34:"SampleDetailWrapper" 35:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$34"] 3b:I[27201,["$1","$2","$3","$4","$5"],"IconMark"] 33:T45f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Sample 1b7113956662… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 1b7113956662…. Threat score 100/100. 0/25 AV engines flagged this file. 1 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f","keywords":["Malicious","malware analysis","sandbox report","threat intelligence","1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f"],"about":{"@type":"SoftwareApplication","name":"1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f","applicationCategory":["peexe","64bits","executable"],"identifier":"1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f","additionalType":"Malicious sample"},"threatScore":100,"antivirusDetections":{"malicious":0,"total":25},"behavioralIndicators":{"malicious":1,"suspicious":4},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}36:T113c,Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\index.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\io\cursor.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "SHA1SHA256SHA384SHA512SHA512_256/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\iter.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "capacity overflow/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\vec\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\process\windows\child_pipe.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace. \" (Indicator: "rust_backtrace"; Source: "sample.bin"), Found reference string "number of read bytes exceeds limit/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\io\util.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\mem\maybe_uninit.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string " /rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\net\ip_addr.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "too many running threads in thread scope/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\thread\scoped.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "No CDFH foundInvalid CDFH offset in EOCDInvalid EOCD comment lengthCould not find EOCDassertion failed: n <= init_unfilled/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\io\borrowed_buf.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\..\..\backtrace\src\dbghelp.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "a Display implementation returned an error unexpectedly/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\string.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "inf-infNaN/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\str.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\io\stdio.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\stdio\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\args\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\io\read.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "CRC32 checksum failed on Unicode extra fieldinternal error: entered unreachable code: invalid Once state/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\sync\once\futex.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "RUST_BACKTRACE\.." (Indicator: "rust_backtrace"; Source: "sample.bin"), Found reference string "failed to spawn thread/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\thread\functions.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\fs\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "thread name may not contain interior null bytes/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\thread\thread.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\pal\windows\winsock.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "Invalid digital signature headerInvalid zip64 locator digital signature headerInvalid local file headerInvalid Central Directory header/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\mpmc\context.rs" (Indicator: "/rustc/"; Source: "sample.bin")37:T6cb3,Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\index.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\tls13\mod.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\arithmetic\montgomery.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\arithmetic\bigint\modulus.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-pki-types-1.15.1\src\base64.rs", Heuristic match: "stub\src\hvnc.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\aes_gcm.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\polyfill\slice.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\agreement.rs", Heuristic match: "variant identifierstruct buildconfigstruct variant inputevent::mousemovestruct variant filecommand::liststruct variant servertoclient::challengee:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\core_api.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\aes_gcm\aeshwclmulmovbe.rs", Heuristic match: "bitlengthe:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\signature.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\handshake.rs", Heuristic match: "stub\src\persist.rs", Heuristic match: "9q e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crc32fast-1.5.4\src\baseline.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\io\cursor.rs", Heuristic match: "sha1sha256sha384sha512sha512_256/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\iter.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\deframer\handshake.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zip-2.6.1\src\types.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\io\positive.rs", Heuristic match: "capacity overflow/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\vec\mod.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\process\windows\child_pipe.rs", Heuristic match: "missingsectionendend_markerillegalsectionstartlinebase64decodeionoitemsfoundsectiontoolarge0xe:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-pki-types-1.15.1\src\lib.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\client\ech.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\suite_b\ops.rs", Heuristic match: "number of read bytes exceeds limit/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\io\util.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\mem\maybe_uninit.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\compress.rs", Heuristic match: " /rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\net\ip_addr.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-webpki-0.103.16\src\crl\mod.rs", Heuristic match: "too many running threads in thread scope/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\thread\scoped.rs", Heuristic match: "-e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zip-2.6.1\src\read\magic_finder.rs", Heuristic match: "inpute:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\untrusted-0.9.0\src\reader.rs", Heuristic match: "x+e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\suite_b\ecdsa\digest_scalar.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\rsa\padding\pss.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\suite_b\private_key.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\webpki\verify.rs", Heuristic match: "no cdfh foundinvalid cdfh offset in eocdinvalid eocd comment lengthcould not find eocdassertion failed: n <= init_unfilled/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\io\borrowed_buf.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\read.rs", Heuristic match: "exporting too muchexpected transcriptno kx groups configurede:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\client\tls13.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\webpki\server_verifier.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\miniz_oxide-0.9.1\src\inflate\stream.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zip-2.6.1\src\read.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\..\..\backtrace\src\dbghelp.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\tls12\mod.rs", Heuristic match: "a display implementation returned an error unexpectedly/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\string.rs", Heuristic match: "/rust/deps\rustc-demangle-0.1.28\src\legacy.rs", Heuristic match: "shell_traywndprogmanworkerwstub\src\capture.rs", Heuristic match: "inf-infnan/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\str.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\crc32fast-1.5.4\src\specialized\pclmulqdq.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\cipher.rs", Heuristic match: "assertion failed: self.next_pre_encrypt_action() != preencryptaction::refusee:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\record_layer.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\hmac-0.12.1\src\lib.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\io\stdio.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-webpki-0.103.16\src\crl\types.rs", Heuristic match: "2271f8c0326b94f95f899c2f0e085f6c732d79481daba6dbe77a3db43d6cee07protocol\src\seal.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\stdio\windows.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\arithmetic\bigint.rs", Heuristic match: "`e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\miniz_oxide-0.9.1\src\inflate\output_buffer.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\args\windows.rs", Heuristic match: "build_idhostportgroupnamepersistuacprotocol\src\lib.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\io\writer.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\pkcs8.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\io\read.rs", Heuristic match: "driverdescbasic displaycomputernamedisplay 1e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\jpeg-encoder-0.6.1\src\image_buffer.rs", Heuristic match: "sample of invalid lengthe:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\ring\quic.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\de.rs", Heuristic match: "dest is out of boundse:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\common_state.rs", Heuristic match: "{invalid syntax}{recursion limit reached}?`fmt::error`s should be impossible without a `fmt::formatter`/rust/deps\rustc-demangle-0.1.28\src\v0.rs", Heuristic match: "read_bytese:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\codec.rs", Heuristic match: "assertion failed: output.len() <= padded.len()e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\overlapping\partial_block.rs", Heuristic match: "tls 1.2 session tickets may not be sent once the handshake has completede:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\fragmenter.rs", Heuristic match: "crc32 checksum failed on unicode extra fieldinternal error: entered unreachable code: invalid once state/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\sync\once\futex.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-webpki-0.103.16\src\subject_name\dns_name.rs", Heuristic match: "failed to spawn thread/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\thread\functions.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\arithmetic\ffi.rs", Heuristic match: " could not automatically determine the process-level cryptoprovider from rustls crate features. call cryptoprovider::install_default() before this point to select a provider manually, or make sure exactly one of the 'aws-lc-rs' and 'ring' features is enabl", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\fs\windows.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-pki-types-1.15.1\src\pem.rs", Heuristic match: "0123456789abcdefe:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\itoa-1.0.18\src\lib.rs", Heuristic match: "thread name may not contain interior null bytes/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\thread\thread.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\pal\windows\winsock.rs", Heuristic match: "invalid digital signature headerinvalid zip64 locator digital signature headerinvalid local file headerinvalid central directory header/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\mpmc\context.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\aes\ffi.rs", Heuristic match: "invalid eocd64: inconsistent lengthinvalid eocd64: inconsistency with locator dataeocd64 locator does not fit in filee:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\base64-0.22.1\src\engine\mod.rs", Heuristic match: "advancing ioslice beyond its length/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\io\io_slice\repr_windows.rs", Heuristic match: "too many active read locks on rwlock/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\sync\rwlock\futex.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-webpki-0.103.16\src\verify_cert.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\quic.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\client\hs.rs", Heuristic match: "a formatting trait implementation returned an error when the underlying stream did not/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\io\write.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\mpmc\array.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\message\inbound.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\collections\btree\navigate.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\vecbuf.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\unicode\unicode_data.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\pal\windows\time.rs", Heuristic match: "assertion failed: em.len() >= digest_len + 11e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\rsa\padding\pkcs1.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\hkdf.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\base64-0.22.1\src\engine\general_purpose\mod.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\suite_b\ecdsa\signing.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\aes_gcm\vaesclmulavx2.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\polyfill\slice\as_chunks.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\hash.rs", Heuristic match: "ownedsigneddatadatasignaturee:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\digest.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\digest\dynstate.rs", Heuristic match: "fatal runtime error: thread local panicked on drop, aborting /rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\time.rs", Heuristic match: "assertion failed: self.is_code_point_boundary(new_len)/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\wtf8\mod.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-webpki-0.103.16\src\time.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\algorithm.rs", Heuristic match: "cunsafe extern -fn( -> + : punycode{}.llvm./rust/deps\rustc-demangle-0.1.28\src\lib.rs", Heuristic match: "failed to parse rsa private key as either pkcs#1 or pkcs#8received plaintext buffer fulle:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\conn.rs", Heuristic match: "assertion failed: self.is_char_boundary(new_len)overflow in duration::new/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\time.rs", Heuristic match: "stub\src\files.rs", Heuristic match: "assertion failed: min_bits >= min_bitse:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\rsa\public_modulus.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\sort\stable\quicksort.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\jpeg-encoder-0.6.1\src\encoder.rs", Heuristic match: "hash table capacity overflowe:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\hashbrown-0.17.1\src\raw.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\polyfill\slice\as_chunks_mut.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\collections\btree\map.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\rsa\padding.rs", Heuristic match: "+/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\net\parser.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\tls13\key_schedule.rs", Heuristic match: "fromutf8errorbyteserrorinvalid utf-8zip64 footer indicates a new version is needed to extract this archive than the version that wrote itzip64 footer indicates more files on this disk than in the whole archiveinvalid central directory size or offset/rustc/", Heuristic match: "failed to parse private key as rsa, ecdsa, or eddsae:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\ring\tls12.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\jpeg-encoder-0.6.1\src\huffman.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\curve25519\ed25519\signing.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\client\handy.rs", Heuristic match: "tls13 expand type parameter t is too largee:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\tls13.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\panicking.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\mpmc\zero.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\net\display_buffer.rs", Heuristic match: "use of std::thread::current() is not possible after the thread's local data has been destroyed/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\thread\current.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\arithmetic\limbs\x86_64\mont.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\mpmc\list.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\base64-0.22.1\src\engine\general_purpose\decode_suffix.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\message\outbound.rs", Heuristic match: "oversized central directorysupport for multi-disk files is not implementedpassword required to decrypt filee:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\jpeg-encoder-0.6.1\src\writer.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\aes.rs", Heuristic match: "byte arrayoption valuenewtype structsequencemapenumunit variantnewtype varianttuple variantstruct variantunitu16u32u64i32u8a booleana charactera stringexplicit panice:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_core-1.0.229\src\de\m", Heuristic match: " at line e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\error.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\panicking.rs", Heuristic match: "--probe--upgrade--markerstub\src\main.rs", Heuristic match: "stub\src\h264.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\rt.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\deframer\mod.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\str\pattern.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\..\..\backtrace\src\symbolize\mod.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\fmt\mod.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\overlapping\base.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\env\windows.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\mpmc\mod.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zip-2.6.1\src\cp437.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\ffdhe_groups.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\thread_local\destructors\list.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zip-2.6.1\src\crc32.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\io\error\windows.rs", Pattern match: "https://docs.rs/getrandom#nodejs-es-module-support", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\base64-0.22.1\src\encode.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\pal\windows\mod.rs", Heuristic match: " { .. }, .. }.. { , ( attempted to finish a map with a partial entry/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\fmt\builders.rs", Pattern match: "https://docs.rs/rustls/latest/rustls/manual/_03_howto/index.html#unexpected-eof", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\wtf8.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\msgs\deframer\buffers.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\less_safe_key.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\hmac.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\ffi\os_str.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\process\mod.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\keys.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\curve25519\scalar.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\generic\packedpair.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\suite_b\ops\p384.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\collections\btree\map\entry.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\ring\tls13.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\chacha\ffi.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\sort\unstable\quicksort.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\mod.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\base64-0.22.1\src\engine\general_purpose\decode.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\str\mod.rs", Heuristic match: "assertion failed: leading_zero_bytes < size.len()e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\x509.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-webpki-0.103.16\src\subject_name\ip_address.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\io\buf_read.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\once.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\path.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\mpmc\waker.rs", Heuristic match: "tried to shrink to a larger capacity/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\raw_vec\mod.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\slice.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\fmt.rs", Heuristic match: "unicode extra field is too smalle:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\all\packedpair\mod.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\tls12.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rand_core-0.6.4\src\os.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\block-buffer-0.10.4\src\lib.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\rsa\public_key.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\all\twoway.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\env.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\process\windows.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\miniz_oxide-0.9.1\src\inflate\core.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\ser.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sync\once_lock.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\sys\paths\windows.rs", Heuristic match: "signing failede:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\ring\sign.rs", Heuristic match: "os_errordescriptioninternal_codeunknown_code/rust/deps\hashbrown-0.17.1\src\raw.rs", Heuristic match: "supported_algorithmsbitstringboolcertificatecertificateextensionscertificatetbscertificatecertrevocationlistcertrevocationlistextensioncrldistributionpointcommonnameinnercommonnameouterdistributionpointnameextensiongeneralnamerevocationreasonsignaturesigna", Heuristic match: "assertion failed: match track_edge_idx { leftorright::left(idx) => idx <= old_left_len, leftorright::right(idx) => idx <= right_len, }/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\alloc\src\collections\btree\node.rs", Heuristic match: "traffic updfinishedresumptionexporterres binderc e trafficc hs traffics hs trafficc ap traffics ap trafficexp masterres masterderivedech accept confirmationhrr ech accept confirmationclient_early_traffic_secretclient_handshake_traffic_secretserver_handshak", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-pki-types-1.15.1\src\server_name.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\panic_abort\src\lib.rs", Heuristic match: "sizelimitexhaustedparseinterrorkind/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\ops\function.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\limb.rs", Heuristic match: "zip64 extra-data field is the wrong lengthinvalid aes encryption strengthinvalid aes vendor versioninvalid aes vendoraes extra data field has an unsupported lengthinternal error: entered unreachable codee:\devtools\cargo\registry\src\index.crates.io-1949cf", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-webpki-0.103.16\src\x509.rs", Heuristic match: "e:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\client\client_conn.rs", Heuristic match: "/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\std\src\thread\id.rs", Heuristic match: ">=" (Indicator: "chacha"; Source: "sample.bin"), Found string "PskKeyExchangeModeUnknownExtensiontyppayloadKeyUpdateRequestSingleProtocolNameCertificateStatusTypeHpkeAeadAES_128_GCMAES_256_GCMCHACHA20_POLY_1305EXPORT_ONLY" (Indicator: "aes"; Source: "sample.bin"), Found string "PskKeyExchangeModeUnknownExtensiontyppayloadKeyUpdateRequestSingleProtocolNameCertificateStatusTypeHpkeAeadAES_128_GCMAES_256_GCMCHACHA20_POLY_1305EXPORT_ONLY" (Indicator: "chacha"; Source: "sample.bin"), Found string "AES-NI GCM module for x86_64, CRYPTOGAMS by " (Indicator: "aes"; Source: "sample.bin"), Found string "AES for Intel AES-NI, CRYPTOGAMS by " (Indicator: "aes"; Source: "sample.bin"), Found string "E:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\aes\ffi.rs" (Indicator: "aes"; Source: "sample.bin"), Found string "Invalid EOCD64: inconsistent lengthInvalid EOCD64: inconsistency with Locator dataEOCD64 Locator does not fit in fileE:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\base64-0.22.1\src\engine\mod.rs" (Indicator: "base64"; Source: "sample.bin"), Found string "failed to parse ECDSA private key as PKCS#8 or SEC1" (Indicator: "ecdsa"; Source: "sample.bin"), Found string "E:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\base64-0.22.1\src\engine\general_purpose\mod.rs" (Indicator: "base64"; Source: "sample.bin"), Found string "E:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\ec\suite_b\ecdsa\signing.rs" (Indicator: "ecdsa"; Source: "sample.bin"), Found string "E:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\aes_gcm\vaesclmulavx2.rs" (Indicator: "aes"; Source: "sample.bin"), Found string "ECDSA_P256_SHA256_ASN1ECDSA_P256_SHA256_FIXEDECDSA_P256_SHA384_ASN1ECDSA_P384_SHA256_ASN1ECDSA_P384_SHA384_ASN1ECDSA_P384_SHA384_FIXED" (Indicator: "ecdsa"; Source: "sample.bin"), Found string "failed to parse private key as RSA, ECDSA, or EdDSAE:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\ring\tls12.rs" (Indicator: "ecdsa"; Source: "sample.bin"), Found string "OutputLengthErrorEcdsaSigningKey" (Indicator: "ecdsa"; Source: "sample.bin"), Found string "E:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\base64-0.22.1\src\engine\general_purpose\decode_suffix.rs" (Indicator: "base64"; Source: "sample.bin"), Found string "E:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ring-0.17.14\src\aead\aes.rs" (Indicator: "aes"; Source: "sample.bin"), Found string "Vector Permutation AES for x86_64/SSSE3, Mike Hamburg (Stanford University)" (Indicator: "aes"; Source: "sample.bin"), Found string "base64: " (Indicator: "base64"; Source: "sample.bin")39:T9c3,Found reference to "SHA1SHA256SHA384SHA512SHA512_256/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\iter.rs" (Indicator: "SHA384"; Source: "sample.bin"), Found reference to "SHA1SHA256SHA384SHA512SHA512_256/rustc/b940084d7eb6a299eb4bfeb8e34901bc051e7ac4/library\core\src\slice\iter.rs" (Indicator: "SHA512"; Source: "sample.bin"), Found reference to "ClientHelloPayloadSignatureSchemeRSA_PKCS1_SHA1ECDSA_SHA1_LegacyRSA_PKCS1_SHA256ECDSA_NISTP256_SHA256RSA_PKCS1_SHA384ECDSA_NISTP384_SHA384RSA_PKCS1_SHA512ECDSA_NISTP521_SHA512RSA_PSS_SHA256RSA_PSS_SHA384RSA_PSS_SHA512ML_DSA_44ML_DSA_65ML_DSA_87" (Indicator: "SHA384"; Source: "sample.bin"), Found reference to "ClientHelloPayloadSignatureSchemeRSA_PKCS1_SHA1ECDSA_SHA1_LegacyRSA_PKCS1_SHA256ECDSA_NISTP256_SHA256RSA_PKCS1_SHA384ECDSA_NISTP384_SHA384RSA_PKCS1_SHA512ECDSA_NISTP521_SHA512RSA_PSS_SHA256RSA_PSS_SHA384RSA_PSS_SHA512ML_DSA_44ML_DSA_65ML_DSA_87" (Indicator: "SHA512"; Source: "sample.bin"), Found reference to "ECCurveTypeHpkeKemDHKEM_P256_HKDF_SHA256DHKEM_P384_HKDF_SHA384DHKEM_P521_HKDF_SHA512DHKEM_X25519_HKDF_SHA256DHKEM_X448_HKDF_SHA512 HpkeKem(0x" (Indicator: "HKDF"; Source: "sample.bin"), Found reference to "ECCurveTypeHpkeKemDHKEM_P256_HKDF_SHA256DHKEM_P384_HKDF_SHA384DHKEM_P521_HKDF_SHA512DHKEM_X25519_HKDF_SHA256DHKEM_X448_HKDF_SHA512 HpkeKem(0x" (Indicator: "SHA384"; Source: "sample.bin"), Found reference to "ECCurveTypeHpkeKemDHKEM_P256_HKDF_SHA256DHKEM_P384_HKDF_SHA384DHKEM_P521_HKDF_SHA512DHKEM_X25519_HKDF_SHA256DHKEM_X448_HKDF_SHA512 HpkeKem(0x" (Indicator: "SHA512"; Source: "sample.bin"), Found reference to "extensionsUnknownHpkeKdfHKDF_SHA256HKDF_SHA384HKDF_SHA512 HpkeKdf(0x" (Indicator: "HKDF"; Source: "sample.bin"), Found reference to "extensionsUnknownHpkeKdfHKDF_SHA256HKDF_SHA384HKDF_SHA512 HpkeKdf(0x" (Indicator: "SHA384"; Source: "sample.bin"), Found reference to "extensionsUnknownHpkeKdfHKDF_SHA256HKDF_SHA384HKDF_SHA512 HpkeKdf(0x" (Indicator: "SHA512"; Source: "sample.bin"), file/memory contains long string with (Indicator: "HMAC"; Source: "sample.bin"), Found reference to "ECDSA_P256_SHA256_ASN1ECDSA_P256_SHA256_FIXEDECDSA_P256_SHA384_ASN1ECDSA_P384_SHA256_ASN1ECDSA_P384_SHA384_ASN1ECDSA_P384_SHA384_FIXED" (Indicator: "SHA384"; Source: "sample.bin"), Found reference to "SHA512 block transform for x86_64, CRYPTOGAMS by " (Indicator: "SHA512"; Source: "sample.bin"), file/memory contains long string with (Indicator: "SHA384"; Source: "sample.bin")3a:T470,Found string "-----END -----CERTIFICATEPUBLIC KEYRSA PRIVATE KEYPRIVATE KEYEC PRIVATE KEYX509 CRLCERTIFICATE REQUESTECHCONFIG" (Indicator: "private key"; Source: "sample.bin"), Found string "-----END -----CERTIFICATEPUBLIC KEYRSA PRIVATE KEYPRIVATE KEYEC PRIVATE KEYX509 CRLCERTIFICATE REQUESTECHCONFIG" (Indicator: "public key"; Source: "sample.bin"), Found string "failed to parse ECDSA private key as PKCS#8 or SEC1" (Indicator: "private key"; Source: "sample.bin"), Found string "!failed to parse RSA private key: " (Indicator: "private key"; Source: "sample.bin"), Found string "failed to parse RSA private key as either PKCS#1 or PKCS#8received plaintext buffer fullE:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\conn.rs" (Indicator: "private key"; Source: "sample.bin"), Found string "%failed to parse Ed25519 private key: " (Indicator: "private key"; Source: "sample.bin"), Found string "failed to parse private key as RSA, ECDSA, or EdDSAE:\devtools\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\rustls-0.23.46\src\crypto\ring\tls12.rs" (Indicator: "private key"; Source: "sample.bin")30:["$","$Lc",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$33"}}],["$","$L35",null,{"initialData":{"schema_version":"1.0.17","sha256":"1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1794546747632,"unified_at":"2026-11-13T05:12:27.632Z","metadata":{"hashes":{"sha256":"1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f","sha1":"21755ce08a16f5613a2165605b5e911161bbde9a","md5":"5b3d81a9e5733d630ef7cf5d22d8c0d6"},"file_info":{"file_name":"1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f","file_type":["peexe","64bits","executable"],"file_type_id":"64-bit exe","file_size":1468416,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1794546730000,"last_seen":1794546730000,"last_multi_scan":1794546730000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":25},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":18},"sandbox_signatures":{"informative_count":21,"suspicious_count":4,"malicious_count":1,"total":26},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains ability to use Cryptographic classes"},{"type":"informative","value":"Contains CRYPTO related strings"},{"type":"suspicious","value":"YARA signature match - ChaCha20 encryption algorithm"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Hide Artifacts","attack_id":"T1564","attack_id_wiki":"https://attack.mitre.org/techniques/T1564","identifiers":[{"type":"informative","value":"Found virtual disk drive like strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Contains ability to retrieve file and directory information (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Contains references to network communication API (string)"},{"type":"informative","value":"Found potential IP address in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Persistence","technique":"Windows Service","attack_id":"T1543.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1543/003","identifiers":[{"type":"informative","value":"Contains ability to access device drivers"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"informative","value":"Found E-Mail address in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"informative","value":"Contains registry location strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Data Encoding","attack_id":"T1132","attack_id_wiki":"https://attack.mitre.org/techniques/T1132","identifiers":[{"type":"informative","value":"Contains ability to perform Base64 encoding/decoding"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Encrypted/Encoded File","attack_id":"T1027.013","attack_id_wiki":"https://attack.mitre.org/techniques/T1027/013","identifiers":[{"type":"suspicious","value":"YARA signature match – cryptographic algorithms"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Native API","attack_id":"T1106","attack_id_wiki":"https://attack.mitre.org/techniques/T1106","identifiers":[{"type":"informative","value":"Contains ability to execute an application (API string)"},{"type":"informative","value":"Contains ability to execute Windows APIs"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Extra Window Memory Injection","attack_id":"T1055.011","attack_id_wiki":"https://attack.mitre.org/techniques/T1055/011","identifiers":[{"type":"suspicious","value":"Found a string that may be used as part of an injection method"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Security Software Discovery","attack_id":"T1518.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1518/001","identifiers":[{"type":"suspicious","value":"Possibly checks for known debuggers/analysis tools"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Found registry location string related to processor"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Resource Development","technique":"Digital Certificates","attack_id":"T1588.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1588/004","identifiers":[{"type":"informative","value":"May contain SSL certificate"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Screen Capture","attack_id":"T1113","attack_id_wiki":"https://attack.mitre.org/techniques/T1113","identifiers":[{"type":"informative","value":"Able to capture screen (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Impact","technique":"Data Encrypted for Impact","attack_id":"T1486","attack_id_wiki":"https://attack.mitre.org/techniques/T1486","identifiers":[{"type":"informative","value":"Contains reference to cryptographic keys"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"suspicious","category":"Pattern Matching","name":"YARA signature match - ChaCha20 encryption algorithm","description":"YARA signature for ChaCha20 256-bit key algorithm matched on file \"sample.bin\", YARA signature for ChaCha20 128-bit key algorithm matched on file \"sample.bin\"","origin":"Static Analysis","mitre_attack_id":"T1027","id":"yara-44","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Pattern Matching","name":"YARA signature match – cryptographic algorithms","description":"YARA signature matched on Chacha20 instruction used in file \"sample.bin\"","origin":"Static Analysis","mitre_attack_id":"T1027.013","id":"yara-155","sources":[{"report_type":"qsp","report_id":""}]},{"level":"malicious","category":"External Systems","name":"CrowdStrike ML for Portable Executable (On Sensor) detected file with bottom confidence","description":"\"Portable Executable (On Sensor) Model\" detected file as \"dirty\" with \"bottom\" confidence","origin":"Static Analysis","id":"mlmodel-15","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains artifacts from Rust programming language","description":"$36","origin":"sample.bin","id":"string-943","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found E-Mail address in binary/memory","description":"Pattern match: \"appro@openssl.org\", Pattern match: \"p@jn.js\"","origin":"sample.bin","mitre_attack_id":"T1114","id":"string-63","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to execute an application (API string)","description":"Found reference to API \"ShellExecute: \" (Indicator: \"ShellExecute\"; Source: \"sample.bin\"), Found reference to API \"ShellExecuteEx: \" (Indicator: \"ShellExecute\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-240","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains registry location strings","description":"\"HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0ProcessorNameStringunknown GPUSYSTEM\\CurrentControlSet\\Control\\Class\\{4d36e968-e325-11ce-bfc1-08002be10318}\" in Source: sample.bin, \"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersionProductNameCurrentBuildWindows 10Windows 11\" in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1012","id":"string-120","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to execute Windows APIs","description":"Found reference to API (Indicator: \"SetThreadDescription\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-101","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$37","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains references to network communication API (string)","description":"Found reference to API \"smsinvalid IP address syntaxinvalid IPv4 address syntaxinvalid IPv6 address syntaxinvalid socket address syntaxinvalid IPv4 socket address syntaxinvalid IPv6 socket address syntax\" (Indicator: \" socket \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-899","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://docs.rs\"","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"\"1.0.0.0\"","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-14","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"$38","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Able to capture screen (API string)","description":"Found reference to API \"hvnc: BitBlt unavailable, compositing\" (Indicator: \"BitBlt\"; Source: \"sample.bin\"), Found reference to API \"hvnc: CreateDC DISPLAY failed\" (Indicator: \"CreateDC\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1113","id":"string-78","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve file and directory information (API string)","description":"Found reference to API \"GetTempPath2W\" (Indicator: \"GetTempPath\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-207","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"Found string \"specified file not found in archiveprovided password is incorrect\" (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"master secretextended master secretclient finishedserver finishedassertion failed: context.len() <= 0xffff\" (Indicator: \"secret\"; Source: \"sample.bin\"), Found string \"AcceptedTLS 1.2 connections do not support traffic secret updates\" (Indicator: \"secret\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to use Cryptographic classes","description":"$39","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-138","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to perform Base64 encoding/decoding","description":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; Source: \"sample.bin\"), Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1132","id":"string-338","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Found virtual disk drive like strings","description":"Found string - \\\\.\\NUL; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1564","id":"string-145","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Installation/Persistence","name":"Found a string that may be used as part of an injection method","description":"\"Shell_TrayWndProgmanWorkerWstub\\src\\capture.rs\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method) in Source: sample.bin, \"Shell_TrayWndProgmanWorkerWstub\\src\\capture.rs\" (Program manager) in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1055.011","id":"string-4","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Contains reference to cryptographic keys","description":"$3a","origin":"sample.bin","mitre_attack_id":"T1486","id":"string-280","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Found registry location string related to processor","description":"Observed string: \"HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0ProcessorNameStringunknown GPUSYSTEM\\CurrentControlSet\\Control\\Class\\{4d36e968-e325-11ce-bfc1-08002be10318}\" (Indicator: \"hardware\\description\\system\\centralprocessor\") in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-351","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Ransomware/Banking","name":"Contains ability to create/switch the desktop (API string)","description":"Found reference to API \"hvnc: desktop shownhvnc: shell did not starthvnc: shell already uphvnc: CreateDesktop failedER155\" (Indicator: \"CreateDesktop\"; Source: \"sample.bin\")","origin":"sample.bin","id":"string-541","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"May contain SSL certificate","description":"\"-----BEGIN CERTIFICATE-----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\nOwytfEgZJls53qVKyS9HxgILyg==\n-----END CERTIFICATE-----\n\" (Indicator: \"----begin certificate----\") in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1588.004","id":"string-574","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to access device drivers","description":"Found string \"\\Device\\NamedPipe\\\" (Indicator: \"\\Device\\\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1543.003","id":"string-474","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"Possibly checks for known debuggers/analysis tools","description":"Found string \"dbghelp.dll\" (Indicator: \"dbghelp.dll\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1518.001","id":"string-5","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 2c:[["$","title","0",{"children":"Malicious Sample 1b7113956662… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 1b7113956662…. Threat score 100/100. 0/25 AV engines flagged this file. 1 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f"}],["$","meta","4",{"property":"og:title","content":"Malicious Sample 1b7113956662… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 1b7113956662…. Threat score 100/100. 0/25 AV engines flagged this file. 1 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/1b7113956662af02d60dda4beaf6cc12e245341c06fb7ebc2150bd1299fb6a6f"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Sample 1b7113956662… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 1b7113956662…. Threat score 100/100. 0/25 AV engines flagged this file. 1 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L3b","11",{}]] 32:null