Rustc 1.99.0 Windows exe flagged as malicious
Source Reddit Cybersecurity
Discussion
The Rust compiler executable (rustc) version 1.99.0 for Windows has been flagged as malicious by multiple antivirus vendors on VirusTotal. This detection appears specific to version 1.99.0, as version 1.99.1 is not flagged. The issue was reproducible with a fresh installation of Rust 1.99.0 via rustup. The SHA256 hash of the flagged binary is FC40F1C8B65095A22A48C111AADC279C26A049B7E4161E8B99FFE3EB23873E86. No further technical details or confirmed exploits are available.
r/cybersecurity (opens in a new tab)u/ParamountPotato0 points0 comments
So here's the deal. My antivirus (F-Secure) suddenly flagged the rustc.exe binary on my computer as malicious and to add to that, several other vendors also flag it in Virustotal. https://www.virustotal.com/gui/file/FC40F1C8B65095A22A48C111AADC279C26A049B7E4161E8B99FFE3EB23873E86
This issue seems to affect only 1.99.0 because 1.99.1 is not flagged.
Reproducible:
- Fresh rustup installation (this file or the rustup-init.exe or whatever the name of that was, not flagged by anything)
- Fresh RUSTUP_HOME/CARGO_HOME
- Official Rust 1.99.0 downloaded by rustup (`rustup toolchain install 1.99.0-x86_64-pc-windows-msvc`)
- File is detected and flagged as malicious if uploaded to virustotal
- Rust 1.99.1 installs without detection
The sha256 hash of the 1.99.0 exe I get is FC40F1C8B65095A22A48C111AADC279C26A049B7E4161E8B99FFE3EB23873E86
Has someone else encountered this issue that rustc is getting flagged? And importantly, are you all getting the same hash for that specific rustc version?