diff --git a/yml/3rd_party/rustdesk/flutter_gpu_texture_renderer_plugin.yml b/yml/3rd_party/rustdesk/flutter_gpu_texture_renderer_plugin.yml new file mode 100644 index 0000000..af47c7f --- /dev/null +++ b/yml/3rd_party/rustdesk/flutter_gpu_texture_renderer_plugin.yml @@ -0,0 +1,29 @@ +--- +Name: flutter_gpu_texture_renderer_plugin.dll +Author: Wietze Beukema +Created: 2025-02-15 +Vendor: Rustdesk +ExpectedLocations: + - '%LOCALAPPDATA%\rustdesk' +ExpectedSignatureInformation: + - Subject: CN=PURSLANE, O=PURSLANE, S=North West, C=SG, SERIALNUMBER=53481265A + Issuer: CN=Sectigo Public Code Signing CA EV R36, O=Sectigo Limited, C=GB + Type: Authenticode +VulnerableExecutables: + - Path: '%LOCALAPPDATA%\rustdesk\rustdesk.exe' + Type: Sideloading + ExpectedVersionInformation: + - CompanyName: Purslane Ltd + FileDescription: RustDesk Remote Desktop + InternalName: rustdesk + OriginalFilename: rustdesk.exe + ProductName: RustDesk + ExpectedSignatureInformation: + - Subject: CN=PURSLANE, O=PURSLANE, S=North West, C=SG, SERIALNUMBER=53481265A + Issuer: CN=Sectigo Public Code Signing CA EV R36, O=Sectigo Limited, C=GB + Type: Authenticode + SHA256: + - 8128917d9f3e7ecabbc39f4c221afdf9171ee8b71b2c0ef11fce8e14c13c91fe +Resources: + - https://www.trendmicro.com/en_us/research/25/a/how-cracks-and-installers-bring-malware-to-your-device.html + - https://www.virustotal.com/gui/file/857e4cb0b41f7aac5494c8554601888c1c82202de3dab7258b2ff322bc94ca43