All of this looks like botnet activity. All my friends with this rust update have this folder. What the hell is this Helk/Garry?
ClientSafePipeHandle [CRC32C: 211E71F4, Length: 20] pipeName [CRC32C: 43B5DE55, Length: 8] serverName [CRC32C: 43CCD9B1, Length: 10] options [CRC32C: 37CB07F9, Length: 7] TokenImpersonationLevel [CRC32C: 1FD2E3FF, Length: 23] impersonationLevel [CRC32C: 6AAA30AC, Length: 18] isAsync [CRC32C: 2B45E852, Length: 7] isConnected [CRC32C: C5F52327, Length: 11] desiredAccessRights [CRC32C: B9C8A5CB, Length: 19] Connect [CRC32C: 87B157AA, Length: 7] get_NumberOfServerInstances [CRC32C: ABCF8ACA, Length: 27] NumberOfServerInstances [CRC32C: 3557913B, Length: 23] MaxAllowedServerInstances [CRC32C: CB28E35D, Length: 25] wait_connect_delegate [CRC32C: 42393FE1, Length: 21] maxNumberOfServerInstances [CRC32C: 2B73B1EB, Length: 26] transmissionMode [CRC32C: B11A6962, Length: 16] inBufferSize [CRC32C: 636BE705, Length: 12] outBufferSize [CRC32C: F077AA19, Length: 13] additionalAccessRights [CRC32C: F3CDE2FA, Length: 22] Disconnect [CRC32C: 9B220E98, Length: 10] RunAsClient [CRC32C: 785B181C, Length: 11] impersonationWorker [CRC32C: 42466160, Length: 19] WaitForConnection [CRC32C: 038AF3A0, Length: 17] GetImpersonationUserName [CRC32C: E1F0F5B4, Length: 24] BeginWaitForConnection [CRC32C: 13EA937F, Length: 22] callback [CRC32C: BFC3BD83, Length: 8] EndWaitForConnection [CRC32C: E64D2BDF, Length: 20] asyncResult [CRC32C: 2C010529, Length: 11] ReadData [CRC32C: 1FE730BD, Length: 8] WriteData [CRC32C: 3F5B0A12, Length: 9] ReadAttributes [CRC32C: 74BA9C85, Length: 14] WriteAttributes [CRC32C: 2A051CA9, Length: 15] ReadExtendedAttributes [CRC32C: 8B9A2224, Length: 22] WriteExtendedAttributes [CRC32C: 421EDB2D, Length: 23] CreateNewInstance [CRC32C: 95B3B242, Length: 17] Delete [CRC32C: 01E3048C, Length: 6] ReadPermissions [CRC32C: D828112D, Length: 15] ChangePermissions [CRC32C: BA2F4141, Length: 17] TakeOwnership [CRC32C: 90E83011, Length: 13] Synchronize [CRC32C: B1989754, Length: 11] FullControl [CRC32C: 0B4A1BF9, Length: 11] ReadWrite [CRC32C: 04C3CA76, Length: 9] AccessSystemSecurity [CRC32C: BA204891, Length: 20]