayed 462 Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Window / User API: threadDelayed 530 Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Window / User API: threadDelayed 765 Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Window / User API: threadDelayed 2009 Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Window / User API: threadDelayed 405 Jump to behavior
Found large amount of non-executed APIs
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe API coverage: 5.3 %
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process information queried: ProcessInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CDF32C _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,FindClose, 8_2_00007FF685CDF32C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB9198 FindFirstFileExW, 8_2_00007FFA14BB9198
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CBA4F4 FindFirstFileExW, 8_2_00007FFA14CBA4F4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData\Roaming\RustDesk\log Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData\Roaming\RustDesk Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe File opened: C:\Users\user\AppData\Roaming Jump to behavior
Source: rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp Binary or memory string: VMware
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02304D000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: JHyper-V Hypervisor Logical Processor9-
Source: rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp Binary or memory string: GL_EXT_texture_lod_biasARB_draw_buffersGL_EXT_texture_swizzleGL_ARB_shader_bit_encodingGL_ARB_shading_language_packingGL_ARB_explicit_attrib_locationGL_ARB_explicit_uniform_locationGL_ARB_texture_gatherGL_ARB_texture_cube_map_arrayGL_EXT_draw_buffers2GL_ARB_fragment_shaderGL_ARB_shader_texture_lodGL_ARB_shader_viewport_layer_arrayGL_NV_viewport_array2GL_ARB_robust_buffer_access_behaviorGL_ARB_gpu_shader5GL_ARB_cull_distancefunctions->standard == STANDARD_GL_DESKTOP && isAMDfunctions->standard == STANDARD_GL_DESKTOP && isIntelisIntel && !IsSandyBridge(device) && !IsIvyBridge(device) && !IsHaswell(device)!isMesa || isIntel && (Is9thGenIntel(device) || IsGeminiLake(device) || IsCoffeeLake(device) || Is11thGenIntel(device) || Is12thGenIntel(device))IsApple() && isIntelisIntel && IsApple() && IsSkylake(device) && GetMacOSVersion() < OSVersion(10, 13, 2)isIntel || isAMDIsLinux() && functions->standard == STANDARD_GL_DESKTOP && isAMD(IsApple() && functions->standard == STANDARD_GL_DESKTOP) || (IsLinux() && isAMD)IsApple() && functions->standard == STANDARD_GL_DESKTOP && GetMacOSVersion() < OSVersion(10, 11, 0)IsApple() && isIntel && GetMacOSVersion() < OSVersion(10, 12, 0)IsApple() && isAMDIsAndroid() && isQualcommfunctions->standard == STANDARD_GL_DESKTOP && isNvidiaIsApple() || isNvidiafunctions->isAtMostGL(gl::Version(4, 1)) || (functions->standard == STANDARD_GL_DESKTOP && isAMD)isAMD || IsAndroid()IsAndroid() || isNvidia(IsAndroid() && isQualcomm) || (isIntel && IsApple())isAMD || isIntelIsNexus5X(vendor, device)IsAndroid() || (IsWindows() && isIntel)(IsWindows() && (isIntel || isAMD)) || (IsLinux() && isNvidia) || IsIOS() || IsAndroid() || IsAndroidEmulator(functions)IsAndroid() || limitMaxTextureSizeIsAndroid() || (IsApple() && (isIntel || isAMD || isNvidia))limitMaxTextureSizeIsApple()IsAndroid() || isAMD || !functions->hasExtension("GL_KHR_robust_buffer_access_behavior")IsApple() && isIntel && GetMacOSVersion() >= OSVersion(10, 12, 4)IsApple() && isIntel && GetMacOSVersion() < OSVersion(10, 12, 6)IsLinux() || (IsAndroid() && isNvidia) || (IsWindows() && isNvidia) || (IsApple() && functions->standard == STANDARD_GL_ES)IsApple() || (IsLinux() && isAMD)functions->standard == STANDARD_GL_DESKTOP && functions->isAtLeastGL(gl::Version(3, 1)) && !functions->isAtLeastGL(gl::Version(4, 3))features->emulatePrimitiveRestartFixedIndex.enabled && IsApple() && isIntelIsApple() || IsAndroid() || IsWindows()!isIntel && functions->standard == STANDARD_GL_ES && functions->isAtLeastGLES(gl::Version(3, 1)) && functions->hasGLESExtension("GL_EXT_texture_norm16")IsWindows() && isAMDIsLinux() && isAMD && isMesa && mesaVersion < (std::array<int, 3>{19, 3, 5})(IsLinux() && isVMWare) || (IsAndroid() && isNvidia) || (IsAndroid() && GetAndroidSdkLevel() < 27 && IsAdreno5xxOrOlder(functions)) || (IsAndroid() && IsMaliT8xxOrOlder(functions)) || (IsAndroid() && IsMaliG31OrOlder(functions))IsApple() && functions->standard == STANDARD_GL_ES && !(isAMD && IsWindows())isAppleisD
Source: rustdesk.exe, 00000003.00000003.961020789.000002B023156000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V Hypervisor Root Virtual Processor
Source: rustdesk.exe, 00000003.00000003.911601212.000002B02791C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: n Standby Entries5196latform Idle Transitio5198HypervisorStartuost5282Hyper-V Hypersor Root Partition528Virtual Processors528Virtual TLB Pages5288s\
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02304D000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: sWDHyper-V Hypervisor Root Partition
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02304D000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: DHyper-V Hypervisor Root Partition
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02304D000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: DHyper-V Virtual Machine Bus Pipes
Source: rustdesk.exe, 00000003.00000003.893956987.000002B0230FC000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllxx.
Source: rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp Binary or memory string: (IsLinux() && isVMWare) || (IsAndroid() && isNvidia) || (IsAndroid() && GetAndroidSdkLevel() < 27 && IsAdreno5xxOrOlder(functions)) || (IsAndroid() && IsMaliT8xxOrOlder(functions)) || (IsAndroid() && IsMaliG31OrOlder(functions))
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02314C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V Virtual Machine Bus Pipes]
Source: rustdesk.exe, 00000003.00000003.961020789.000002B023156000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: &Hyper-V Hypervisor
Source: rustdesk.exe, 00000003.00000003.961020789.000002B023156000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V Hypervisoro
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02314C000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000003.00000003.961020789.000002B023156000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V Hypervisor Root Partition
Source: rustdesk.exe, 00000003.00000003.961020789.000002B023156000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: DHyper-V Hypervisor Roo
Source: rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp Binary or memory string: zJVSk/BwJVmcIGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5dd
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02306E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02314C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V Virtual Machine Bus Pipes
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02304D000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: AlDHyper-V Virtual Machine Bus Pipes
Source: rustdesk.exe, 00000003.00000003.961020789.000002B02304D000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: JHyper-V Hypervisor Logical Processor
Source: rustdesk.exe, 00000003.00000003.893880989.000002B02300C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: rustdesk.exe, 00000009.00000002.915603979.00007FFA060D8000.00000002.00000001.01000000.0000000F.sdmp Binary or memory string: IIBroadcomGoogleMesaMicrosoftSamsung Electronics Co., Ltd.VivanteVMwareTest
Source: rustdesk.exe, 00000003.00000003.961020789.000002B023156000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V Hypervisor Logical Processor
Source: rustdesk.exe, 00000003.00000003.966548957.000002B022EB7000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000003.00000003.953991409.000002B022EB7000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000003.00000003.941152285.000002B022EB7000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000003.00000003.978943484.000002B022EB7000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000003.00000003.961093946.000002B022EB7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V imrfeuhvwbmpxtg Bus Pipes
Source: rustdesk.exe, 00000003.00000003.893733946.000002B022EB2000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: https://storeedgefd.dsx.mp.microsoft.com/v8.0/oemdiscovery?oemId=&scmId=&phoneManufacturerName=&smBiosManufacturerName=VMware%2C+Inc.&phoneDeviceModel=&smBiosDm=VMware7%2C1
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CC3D10 LoadLibraryA,GetProcAddress,GetProcAddress,FindWindowW,DispatchToUniLinksDesktop,ShowWindow,SetForegroundWindow,AttachConsole,IsDebuggerPresent,CoInitializeEx,GetMessageW,TranslateMessage,DispatchMessageW,GetMessageW,CoUninitialize,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn, 8_2_00007FF685CC3D10
Contains functionality to dynamically determine API calls
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CC3D10 LoadLibraryA,GetProcAddress,GetProcAddress,FindWindowW,DispatchToUniLinksDesktop,ShowWindow,SetForegroundWindow,AttachConsole,IsDebuggerPresent,CoInitializeEx,GetMessageW,TranslateMessage,DispatchMessageW,GetMessageW,CoUninitialize,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn, 8_2_00007FF685CC3D10
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CE0450 GetProcessHeap, 8_2_00007FF685CE0450
Enables debug privileges
Source: C:\Windows\System32\taskkill.exe Process token adjusted: Debug Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process token adjusted: Debug Jump to behavior
Source: C:\Windows\System32\taskkill.exe Process token adjusted: Debug
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Memory allocated: page read and write | page guard Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CCB680 SetUnhandledExceptionFilter, 8_2_00007FF685CCB680
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CCB048 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 8_2_00007FF685CCB048
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CD0AD8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 8_2_00007FF685CD0AD8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CCB49C IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 8_2_00007FF685CCB49C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BA13E8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 8_2_00007FFA14BA13E8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B9BD50 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 8_2_00007FFA14B9BD50
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14B9B9B8 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 8_2_00007FFA14B9B9B8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C3A118 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 8_2_00007FFA14C3A118
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14C349EC SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 8_2_00007FFA14C349EC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CA8D68 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 8_2_00007FFA14CA8D68
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CA3670 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 8_2_00007FFA14CA3670
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14CA32D8 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 8_2_00007FFA14CA32D8
Uses taskkill to terminate processes
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM RuntimeBroker_rustdesk.exe Jump to behavior
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\taskkill.exe taskkill /F /IM RuntimeBroker_rustdesk.exe Jump to behavior
Creates a process in suspended mode (likely to inject code)
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM RuntimeBroker_rustdesk.exe Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe C:\Users\user\AppData\Local\rustdesk\.\rustdesk.exe Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\icacls.exe "icacls" C:\ProgramData\RustDesk /grant *S-1-1-0:(OI)(CI)F /T Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\icacls.exe "icacls" C:\ProgramData\RustDesk\shared_memory_portable_service /grant *S-1-1-0:(OI)(CI)F /T Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe "C:\Users\user\AppData\Local\rustdesk\rustdesk.exe" --portable-service Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe "C:\Users\user\AppData\Local\rustdesk\.\rustdesk.exe" --check-hwcodec-config Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Process created: C:\Windows\System32\cmd.exe cmd" /c "taskkill /F /IM RuntimeBroker_rustdesk.exe Jump to behavior
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\taskkill.exe taskkill /F /IM RuntimeBroker_rustdesk.exe Jump to behavior
Source: rustdesk.exe, 00000003.00000003.893802175.000002B023063000.00000004.00000020.00020000.00000000.sdmp, rustdesk.exe, 00000003.00000003.893802175.000002B023111000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Shell_TrayWnd
Source: rustdesk.exe, 00000003.00000003.893802175.000002B023111000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Shell_TrayWndR
Queries the volume information (name, serial number etc) of a device
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\flutter_assets VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\flutter_assets\assets VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\flutter_assets\packages\dash_chat_2\assets VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\flutter_assets\packages\window_manager\images VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\rustdesk-1.2.2-x86_64.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\RustDeskIddDriver VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Program Files VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Program Files VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ProgramData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Program Files VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\app.so VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\app.so VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\app.so VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\app.so VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\app.so VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Local\rustdesk\data\flutter_assets VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Program Files VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Program Files VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config\RustDesk.toml VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\config VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Program Files VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log\portable-service VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Program Files VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Program Files VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log\portable-service VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\Users\user\AppData\Roaming\RustDesk\log\portable-service VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Contains functionality to query locales information (e.g. system language)
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW, 8_2_00007FF685CE2650
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FF685CE25B8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW, 8_2_00007FF685CE289C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FF685CD9750
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW, 8_2_00007FF685CE2AA4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP, 8_2_00007FF685CE29F4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW, 8_2_00007FF685CE219C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FF685CE24E8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW,GetUserDefaultLCID,ProcessCodePage,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW, 8_2_00007FF685CE2BD0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: try_get_function,GetLocaleInfoW, 8_2_00007FF685CD9BF4
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW, 8_2_00007FFA14BBE520
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW,GetUserDefaultLCID,ProcessCodePage,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW, 8_2_00007FFA14BBE64C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW, 8_2_00007FFA14BBE0CC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoEx, 8_2_00007FFA14B9A364
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW, 8_2_00007FFA14BBE318
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: try_get_function,GetLocaleInfoW, 8_2_00007FFA14BB42D8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP, 8_2_00007FFA14BBE470
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14BBDF64
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14BBE034
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14BB3CA0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW, 8_2_00007FFA14BBDC18
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14C56D64
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoEx, 8_2_00007FFA14C33094
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: try_get_function,GetLocaleInfoW, 8_2_00007FFA14C4D008
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP, 8_2_00007FFA14C571A0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW, 8_2_00007FFA14C56948
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14C4C9D0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW,GetUserDefaultLCID,ProcessCodePage,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW, 8_2_00007FFA14C5737C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14C56C94
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW,GetUserDefaultLCID,ProcessCodePage,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW, 8_2_00007FFA14CBF594
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: try_get_function,GetLocaleInfoW, 8_2_00007FFA14CB5CDC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14CBEEAC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14CBEF7C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW, 8_2_00007FFA14CBF014
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW, 8_2_00007FFA14CB5838
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW, 8_2_00007FFA14CBF260
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP, 8_2_00007FFA14CBF3B8
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW, 8_2_00007FFA14CBEB60
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW, 8_2_00007FFA14CBF468
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: GetLocaleInfoW, 8_2_00007FFA14D4E520
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: EnumSystemLocalesW,GetUserDefaultLCID,ProcessCodePage,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW, 8_2_00007FFA14D4E64C
Contains functionality to query CPU information (cpuid)
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CDECA0 cpuid 8_2_00007FF685CDECA0
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid Jump to behavior
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FF685CCB6EC GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter, 8_2_00007FF685CCB6EC
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BB886C _get_daylight,_get_daylight,_get_daylight,_get_daylight,_get_daylight,GetTimeZoneInformation, 8_2_00007FFA14BB886C
Source: C:\Users\user\AppData\Local\rustdesk\rustdesk.exe Code function: 8_2_00007FFA14BF8A01 GetVersion, 8_2_00007FFA14BF8A01

Stealing of Sensitive Information
barindex
Yara detected BazaLoader
Source: Yara match File source: 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000003.884818906.000001BC08D2B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: C:\Users\user\AppData\Local\rustdesk\dylib_virtual_display.dll, type: DROPPED
Source: Yara match File source: C:\Users\user\AppData\Local\rustdesk\librustdesk.dll, type: DROPPED

Remote Access Functionality
barindex
Yara detected BazaLoader
Source: Yara match File source: 00000000.00000003.884874594.000001BC070D1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000003.884818906.000001BC08D2B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: C:\Users\user\AppData\Local\rustdesk\dylib_virtual_display.dll, type: DROPPED
Source: Yara match File source: C:\Users\user\AppData\Local\rustdesk\librustdesk.dll, type: DROPPED
windows-stand
Behavior
Click here to start
Slideshow Behavior Animation
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1315930 Sample: rustdesk-1.2.2-x86_64.exe Startdate: 28/09/2023 Architecture: WINDOWS Score: 45 47 rs-ny.rustdesk.com 2->47 53 Multi AV Scanner detection for submitted file 2->53 55 Yara detected BazaLoader 2->55 9 rustdesk-1.2.2-x86_64.exe 104 2->9         started        signatures3 process4 file5 39 C:\Users\user\AppData\Local\...\rustdesk.exe, PE32+ 9->39 dropped 41 C:\Users\user\AppData\...\librustdesk.dll, PE32+ 9->41 dropped 43 C:\Users\user\...\dylib_virtual_display.dll, PE32+ 9->43 dropped 45 13 other files (none is malicious) 9->45 dropped 12 rustdesk.exe 34 9->12         started        16 taskkill.exe 1 9->16         started        process6 dnsIp7 49 rs-ny.rustdesk.com 155.138.247.159, 21115, 21116, 49254 AS-CHOOPAUS United States 12->49 57 Query firmware table information (likely to detect VMs) 12->57 18 rustdesk.exe 2 12->18         started        20 cmd.exe 1 12->20         started        22 icacls.exe 1 12->22         started        26 2 other processes 12->26 24 conhost.exe 16->24         started        signatures8 process9 process10 28 rustdesk.exe 5 18->28         started        31 conhost.exe 20->31         started        33 taskkill.exe 20->33         started        35 conhost.exe 22->35         started        37 conhost.exe 26->37         started        dnsIp11 51 192.168.2.1 unknown unknown 28->51
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
155.138.247.159
 rs-ny.rustdesk.com United States
20473 AS-CHOOPAUS false

Private

IP
192.168.2.1

Contacted Domains

Name IP Active
rs-ny.rustdesk.com 155.138.247.159 true