25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:T739,Found string "GET / HTTP/1.1 Host: evil.example:7990 GET / HTTP/1.1 GET / HTTP/1.1 Host: mypc:7990 assertion failed: host_ok("GET / HTTP/1.1\r\nHost: mypc:7990\r\n", 7990, true)" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "GET / HTTP/1.1 Host: localhost:7990 assertion failed: host_ok("GET / HTTP/1.1\r\nHost: localhost:7990\r\n", 7990, false)" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "GET /pr/x HTTP/1.1 Host: localhost:PORT HTTP/1.1 200 OK" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "assertion failed: !host_ok("GET / HTTP/1.1\r\n", 7990, true)" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "GET / HTTP/1.1 Host: attacker.example:PORT HTTP/1.1 403assertion failed: ask("GET / HTTP/1.1\r\nHost: attacker.example:PORT\r\n\r\n").starts_with("HTTP/1.1 403")" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "GET /missing.js HTTP/1.1 Host: localhost:PORT HTTP/1.1 404assertion failed: ask("GET /missing.js HTTP/1.1\r\nHost: localhost:PORT\r\n\r\n").starts_with("HTTP/1.1 404")" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "POST / HTTP/1.1 Host: localhost:PORT HTTP/1.1 405assertion failed: ask("POST / HTTP/1.1\r\nHost: localhost:PORT\r\n\r\n").starts_with("HTTP/1.1 405")" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "GET / HTTP/1.1 host: 127.0.0.1:7990 assertion failed: host_ok("GET / HTTP/1.1\r\nhost: 127.0.0.1:7990\r\n", 7990, false)" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "assertion failed: !host_ok("GET / HTTP/1.1\r\n", 7990, false)" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string "assertion failed: !host_ok("GET / HTTP/1.1\r\nHost: evil.example:7990\r\n", 7990, false)" (Indicator: "HTTP/1.1"; Source: "sample.bin"), Found string " HTTP/1.1 " (Indicator: "HTTP/1.1"; Source: "sample.bin")27:T7fc7,Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\portable-pty-0.9.0\src\win\mod.rs", Heuristic match: "0123456789abcdefd:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\ser.rs", Heuristic match: "unsafe precondition(s) violated: ptr::write_bytes requires that the destination pointer is aligned and non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) viola", Pattern match: "https://e.com.into()", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\sort\stable\mod.rs", Pattern match: "https://h/storage/user/1/files/x@", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\lib.rs", Pattern match: "https://example.com/a.git", Heuristic match: "called `result::unwrap()` on an `err` valuecmdassertion failed: shell_command(cmd).is_some()src\pty.rs", Heuristic match: "assertion failed: n <= init_unfilled/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\borrowed_buf.rs", Heuristic match: "unsafe precondition(s) violated: layout::from_size_align_unchecked requires that align is a power of 2 and the rounded-up allocation size does not exceed isize::max this indicates a bug in the program. this undefined behavior check is optional, and cannot", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\anyhow-1.0.104\src\ptr.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\vec\spec_from_iter_nested.rs", Heuristic match: "about.txtsrc\diag.rs", Pattern match: "https://github.hexagon.com/geo-lmc/sbg-geo.git", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\wtf8\mod.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\array.rs", Heuristic match: "a formatting trait implementation returned an error when the underlying stream did not/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\write.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: layout::from_size_alignme", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\term\terminfo\parser\compiled.rs", Heuristic match: "@@src\git.rs", Pattern match: "https://hexagon.atlassian.net/browse/geo-1", Heuristic match: "src\setup.rs", Heuristic match: "window size must be non-zero/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\pattern.rs", Heuristic match: "key-value support is experimental and must be enabled using the `kv` featured:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\log-0.4.34\src\__private_api.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\validations.rs", Heuristic match: "settings.jsongithub.comassertion failed: valid_host(github.com)src\credentials.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\io\read.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ptr\non_null.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\vec\mod.rs", Heuristic match: "assertion failed: val > 2/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\select.rs", Heuristic match: "number of read bytes exceeds limit/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\io\util.rs", Heuristic match: "mainassertion failed: safe_ref(main)src\git.rs", Heuristic match: "ithin the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice::get_unchecked_mut requires that the index is within the slice this indicates a bug ", Pattern match: "http://localhost.404", Heuristic match: "porcelain_backup_.jsonavatars::tests::urlssrc\avatars.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\itoa-1.0.18\src\lib.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\error\repr_bitpacked.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\sync\atomic.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\co", Heuristic match: "diag::tests::collects_the_log_and_settings_never_a_tokensrc\diag.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\cli.rs", Heuristic match: "poisonerror/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\adapters\enumerate.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\st", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\collections\btree\node.rs", Heuristic match: " be relied on for safety.unsafe precondition(s) violated: hint::unreachable_unchecked must never be reached this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated:", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\helpers\concurrency.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\num\mod.rs", Heuristic match: "unsafe precondition(s) violated: slice::split_at_mut_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae", Pattern match: "http://https://failed", Heuristic match: "unsafe precondition(s) violated: slice::from_raw_parts requires the pointer to be aligned and non-null, and the total size of the slice not to exceed `isize::max` this indicates a bug in the program. this undefined behavior check is optional, and cannot b", Heuristic match: "unsafe precondition(s) violated: nonnull::new_unchecked requires that the pointer is non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: hint::assert_", Heuristic match: "internal error: entered unreachable coded:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\value\ser.rs", Pattern match: "https://e.com", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ptr\mut_ptr.rs", Heuristic match: "a display implementation returned an error unexpectedly/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\string.rs", Heuristic match: "attempted to add args to a default_prog builderd:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\portable-pty-0.9.0\src\cmdbuilder.rs", Heuristic match: "m/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\collections\btree\navigate.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ptr\mod.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\shared_library-0.1.9\src\dynamic_library.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\array\iter\iter_inner.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\hash\sip.rs", Heuristic match: "src\logging.rs", Heuristic match: "src\web.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\write.rs", Pattern match: "https://github.hexagon.com/lokesh-govinduassertion", Heuristic match: "web::tests::only_this_computer_and_the_page_filessrc\web.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\traits.rs", Heuristic match: "winstate::tests::maximized_on_another_monitor_keeps_a_place_theresrc\winstate.rs", Heuristic match: "called `result::unwrap()` on an `err` valueporcelain_backup_2026-10-25_143005.jsonassertion failed: backup_name_ok(porcelain_backup_2026-10-25_143005.json)src\main.rs", Heuristic match: "failed to spawn thread/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\thread\functions.rs", Heuristic match: "unsafe precondition(s) violated: layout::from_size_alignment_unchecked requires that the rounded-up allocation size does not exceed isize::max this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safe", Heuristic match: "internal error: entered unreachable code/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\list.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\formatters\json.rs", Heuristic match: "git::compare_tests::compares_two_branchessrc\git.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\value\ser.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ops\index_range.rs", Heuristic match: "capacity overflow/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\vec\mod.rs", Pattern match: "avatars.ghe.example.com/u/12s=64https://avatars.ghe.example.com/u/12?s=64src\avatars.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\fmt\mod.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\sort\stable\merge.rs", Heuristic match: "internal error: entered unreachable code/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\zero.rs", Heuristic match: "octolytics-dimension-repository_idcontentjs-data-upload-policy-url-csrfvalue&&"''<<>>not an objectsrc\uploads.rs", Pattern match: "https://src\teamcity.rs", Heuristic match: "fatal runtime error: unreachable, aborting /rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\thread\local.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\option.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\boxed.rs", Pattern match: "http://localhost", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\ctor-1.0.13\src\statics.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\sort\shared\pivot.rs", Heuristic match: " optional, and cannot be relied on for safety.unsafe precondition(s) violated: hint::unreachable_unchecked must never be reached this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.is_nonoverl", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\wtf8.rs", Heuristic match: "/rest/api/1.0/dashboard/pull-requests?role=reviewerassertion failed: allowed(/rest/api/1.0/dashboard/pull-requests?role=reviewer)src\bitbucket.rs", Heuristic match: "127.0.0.1src\web.rs", Pattern match: "https://ci.example.com/tchttps://ci.example.com", Heuristic match: "poisonerror/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\range.rs", Heuristic match: "github.com", Heuristic match: "fatal runtime error: thread result panicked on drop, aborting /rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\mem\alignment.rs", Heuristic match: "s optional, and cannot be relied on for safety.unsafe precondition(s) violated: ptr::copy_nonoverlapping requires that both pointer arguments are aligned and non-null and the specified memory ranges do not overlap this indicates a bug in the program. this", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\pattern.rs", Heuristic match: "t@example.com", Heuristic match: "there is no such thing as a release load/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\sync\atomic.rs", Heuristic match: "porcelainsrc\setup.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\portable-pty-0.9.0\src\win\conpty.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\zero.rs", Heuristic match: "l, and the total size of the slice not to exceed `isize::max` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\mem\alignment", Pattern match: "evil.com/path", Heuristic match: "-isrc\pty.rs", Heuristic match: "tests::backups_named_and_sortedsrc\main.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\char\methods.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: hint::assert_unchecked mu", Heuristic match: "ghpage::tests::what_stays_in_the_windowsrc\ghpage.rs", Heuristic match: "is_nonoverlapping: `size_of::() * count` overflows a usizesenderrorinternal error: entered unreachable code/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\mod.rs", Heuristic match: "unsafe precondition(s) violated: nonnull::new_unchecked requires that the pointer is non-null this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d6", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\adapters\enumerate.rs", Pattern match: "http://schemas.microsoft.com/windows/2004/02/mit/task", Heuristic match: "/rust/deps\hashbrown-0.17.1\src\raw.rs", Heuristic match: "unsafe precondition(s) violated: hint::assert_unchecked must never be called when the condition is false this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae", Pattern match: "https://github.hexagon.com.evil.com/", Heuristic match: "setafsetabcolors/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\io_slice.rs", Heuristic match: "unsafe precondition(s) violated: hint::unreachable_unchecked must never be reached this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: invalid value for `char`", Heuristic match: "unsafe precondition(s) violated: slice::get_unchecked requires that the index is within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e28", Heuristic match: "unsafe precondition(s) violated: slice::split_at_mut_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.assertion failed: val > 2/rustc/58c", Heuristic match: "system::task_tests::the_sign_in_tasksrc\system.rs", Heuristic match: "src\ghlogin.rs", Pattern match: "https://teamcity.example.com/https://teamcity.example.comsrc\teamcity.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\ffi\c_str.rs", Heuristic match: "#/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\collections\btree\node.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\ascii.rs", Heuristic match: "src\ghpage.rs", Heuristic match: "somesrc\pty.rs", Heuristic match: "uploads::tests::finds_the_addresssrc\uploads.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\alloc\layout.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\anyhow-1.0.104\src\error.rs", Heuristic match: "src\git.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\filedescriptor-0.8.3\src\windows.rs", Heuristic match: " bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\adapters\enumerate.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\portable-pty-0.9.0\src\win\psuedocon.rs", Heuristic match: "unsafe precondition(s) violated: usize::unchecked_add cannot overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\range.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\vec\drain.rs", Heuristic match: "unsafe precondition(s) violated: slice::get_unchecked requires that the index is within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice::ge", Pattern match: "https://evil.com@x/", Heuristic match: "unsafe precondition(s) violated: u32::unchecked_add cannot overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: usize::unchecked_add cannot overflow t", Heuristic match: "ghlogin::tests::finds_the_codesrc\ghlogin.rs", Heuristic match: "unsafe precondition(s) violated: usize::unchecked_add cannot overflow this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.there is no such thing as a release load/rustc/58cf8f9c35b355199727627", Heuristic match: "mid > len/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\mod.rs", Heuristic match: "unsafe precondition(s) violated: ptr::offset_from_unsigned requires `self >= origin` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.d:\lgovindu-dev\tools\rust\cargo\registry\src\index.cra", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\index.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\traits\iterator.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\mem\alignment.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\time.rs", Heuristic match: "jira::tests::secretssrc\jira.rs", Heuristic match: "advancing ioslice beyond its length/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\io_slice\repr_windows.rs", Heuristic match: "src\jira.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\io_slice\repr_windows.rs", Heuristic match: "threads should not terminate unexpectedly/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\thread\lifecycle.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\mod.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\serde_json-1.0.154\src\error.rs", Heuristic match: "unsafe precondition(s) violated: hint::assert_unchecked must never be called when the condition is false this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: sl", Pattern match: "github.hexagon.com/api/v3/user", Heuristic match: "pushsrc\git.rs", Heuristic match: "unsafe precondition(s) violated: str::get_unchecked requires that the range is within the string slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34", Heuristic match: "= origin` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library", Heuristic match: "d:\a&b\porcelain.exehex\med:\a&b\porcelain.exe--hiddenassertion failed: x.contains(rd:\a&b\porcelain.exe--hidden)src\system.rs", Pattern match: "https://login.microsoftonline.com/x/saml2assertion", Heuristic match: "unsafe precondition(s) violated: `ascii::char::from_u8_unchecked` input cannot exceed 127. this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/l", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\sort\shared\mod.rs", Pattern match: "api.github.com/user", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\sort\stable\drift.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\formatters\mod.rs", Pattern match: "https://avatars.github.hexagon.com/u/1assertion", Heuristic match: "called `result::unwrap()` on an `err` value ... 4321src\uploads.rs", Pattern match: "safety.code/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\vec\mod.rs", Heuristic match: "is_aligned_to: align is not a power-of-two/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ptr\const_ptr.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ptr\unique.rs", Heuristic match: " behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: str::get_unchecked requires that the range is within the string slice this indicates a bug in the program. this undefined behavior check is optional, and cann", Heuristic match: "fatal runtime error: thread result panicked on drop, aborting /rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ptr\unique.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\list.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\alloc.rs", Heuristic match: "unsafe precondition(s) violated: ptr::offset_from_unsigned requires `self >= origin` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.number of read bytes exceeds limit/rustc/58cf8f9c35b355", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\sort\stable\quicksort.rs", Heuristic match: "setup::tests::names_and_pagessrc\setup.rs", Heuristic match: "unsafe precondition(s) violated: ptr::copy_nonoverlapping requires that both pointer arguments are aligned and non-null and the specified memory ranges do not overlap this indicates a bug in the program. this undefined behavior check is optional, and cann", Heuristic match: "assertion failed: opts.fail_fast || st.current_test_count() == st.total/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\console.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\raw_vec\mod.rs", Heuristic match: "t be relied on for safety./rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\traits.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\cmp.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\thread\local.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\bench.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\mod.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\lazy_static-1.5.1\src\inline_lazy.rs", Pattern match: "https://api.github.com/user", Heuristic match: "internal error: entered unreachable code/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\array.rs", Heuristic match: "d:\lgovindu-dev\tools\rust\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\portable-pty-0.9.0\src\cmdbuilder.rs", Heuristic match: "logging::tests::datessrc\logging.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ascii\ascii_char.rs", Heuristic match: "src\winstate.rs", Heuristic match: "bad formatop char/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\term\terminfo\parm.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\once.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\ffi\os_str.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\slice.rs", Heuristic match: "erflows a usize/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ptr\mod.rs", Heuristic match: "somecapacity overflow/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\vec\mod.rs", Pattern match: "https://h/user-attachments/assets/1", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\str.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\context.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\mod.rs", Heuristic match: "bitbucket::tests::pathssrc\bitbucket.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\helpers\shuffle.rs", Heuristic match: "unsafe precondition(s) violated: slice::split_at_unchecked requires the index to be within the slice this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: slice:", Heuristic match: "#/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\error\repr_bitpacked.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\traits\accum.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\io_slice.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\traits\exact_size.rs", Heuristic match: "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\collections\btree\map\entry.rs", Heuristic match: " this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: ptr::copy_nonoverlapping requires that both pointer arguments are aligned and non-null and the specified memory ranges do not overlap this indi", Pattern match: "localhosta..bevil.com/path-bad.comx.com:assertion", Heuristic match: "createpseudoconsoleresizepseudoconsoleclosepseudoconsole/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\fmt\mod.rs", Heuristic match: "teamcity::tests::sitessrc\teamcity.rs", Heuristic match: "assertion failed: !sorted_samples.is_empty()/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\stats.rs", Heuristic match: "unsafe precondition(s) violated: alignment::new_unchecked requires a power of two this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: ptr::offset_from_unsigned", Heuristic match: "unsafe precondition(s) violated: invalid value for `char` this indicates a bug in the program. this undefined behavior check is optional, and cannot be relied on for safety.unsafe precondition(s) violated: str::get_unchecked requires that the range is wit"28:Tc98,file/memory contains long string with (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\slice\sort\stable\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\lib.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "assertion failed: n <= init_unfilled/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\borrowed_buf.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\vec\spec_from_iter_nested.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\wtf8\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\array.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "a formatting trait implementation returned an error when the underlying stream did not/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\write.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\term\terminfo\parser\compiled.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "window size must be non-zero/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\pattern.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\str\validations.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\io\read.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\ptr\non_null.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\vec\mod.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "assertion failed: val > 2/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\std\src\sync\mpmc\select.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "number of read bytes exceeds limit/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\alloc\src\io\util.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\io\error\repr_bitpacked.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\sync\atomic.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\test\src\cli.rs" (Indicator: "/rustc/"; Source: "sample.bin"), Found reference string "PoisonError/rustc/58cf8f9c35b355199727627d07ae34a4e2846d67/library\core\src\iter\adapters\enumerate.rs" (Indicator: "/rustc/"; Source: "sample.bin")1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample c2e8e49cca27… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample c2e8e49cca27…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/c2e8e49cca27415bbebf4c61ae18f53336c00afe378f99c25793a46c91ecea8b\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"c2e8e49cca27415bbebf4c61ae18f53336c00afe378f99c25793a46c91ecea8b\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"porcelain-11b73874d45420de.exe\",\"applicationCategory\":[\"peexe\",\"64bits\",\"executable\"],\"identifier\":\"c2e8e49cca27415bbebf4c61ae18f53336c00afe378f99c25793a46c91ecea8b\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":27},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":1},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L25",null,{"initialData":{"schema_version":"1.0.15","sha256":"c2e8e49cca27415bbebf4c61ae18f53336c00afe378f99c25793a46c91ecea8b","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1792919004060,"unified_at":"2026-10-25T09:03:24.060Z","metadata":{"hashes":{"sha256":"c2e8e49cca27415bbebf4c61ae18f53336c00afe378f99c25793a46c91ecea8b","sha1":"8f1a7a265e72ce380ad225a7d5f4e9e057f3b835","md5":"d9b4d66ec1af8d363289ecb329d8d5a9"},"file_info":{"file_name":"porcelain-11b73874d45420de.exe","file_type":["peexe","64bits","executable"],"file_type_id":"64-bit exe","file_size":3567104,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1792918995000,"last_seen":1792918995000,"last_multi_scan":1792918995000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":15},"sandbox_signatures":{"informative_count":18,"suspicious_count":1,"malicious_count":0,"total":19},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Reconnaissance","technique":"Gather Victim Network Information","attack_id":"T1590","attack_id_wiki":"https://attack.mitre.org/techniques/T1590","identifiers":[{"type":"informative","value":"Able to access user sensitive domain"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Path Interception by PATH Environment Variable","attack_id":"T1574.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1574/007","identifiers":[{"type":"informative","value":"References PATH environment registry keys"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"File Deletion","attack_id":"T1070.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/004","identifiers":[{"type":"informative","value":"Contains ability to delete files"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"informative","value":"Found E-Mail address in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Found string related to HTTP headers"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Scheduled Task/Job","attack_id":"T1053","attack_id_wiki":"https://attack.mitre.org/techniques/T1053","identifiers":[{"type":"suspicious","value":"Found an indicator for a scheduled task trigger"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"informative","value":"Contains registry location strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contains references to network communication API (string)"},{"type":"informative","value":"Found potential IP address in binary/memory"},{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Mail Protocols","attack_id":"T1071.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/003","identifiers":[{"type":"informative","value":"Found mail related domain names"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Persistence","technique":"Windows Service","attack_id":"T1543.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1543/003","identifiers":[{"type":"informative","value":"Contains ability to access device drivers"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Native API","attack_id":"T1106","attack_id_wiki":"https://attack.mitre.org/techniques/T1106","identifiers":[{"type":"informative","value":"Contains ability to create a new process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Windows Command Shell","attack_id":"T1059.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/003","identifiers":[{"type":"informative","value":"Contains ability to executes commands or batch file"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Defense Impairment","technique":"Disable or Modify Tools","attack_id":"T1685","attack_id_wiki":"https://attack.mitre.org/techniques/T1685","identifiers":[{"type":"informative","value":"Contains ability to modify process attributes (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Found string related to HTTP headers","description":"$26","origin":"sample.bin","mitre_attack_id":"T1071.001","id":"string-457","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$27","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://e.com\", Found HTTPS url \"https://h\", Found HTTPS url \"https://example.com\", Found HTTPS url \"https://github.hexagon.com\", Found HTTPS url \"https://hexagon.atlassian.net\", Found HTTPS url \"https://failed\", Found HTTPS url \"https://avatars.ghe.example.com\", Found HTTPS url \"https://src\", Found HTTPS url \"https://ci.example.com\", Found HTTPS url \"https://github.hexagon.com.evil.com\", Found HTTPS url \"https://teamcity.example.com\", Found HTTPS url \"https://teamcity.example.comsrc\", Found HTTPS url \"https://evil.com\", Found HTTPS url \"https://github.com\", Found HTTPS url \"https://login.microsoftonline.com\", Found HTTPS url \"https://api.github.com\", Found HTTPS url \"https://avatars.github.hexagon.com\"","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"\"127.0.0.1\", Potential IPs \"127.0.0.1\", \"127.0.0.1\" found in string \"GET / HTTP/1.1\nhost: 127.0.0.1:7990\nassertion failed: host_ok(\"GET / HTTP/1.1\\r\\nhost: 127.0.0.1:7990\\r\\n\", 7990, false)\", \"\n127.0.0.1:\"","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-14","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains references to network communication API (string)","description":"file/memory contains long string with (Indicator: \" socket \"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \" connect \"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \" bind \"; Source: \"sample.bin\"), Found reference to API \"Only socket descriptors can change their non-blocking mode on WindowsSetStdHandle failedIoErrorassertion failed: self.handle.is_socket_handle()\" (Indicator: \" socket \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-899","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found mail related domain names","description":"Observed email domain:\"localhosta..bevil.com/path-bad.comx.com:assertion failed: !valid_host(\"x.com:\")\" [Source: sample.bin]","origin":"sample.bin","mitre_attack_id":"T1071.003","id":"string-169","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains artifacts from Rust programming language","description":"$28","origin":"sample.bin","id":"string-943","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found E-Mail address in binary/memory","description":"Pattern match: \"git@example.com\", Pattern match: \"t@example.com\", Pattern match: \"me@x.com\"","origin":"sample.bin","mitre_attack_id":"T1114","id":"string-63","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found well known domains (string)","description":"\"[core]\n\tbare = false\n[remote \"origin\"]\n\turl = https://github.hexagon.com/geo-lmc/sbg-geo.git\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n[branch \"master\"]\n\tremote = origin\n[remote \"upstream\"]\n\tURL = git@github.com:a/b.git\noriginhttps://github.hexagon.com/geo-lmc/sbg-geo.gitupstreamgit@github.com:a/b.gitsrc\\git.rs\" (Indicator: \"github.com\"), \"settings.jsongithub.comassertion failed: valid_host(\"github.com\")src\\credentials.rs\" (Indicator: \"github.com\"), \"github.com\" (Indicator: \"github.com\"), \"https://hexagon.atlassian.net/browse/GEO-1https://github.hexagon.com.evil.com/https://github.com/aassertion failed: !at(\"https://github.com/a\")\" (Indicator: \"github.com\"), \"github.comhttps://api.github.com/user\" (Indicator: \"github.com\"), \"https://api.github.com/user\" (Indicator: \"github.com\"), \"Press Enter to open github.com in your browser...\" (Indicator: \"github.com\")","origin":"sample.bin","id":"string-135","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains registry location strings","description":"\"System\\CurrentControlSet\\Control\\Session Manager\\Environmentusername\" in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1012","id":"string-120","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create a new process (API string)","description":"Found reference to API \"CreateProcessW `\" (Indicator: \"CreateProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-204","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to executes commands or batch file","description":"Found string \"cmd.exe /c delassertion failed: shell_command(\"cmd.exe /c del\").is_none()\" (Indicator: \"cmd.exe /c\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.003","id":"string-174","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to modify process attributes (API string)","description":"Found reference to API \"\"UpdateProcThreadAttribute failed: \" (Indicator: \"UpdateProcThreadAttribute\"; Source: \"sample.bin\"), Found reference to API \"*InitializeProcThreadAttributeList failed: \" (Indicator: \"InitializeProcThreadAttributeList\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1685","id":"string-402","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to delete files","description":"Observed string: \"cmd.exe /c delassertion failed: shell_command(\"cmd.exe /c del\").is_none()\" (Indicator: \"cmd.exe /c del\") in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1070.004","id":"string-408","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to access device drivers","description":"Found string \"\\Device\\NamedPipe\\\" (Indicator: \"\\Device\\\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1543.003","id":"string-474","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to access user sensitive domain","description":"file/memory contains long string with (Indicator: \"github.com\"; Source: \"sample.bin\"), Found string \"settings.jsongithub.comassertion failed: valid_host(\"github.com\")src\\credentials.rs\" (Indicator: \"github.com\"; Source: \"sample.bin\"), Found string \"github.com\" (Indicator: \"github.com\"; Source: \"sample.bin\"), Found string \"https://hexagon.atlassian.net/browse/GEO-1https://github.hexagon.com.evil.com/https://github.com/aassertion failed: !at(\"https://github.com/a\")\" (Indicator: \"github.com\"; Source: \"sample.bin\"), Found string \"github.comhttps://api.github.com/user\" (Indicator: \"github.com\"; Source: \"sample.bin\"), Found string \"https://api.github.com/user\" (Indicator: \"github.com\"; Source: \"sample.bin\"), Found string \"Press Enter to open github.com in your browser...\" (Indicator: \"github.com\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1590","id":"string-761","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Installation/Persistence","name":"Found an indicator for a scheduled task trigger","description":"Found string \"trueHEX\\meassertion failed: x.contains(r\"trueHEX\\me\")\" (Indicator: \"LogonTrigger\"; Source: \"sample.bin\"), Found string \"Q\n \" (Indicator: \"LogonTrigger\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"LogonTrigger\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1053","id":"string-32","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Installation/Persistence","name":"References PATH environment registry keys","description":"Found string \"System\\CurrentControlSet\\Control\\Session Manager\\Environmentusername\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1574.007","id":"string-530","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"Found string \"tokens.jsonsecret\" (Indicator: \"secret\"; Source: \"sample.bin\"), Found string \"jira::tests::secretssrc\\jira.rs\" (Indicator: \"secret\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample c2e8e49cca27… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample c2e8e49cca27…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/c2e8e49cca27415bbebf4c61ae18f53336c00afe378f99c25793a46c91ecea8b"}],["$","meta","4",{"property":"og:title","content":"Sample c2e8e49cca27… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample c2e8e49cca27…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/c2e8e49cca27415bbebf4c61ae18f53336c00afe378f99c25793a46c91ecea8b"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample c2e8e49cca27… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample c2e8e49cca27…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L29","11",{}]]