# ROOTBUDDY2 ## Notebook evidence The exact string “ROOTBUDDY2” appears in [[Scanned_20260730-1946|Scanned_20260730-1946]], PDF page 8, near “RTBUDDY V.2,” DOS/emulation material, and handheld-device references. ## Buddy-name uncertainty Its relationship to [[RTBuddy|RT Buddy]] and [[Remote Buddy]] is unresolved. The three names may represent separate products or labels, a contrast, versioning, wordplay, conflation, or a private taxonomy. They are cross-referenced for investigation but are not merged, and the present record does not assert that they are unrelated. The owner-supplied RT Buddy/Pegasus identification arose from documented resources observed in logs with [[CrashCapture]] or [[Heimdallr]]. That observation does not establish what `ROOTBUDDY2` denotes. Pegasus heuristic matches alone are not proof of infection, attribution, or the underlying mechanism. ## Open leads Search source-era screenshots, browser history, bookmarks, repositories, logs, and terminology chronology for the exact string. Preserve the spelling and numeral while the identification remains open.