26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2a:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T409,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 0516ab593e3d… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 0516ab593e3d…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/0516ab593e3d62bbb78849b6b1c7eb752a670318472a0238e089178b1129110a","keywords":["malware analysis","sandbox report","threat intelligence","0516ab593e3d62bbb78849b6b1c7eb752a670318472a0238e089178b1129110a"],"about":{"@type":"SoftwareApplication","name":"desktop_hub_fido_native-5f3eb660da0a5bed.exe","applicationCategory":["peexe","64bits","executable"],"identifier":"0516ab593e3d62bbb78849b6b1c7eb752a670318472a0238e089178b1129110a"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":24},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tf7d,Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\..\..\backtrace\src\dbghelp.rs" (Indicator: "/rustc/"; Source: "sample.bin"), file/memory contains long string with (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\array\iter\iter_inner.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\time.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\helpers\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\env\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\collections\btree\navigate.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "StreamCipherError/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\path.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\convert\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "assertion failed: self.is_char_boundary(new_len)is_aligned_to: align is not a power-of-two/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\const_ptr.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\memchr.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\io\error\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\mpmc\zero.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\helpers\shuffle.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ops\index_range.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "TryFromSliceError()/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\char\methods.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "advancing IoSlice beyond its length/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\io\io_slice\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "to_digit: invalid radix -- radix must be in the range 2 to 36 inclusive/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\char\methods.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace. \" (Indicator: "rust_backtrace"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\ascii.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\stdio\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "use of std::thread::current() is not possible after the thread's local data has been destroyed/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\thread\current.rs" (Indicator: "/rustc/"; Source: "sample.bin")28:T1e93,Found reference to API (Indicator: "NCryptFreeObject"; Source: "sample.bin"), Found reference to API (Indicator: "NtWriteFile"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemTimePreciseAsFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteFileW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileAttributesW"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForSingleObjectEx"; Source: "sample.bin"), Found reference to API (Indicator: "NCryptGetProperty"; Source: "sample.bin"), Found reference to API (Indicator: "GetEnvironmentVariableW"; Source: "sample.bin"), Found reference to API (Indicator: "GetExitCodeProcess"; Source: "sample.bin"), Found reference to API (Indicator: "FlushFileBuffers"; Source: "sample.bin"), Found reference to API (Indicator: "NtOpenFile"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "RtlNtStatusToDosError"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleOutputCP"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryA"; Source: "sample.bin"), Found reference to API (Indicator: "CreateThread"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleA"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcessId"; Source: "sample.bin"), Found reference to API (Indicator: "LockFileEx"; Source: "sample.bin"), Found reference to API (Indicator: "FormatMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileAttributesW"; Source: "sample.bin"), Found reference to API (Indicator: "HeapAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "RtlVirtualUnwind"; Source: "sample.bin"), Found reference to API (Indicator: "CryptProtectData"; Source: "sample.bin"), Found reference to API (Indicator: "HeapFree"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemInfo"; Source: "sample.bin"), Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeSListHead"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThread"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleMode"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcessHeap"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcAddress"; Source: "sample.bin"), Found reference to API (Indicator: "FindFirstFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateMutexA"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileW"; Source: "sample.bin"), Found reference to API (Indicator: "ReleaseMutex"; Source: "sample.bin"), Found reference to API (Indicator: "ReadFileEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleScreenBufferInfo"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempPathW"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceFrequency"; Source: "sample.bin"), Found reference to API (Indicator: "SysFreeString"; Source: "sample.bin"), Found reference to API (Indicator: "WideCharToMultiByte"; Source: "sample.bin"), Found reference to API (Indicator: "NtCreateNamedPipeFile"; Source: "sample.bin"), Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "FindClose"; Source: "sample.bin"), Found reference to API (Indicator: "lstrlenW"; Source: "sample.bin"), Found reference to API (Indicator: "CryptUnprotectData"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileInformationByHandleEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetErrorInfo"; Source: "sample.bin"), Found reference to API (Indicator: "DuplicateHandle"; Source: "sample.bin"), Found reference to API (Indicator: "SleepEx"; Source: "sample.bin"), Found reference to API (Indicator: "ExitProcess"; Source: "sample.bin"), Found reference to API (Indicator: "SetConsoleTextAttribute"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThreadId"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileType"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "IsDebuggerPresent"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcess"; Source: "sample.bin"), Found reference to API (Indicator: "LocalFree"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadDescription"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryExA"; Source: "sample.bin"), Found reference to API (Indicator: "GetEnvironmentStringsW"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "sample.bin"), Found reference to API (Indicator: "GetOverlappedResult"; Source: "sample.bin"), Found reference to API (Indicator: "FreeEnvironmentStringsW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFullPathNameW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "WriteFileEx"; Source: "sample.bin"), Found reference to API (Indicator: "AddVectoredExceptionHandler"; Source: "sample.bin"), Found reference to API (Indicator: "GetStdHandle"; Source: "sample.bin"), Found reference to API (Indicator: "SysStringLen"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileInformationByHandle"; Source: "sample.bin"), Found reference to API (Indicator: "CreateEventW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCommandLineW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileInformationByHandle"; Source: "sample.bin"), Found reference to API (Indicator: "CancelIo"; Source: "sample.bin"), Found reference to API (Indicator: "MoveFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateProcessW"; Source: "sample.bin"), Found reference to API (Indicator: "RtlCaptureContext"; Source: "sample.bin"), Found reference to API (Indicator: "SwitchToThread"; Source: "sample.bin"), Found reference to API (Indicator: "ReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "SetFilePointerEx"; Source: "sample.bin"), Found reference to API (Indicator: "IsProcessorFeaturePresent"; Source: "sample.bin"), Found reference to API (Indicator: "WriteConsoleW"; Source: "sample.bin"), Found reference to API (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "NtReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "CompareStringOrdinal"; Source: "sample.bin"), Found reference to API (Indicator: "HeapReAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "MultiByteToWideChar"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadStackGuarantee"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowsDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "SetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForSingleObject"; Source: "sample.bin"), Found reference to API (Indicator: "RtlLookupFunctionEntry"; Source: "sample.bin"), Found reference to API (Indicator: "CloseHandle"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForMultipleObjects"; Source: "sample.bin")29:Tb6ff,Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\..\..\backtrace\src\dbghelp.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\co", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\sha256\soft.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crypto-bigint-0.5.5\src\uint\cmp.rs", Heuristic match: "()c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.9\src\lib.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\uuid-1.29.0\src\error.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\array\iter\iter_inner.rs", Heuristic match: "called `result::unwrap()` on an `err` valuec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\polyval-0.6.2\src\backend\soft64.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\time.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\helpers\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\env\windows.rs", Heuristic match: "unsafe precondition(s) violated: nonnull::new_unchecked requires that the pointer is non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice::from_r", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\argon2-0.5.3\src\params.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\block-buffer-0.10.4\src\lib.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\collections\btree\navigate.rs", Heuristic match: "streamciphererror/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\path.rs", Heuristic match: "a mapa sequencec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\read.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\convert\mod.rs", Heuristic match: "assertion failed: self.is_char_boundary(new_len)is_aligned_to: align is not a power-of-two/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\const_ptr.rs", Heuristic match: "unsafe precondition(s) violated: ptr::offset_from_unsigned requires `self >= origin` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows-result-0.4.1\src\hresult.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\memchr.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\io\error\windows.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\mpmc\zero.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.9\src\lib.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\helpers\shuffle.rs", Heuristic match: "src\tpm.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ops\index_range.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\digest-0.10.7\src\core_api\ct_variable.rs", Heuristic match: "tryfromsliceerror()/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\char\methods.rs", Heuristic match: "advancing ioslice beyond its length/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\io\io_slice\windows.rs", Heuristic match: "to_digit: invalid radix -- radix must be in the range 2 to 36 inclusive/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\char\methods.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\aead-0.5.2\src\lib.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\aes-0.8.4\src\ni\utils.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\all\memchr.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\ascii.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\stdio\windows.rs", Heuristic match: "use of std::thread::current() is not possible after the thread's local data has been destroyed/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\thread\current.rs", Heuristic match: "too many running threads in thread scope/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\thread\scoped.rs", Heuristic match: "unsafe precondition(s) violated: nonnull::new_unchecked requires that the pointer is non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea45", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\slice.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\..\..\stdarch\crates\core_arch\src\x86\sse2.rs", Heuristic match: "unsafe precondition(s) violated: slice::get_unchecked requires that the index is within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice::ge", Heuristic match: "explicit panicvendor\cbor\src\values.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\sync\atomic.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\cmp.rs", Heuristic match: "vendor\cbor\src\macros.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\sort\stable\drift.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\tempfile-3.27.0\src\util.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\io\mod.rs", Heuristic match: "unsafe precondition(s) violated: ptr::write_bytes requires that the destination pointer is aligned and non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/8bab26f4f68e0e26f0bb7", Heuristic match: "called `result::unwrap()` on an `err` valuecatalog.datcatalog test passphraseprivate catalog fixturesrc\catalog.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ops\function.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: ptr::offset_from_unsigned", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\tempfile-3.27.0\src\error.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\io\impls.rs", Heuristic match: "called `result::unwrap()` on an `err` valuec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\inout-0.1.4\src\inout_buf.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\mem\alignment.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\core_api.rs", Heuristic match: "unsafe precondition(s) violated: hint::unreachable_unchecked must never be reached this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice::from_raw_parts_mu", Heuristic match: "unsafe precondition(s) violated: nonzero::new_unchecked requires the argument to be non-zero this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: layout::from_s", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\traits\exact_size.rs", Heuristic match: "this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: usize::unchecked_mul cannot overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for", Heuristic match: "()/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\sort\stable\quicksort.rs", Heuristic match: "assertion failed: digits < 40/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\wtf8.rs", Heuristic match: "unsafe precondition(s) violated: ptr::write_bytes requires that the destination pointer is aligned and non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) viola", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\fmt\num.rs", Heuristic match: "unsafe precondition(s) violated: ptr::copy_nonoverlapping requires that both pointer arguments are aligned and non-null and the specified memory ranges do not overlap this indicates a bug in the program. this undefined behavior check is optional, and cann", Heuristic match: "null and the specified memory ranges do not overlap this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: hint::assert_unchecked must never be called when the co", Heuristic match: "changing permissions is not supported on this platformunsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsa", Heuristic match: "failed to spawn thread/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\thread\functions.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\collections\btree\remove.rs", Heuristic match: "0123456789abcdefc:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\read.rs", Heuristic match: "iolated: vec::from_parts_in requires that length <= capacity this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: vec::set_len requires that new_len <= capacity", Heuristic match: "unsafe precondition(s) violated: slice::split_at_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice:", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\adapters\mod.rs", Heuristic match: "fatal runtime error: rust panics must be rethrown, aborting fatal runtime error: rust cannot catch foreign exceptions, aborting overflow in duration::new/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\time.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\fmt\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\sync.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows-result-0.4.1\src\error.rs", Heuristic match: "fromutf8errorbyteserrorcatalog::tests::protected_catalog_is_exclusive_durable_and_rejects_corruptionsrc\catalog.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\in_place_drop.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.9\src\impls.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\non_null.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\sort\shared\smallsort.rs", Heuristic match: "unsafe precondition(s) violated: ptr::offset requires the address calculation to not overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.c:\users\adams\scoop\persist\rustup\.cargo\reg", Heuristic match: "called `result::unwrap()` on an `err` valuesrc\usbip.rs", Heuristic match: "called `result::unwrap()` on an `err` valuec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ctr-0.9.2\src\flavors\ctr32.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\once_cell-1.21.4\src\imp_std.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\const_ptr.rs", Heuristic match: " and the specified memory ranges do not overlap this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: hint::assert_unchecked must never be called when the condit", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\aes-gcm-0.10.3\src\lib.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\inout-0.1.4\src\inout.rs", Heuristic match: ".0/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\mem\alignment.rs", Heuristic match: " caused by: c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\anyhow-1.0.104\src\fmt.rs", Heuristic match: "ullruealsec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\de.rs", Heuristic match: "ipc must be utf-8src\worker.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\cipher-0.4.4\src\block.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\num\imp\flt2dec\strategy\dragon.rs", Heuristic match: "unsafe precondition(s) violated: slice::split_at_mut_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: sl", Heuristic match: "formatting argument out of rangec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crypto-bigint-0.5.5\src\limb\sub.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows-core-0.62.2\src\param_value.rs", Heuristic match: "unsafe precondition(s) violated: hint::unreachable_unchecked must never be reached this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: ptr::copy_nonoverlapping", Heuristic match: "is_aligned_to: align is not a power-of-two/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\const_ptr.rs", Heuristic match: "a formatting trait implementation returned an error when the underlying stream did not/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\io\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\wtf8.rs", Heuristic match: "unsafe precondition(s) violated: str::get_unchecked requires that the range is within the string slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.internal error: entered unreachable c", Heuristic match: "mid > len/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\process\windows.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\adapters\enumerate.rs", Heuristic match: "src\catalog.rs", Heuristic match: "unsafe precondition(s) violated: layout::from_size_align_unchecked requires that align is a power of 2 and the rounded-up allocation size does not exceed isize::max this indicates a bug in the program. this undefined behavior check is optional, and cannot", Heuristic match: "worker::tests::ipc_rejects_oversized_unknown_and_incomplete_inputsrc\worker.rs", Heuristic match: "empty y-coordinatec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sec1-0.7.3\src\point.rs", Heuristic match: "bad formatop char/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\term\terminfo\parm.rs", Heuristic match: " -fn() -> + : punycode{}.llvm./rust/deps\rustc-demangle-0.1.27\src\lib.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\process\mod.rs", Heuristic match: "struct snapshotstruct credentialrecordc:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.9\src\lib.rs", Heuristic match: "window size must be non-zerochunk size must be non-zero/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\iter.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\universal-hash-0.5.1\src\lib.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\unicode\unicode_data.rs", Heuristic match: "error/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\adapters\enumerate.rs", Heuristic match: "internal error: entered unreachable code/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\thread_local\native\lazy.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\num\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\mpmc\array.rs", Heuristic match: "tpm::tests::key_ids_reject_foreign_and_noncanonical_namessrc\tpm.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\p256-0.13.2\src\arithmetic\util.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\aes-0.8.4\src\soft.rs", Heuristic match: "unsafe precondition(s) violated: vec::set_len requires that new_len <= capacity() this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\co", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows-0.62.2\src\windows\win32\security\cryptography\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\str\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\panicking.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\str\traits.rs", Heuristic match: "assertion failed: start <= endc:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\generic\memchr.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\blake2-0.10.6\src\lib.rs", Heuristic match: "unsafe precondition(s) violated: slice::from_raw_parts requires the pointer to be aligned and non-null, and the total size of the slice not to exceed `isize::max` this indicates a bug in the program. this undefined behavior check is optional, and cannot b", Heuristic match: "assertion failed: step != 0/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\adapters\step_by.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\spec_from_iter_nested.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zmij-1.0.23\src\lib.rs", Heuristic match: "/rust/deps\hashbrown-0.17.1\src\raw.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crypto-bigint-0.5.5\src\uint\encoding.rs", Heuristic match: "denial::tests::denial_is_bounded_to_the_exact_protocol_request_and_expiressrc\denial.rs", Heuristic match: "called `result::unwrap()` on an `err` valuec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\digest-0.10.7\src\core_api\ct_variable.rs", Heuristic match: "entity not foundpermission deniedconnection refusedconnection resethost unreachablenetwork unreachableconnection abortednot connectedaddress in useaddress not availablenetwork downbroken pipeentity already existsoperation would blocknot a directoryis a dir", Heuristic match: "assertion failed: value == 0 || value == 1c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crypto-bigint-0.5.5\src\ct_choice.rs", Heuristic match: "called `result::unwrap()` on an `err` valuec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\sha256.rs", Heuristic match: "checked must never be reached this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.capacity overflow/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\mut_ptr.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\error.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\der-0.7.10\src\tag.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\traits\iterator.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\mpmc\list.rs", Heuristic match: "rust_test_time_unitrust_test_time_integrationrust_test_time_doctestthreads should not terminate unexpectedly/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\thread\lifecycle.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\inout-0.1.4\src\inout_buf.rs", Heuristic match: "src\tpm\certification.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows-result-0.4.1\src\com.rs", Heuristic match: "too many active read locks on rwlock/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\sync\rwlock\futex.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\aes-0.8.4\src\soft\fixslice64.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\subtle-2.6.1\src\lib.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\fastrand-2.5.0\src\global_rng.rs", Heuristic match: "assertion failed: d.mant > 0/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\num\imp\flt2dec\strategy\grisu.rs", Heuristic match: "assertion failed: key_size <= u64::to_usize()c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\blake2-0.10.6\src\lib.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\ser.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows-result-0.4.1\src\bstr.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\str\pattern.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\formatters\mod.rs", Heuristic match: "unsafe precondition(s) violated: usize::unchecked_add cannot overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\hash\", Heuristic match: "a formatting trait implementation returned an error when the underlying stream did not/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\fmt.rs", Heuristic match: "fatal runtime error: thread result panicked on drop, aborting a display implementation returned an error unexpectedly/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\string.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde-1.0.229\src\private\de.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\hash\sip.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\env.rs", Heuristic match: "0000000000000000000000000000000000000000000000000000000000000000/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\str\pattern.rs", Heuristic match: "called `result::unwrap()` on an `err` valuec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\digest-0.10.7\src\core_api\rt_variable.rs", Heuristic match: "vendor\cbor\src\reader.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\block-buffer-0.10.4\src\sealed.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: vec::set_len requires tha", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\io\stdio.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\panicking.rs", Heuristic match: "hash table capacity overflow/rust/deps\hashbrown-0.17.1\src\raw.rs", Heuristic match: "there is no such thing as a release load/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\sync\atomic.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\mpmc\context.rs", Heuristic match: "[c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.9\src\lib.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\anyhow-1.0.104\src\ptr.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\vector.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\adapters\step_by.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\rt.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\formatters\json.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\generic\memchr.rs", Heuristic match: "/rust/deps\getopts-0.2.24\src\lib.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\unique.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\thread\id.rs", Heuristic match: "chunk size must be non-zero/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\iter.rs", Heuristic match: "src\usbip.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\sort\stable\merge.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\raw_vec\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\alloc\layout.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\mod.rs", Heuristic match: "unsafe precondition(s) violated: slice::split_at_mut_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: pt", Heuristic match: "nulerroroverflow when adding duration to instantaccesserror/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\io\buffered\linewritershim.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std_detect\src\detect\cache.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\mod.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\tempfile-3.27.0\src\env.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\backtrace.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\argon2-0.5.3\src\lib.rs", Heuristic match: "jgndassertion failed: falsec:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\block-buffer-0.10.4\src\lib.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\collections\btree\node.rs", Heuristic match: "formatting argument out of range/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\time.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ctr-0.9.2\src\backend.rs", Heuristic match: "{kind:shutdown,extra:true}assertion failed: serde_json::from_str::(r#{kind:shutdown,extra:true}#).is_err()src\worker.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\pal\windows\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\into_iter.rs", Heuristic match: "a display implementation returned an error unexpectedly/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\string.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\ffi\os_str.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\panic_unwind\src\seh.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\anyhow-1.0.104\src\context.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\range.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\args\windows.rs", Heuristic match: "includedexcludedunbounded/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\ffi\os_str.rs", Heuristic match: "unsafe precondition(s) violated: nonnull::new_unchecked requires that the pointer is non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: vec::set_len ", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\adapters\zip.rs", Heuristic match: "?c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zmij-1.0.23\src\lib.rs", Heuristic match: "is_nonoverlapping: `size_of::() * count` overflows a usizevendor\cbor\src\reader.rs", Heuristic match: "#/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\io\mod.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crypto-bigint-0.5.5\src\limb.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\index.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\thread\local.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\polyval-0.6.2\src\mulx.rs", Heuristic match: "/rust/deps\rustc-demangle-0.1.27\src\legacy.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\uuid-1.29.0\src\parser.rs", Heuristic match: "there is no such thing as a relaxed fence/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\sync\atomic.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\char\methods.rs", Heuristic match: "assertion failed: match track_edge_idx { leftorright::left(idx) => idx <= old_left_len, leftorright::right(idx) => idx <= right_len, }/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\collections\btree\node.rs", Heuristic match: "a stringexplicit panicc:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_core-1.0.229\src\de\mod.rs", Heuristic match: "trailing tpm attestation datasrc\tpm\certification.rs", Heuristic match: "assertion failed: opts.fail_fast || st.current_test_count() == st.total/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\console.rs", Heuristic match: "error/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\range.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows-core-0.62.2\src\param.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\in_place_collect.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crypto-bigint-0.5.5\src\uint\sub.rs", Heuristic match: "requires that both pointer arguments are aligned and non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: hint::assert_unchecked must never be called w", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\boxed.rs", Heuristic match: "check is optional, and cannot be relied on for safety./rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\char\methods.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\str\validations.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\sort\shared\pivot.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\getrandom-0.4.3\src\lib.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\lib.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\anyhow-1.0.104\src\error.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\argon2-0.5.3\src\blake2b_long.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows-result-0.4.1\src\strings.rs", Heuristic match: "_user-provided comparison function does not correctly implement a total order/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\sort\shared\smallsort.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\mpmc\waker.rs", Heuristic match: " /rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\unicode\printable.rs", Heuristic match: "unsafe precondition(s) violated: slice::as_chunks_unchecked requires `n != 0` and the slice to split exactly into `n`-element chunks this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\helpers\concurrency.rs", Heuristic match: "byte arrayunit valueoption valuenewtype structsequencemapenumunit variantnewtype varianttuple variantstruct variantu32u64usizeu8a boolean/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\non_null.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\process\windows\child_pipe.rs", Heuristic match: "k:4c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_core-1.0.229\src\private\size_hint.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\signature-2.2.0\src\error.rs", Heuristic match: "is_nonoverlapping: `size_of::() * count` overflows a usize/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\iter\adapters\enumerate.rs", Heuristic match: "char len should be less than 255/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\str\pattern.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\num\imp\bignum.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\uuid-1.29.0\src\rng.rs", Heuristic match: "unsafe precondition(s) violated: ptr::offset_from_unsigned requires `self >= origin` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: vec::set_len requires ", Heuristic match: "src\denial.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\getrandom-0.4.3\src\util.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\once.rs", Heuristic match: "tpm::certification::tests::certification_requires_exact_subject_challenge_and_hardware_attributessrc\tpm\certification.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\argon2-0.5.3\src\block.rs", Heuristic match: "unexpected situationerrno: did not return a positive valuegetrandom: this target is not supportedis_aligned_to: align is not a power-of-two/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\const_ptr.rs", Heuristic match: "tryfromsliceerror()/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\collections\btree\map.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\thread\windows.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\pal\windows\time.rs", Heuristic match: "unsafe precondition(s) violated: hint::assert_unchecked must never be called when the condition is false this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: hi", Heuristic match: "vendor\opensk\src\ctap\data_formats.rs", Heuristic match: "unsafe precondition(s) violated: slice::split_at_mut_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: al", Heuristic match: "core\src\ptr\non_null.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\p256-0.13.2\src\arithmetic\field.rs", Heuristic match: "wouldblockthread name may not contain interior null bytes/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\thread\thread.rs", Heuristic match: "assertion failed: !s.contains('\n')/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\formatters\junit.rs", Pattern match: "cmd.exe/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\thread_local\destructors\list.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\uuid-1.29.0\src\fmt.rs", Heuristic match: "assertion failed: !sorted_samples.is_empty()/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\stats.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\polyval-0.6.2\src\backend\clmul.rs", Heuristic match: "assertion failed: parts.len() >= 4/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\num\imp\flt2dec\mod.rs", Heuristic match: "foreign tpm key nameinvalid tpm key idnoncanonical tpm key idsrc\tpm.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\wtf8\mod.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\itoa-1.0.18\src\lib.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\str.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\elliptic-curve-0.13.8\src\public_key.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\drain.rs", Heuristic match: "?is_aligned_to: align is not a power-of-two/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\ptr\const_ptr.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\sort\stable\mod.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\der-0.7.10\src\tag\class.rs", Heuristic match: "usbip::tests::descriptors_and_parser_enforce_transfer_boundssrc\usbip.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\bench.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\io\error\repr_bitpacked.rs", Heuristic match: "lazylock instance has previously been poisoned/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\lazy_lock.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\collections\btree\map\entry.rs", Heuristic match: "denied challengeassertion failed: cache.contains(1, bdenied challenge)src\denial.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\fastrand-2.5.0\src\lib.rs", Heuristic match: "{invalid syntax}{recursion limit reached}?`fmt::error`s should be impossible without a `fmt::formatter`/rust/deps\rustc-demangle-0.1.27\src\v0.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crypto-bigint-0.5.5\src\uint.rs", Heuristic match: "ot to exceed `isize::max` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\blake2-0.10.6\src\as_byte", Heuristic match: "kindinternally tagged enum commandprotocol\src\lib.rs", Heuristic match: "he program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: ptr::copy_nonoverlapping requires that both pointer arguments are aligned and non-null and the specified memory ranges do not overlap", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\const-oid-0.9.6\src\lib.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\primeorder-0.13.6\src\affine.rs", Heuristic match: "userprofile/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\paths\windows.rs", Heuristic match: "unsafe precondition(s) violated: slice::split_at_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/8bab26f4f68e0e26f0bb7960be334d5b", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\..\..\backtrace\src\symbolize\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\option.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\alloc.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\mpmc\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\term\terminfo\parser\compiled.rs", Heuristic match: " on for safety.c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\ext.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\const-oid-0.9.6\src\arcs.rs", Heuristic match: "tryfromsliceerror/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\mod.rs", Heuristic match: "capacity overflow/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\vec\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sys\fs\windows.rs", Heuristic match: "unsafe precondition(s) violated: ptr::offset_from_unsigned requires `self >= origin` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.is_aligned_to: align is not a power-of-two/rustc/8bab26", Heuristic match: "assertion failed: self.is_code_point_boundary(new_len)/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\alloc\src\wtf8\mod.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\test\src\cli.rs", Heuristic match: "rust_lib_backtracerust_backtrace\...lock count overflow in reentrant mutex/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\std\src\sync\reentrant_lock.rs", Heuristic match: "c:\users\adams\scoop\persist\rustup\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\cipher-0.4.4\src\stream_core.rs", Heuristic match: "/rustc/8bab26f4f68e0e26f0bb7960be334d5b520ea452/library\core\src\slice\iter.rs"1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"0516ab593e3d62bbb78849b6b1c7eb752a670318472a0238e089178b1129110a","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793402252109,"unified_at":"2026-10-30T23:17:32.109Z","metadata":{"hashes":{"sha256":"0516ab593e3d62bbb78849b6b1c7eb752a670318472a0238e089178b1129110a","sha1":"aa4fcb9c9d30bdce1443e2ab40317fb6ff070d1b","md5":"25e42b359ac629982ccb152b5e1c0285"},"file_info":{"file_name":"desktop_hub_fido_native-5f3eb660da0a5bed.exe","file_type":["peexe","64bits","executable"],"file_type_id":"64-bit exe","file_size":2792448,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1793402234000,"last_seen":1793402234000,"last_multi_scan":1793402234000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":24},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":27},"sandbox_signatures":{"informative_count":51,"suspicious_count":1,"malicious_count":0,"total":52},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Execution","technique":"Native API","attack_id":"T1106","attack_id_wiki":"https://attack.mitre.org/techniques/T1106","identifiers":[{"type":"informative","value":"Contains ability to create/open files (API string)"},{"type":"informative","value":"Contains ability to retrieve address of exported function from a DLL (API string)"},{"type":"informative","value":"Contains ability to execute Windows APIs"},{"type":"informative","value":"Contains ability to load modules (API string)"},{"type":"informative","value":"Contains ability to create a new process (API string)"},{"type":"informative","value":"Contains ability to retrieve/modify process thread (API string)"},{"type":"informative","value":"Contains ability to retrieve the fully qualified path of module (API string)"},{"type":"informative","value":"Contains ability to set/get the last-error code for a calling thread (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Lateral Movement","technique":"Lateral Tool Transfer","attack_id":"T1570","attack_id_wiki":"https://attack.mitre.org/techniques/T1570","identifiers":[{"type":"informative","value":"Contains ability to move file or directory (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Debugger Evasion","attack_id":"T1622","attack_id_wiki":"https://attack.mitre.org/techniques/T1622","identifiers":[{"type":"informative","value":"Contains ability to register a top-level exception handler (API string)"},{"type":"informative","value":"Contains ability to check debugger is running (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Contains ability to retrieve the host's architecture (API string)"},{"type":"informative","value":"Able to retrieve information about the current system (API string)"},{"type":"informative","value":"Contains reference to mutex-related activity (API string)"},{"type":"informative","value":"Contains ability to retrieve a module handle (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Hide Artifacts","attack_id":"T1564","attack_id_wiki":"https://attack.mitre.org/techniques/T1564","identifiers":[{"type":"informative","value":"Found virtual disk drive like strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Process Discovery","attack_id":"T1057","attack_id_wiki":"https://attack.mitre.org/techniques/T1057","identifiers":[{"type":"informative","value":"Able to retrieve/open a process (API string)"},{"type":"informative","value":"Contains ability to enumerate process and/or its information (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Able to inject code into another process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Timestomp","attack_id":"T1070.006","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/006","identifiers":[{"type":"informative","value":"Contains ability to retrieve file time (API string)"},{"type":"informative","value":"Contains ability to set file time (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"File Deletion","attack_id":"T1070.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/004","identifiers":[{"type":"informative","value":"Contains ability to delete files/directories (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Defense Impairment","technique":"File and Directory Permissions Modification","attack_id":"T1222","attack_id_wiki":"https://attack.mitre.org/techniques/T1222","identifiers":[{"type":"informative","value":"Contains ability to modify file attributes (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Contains ability to read files (API string)"},{"type":"informative","value":"Contains ability to enumerate files on disk (API string)"},{"type":"informative","value":"Contains ability to retrieve file and directory information (API string)"},{"type":"informative","value":"Contains ability to retrieve path in which Windows is installed (API string)"},{"type":"informative","value":"Able to rename or move file/directory (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Impact","technique":"Data Encrypted for Impact","attack_id":"T1486","attack_id_wiki":"https://attack.mitre.org/techniques/T1486","identifiers":[{"type":"informative","value":"Contains ability to perform encryption (API string)"},{"type":"informative","value":"Contains reference to cryptographic keys"},{"type":"informative","value":"Able to access crypto-related API (String)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"User Activity Based Checks","attack_id":"T1497.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1497/002","identifiers":[{"type":"informative","value":"Able to identify virtual environment by using user activity (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"informative","value":"Contains ability to perform decryption (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Able to use Microsoft's Enhanced Cryptographic Provider"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Security Software Discovery","attack_id":"T1518.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1518/001","identifiers":[{"type":"suspicious","value":"Possibly checks for known debuggers/analysis tools"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains key cryptographic functions (API string)"},{"type":"informative","value":"Contains CRYPTO related strings"},{"type":"informative","value":"Contains ability to perform AES/RC4 encryption (API string)"},{"type":"informative","value":"Contains ability to use Cryptographic classes"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Inter-Process Communication","attack_id":"T1559","attack_id_wiki":"https://attack.mitre.org/techniques/T1559","identifiers":[{"type":"informative","value":"Contains ability to create/connect to a named pipe (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Persistence","technique":"Windows Service","attack_id":"T1543.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1543/003","identifiers":[{"type":"informative","value":"Contains ability to access device drivers"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Local Data Staging","attack_id":"T1074.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1074/001","identifiers":[{"type":"informative","value":"Contains ability to create directories (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Time Based Checks","attack_id":"T1497.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1497/003","identifiers":[{"type":"informative","value":"Contains ability to delay execution by waiting for signal/timeout (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Windows Command Shell","attack_id":"T1059.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/003","identifiers":[{"type":"informative","value":"Contains ability to retrieve the command-line string for the current process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Contains references to network communication API (string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Dynamic-link Library Injection","attack_id":"T1055.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1055/001","identifiers":[{"type":"informative","value":"Contains ability to load/free library (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Contains ability to write files (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Impact","technique":"Service Stop","attack_id":"T1489","attack_id_wiki":"https://attack.mitre.org/techniques/T1489","identifiers":[{"type":"informative","value":"Contains ability to terminate a process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contains artifacts from Rust programming language","description":"$27","origin":"sample.bin","id":"string-943","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to execute Windows APIs","description":"$28","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-101","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create/open files (API string)","description":"Found reference to API \"NtOpenFile\" (Indicator: \"NtOpenFile\"; Source: \"sample.bin\"), Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-315","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create directories (API string)","description":"Found reference to API \"CreateDirectoryW\" (Indicator: \"CreateDirectory\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1074.001","id":"string-423","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to retrieve/modify process thread (API string)","description":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-161","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Able to retrieve/open a process (API string)","description":"Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1057","id":"string-272","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to retrieve the command-line string for the current process (API string)","description":"Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.003","id":"string-206","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to move file or directory (API string)","description":"Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1570","id":"string-322","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Able to rename or move file/directory (API string)","description":"Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-884","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create a new process (API string)","description":"Found reference to API \"CreateProcessW\" (Indicator: \"CreateProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-204","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to set/get the last-error code for a calling thread (API string)","description":"Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; Source: \"sample.bin\"), Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-319","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains PDB pathways","description":"\"desktop_hub_fido_native-5f3eb660da0a5bed.pdb\"","origin":"sample.bin","id":"string-7","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$29","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains ability to create/connect to a named pipe (API string)","description":"Found reference to API \"NtCreateNamedPipeFile\" (Indicator: \"CreateNamedPipe\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1559","id":"string-210","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains references to network communication API (string)","description":"Found reference to API \"TPM certification does not bind subject public areaTPM subject name is not SHA-256\" (Indicator: \" bind \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-899","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Able to use Microsoft's Enhanced Cryptographic Provider","description":"Found api reference \"NCryptFreeObject\" (Indicator: \"NCryptFreeObject\"; Source: \"sample.bin\"), Found api reference \"NCryptOpenStorageProvider\" (Indicator: \"NCryptOpenStorageProvider\"; Source: \"sample.bin\"), Found api reference \"NCryptGetProperty\" (Indicator: \"NCryptGetProperty\"; Source: \"sample.bin\"), Found api reference \"NCryptDeleteKey\" (Indicator: \"NCryptDeleteKey\"; Source: \"sample.bin\"), Found api reference \"NCryptOpenKey\" (Indicator: \"NCryptOpenKey\"; Source: \"sample.bin\"), Found api reference \"CryptUnprotectData\" (Indicator: \"CryptUnprotectData\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-602","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Contains ability to perform AES/RC4 encryption (API string)","description":"Found reference to API \"NCryptFreeObject\" (Indicator: \"NCryptFreeObject\"; Source: \"sample.bin\"), Found reference to API \"NCryptGetProperty\" (Indicator: \"NCryptGetProperty\"; Source: \"sample.bin\"), Found reference to API \"CryptProtectData\" (Indicator: \"CryptProtectData\"; Source: \"sample.bin\"), Found reference to API \"CryptUnprotectData\" (Indicator: \"CryptUnprotectData\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-438","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Contains key cryptographic functions (API string)","description":"Found reference to API \"CryptProtectData\" (Indicator: \"CryptProtectData\"; Source: \"sample.bin\"), Found reference to API \"CryptUnprotectData\" (Indicator: \"CryptUnprotectData\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-195","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Contains ability to perform encryption (API string)","description":"Found reference to API \"CryptProtectData\" (Indicator: \"CryptProtectData\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1486","id":"string-108","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Able to access crypto-related API (String)","description":"Found reference to API \"CryptProtectData\" (Indicator: \"CryptProtectData\"; Source: \"sample.bin\"), Found reference to API \"CryptUnprotectData\" (Indicator: \"CryptUnprotectData\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1486","id":"string-920","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Contains reference to cryptographic keys","description":"Found string \"Invalid CNG P-256 pointUnexpected CNG ECC coordinate sizeCNG public key is not ECDSA P-256Unexpected CNG ECC public blob sizeKeyId\" (Indicator: \"public key\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1486","id":"string-280","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Contains ability to perform decryption (API string)","description":"Found reference to API \"CryptUnprotectData\" (Indicator: \"CryptUnprotectData\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1140","id":"string-212","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to write files (API string)","description":"Found reference to API \"NtWriteFile\" (Indicator: \"NtWriteFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1105","id":"string-535","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to delete files/directories (API string)","description":"Found reference to API \"DeleteFileW\" (Indicator: \"DeleteFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.004","id":"string-308","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to modify file attributes (API string)","description":"Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1222","id":"string-426","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to terminate a process (API string)","description":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1489","id":"string-316","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to access device drivers","description":"Found string \"\\Device\\NamedPipe\\\" (Indicator: \"\\Device\\\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1543.003","id":"string-474","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve file and directory information (API string)","description":"Found reference to API \"GetFileAttributesW\" (Indicator: \"GetFileAttributes\"; Source: \"sample.bin\"), Found reference to API \"GetSystemDirectoryW\" (Indicator: \"GetSystemDirectory\"; Source: \"sample.bin\"), Found reference to API \"GetCurrentDirectoryW\" (Indicator: \"GetCurrentDirectory\"; Source: \"sample.bin\"), Found reference to API \"GetTempPathW\" (Indicator: \"GetTempPath\"; Source: \"sample.bin\"), Found reference to API \"GetFileInformationByHandleEx\" (Indicator: \"GetFileInformationByHandle\"; Source: \"sample.bin\"), Found reference to API \"#$*+-./:?@\\_GetTempPath2W\" (Indicator: \"GetTempPath\"; Source: \"sample.bin\"), Found reference to API \"GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-207","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve the host's architecture (API string)","description":"Found reference to API \"GetEnvironmentVariableW\" (Indicator: \"GetEnvironmentVariable\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-107","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"Found string \"C:\\Users\\Adams\\scoop\\persist\\rustup\\.cargo\\registry\\src\\index.crates.io-1949cf8c6b5b557f\\aes-0.8.4\\src\\ni\\utils.rs\" (Indicator: \"aes\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"base64\"; Source: \"sample.bin\"), Found string \"Invalid CNG P-256 pointUnexpected CNG ECC coordinate sizeCNG public key is not ECDSA P-256Unexpected CNG ECC public blob sizeKeyId\" (Indicator: \"ecdsa\"; Source: \"sample.bin\"), Found string \"C:\\Users\\Adams\\scoop\\persist\\rustup\\.cargo\\registry\\src\\index.crates.io-1949cf8c6b5b557f\\aes-gcm-0.10.3\\src\\lib.rs\" (Indicator: \"aes\"; Source: \"sample.bin\"), Found string \"C:\\Users\\Adams\\scoop\\persist\\rustup\\.cargo\\registry\\src\\index.crates.io-1949cf8c6b5b557f\\aes-0.8.4\\src\\soft.rs\" (Indicator: \"aes\"; Source: \"sample.bin\"), Found string \"C:\\Users\\Adams\\scoop\\persist\\rustup\\.cargo\\registry\\src\\index.crates.io-1949cf8c6b5b557f\\aes-0.8.4\\src\\soft\\fixslice64.rs\" (Indicator: \"aes\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve a module handle (API string)","description":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-427","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate process and/or its information (API string)","description":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; Source: \"sample.bin\"), Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"sample.bin\"), Found reference to API \"GetEnvironmentStringsW\" (Indicator: \"GetEnvironmentStrings\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1057","id":"string-85","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve address of exported function from a DLL (API string)","description":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-317","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate files on disk (API string)","description":"Found reference to API \"FindFirstFileExW\" (Indicator: \"FindFirstFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-83","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"Found string \"key ID is too longmemory cost is too smallmemory cost is too largeoutput is too shortoutput is too longpassword is too longsalt is too shortsalt is too longsecret is too longnot enough threadstoo many threadstime cost is too smallinvalid version\" (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"key ID is too longmemory cost is too smallmemory cost is too largeoutput is too shortoutput is too longpassword is too longsalt is too shortsalt is too longsecret is too longnot enough threadstoo many threadstime cost is too smallinvalid version\" (Indicator: \"secret\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve the fully qualified path of module (API string)","description":"Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-164","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to read files (API string)","description":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"sample.bin\"), Found reference to API \"NtReadFile\" (Indicator: \"NtReadFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-534","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to delay execution by waiting for signal/timeout (API string)","description":"Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObject\"; Source: \"sample.bin\"), Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObjectEx\"; Source: \"sample.bin\"), Found reference to API \"QueryPerformanceFrequency\" (Indicator: \"QueryPerformanceFrequency\"; Source: \"sample.bin\"), Found reference to API \"SleepEx\" (Indicator: \"SleepEx\"; Source: \"sample.bin\"), Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; Source: \"sample.bin\"), Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"sample.bin\"), Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"sample.bin\"), Found reference to API \"WaitForMultipleObjects\" (Indicator: \"WaitForMultipleObjects\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1497.003","id":"string-226","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to load/free library (API string)","description":"Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\"), Found reference to API \"LoadLibraryExA\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1055.001","id":"string-318","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Able to inject code into another process (API string)","description":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1055","id":"string-92","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to set file time (API string)","description":"Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.006","id":"string-409","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to use Cryptographic classes","description":"Found reference to \"OidUnknownoid\" (Indicator: \"Oid\"; Source: \"sample.bin\"), Found reference to \"NoncanonicalOidMalformedSetDuplicateSetOrderingOverflowOverlengthPermissionDeniedReaderTagModeUnknownTagNumberInvalidTagUnexpectedexpected\" (Indicator: \"Oid\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-138","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Found virtual disk drive like strings","description":"Found string - \\\\.\\NUL; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1564","id":"string-145","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to retrieve information about the current system (API string)","description":"Found system information discovery API: \"RtlNtStatusToDosError\" in \"sample.bin\", Found system information discovery API: \"GetSystemInfo\" in \"sample.bin\", Found system information discovery API: \"GetEnvironmentStringsW\" in \"sample.bin\"","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-89","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve file time (API string)","description":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.006","id":"string-249","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to identify virtual environment by using user activity (API string)","description":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1497.002","id":"string-661","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve path in which Windows is installed (API string)","description":"Found reference to API \"GetWindowsDirectoryW\" (Indicator: \"GetWindowsDirectory\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-312","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Installation/Persistence","name":"Contains ability to load modules (API string)","description":"Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\"), Found reference to API \"LoadLibraryExA\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-310","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to register a top-level exception handler (API string)","description":"Found reference to API \"UnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; Source: \"sample.bin\"), Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"SetUnhandledExceptionFilter\"; Source: \"sample.bin\"), Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1622","id":"string-148","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to check debugger is running (API string)","description":"Found reference to API \"IsDebuggerPresent\" (Indicator: \"IsDebuggerPresent\"; Source: \"sample.bin\"), Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1622","id":"string-183","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"Possibly checks for known debuggers/analysis tools","description":"Found string \"dbghelp.dll\" (Indicator: \"dbghelp.dll\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1518.001","id":"string-5","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Unusual Characteristics","name":"Contains reference to mutex-related activity (API string)","description":"Found reference to API \"CreateMutexA\" (Indicator: \"CreateMutex\"; Source: \"sample.bin\"), Found reference to API \"ReleaseMutex\" (Indicator: \"ReleaseMutex\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-354","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 0516ab593e3d… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 0516ab593e3d…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/0516ab593e3d62bbb78849b6b1c7eb752a670318472a0238e089178b1129110a"}],["$","meta","4",{"property":"og:title","content":"Sample 0516ab593e3d… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 0516ab593e3d…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/0516ab593e3d62bbb78849b6b1c7eb752a670318472a0238e089178b1129110a"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 0516ab593e3d… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 0516ab593e3d…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2a","11",{}]]