34:"SampleDetailWrapper" 35:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$34"] 3b:I[27201,["$1","$2","$3","$4","$5"],"IconMark"] 33:T450,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Sample 5fff76f05020… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 5fff76f05020…. Threat score 100/100. 0/28 AV engines flagged this file. 1 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/5fff76f050205e3d8c5be097e9e3bef61b80869657d1460f808f09ad7c02a23d","keywords":["Malicious","malware analysis","sandbox report","threat intelligence","5fff76f050205e3d8c5be097e9e3bef61b80869657d1460f808f09ad7c02a23d"],"about":{"@type":"SoftwareApplication","name":"phoenix_identity_provisioner-69e6cf62c5d4df6a.exe","applicationCategory":["peexe","64bits","executable"],"identifier":"5fff76f050205e3d8c5be097e9e3bef61b80869657d1460f808f09ad7c02a23d","additionalType":"Malicious sample"},"threatScore":100,"antivirusDetections":{"malicious":0,"total":28},"behavioralIndicators":{"malicious":1,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}36:Teeb,Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\raw_vec\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "capacity overflow/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "assertion failed: !s.contains('\n')/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\formatters\junit.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\char\methods.rs" (Indicator: "/rustc/"; Source: "sample.bin"), file/memory contains long string with (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\net\display_buffer.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\error\repr_bitpacked.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "advancing IoSlice beyond its length/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\io\io_slice\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\net\socket_addr.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\vec\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "StaticTestFn(..)StaticBenchFn(..)StaticBenchAsTestFn(..)DynTestFn(..)DynBenchFn(..)DynBenchAsTestFn(..)a Display implementation returned an error unexpectedly/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\string.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\boxed.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "assertion failed: idx < CAPACITY/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\collections\btree\node.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\bignum.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "1 element in sequenceos stringanything at all/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\non_null.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\..\..\backtrace\src\symbolize\gimli\lru.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "a formatting trait implementation returned an error when the underlying stream did not/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\ffi\os_str.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace. \" (Indicator: "rust_backtrace"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\io\error\windows.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\pal\windows\winsock.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string " { , : { , (( attempted to format a map value before its key/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\fmt\builders.rs" (Indicator: "/rustc/"; Source: "sample.bin")37:T208e,Found reference to API (Indicator: "GetSystemTimePreciseAsFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteFileW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileAttributesW"; Source: "sample.bin"), Found reference to API (Indicator: "GetEnvironmentVariableW"; Source: "sample.bin"), Found reference to API (Indicator: "GetExitCodeProcess"; Source: "sample.bin"), Found reference to API (Indicator: "FlushFileBuffers"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileSizeEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "SetHandleInformation"; Source: "sample.bin"), Found reference to API (Indicator: "CreateDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleOutputCP"; Source: "sample.bin"), Found reference to API (Indicator: "Module32FirstW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateThread"; Source: "sample.bin"), Found reference to API (Indicator: "TlsGetValue"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleA"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteProcThreadAttributeList"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcessId"; Source: "sample.bin"), Found reference to API (Indicator: "DeviceIoControl"; Source: "sample.bin"), Found reference to API (Indicator: "LockFileEx"; Source: "sample.bin"), Found reference to API (Indicator: "FormatMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileAttributesW"; Source: "sample.bin"), Found reference to API (Indicator: "HeapAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "RtlVirtualUnwind"; Source: "sample.bin"), Found reference to API (Indicator: "CopyFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "HeapFree"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemInfo"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThread"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleMode"; Source: "sample.bin"), Found reference to API (Indicator: "CreateHardLinkW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateToolhelp32Snapshot"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcessHeap"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcAddress"; Source: "sample.bin"), Found reference to API (Indicator: "RaiseException"; Source: "sample.bin"), Found reference to API (Indicator: "FindFirstFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileW"; Source: "sample.bin"), Found reference to API (Indicator: "ReadFileEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcessId"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleScreenBufferInfo"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempPathW"; Source: "sample.bin"), Found reference to API (Indicator: "LeaveCriticalSection"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceFrequency"; Source: "sample.bin"), Found reference to API (Indicator: "CreateSymbolicLinkW"; Source: "sample.bin"), Found reference to API (Indicator: "EnterCriticalSection"; Source: "sample.bin"), Found reference to API (Indicator: "RemoveDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "FindClose"; Source: "sample.bin"), Found reference to API (Indicator: "SetCurrentDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "SetWaitableTimer"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeProcThreadAttributeList"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileInformationByHandleEx"; Source: "sample.bin"), Found reference to API (Indicator: "ReadConsoleW"; Source: "sample.bin"), Found reference to API (Indicator: "DuplicateHandle"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteCriticalSection"; Source: "sample.bin"), Found reference to API (Indicator: "SleepEx"; Source: "sample.bin"), Found reference to API (Indicator: "ExitProcess"; Source: "sample.bin"), Found reference to API (Indicator: "SetConsoleTextAttribute"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileMappingA"; Source: "sample.bin"), Found reference to API (Indicator: "MapViewOfFile"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThreadId"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileType"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcess"; Source: "sample.bin"), Found reference to API (Indicator: "SetEnvironmentVariableW"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadDescription"; Source: "sample.bin"), Found reference to API (Indicator: "TlsAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeCriticalSection"; Source: "sample.bin"), Found reference to API (Indicator: "GetEnvironmentStringsW"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "sample.bin"), Found reference to API (Indicator: "GetOverlappedResult"; Source: "sample.bin"), Found reference to API (Indicator: "FreeEnvironmentStringsW"; Source: "sample.bin"), Found reference to API (Indicator: "Module32NextW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFullPathNameW"; Source: "sample.bin"), Found reference to API (Indicator: "AddVectoredExceptionHandler"; Source: "sample.bin"), Found reference to API (Indicator: "TlsFree"; Source: "sample.bin"), Found reference to API (Indicator: "GetStdHandle"; Source: "sample.bin"), Found reference to API (Indicator: "InitOnceBeginInitialize"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileInformationByHandle"; Source: "sample.bin"), Found reference to API (Indicator: "CreateEventW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFinalPathNameByHandleW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCommandLineW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateWaitableTimerExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileInformationByHandle"; Source: "sample.bin"), Found reference to API (Indicator: "CancelIo"; Source: "sample.bin"), Found reference to API (Indicator: "MoveFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateProcessW"; Source: "sample.bin"), Found reference to API (Indicator: "Sleep"; Source: "sample.bin"), Found reference to API (Indicator: "RtlCaptureContext"; Source: "sample.bin"), Found reference to API (Indicator: "TerminateProcess"; Source: "sample.bin"), Found reference to API (Indicator: "SwitchToThread"; Source: "sample.bin"), Found reference to API (Indicator: "ReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "FindNextFileW"; Source: "sample.bin"), Found reference to API (Indicator: "CreatePipe"; Source: "sample.bin"), Found reference to API (Indicator: "SetFilePointerEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "CompareStringOrdinal"; Source: "sample.bin"), Found reference to API (Indicator: "HeapReAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "MultiByteToWideChar"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadStackGuarantee"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowsDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "SetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "RtlLookupFunctionEntry"; Source: "sample.bin"), Found reference to API (Indicator: "CloseHandle"; Source: "sample.bin"), Found reference to API (Indicator: "InitOnceComplete"; Source: "sample.bin")38:T822f,Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\raw_vec\mod.rs", Heuristic match: "capacity overflow/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\mod.rs", Heuristic match: "assertion failed: !s.contains('\n')/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\formatters\junit.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\char\methods.rs", Heuristic match: "unsafe precondition(s) violated: ptr::copy requires that both pointer arguments are aligned and non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.is_aligned_to: align is not a power", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\net\display_buffer.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\error\repr_bitpacked.rs", Heuristic match: "advancing ioslice beyond its length/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\io\io_slice\windows.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\net\socket_addr.rs", Heuristic match: "unsafe precondition(s) violated: slice::get_unchecked requires that the index is within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice::ge", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\generic\memchr.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\vec\mod.rs", Heuristic match: "statictestfn(..)staticbenchfn(..)staticbenchastestfn(..)dyntestfn(..)dynbenchfn(..)dynbenchastestfn(..)a display implementation returned an error unexpectedly/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\string.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\boxed.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\error.rs", Heuristic match: "assertion failed: idx < capacity/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\collections\btree\node.rs", Heuristic match: "unsafe precondition(s) violated: ptr::offset requires the address calculation to not overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.there is no such thing as a release load/rustc", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\bignum.rs", Heuristic match: "1 element in sequenceos stringanything at all/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\non_null.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\..\..\backtrace\src\symbolize\gimli\lru.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.7\src\lib.rs", Heuristic match: "a formatting trait implementation returned an error when the underlying stream did not/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\ffi\os_str.rs", Heuristic match: "unsafe precondition(s) violated: isize::unchecked_neg cannot overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: usize::unchecked_add cannot overflow ", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\io\error\windows.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\pal\windows\winsock.rs", Heuristic match: "src\lib.rs", Heuristic match: " { , : { , (( attempted to format a map value before its key/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\fmt\builders.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\process\windows.rs", Heuristic match: "unsafe precondition(s) violated: slice::split_at_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice:", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\formatters\json.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\bench.rs", Heuristic match: "assertion failed: 0 < pointee_size && pointee_size <= isize::max as usizeunsafe precondition(s) violated: slice::get_unchecked requires that the range is within the slice this indicates a bug in the program. this undefined behavior check is optional, and ", Heuristic match: "hash table capacity overflow/rust/deps\hashbrown-0.16.1\src\raw\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sync\mpmc\array.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\cli.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\process.rs", Heuristic match: "fatal runtime error: out of tls indexes, aborting /rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\thread_local\key\windows.rs", Heuristic match: "formatting argument out of range/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\time.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\str\traits.rs", Heuristic match: " /rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\unicode\printable.rs", Heuristic match: "unsafe precondition(s) violated: usize::unchecked_add cannot overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: nonzero::new_unchecked requires the a", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\..\..\backtrace\src\symbolize\gimli\coff.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\mod.rs", Heuristic match: "/rust/deps\addr2line-0.25.1\src\function.rs", Heuristic match: " c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\ser.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\sha256.rs", Heuristic match: "()/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\iter\range.rs", Heuristic match: "userprofile/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\paths\windows.rs", Heuristic match: "kindsrc\lib.rs", Heuristic match: "not implemented: `set_permissions_nofollow` is currently only implemented on unix platforms/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\fs\mod.rs", Heuristic match: "a formatting trait implementation returned an error when the underlying stream did not/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\fmt.rs", Heuristic match: "not implementedc:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_core-1.0.229\src\private\doc.rs", Heuristic match: "unsafe precondition(s) violated: str::get_unchecked requires that the range is within the string slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/ac68faa20c58cbccd01ee7208bf3b6", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\str.rs", Heuristic match: "tryfromsliceerror/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\non_null.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\alloc\layout.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\wrapping.rs", Heuristic match: "called `result::unwrap()` on an `err` valuec:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.7\src\lib.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\block-buffer-0.10.4\src\lib.rs", Heuristic match: "?inf-infnan/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\mod.rs", Heuristic match: "is_aligned_to: align is not a power-of-two/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\const_ptr.rs", Heuristic match: "aespclmulqdqrdrandrdseedtscmmxssesse2sse3ssse3sse4.1sse4.2sse4ashaavxavx2sha512sm3sm4avx512favx512cdavx512eravx512pfavx512bwavx512dqavx512vlavx512ifmaavx512vbmiavx512vpopcntdqavx512vbmi2gfnivaesvpclmulqdqavx512vnniavx512bitalgavx512bf16avx512vp2intersectav", Heuristic match: "--/rust/deps\getopts-0.2.24\src\lib.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\core_api.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\fmt\num.rs", Heuristic match: "unsafe precondition(s) violated: vec::set_len requires that new_len <= capacity() this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\all\rabinkarp.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\unique.rs", Heuristic match: " /rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\vec\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\formatters\mod.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\digest-0.10.7\src\core_api\ct_variable.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\pal\windows\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\str\validations.rs", Heuristic match: "varsthread name may not contain interior null bytes/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\thread\thread.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\wtf8\mod.rs", Heuristic match: "rust_test_time_unitrust_test_time_integrationrust_test_time_doctestthreads should not terminate unexpectedly/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\thread\lifecycle.rs", Heuristic match: "`unix` or `windows``start` or `end``end`i8u8`start`f32f64i16i32i64u16u32u64i128u128isizeusizestruct durationstruct systemtimea ipaddra socketaddra nonzero i8a nonzero u8a nonzero i16a nonzero i32a nonzero i64a nonzero u16a nonzero u32a nonzero u64a nonzero", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\sha256\soft.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\memmem\searcher.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\net\parser.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\panicking.rs", Heuristic match: "invalid parameters to layout::from_size_align/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\net\ip_addr.rs", Heuristic match: " -fn() -> + : punycode{}.llvm./rust/deps\rustc-demangle-0.1.27\src\lib.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\block-buffer-0.10.4\src\sealed.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\process\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\array\iter\iter_inner.rs", Heuristic match: "/rust/deps\gimli-0.32.3\src\read\line.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\thread\id.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\rc.rs", Heuristic match: "assertion failed: parts.len() >= 4/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\flt2dec\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\helpers\concurrency.rs", Heuristic match: "_c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\sha512\soft.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\mem\alignment.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ops\index_range.rs", Heuristic match: "to_digit: invalid radix -- radix must be in the range 2 to 36 inclusive/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\char\methods.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\memchr.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zmij-1.0.23\src\lib.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\..\..\stdarch\crates\core_arch\src\x86\sse2.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sync\once.rs", Heuristic match: "10 offset/rust/deps\object-0.37.3\src\read\coff\section.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sync\mpmc\mod.rs", Heuristic match: "`mid > len/rust/deps\miniz_oxide-0.8.9\src\inflate\output_buffer.rs", Heuristic match: "assertion failed: len >= size_of::()/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\net\connection\socket\mod.rs", Heuristic match: "panicked at : frameipsymbol_addressbarriertry_lock failed because the operation would blockaccesserror/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\buffered\linewritershim.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\..\..\backtrace\src\symbolize\gimli.rs", Heuristic match: "ymmxmmzmmc:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\sha512\x86.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\..\..\backtrace\src\symbolize\mod.rs", Heuristic match: "internal error: entered unreachable code/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\borrow.rs", Heuristic match: "!$'+.158;/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\dec2flt\parse.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\fmt\mod.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\itoa-1.0.19\src\u128_ext.rs", Heuristic match: "assertion failed: d.mant > 0/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\flt2dec\strategy\grisu.rs", Heuristic match: ":]/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\iter\adapters\enumerate.rs", Heuristic match: "/rust/deps\addr2line-0.25.1\src\unit.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\memmem\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\args\windows.rs", Heuristic match: "failed to spawn thread/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\thread\functions.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: usize::unchecked_add cann", Heuristic match: "assertion failed: start <= endc:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\generic\memchr.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\rt.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\unicode\unicode_data.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\collections\btree\node.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\collections\btree\navigate.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\helpers\shuffle.rs", Heuristic match: "tc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\memchr.rs", Heuristic match: "mid > len/rust/deps\memchr-2.7.6\src\arch\all\packedpair\mod.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\read.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\slice.rs", Heuristic match: "bad formatop char/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\term\terminfo\parm.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\fs\windows.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\time.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\mod.rs", Heuristic match: "too many running threads in thread scope/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\thread\scoped.rs", Heuristic match: "window size must be non-zero/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\str\pattern.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\iter.rs", Heuristic match: "unsafe precondition(s) violated: nonnull::new_unchecked requires that the pointer is non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f9", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: invalid value for `char` ", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\str\pattern.rs", Heuristic match: "assertion failed: edelta >= 0/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\diy_float.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\os\windows\net\addr.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\net\hostname\windows.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\buffered\bufwriter.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\vector.rs", Heuristic match: "anydata provided does not contain a nul cannot parse float from empty stringinvalid float literal/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\str\lossy.rs", Heuristic match: "tryfromsliceerror/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\mem\alignment.rs", Heuristic match: "/rust/deps\getopts-0.2.24\src\lib.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\iter\range.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std_detect\src\detect\cache.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\thread\windows.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ops\function.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\iter\adapters\enumerate.rs", Heuristic match: "dest is out of bounds/rust/deps\miniz_oxide-0.8.9\src\inflate\core.rs", Heuristic match: "is_nonoverlapping: `size_of::() * count` overflows a usizec:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\ext.rs", Heuristic match: "/rust/deps\object-0.37.3\src\read\coff\symbol.rs", Heuristic match: "is_nonoverlapping: `size_of::() * count` overflows a usize/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\str\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\stdio.rs", Heuristic match: "called `result::unwrap()` on an `err` valuec:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\itoa-1.0.19\src\lib.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\thread\local.rs", Heuristic match: "inneroverflow when subtracting duration from instant/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\time.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\bstr\mod.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\de.rs", Heuristic match: "unsafe precondition(s) violated: slice::get_unchecked requires that the range is within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7", Heuristic match: "assertion failed: digits < 40/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\wtf8.rs", Heuristic match: ".0/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\mem\alignment.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sync\mpmc\zero.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\alloc.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\iter\adapters\step_by.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\iter\traits\iterator.rs", Heuristic match: "reentrant init/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\cell\once.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\sha2-0.10.9\src\sha512.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\non_null.rs", Heuristic match: "is_nonoverlapping: `size_of::() * count` overflows a usizec:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\zmij-1.0.23\src\lib.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\sort\stable\quicksort.rs", Heuristic match: "chunk size must be non-zero/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\iter.rs", Heuristic match: "serialize_value called before serialize_keyc:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\value\ser.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\sync.rs", Heuristic match: "a string key/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\iter\range.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\all\memchr.rs", Heuristic match: "hash_2powc:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\vector.rs", Heuristic match: "rust_lib_backtracerust_backtraceassertion failed: self.is_code_point_boundary(new_len)/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\wtf8\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\env.rs", Heuristic match: "asrc\lib.rs", Heuristic match: "unsafe precondition(s) violated: ptr::copy_nonoverlapping requires that both pointer arguments are aligned and non-null and the specified memory ranges do not overlap this indicates a bug in the program. this undefined behavior check is optional, and cann", Heuristic match: "c:/phoenix/web_ui.py", Heuristic match: "fatal runtime error: init_current() was re-entrant, which indicates a bug in the rust threading implementation, aborting /rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\index.rs", Heuristic match: "branch is not hit for types that cannot fit 999 (u8)c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\itoa-1.0.19\src\lib.rs", Heuristic match: "/rust/deps\rustc-demangle-0.1.27\src\legacy.rs", Heuristic match: "unsafe precondition(s) violated: invalid value for `char` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\char\methods.rs", Heuristic match: "/rust/deps\memchr-2.7.6\src\arch\all\twoway.rs", Heuristic match: "lazylock instance has previously been poisoned/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sync\lazy_lock.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\value\index.rs", Heuristic match: "lazycell instance has previously been poisoned/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\cell\lazy.rs", Heuristic match: "assertion failed: n <= init_unfilled/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\io\borrowed_buf.rs", Heuristic match: "unsafe precondition(s) violated: layout::from_size_align_unchecked requires that align is a power of 2 and the rounded-up allocation size does not exceed isize::max this indicates a bug in the program. this undefined behavior check is optional, and cannot", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\stdio\windows.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\path.rs", Heuristic match: "assertion failed: !sorted_samples.is_empty()/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\stats.rs", Heuristic match: "tests::absent_account_and_membership_each_get_owned_cleanup_receiptssrc\lib.rs", Heuristic match: "unsafe precondition(s) violated: u32::unchecked_shl cannot overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: usize::unchecked_sub cannot overflow t", Heuristic match: "use of std::thread::current() is not possible after the thread's local data has been destroyed/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\thread\current.rs", Heuristic match: "unsafe precondition(s) violated: hint::unreachable_unchecked must never be reached this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.there is no such thing as a release load/rustc/ac68faa20c", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sync\mpmc\waker.rs", Heuristic match: "01/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\fmt\mod.rs", Heuristic match: "wuser-provided comparison function does not correctly implement a total order/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\sort\shared\smallsort.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\value\from.rs", Heuristic match: "/rust/deps\memchr-2.7.6\src\arch\generic\packedpair.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\ascii.rs", Heuristic match: "/rust/deps\memchr-2.7.6\src\memmem\mod.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.7\src\hex.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\wtf8.rs", Heuristic match: "assertion failed: 0 < pointee_size && pointee_size <= isize::max as usize/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\ptr\const_ptr.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\iter\adapters\mod.rs", Heuristic match: "too many active read locks on rwlock/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\sync\rwlock\futex.rs", Heuristic match: "a json numberany valid json valuec:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\value\de.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sync\mpmc\context.rs", Heuristic match: "assertion failed: 0 < pointee_size && pointee_size <= isize::max as usize/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\iter.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\map.rs", Heuristic match: "assertion failed: falsec:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\block-buffer-0.10.4\src\lib.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\fs\windows\dir.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_core-1.0.229\src\format.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\all\packedpair\mod.rs", Heuristic match: "/rust/deps\object-0.37.3\src\read\archive.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\pal\windows\time.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\io\error.rs", Heuristic match: "backtrace /rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\backtrace.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\env\windows.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\slice\index.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\net\connection\socket\windows.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\collections\btree\map\entry.rs", Pattern match: "mintty.exe/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sync\mpmc\list.rs", Heuristic match: "error/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\option.rs", Heuristic match: "assertion failed: opts.fail_fast || st.current_test_count() == st.total/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\console.rs", Heuristic match: "{invalid syntax}{recursion limit reached}?`fmt::error`s should be impossible without a `fmt::formatter`/rust/deps\rustc-demangle-0.1.27\src\v0.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\generic\packedpair.rs", Heuristic match: "a display implementation returned an error unexpectedly/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\string.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\fmt.rs", Heuristic match: "/rust/deps\addr2line-0.25.1\src\line.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\str\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\term\terminfo\parser\compiled.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\string.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\dec2flt\decimal_seq.rs", Heuristic match: "explicit panicc:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_core-1.0.229\src\de\mod.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\test\src\lib.rs", Heuristic match: "capacity overflow/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\vec\spec_from_iter_nested.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\value\ser.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\helpers\mod.rs", Heuristic match: "assertion failed: match track_edge_idx { leftorright::left(idx) => idx <= old_left_len, leftorright::right(idx) => idx <= right_len, }/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\alloc\src\collections\btree\node.rs", Heuristic match: "[c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\generic-array-0.14.7\src\lib.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\panicking.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\all\twoway.rs", Heuristic match: "3a7d7f96/library\std\src\sync\reentrant_lock.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\num\imp\flt2dec\strategy\dragon.rs", Heuristic match: "c:\users\k.k\.cargo\registry\src\index.crates.io-1949cf8c6b5b557f\memchr-2.8.3\src\arch\all\mod.rs", Heuristic match: "/rust/deps\gimli-0.32.3\src\read\abbrev.rs", Heuristic match: "/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\std\src\sys\process\windows\child_pipe.rs", Heuristic match: "b!overflow in duration::new/rustc/ac68faa20c58cbccd01ee7208bf3b6e93a7d7f96/library\core\src\time.rs"39:T42d,Observed email domain:"tion in a context in which it is not valid.when evaluating call frame instructions, found a `dw_cfa_restore_state` stack pop instruction, but the stack was empty, and had nothing to pop.do not have unwind info for the given address.an offset value was larger than the maximum supported value.the given pointer encoding is either unknown or invalid.did not find an entry at the given offset.the given offset is out of bounds.found an unknown cfi augmentation.we do not support the given pointer encoding yet.registers larger than `u16` are not supported.the cfi program defined more register rules than we have storage for.attempted to push onto the cfi stack, but it was already at full capacity.the `.eh_frame_hdr` binary search table claims to be variable-length encoded, which makes binary search impossible.the `dw_ut_*` value for this unit is not supported yetranges involving addressindex are not supported yetnonzero segment size not supported yeta compilation unit or type unit is missing its top level die.a die att" [Source: sample.bin]3a:T5e5,Found string "assertion failed: !manifest.to_string().contains("raw-secret")" (Indicator: "secret"; Source: "sample.bin"), Found string "tests::existing_account_is_observed_and_s4u_makes_the_unknown_password_irrelevant" (Indicator: "password"; Source: "sample.bin"), Found string "passwordSupplied" (Indicator: "password"; Source: "sample.bin"), Found string "tests::manifest_and_attestation_are_digest_bound_and_contain_no_secret" (Indicator: "secret"; Source: "sample.bin"), Found string "accountMatchedadministratorTokenelevatedTokenlauncherSpawnedpasswordSupplied" (Indicator: "password"; Source: "sample.bin"), Found string "tests::logon_trigger_or_password_backed_contract_is_rejected_before_task_calls" (Indicator: "password"; Source: "sample.bin"), Found string "passwordDisclosed" (Indicator: "password"; Source: "sample.bin"), Found string "raw-secretpasswordassertion failed: manifest.get("password").is_none()" (Indicator: "password"; Source: "sample.bin"), Found string "raw-secretpasswordassertion failed: manifest.get("password").is_none()" (Indicator: "secret"; Source: "sample.bin"), Found string "dedicatedLaunchAttestedpasswordDisclosedownerAccountChangedsuccess" (Indicator: "password"; Source: "sample.bin"), Found string "targetAccountSha256accountCreatedadministratorMembershipAddedautostartImplementedcredentialModetask-scheduler-s4u-no-password" (Indicator: "password"; Source: "sample.bin"), Found string "task-scheduler-s4u-no-password" (Indicator: "password"; Source: "sample.bin")30:["$","$Lc",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$33"}}],["$","$L35",null,{"initialData":{"schema_version":"1.0.17","sha256":"5fff76f050205e3d8c5be097e9e3bef61b80869657d1460f808f09ad7c02a23d","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1794485170379,"unified_at":"2026-11-12T12:06:10.379Z","metadata":{"hashes":{"sha256":"5fff76f050205e3d8c5be097e9e3bef61b80869657d1460f808f09ad7c02a23d","sha1":"6d504dd1f0ca8b72dffcf6ad31f1a997d6f5de48","md5":"7ea24fe605582fcf1c6f2d18c21199b0"},"file_info":{"file_name":"phoenix_identity_provisioner-69e6cf62c5d4df6a.exe","file_type":["peexe","64bits","executable"],"file_type_id":"64-bit exe","file_size":11277077,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1794462576000,"last_seen":1794485162000,"last_multi_scan":1794485162000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":23},"sandbox_signatures":{"informative_count":40,"suspicious_count":0,"malicious_count":1,"total":41},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"scrutiny":{"name":"Scrutiny","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Stealth","technique":"Hide Artifacts","attack_id":"T1564","attack_id_wiki":"https://attack.mitre.org/techniques/T1564","identifiers":[{"type":"informative","value":"Found virtual disk drive like strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Native API","attack_id":"T1106","attack_id_wiki":"https://attack.mitre.org/techniques/T1106","identifiers":[{"type":"informative","value":"Contains ability to create a new process (API string)"},{"type":"informative","value":"Contains ability to retrieve/modify process thread (API string)"},{"type":"informative","value":"Contains ability to retrieve the fully qualified path of module (API string)"},{"type":"informative","value":"Contains ability to create/open files (API string)"},{"type":"informative","value":"Contains ability to set/get the last-error code for a calling thread (API string)"},{"type":"informative","value":"Contains ability to retrieve address of exported function from a DLL (API string)"},{"type":"informative","value":"Contains ability to execute Windows APIs"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Lateral Movement","technique":"Lateral Tool Transfer","attack_id":"T1570","attack_id_wiki":"https://attack.mitre.org/techniques/T1570","identifiers":[{"type":"informative","value":"Contains ability to move file or directory (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Debugger Evasion","attack_id":"T1622","attack_id_wiki":"https://attack.mitre.org/techniques/T1622","identifiers":[{"type":"informative","value":"Contains ability to check debugger is running (API string)"},{"type":"informative","value":"Contains ability to register a top-level exception handler (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Contains ability to retrieve a module handle (API string)"},{"type":"informative","value":"Able to retrieve information about the current system (API string)"},{"type":"informative","value":"Contains ability to retrieve the host's architecture (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contains references to network communication API (string)"},{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Process Discovery","attack_id":"T1057","attack_id_wiki":"https://attack.mitre.org/techniques/T1057","identifiers":[{"type":"informative","value":"Contains ability to retrieve process ID (API string)"},{"type":"informative","value":"Able to retrieve/open a process (API string)"},{"type":"informative","value":"Contains ability to enumerate process and/or its information (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Mail Protocols","attack_id":"T1071.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/003","identifiers":[{"type":"informative","value":"Found mail related domain names"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Able to inject code into another process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Local Data Staging","attack_id":"T1074.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1074/001","identifiers":[{"type":"informative","value":"Contains ability to create directories (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Defense Impairment","technique":"File and Directory Permissions Modification","attack_id":"T1222","attack_id_wiki":"https://attack.mitre.org/techniques/T1222","identifiers":[{"type":"informative","value":"Contains ability to modify file attributes (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Contains ability to retrieve file and directory information (API string)"},{"type":"informative","value":"Able to rename or move file/directory (API string)"},{"type":"informative","value":"Contains ability to retrieve path in which Windows is installed (API string)"},{"type":"informative","value":"Contains ability to enumerate files on disk (API string)"},{"type":"informative","value":"Contains ability to read files (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Time Based Checks","attack_id":"T1497.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1497/003","identifiers":[{"type":"informative","value":"Contains ability to delay execution by waiting for signal/timeout (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Windows Service","attack_id":"T1543.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1543/003","identifiers":[{"type":"informative","value":"Contains ability to create/control drivers (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Defense Impairment","technique":"Disable or Modify Tools","attack_id":"T1685","attack_id_wiki":"https://attack.mitre.org/techniques/T1685","identifiers":[{"type":"informative","value":"Contains ability to modify process attributes (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Windows Command Shell","attack_id":"T1059.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/003","identifiers":[{"type":"informative","value":"Contains ability to retrieve the command-line string for the current process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"User Activity Based Checks","attack_id":"T1497.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1497/002","identifiers":[{"type":"informative","value":"Able to identify virtual environment by using user activity (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Inter-Process Communication","attack_id":"T1559","attack_id_wiki":"https://attack.mitre.org/techniques/T1559","identifiers":[{"type":"informative","value":"Contains ability to create/connect to a named pipe (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"File Deletion","attack_id":"T1070.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/004","identifiers":[{"type":"informative","value":"Contains ability to delete files/directories (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Timestomp","attack_id":"T1070.006","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/006","identifiers":[{"type":"informative","value":"Contains ability to set file time (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Impact","technique":"Service Stop","attack_id":"T1489","attack_id_wiki":"https://attack.mitre.org/techniques/T1489","identifiers":[{"type":"informative","value":"Contains ability to terminate a process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"malicious","category":"External Systems","name":"CrowdStrike ML for Portable Executable (On Sensor) detected file with bottom confidence","description":"\"Portable Executable (On Sensor) Model\" detected file as \"dirty\" with \"bottom\" confidence","origin":"Static Analysis","id":"mlmodel-15","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains artifacts from Rust programming language","description":"$36","origin":"sample.bin","id":"string-943","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to execute Windows APIs","description":"$37","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-101","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create directories (API string)","description":"Found reference to API \"CreateDirectoryW\" (Indicator: \"CreateDirectory\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1074.001","id":"string-423","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to retrieve/modify process thread (API string)","description":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-161","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create/control drivers (API string)","description":"Found reference to API \"DeviceIoControl\" (Indicator: \"DeviceIoControl\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1543.003","id":"string-220","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Able to retrieve/open a process (API string)","description":"Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1057","id":"string-272","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create/open files (API string)","description":"Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"sample.bin\"), Found reference to API \"CreateFileMappingA\" (Indicator: \"CreateFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-315","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to retrieve the command-line string for the current process (API string)","description":"Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.003","id":"string-206","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Able to rename or move file/directory (API string)","description":"Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-884","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to move file or directory (API string)","description":"Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1570","id":"string-322","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create a new process (API string)","description":"Found reference to API \"CreateProcessW\" (Indicator: \"CreateProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-204","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to set/get the last-error code for a calling thread (API string)","description":"Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; Source: \"sample.bin\"), Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-319","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$38","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found mail related domain names","description":"$39","origin":"sample.bin","mitre_attack_id":"T1071.003","id":"string-169","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains references to network communication API (string)","description":"file/memory contains long string with (Indicator: \" socket \"; Source: \"sample.bin\"), Found reference to API \"invalid socket address\" (Indicator: \" socket \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-899","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains ability to create/connect to a named pipe (API string)","description":"Found reference to API \"CreatePipe\" (Indicator: \"CreatePipe\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1559","id":"string-210","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"$3a","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve file and directory information (API string)","description":"Found reference to API \"GetFileAttributesW\" (Indicator: \"GetFileAttributes\"; Source: \"sample.bin\"), Found reference to API \"GetFileSizeEx\" (Indicator: \"GetFileSize\"; Source: \"sample.bin\"), Found reference to API \"GetSystemDirectoryW\" (Indicator: \"GetSystemDirectory\"; Source: \"sample.bin\"), Found reference to API \"GetCurrentDirectoryW\" (Indicator: \"GetCurrentDirectory\"; Source: \"sample.bin\"), Found reference to API \"GetTempPathW\" (Indicator: \"GetTempPath\"; Source: \"sample.bin\"), Found reference to API \"GetFileInformationByHandleEx\" (Indicator: \"GetFileInformationByHandle\"; Source: \"sample.bin\"), Found reference to API \"#$*+-./:?@\\_GetTempPath2W\" (Indicator: \"GetTempPath\"; Source: \"sample.bin\"), Found reference to API \"GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-207","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve the host's architecture (API string)","description":"Found reference to API \"GetEnvironmentVariableW\" (Indicator: \"GetEnvironmentVariable\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-107","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate process and/or its information (API string)","description":"Found reference to API \"Module32FirstW\" (Indicator: \"Module32First\"; Source: \"sample.bin\"), Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; Source: \"sample.bin\"), Found reference to API \"CreateToolhelp32Snapshot\" (Indicator: \"CreateToolhelp32Snapshot\"; Source: \"sample.bin\"), Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"sample.bin\"), Found reference to API \"GetEnvironmentStringsW\" (Indicator: \"GetEnvironmentStrings\"; Source: \"sample.bin\"), Found reference to API \"Module32NextW\" (Indicator: \"Module32Next\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1057","id":"string-85","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve a module handle (API string)","description":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-427","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"file/memory contains long string with (Indicator: \"aes\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve address of exported function from a DLL (API string)","description":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-317","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate files on disk (API string)","description":"Found reference to API \"FindFirstFileExW\" (Indicator: \"FindFirstFile\"; Source: \"sample.bin\"), Found reference to API \"FindNextFileW\" (Indicator: \"FindNextFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-83","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve process ID (API string)","description":"Found reference to API \"GetProcessId\" (Indicator: \"GetProcessId\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1057","id":"string-478","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve the fully qualified path of module (API string)","description":"Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-164","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to read files (API string)","description":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-534","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to delete files/directories (API string)","description":"Found reference to API \"DeleteFileW\" (Indicator: \"DeleteFile\"; Source: \"sample.bin\"), Found reference to API \"RemoveDirectoryW\" (Indicator: \"RemoveDirectory\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.004","id":"string-308","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to modify file attributes (API string)","description":"Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1222","id":"string-426","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to modify process attributes (API string)","description":"Found reference to API \"InitializeProcThreadAttributeList\" (Indicator: \"InitializeProcThreadAttributeList\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1685","id":"string-402","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to terminate a process (API string)","description":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"sample.bin\"), Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1489","id":"string-316","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Able to inject code into another process (API string)","description":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1055","id":"string-92","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to set file time (API string)","description":"Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.006","id":"string-409","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to delay execution by waiting for signal/timeout (API string)","description":"Found reference to API \"QueryPerformanceFrequency\" (Indicator: \"QueryPerformanceFrequency\"; Source: \"sample.bin\"), Found reference to API \"SetWaitableTimer\" (Indicator: \"SetWaitableTimer\"; Source: \"sample.bin\"), Found reference to API \"SleepEx\" (Indicator: \"SleepEx\"; Source: \"sample.bin\"), Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1497.003","id":"string-226","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Found virtual disk drive like strings","description":"Found string - \\\\.\\NULmaximum number of ProcThreadAttributes exceeded; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1564","id":"string-145","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to retrieve information about the current system (API string)","description":"Found system information discovery API: \"GetSystemInfo\" in \"sample.bin\", Found system information discovery API: \"GetEnvironmentStringsW\" in \"sample.bin\"","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-89","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to identify virtual environment by using user activity (API string)","description":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1497.002","id":"string-661","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve path in which Windows is installed (API string)","description":"Found reference to API \"GetWindowsDirectoryW\" (Indicator: \"GetWindowsDirectory\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-312","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to register a top-level exception handler (API string)","description":"Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"SetUnhandledExceptionFilter\"; Source: \"sample.bin\"), Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1622","id":"string-148","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to check debugger is running (API string)","description":"Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1622","id":"string-183","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 2c:[["$","title","0",{"children":"Malicious Sample 5fff76f05020… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 5fff76f05020…. Threat score 100/100. 0/28 AV engines flagged this file. 1 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/5fff76f050205e3d8c5be097e9e3bef61b80869657d1460f808f09ad7c02a23d"}],["$","meta","4",{"property":"og:title","content":"Malicious Sample 5fff76f05020… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 5fff76f05020…. Threat score 100/100. 0/28 AV engines flagged this file. 1 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/5fff76f050205e3d8c5be097e9e3bef61b80869657d1460f808f09ad7c02a23d"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Sample 5fff76f05020… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 5fff76f05020…. Threat score 100/100. 0/28 AV engines flagged this file. 1 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L3b","11",{}]] 32:null