26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 3d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4c3,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_90% Sample 32ed61fb48b4… — Score 62/100 — Hybrid Analysis","description":"Malicious verdict for sample 32ed61fb48b4…. Malware family: Win/malicious_confidence_90%. Threat score 62/100. 4/27 AV engines flagged this file. 1 malicious and 11 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77","keywords":["Malicious","Win/malicious_confidence_90%","malware analysis","sandbox report","threat intelligence","32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77"],"about":{"@type":"SoftwareApplication","name":"SetupX64.exe","applicationCategory":["peexe","64bits","executable"],"identifier":"32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77","additionalType":"Malicious sample"},"threatScore":62,"malwareFamily":"Win/malicious_confidence_90%","antivirusDetections":{"malicious":4,"total":27},"behavioralIndicators":{"malicious":1,"suspicious":11},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T44b,Found reference to API "WaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to API "SetWaitableTimer" (Indicator: "SetWaitableTimer"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") file/memory contains long string with (Indicator: "WaitForSingleObject"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") file/memory contains long string with (Indicator: "GetSystemTimeAsFileTime"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") file/memory contains long string with (Indicator: "SetWaitableTimer"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to API "syscall.WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin")28:T406,Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to API "LoadLibraryW" (Indicator: "LoadLibrary"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") file/memory contains long string with (Indicator: "FreeLibrary"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") file/memory contains long string with (Indicator: "LoadLibrary"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to API "syscall.FreeLibrary" (Indicator: "FreeLibrary"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to API "syscall.LoadLibrary" (Indicator: "LoadLibrary"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to API "syscall._LoadLibrary" (Indicator: "LoadLibrary"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin")29:T418,Found reference to "forHKDF" (Indicator: "HKDF"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to "*hmac.HMAC" (Indicator: "HMAC"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") file/memory contains long string with (Indicator: "HMAC"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to "crypto/internal/fips140/hmac.(*HMAC).Sum" (Indicator: "HMAC"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to "crypto/internal/fips140/hmac.(*HMAC).Write" (Indicator: "HMAC"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to "crypto/internal/fips140/hmac.(*HMAC).BlockSize" (Indicator: "HMAC"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found reference to "crypto/internal/fips140/hmac.(*HMAC).Reset" (Indicator: "HMAC"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin")2a:T5d8,"m=) p->status=releasep: m= sysmonwait= preemptoff=cas64 failed m->gsignal=-byte limitruntime: sp=abi mismatchwrong timerstrace buffershort buffer152587890625762939453125OpenServiceWRevertToSelfCreateEventWGetConsoleCPUnlockFileExVirtualQueryNtCreateFilenot pollablegotypesaliashttpmuxgo121multipathtcptlsunsafeekmunknown sizelevel 3 resetsrmount errortimer expiredexchange fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbynamewakeableSleepprofMemActiveprofMemFuturetraceStackTabexecRInternaltestRInternalGC sweep waitsynctest.Waitout of memory is nil, not value method heap metadata span.base()=bad flushGen created at: , not pointer != sweepgen MB globals, work.nproc= work.nwait= nStackRoots= flushedWork double unlock s.spanclass= MB) workers=min too large-byte block (runtime: val=runtime: seq=fatal error: idlethreads= syscalltick=load64 failedxadd6" (Indicator: "CertOpenStore"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "4 failedxchg64 failednil stackbase}sched={pc:, gp->status= pluginpath= : unknown pc called from runtime: pid=#failfipscast3814697265625GetTempPath2WModule32NextWRtlGetVersionRegDeleteKeyWRegEnumValueWcrypto/subtlegocacheverifyinstallgoroothtml/templatetlsmaxrsasizeHMAC-SHA2-256file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #asynctimerchanuserArenaStateGC (dedicated)read mem statsupdatemaxprocsgcstoptheworldprofstackdepthtraceallocfreeGC assist waitfinalizer waitsync.Cond.Waits.allocCount= Value of type nil elem type! to finalizer scan: class L finalizers + GC worker initruntime: full=runtime: want=MB; allocated allspans arrayscavenge indexRtlGetVersion" (Indicator: "CertCloseStore"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "4 failedxchg64 failednil stackbase}sched={pc:, gp->status= pluginpath= : unknown pc called from runtime: pid=#failfipscast3814697265625GetTempPath2WModule32NextWRtlGetVersionRegDeleteKeyWRegEnumValueWcrypto/subtlegocacheverifyinstallgoroothtml/templatetlsmaxrsasizeHMAC-SHA2-256file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #asynctimerchanuserArenaStateGC (dedicated)read mem statsupdatemaxprocsgcstoptheworldprofstackdepthtraceallocfreeGC assist waitfinalizer waitsync.Cond.Waits.allocCount= Value of type nil elem type! to finalizer scan: class L finalizers + GC worker initruntime: full=runtime: want=MB; allocated allspans arrayscavenge indexRtlGetVersion" (Indicator: "CryptGenRandom"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "valid skip valueruntime: range = {index out of rangeruntime: gp: gp=runtime: getg: g=forEachP: not done in async preemptbad manualFreeListruntime: textAddr frames elided..., locked to thread, synctest bubble runtime.semacreateruntime.semawakeupreflect.Value.Elemreflect.Value.Type298023223876953125GetSidSubAuthorityQueryServiceStatusGetComputerNameExWGetModuleFileNameWuse of closed filex509negativeserialT+00:07.100 retractT+00:09.100 standbybad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdWaitForSingleObjectreflect.Value.Floatreflect.Value.IsNilafter array elementstrongFromWeakQueueGC mark terminationsync.WaitGroup.Waitchan send (durable)wait for debug callpanicwrap: no ( in panicwrap: no ) in called using nil *unknown wait reasonnotesleep not on g0GC work not flushed/gc/scan/heap:bytes/gc/heap/goal:bytes/gc/heap/live:bytesmarkroot: bad indexnwait > work.nprocs, gp->atomicstatus=mark" (Indicator: "CryptReleaseContext"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionfile already existsfile does not existfile already closedreflect.Value.Bytesreflect.Value.Fieldreflect.Value.Index14901161193847656257450580596923828125SetTokenInformationGetOverlappedResultMultiByteToWideCharWSADuplicateSocketWembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersT+00:00.000 power-oninvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrsjson: error calling floating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed" (Indicator: "CertOpenSystemStoreW"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionfile already existsfile does not existfile already closedreflect.Value.Bytesreflect.Value.Fieldreflect.Value.Index14901161193847656257450580596923828125SetTokenInformationGetOverlappedResultMultiByteToWideCharWSADuplicateSocketWembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersT+00:00.000 power-oninvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrsjson: error calling floating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed" (Indicator: "CryptAcquireContextW"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference ".%02d %4d %sdevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableWunexpected map key typeindex out of range [%x]ReadMemStatsSlow (test)chan receive (nil chan)garbage collection scanmakechan: bad alignmentclose of closed channelunlock of unlocked lock) must be a power of 2system huge page size (runtime: s.allocCount= s.allocCount > s.nelems/gc/heap/allocs:objectsruntime: internal errorwork.nwait > work.nprocleft over markroot jobsgcDrain phase incorrectMB during sweep; swept bad profile stack countruntime: netpoll failedpanic during preemptoffnanotime returning zerofatal: morestack on g0the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCallbytes.Buffer: too largereflect.Value.Interfacereflect.Value.NumMet" (Indicator: "CertGetCertificateChain"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "hod23283064365386962890625" missing CPU supportGetSidSubAuthorityCountImpersonateLoggedOnUserDestroyEnvironmentBlockexit hook invoked panicpattern bits too long: connection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWjson: unsupported type: invalid argument to Intntracecheckstackownershiphash of unhashable type span has no free objectsruntime: found obj at *(runtime: VirtualFree of /cgo/go-to-c-calls:calls/gc/heap/objects:objects/sched/latencies:secondsqueuefinalizer during GCcheckfinalizers: queue: update during transitionruntime: markroot index can't scan our own stackgcDrainN phase incorrectpageAlloc: out of memoryruntime: p.searchAddr = range partially overlaps [recovered, repanicked]stack trace unavailablebindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup" (Indicator: "CertFreeCertificateChain"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin"), Found api reference "lock: lock countbad system huge page sizearena already initialized to unused region of span bytes failed with errno=runtime: VirtualAlloc of /sched/gomaxprocs:threadsmissing type in finalizerremaining pointer buffersslice bounds out of range_cgo_thread_start missingallgadd: bad status Gidleruntime: program exceeds startm: p has runnable gsstoplockedm: not runnablereleasep: invalid p statecheckdead: no p for timercheckdead: no m for timerunknown sigtramp callbackunexpected fault address missing stack in newstackbad status in shrinkstackmissing traceGCSweepStarttesting simulated failure2910383045673370361328125GODEBUG: can not enable "GetSidIdentifierAuthorityinconsistent poll.fdMutexExpandEnvironmentStringsWhash of unhashable type: invalid request descriptorno CSI structure availablerequired key not availableno message of desired typename not unique on networkCertFreeCertificateContextGetFileInformationByHandlePostQueuedCompletionStatusSetFileInformationByHandleencountered a cycle via %sinvalid argument to Int" (Indicator: "CertFreeCertificateContext"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "63ninvalid argument to Int31nall goroutines stack traceGC background sweeper waitcall from unknown functionnotewakeup - double wakeuppersistentalloc: size == 0/gc/cycles/total:gc-cyclesbad type kind in finalizernegative idle mark workersuse of invalid sweepLockerruntime: bad span s.state=forEachP: P did not run fnwakep: negative nmspinningstartlockedm: locked to meinittask with no functionscorrupted semaphore ticketout of memory (stackalloc)shrinking stack in libcallruntime: pcHeader: magic= traceRegion: out of memory using unaddressable valueunknown ABI parameter kind1455191522836685180664062572759576141834259033203125RtlNtStatusToDosErrorNoTebchannel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreafter object key:value pairPageCachePagesLeaked (test)makechan: size out of rangeG waiting list is corruptedM structure uses sizeclass runtime" (Indicator: "CertEnumCertificatesInStore"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for reflect.Value.UnsafePointer is not assignable to type 363797880709171295166015625abi.NewName: tag too long: httpservecontentkeepheadersfile descriptor in bad statedestination address requiredprotocol driver not attachedCertCreateCertificateContext!#$" (Indicator: "CertCreateCertificateContext"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "ting 'l')fmt: unknown base; can't happenslice bounds out of range [:%x]slice bounds out of range [%x:]call from within the Go runtimeinternal error - misuse of itab) not in usable address space: runtime: cannot allocate memorycheckmark found unmarked objectruntime: failed to commit pages/memory/classes/heap/free:bytes/memory/classes/os-stacks:bytespacer: sweep done at heap size non in-use span in unswept listruntime.Pinner: argument is nilcasgstatus: bad incoming valuesresetspinning: not a spinning mruntime: profBuf already closedruntime: split stack overflow: ...additional frames elided...unsafe.String: len out of rangereflect: Len of non-array type 11368683772161602973937988281255684341886080801486968994140625crypto/aes: len(dst) < len(src)resource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyin literal false (expecting 'a')in literal false (expecting 'l')in literal false (expecting 's')in literal fals" (Indicator: "CertAddCertificateContextToStore"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "ting 'l')fmt: unknown base; can't happenslice bounds out of range [:%x]slice bounds out of range [%x:]call from within the Go runtimeinternal error - misuse of itab) not in usable address space: runtime: cannot allocate memorycheckmark found unmarked objectruntime: failed to commit pages/memory/classes/heap/free:bytes/memory/classes/os-stacks:bytespacer: sweep done at heap size non in-use span in unswept listruntime.Pinner: argument is nilcasgstatus: bad incoming valuesresetspinning: not a spinning mruntime: profBuf already closedruntime: split stack overflow: ...additional frames elided...unsafe.String: len out of rangereflect: Len of non-array type 11368683772161602973937988281255684341886080801486968994140625crypto/aes: len(dst) < len(src)resource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyin literal false (expecting 'a')in literal false (expecting 'l')in literal false (expecting 's')in literal fals" (Indicator: "CertVerifyCertificateChainPolicy"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "bad g0 stackself-preempt [recovered]bad recoverybad g statusentersyscallwirep: p->m=) p->status=releasep: m= sysmonwait= preemptoff=cas64 failed m->gsignal=-byte limitruntime: sp=abi mismatchwrong timerstrace buffershort buffer152587890625762939453125OpenServiceWRevertToSelfCreateEventWGetConsoleCPUnlockFileExVirtualQueryNtCreateFilenot pollablegotypesaliashttpmuxgo121multipathtcptlsunsafeekmunknown sizelevel 3 resetsrmount errortimer expiredexchange fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbynamewakeableSleepprofMemActiveprofMemFuturetraceStackTabexecRInternaltestRInternalGC sweep waitsynctest.Waitout of memory is nil, not value method heap metadata span.base()=bad flushGen created at: , not pointer != sweepgen MB globals, work.nproc= work.nwait= nStackRoots= flushedWork double unlock s.spanclass= MB) workers=min too large-byte block (runtime: val=runtime: seq=fatal error: idlethreads= syscalltick=load64 failedxadd" (Indicator: "CertOpenStore"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "valid skip valueruntime: range = {index out of rangeruntime: gp: gp=runtime: getg: g=forEachP: not done in async preemptbad manualFreeListruntime: textAddr frames elided..., locked to thread, synctest bubble runtime.semacreateruntime.semawakeupreflect.Value.Elemreflect.Value.Type298023223876953125GetSidSubAuthorityQueryServiceStatusGetComputerNameExWGetModuleFileNameWuse of closed filex509negativeserialT+00:07.100 retractT+00:09.100 standbybad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdWaitForSingleObjectreflect.Value.Floatreflect.Value.IsNilafter array elementstrongFromWeakQueueGC mark terminationsync.WaitGroup.Waitchan send (durable)wait for debug callpanicwrap: no ( in panicwrap: no ) in called using nil *unknown wait reasonnotesleep not on g0GC work not flushed/gc/scan/heap:bytes/gc/heap/goal:bytes/gc/heap/live:bytesmarkroot: bad indexnwait > work.nprocs, gp->atomicstatus=mar" (Indicator: "CryptReleaseContext"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionfile already existsfile does not existfile already closedreflect.Value.Bytesreflect.Value.Fieldreflect.Value.Index14901161193847656257450580596923828125SetTokenInformationGetOverlappedResultMultiByteToWideCharWSADuplicateSocketWembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersT+00:00.000 power-oninvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrsjson: error calling floating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushe" (Indicator: "CertOpenSystemStoreW"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionfile already existsfile does not existfile already closedreflect.Value.Bytesreflect.Value.Fieldreflect.Value.Index14901161193847656257450580596923828125SetTokenInformationGetOverlappedResultMultiByteToWideCharWSADuplicateSocketWembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersT+00:00.000 power-oninvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrsjson: error calling floating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushe" (Indicator: "CryptAcquireContextW"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference ".%02d %4d %sdevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableWunexpected map key typeindex out of range [%x]ReadMemStatsSlow (test)chan receive (nil chan)garbage collection scanmakechan: bad alignmentclose of closed channelunlock of unlocked lock) must be a power of 2system huge page size (runtime: s.allocCount= s.allocCount > s.nelems/gc/heap/allocs:objectsruntime: internal errorwork.nwait > work.nprocleft over markroot jobsgcDrain phase incorrectMB during sweep; swept bad profile stack countruntime: netpoll failedpanic during preemptoffnanotime returning zerofatal: morestack on g0the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCallbytes.Buffer: too largereflect.Value.Interfacereflect.Value.NumMe" (Indicator: "CertGetCertificateChain"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "hod23283064365386962890625" missing CPU supportGetSidSubAuthorityCountImpersonateLoggedOnUserDestroyEnvironmentBlockexit hook invoked panicpattern bits too long: connection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWjson: unsupported type: invalid argument to Intntracecheckstackownershiphash of unhashable type span has no free objectsruntime: found obj at *(runtime: VirtualFree of /cgo/go-to-c-calls:calls/gc/heap/objects:objects/sched/latencies:secondsqueuefinalizer during GCcheckfinalizers: queue: update during transitionruntime: markroot index can't scan our own stackgcDrainN phase incorrectpageAlloc: out of memoryruntime: p.searchAddr = range partially overlaps [recovered, repanicked]stack trace unavailablebindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgrou" (Indicator: "CertFreeCertificateChain"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin"), Found api reference "lock: lock countbad system huge page sizearena already initialized to unused region of span bytes failed with errno=runtime: VirtualAlloc of /sched/gomaxprocs:threadsmissing type in finalizerremaining pointer buffersslice bounds out of range_cgo_thread_start missingallgadd: bad status Gidleruntime: program exceeds startm: p has runnable gsstoplockedm: not runnablereleasep: invalid p statecheckdead: no p for timercheckdead: no m for timerunknown sigtramp callbackunexpected fault address missing stack in newstackbad status in shrinkstackmissing traceGCSweepStarttesting simulated failure2910383045673370361328125GODEBUG: can not enable "GetSidIdentifierAuthorityinconsistent poll.fdMutexExpandEnvironmentStringsWhash of unhashable type: invalid request descriptorno CSI structure availablerequired key not availableno message of desired typename not unique on networkCertFreeCertificateContextGetFileInformationByHandlePostQueuedCompletionStatusSetFileInformationByHandleencountered a cycle via %sinvalid argument to In" (Indicator: "CertFreeCertificateContext"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for reflect.Value.UnsafePointer is not assignable to type 363797880709171295166015625abi.NewName: tag too long: httpservecontentkeepheadersfile descriptor in bad statedestination address requiredprotocol driver not attachedCertCreateCertificateContext!#" (Indicator: "CertCreateCertificateContext"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "ting 'l')fmt: unknown base; can't happenslice bounds out of range [:%x]slice bounds out of range [%x:]call from within the Go runtimeinternal error - misuse of itab) not in usable address space: runtime: cannot allocate memorycheckmark found unmarked objectruntime: failed to commit pages/memory/classes/heap/free:bytes/memory/classes/os-stacks:bytespacer: sweep done at heap size non in-use span in unswept listruntime.Pinner: argument is nilcasgstatus: bad incoming valuesresetspinning: not a spinning mruntime: profBuf already closedruntime: split stack overflow: ...additional frames elided...unsafe.String: len out of rangereflect: Len of non-array type 11368683772161602973937988281255684341886080801486968994140625crypto/aes: len(dst) < len(src)resource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyin literal false (expecting 'a')in literal false (expecting 'l')in literal false (expecting 's')in literal fal" (Indicator: "CertAddCertificateContextToStore"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin") Found api reference "ting 'l')fmt: unknown base; can't happenslice bounds out of range [:%x]slice bounds out of range [%x:]call from within the Go runtimeinternal error - misuse of itab) not in usable address space: runtime: cannot allocate memorycheckmark found unmarked objectruntime: failed to commit pages/memory/classes/heap/free:bytes/memory/classes/os-stacks:bytespacer: sweep done at heap size non in-use span in unswept listruntime.Pinner: argument is nilcasgstatus: bad incoming valuesresetspinning: not a spinning mruntime: profBuf already closedruntime: split stack overflow: ...additional frames elided...unsafe.String: len out of rangereflect: Len of non-array type 11368683772161602973937988281255684341886080801486968994140625crypto/aes: len(dst) < len(src)resource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyin literal false (expecting 'a')in literal false (expecting 'l')in literal false (expecting 's')in literal fal" (Indicator: "CertVerifyCertificateChainPolicy"; File: "32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin")2c:T15c3,Observed string: "crypto/rand" (Indicator: "crypto/rand") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin Observed string: "crypto/internal/impl" (Indicator: "crypto/internal/impl") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin Observed string: "crypto/internal/fips140/aes" (Indicator: "crypto/internal/fips140/aes") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin Observed string: "crypto/internal/fips140/drbg" (Indicator: "crypto/internal/fips140/drbg") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin Observed string: "crypto/internal/fips140/sha3" (Indicator: "crypto/internal/fips140/sha3") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin Observed string: "crypto/internal/fips140/hmac" (Indicator: "crypto/internal/fips140/hmac") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin Observed string: "crypto/internal/fips140/sha256" (Indicator: "crypto/internal/fips140/sha256") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin Observed string: "crypto/internal/fips140/sha512" (Indicator: "crypto/internal/fips140/sha512") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin Observed string: "ingForSuspendG with non-isWaitingForSuspendG wait reasonreflect: reflect.Value.UnsafePointer on an invalid notinheap pointercrypto/hmac: hash generation function does not produce unique valuesruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?runtime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)" (Indicator: "ingForSuspendG with non-isWaitingForSuspendG wait reasonreflect: reflect.Value.UnsafePointer on an invalid notinheap pointercrypto/hmac: hash generation function does not produce unique valuesruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?runtime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: ": %druntime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimecrypto/rand: failed to read random data (see https://go.dev/issue/66821):" (Indicator: ": %druntime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimecrypto/rand: failed to read random data (see https://go.dev/issue/66821):") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/rand.fatal" (Indicator: "crypto/rand.fatal") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/sysrand.fatal" (Indicator: "crypto/internal/sysrand.fatal") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/fips140deps/cpu.init" (Indicator: "crypto/internal/fips140deps/cpu.init") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/impl.Register" (Indicator: "crypto/internal/impl.Register") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "type:.eq.crypto/internal/impl.implementation" (Indicator: "type:.eq.crypto/internal/impl.implementation") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "type:.eq.crypto/internal/fips140/sha256.Digest" (Indicator: "type:.eq.crypto/internal/fips140/sha256.Digest") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "type:.eq.crypto/internal/fips140/sha3.Digest" (Indicator: "type:.eq.crypto/internal/fips140/sha3.Digest") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/sysrand.warnBlocked" (Indicator: "crypto/internal/sysrand.warnBlocked") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/sysrand.Read" (Indicator: "crypto/internal/sysrand.Read") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/sysrand.read" (Indicator: "crypto/internal/sysrand.read") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/sysrand.Read.deferwrap1" (Indicator: "crypto/internal/sysrand.Read.deferwrap1") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/entropy.Depleted" (Indicator: "crypto/internal/entropy.Depleted") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/fips140only.init" (Indicator: "crypto/internal/fips140only.init") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/internal/boring/sig.StandardCrypto" (Indicator: "crypto/internal/boring/sig.StandardCrypto") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin, Observed string: "crypto/rand.init.0" (Indicator: "crypto/rand.init.0") in Source: 32ed61fb48b4d1e3fa7928f113b30f14d81f9e093e80c0f89b33d2a887d18f77.bin2d:T24a4,Found XOR loop in file "sample.bin" at offset 95058; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1004248; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1122059; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1360273; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1371839; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1382351; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1384875; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1394971; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1428251; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1441451; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1457371; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1458411; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1462059; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1473307; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1480363; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1481307; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1509483; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1525915; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1538203; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1551835; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1559339; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1567403; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1569387; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1579883; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1592667; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1597739; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1623595; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1632795; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1642779; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1664923; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1666587; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1671531; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1672363; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1683947; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1684587; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1686123; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1692891; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1693227; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1718891; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1726043; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1735595; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1740523; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1745579; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1756635; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1775211; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1790699; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1859819; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1873579; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1879067; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1885867; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1888888; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1906667; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1911019; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1919403; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1922859; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1939371; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1944923; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1949931; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1950555; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1978203; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2031211; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2040043; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2044843; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2057003; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2058411; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2058907; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2074587; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2078747; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2109035; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2120987; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2169691; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2190811; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2193526; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2220364; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2230059; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2247451; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2262059; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2295771; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2306155; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2697009; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 3195638; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1302278; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1608180; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 2761778; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 957784; code bytes = 30040e Found XOR loop in file "sample.bin" at offset 191670; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 227861; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 227998; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 228057; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 228186; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 229481; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 229841; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 230241; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 232403; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 254993; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 275120; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 418309; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 419005; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 419646; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 430025; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1011792; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1260920; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1301493; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1327876; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1350097; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1391825; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1411189; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1441738; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1467182; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1512650; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1606714; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1606858; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1668725; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1866926; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1888314; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1889210; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1918878; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2064058; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2167802; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2193882; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2207162; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2235782; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2295914; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2536500; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2829452; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2858316; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 3126052; code bytes = 80302e:T775," tE!\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a33c99fb38f167b970e0ac2"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"