Astra can reverse engineer binaries now. That's likely where it came from.
But then did it hallucinate that registry key? Or this?
"instance of ActiveScriptEventConsumer as $Consumer\n" "{\n" " Name = \"StuxnetConsumer\";\n" " ScriptingEngine = \"VBScript\";\n" " ScriptText = \"CreateObject(\\\"WScript.Shell\\\").Run \\\"%SystemRoot%\\\\system32\\\\winsta.exe\\\", 0, False\";\n" "};\n"
But then did it hallucinate that registry key? Or this?