File 40249D63686DCF8A.SharpMapExec.exe

Name: 40249D63686DCF8A.SharpMapExec.exe
Size: 699,392 bytes
Type: EXE PE.NET
MD5: 5e82c50cfd8ded1ccb8f998da533e9e5
Scanner Name: defender
Appraisal: Fragile (AND) based
Scan Debug: Duration: 445s / Chunks: 142 / Matches: 30
Scan date: 2023-07-07 06:05:02

Matches

# Iteration Offset Size Section Detail SectionType Conclusion
0 0 517 10 .text DotNet HeaderIMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR DATA Dominant. Modify this to make file undetected
1 0 212570 6 .text methods ::ReleaseHandle CODE Dominant. Modify this to make file undetected
2 0 212584 8 .text Metadata Header DATA Dominant. Modify this to make file undetected

Match 0: 517 (size: 10)

Dominant. Modify this to make file undetected

.text DotNet HeaderIMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR 

00000205   00 05 00 5C 5C 03 00 EC 50 07                      ...\\...P.

Match 1: 212570 (size: 6)

Dominant. Modify this to make file undetected

.text methods ::ReleaseHandle

00033E5A   06 2A 42 53 4A 42                                  .*BSJB

0x33e4f: Function: ::ReleaseHandle
0x33e50: 02 ldarg.0
0x33e51: 7b c4 00 00 0a ldfld System.Runtime.InteropServices.SafeHandle::handle
0x33e56: 28 32 0d 00 06 call CloseHandle
0x33e5b: 2a ret

Match 2: 212584 (size: 8)

Dominant. Modify this to make file undetected

.text Metadata Header 

00033E68   0C 00 00 00 76 34 2E 30                            ....v4.0

Test # MatchOrder ModifyPosition Match#0
DotNet Header 10b 		Match#1
methods 6b 		Match#2
Metadata Header 8b 		Match#3
Metadata Header 5b 		Match#4
#Strings Stream Header 10b 		Match#5
#US 27b 		Match#6
#US 160b 		Match#7
#Blob 45b
0 ISOLATED MIDDLE8
1 ISOLATED THIRDS4
2 ISOLATED FULL
3 ISOLATED FULLB
4 INCREMENTAL MIDDLE8 5 6 7
5 INCREMENTAL FULL 0 1 2 3 4 5 6 7
6 DECREMENTAL FULL 7 6 5 4 3 2 1 0
7 ALL MIDDLE8 0 0 0
8 ALL THIRDS4 0 0 0
9 ALL FULL 0 0 0 0 0 0 0 0
Result

Explanation

Colors

  • Green: Not detected
  • Red: Detected by AV

Match Order

  • Isolated: Test each match individually, by themselves. At most one match is modified per scan
  • Incremental: Modify each match after another, additive. At the end, all matches are modified
  • Decremental: Modify each match after another, additive, downwards (last first)

Position

  • ModifyPosition FULL: Overwrite complete match: MMMMMMMMMMMM
  • ModifyPosition MIDDLE8: Overwrite 8 bytes in the middle of the match (partial): aaaaMMMMMMMMaaaa
  • ModifyPosition THIRD8: Overwrite 8 bytes in the first and second third of the match (partial): aaaaMMMMMMMMaaaaMMMMMMMMaaaa
[INFO    ][2023-07-07 06:04:57,698] main() :: Using file: app/upload/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-07-07 06:04:57,698] handleFile() :: Handle file: app/upload/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-07-07 06:04:57,699] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-07-07 06:04:58,245] getDotNetSections() :: Offset: 7680
[INFO    ][2023-07-07 06:04:58,247] load() :: Loading HashCache
[INFO    ][2023-07-07 06:04:58,365] load() ::   12315 hashes loaded
[INFO    ][2023-07-07 06:05:02,172] handleFile() :: QuickCheck: 40249D63686DCF8A.SharpMapExec.exe is detected by defender and not hash based
[INFO    ][2023-07-07 06:05:02,172] handleFile() :: Scanning for matches...
[INFO    ][2023-07-07 06:05:02,173] scanForMatchesInPe() :: Section Detection: Zero section (leave all others intact)
[INFO    ][2023-07-07 06:05:04,034] findDetectedSections() :: Hide: .rsrc -> Detected: True
[INFO    ][2023-07-07 06:05:05,560] findDetectedSections() :: Hide: methods -> Detected: True
[INFO    ][2023-07-07 06:05:06,803] findDetectedSections() :: Hide: #~ -> Detected: True
[INFO    ][2023-07-07 06:05:08,573] findDetectedSections() :: Hide: #Strings -> Detected: True
[INFO    ][2023-07-07 06:05:10,773] findDetectedSections() :: Hide: #US -> Detected: True
[INFO    ][2023-07-07 06:05:13,030] findDetectedSections() :: Hide: #GUID -> Detected: True
[INFO    ][2023-07-07 06:05:14,885] findDetectedSections() :: Hide: #Blob -> Detected: True
[INFO    ][2023-07-07 06:05:14,885] scanForMatchesInPe() :: 0 section(s) trigger the antivirus independantly
[INFO    ][2023-07-07 06:05:14,885] scanForMatchesInPe() :: Section analysis failed. Fall back to non-section-aware reducer (flat-scan)
[INFO    ][2023-07-07 06:05:14,885] _printStatus() :: Reducing: 1 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:17,084] _printStatus() :: Reducing: 2 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:19,556] _printStatus() :: Reducing: 3 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:22,836] _printStatus() :: Reducing: 4 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:26,189] _printStatus() :: Reducing: 5 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:29,623] _printStatus() :: Reducing: 6 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:33,269] _printStatus() :: Reducing: 7 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:36,821] _printStatus() :: Reducing: 8 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:41,149] _printStatus() :: Reducing: 9 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:45,282] _printStatus() :: Reducing: 10 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:49,250] _printStatus() :: Reducing: 11 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:53,411] _printStatus() :: Reducing: 12 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:05:57,838] _printStatus() :: Reducing: 13 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:06:01,975] _printStatus() :: Reducing: 14 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:06:06,277] _printStatus() :: Reducing: 15 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:06:10,853] _printStatus() :: Reducing: 16 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:06:15,268] _printStatus() :: Reducing: 17 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:06:19,458] _printStatus() :: Reducing: 18 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-07 06:06:19,458] _scanDataPart() :: Result: 517-522 (5 bytes)
00000205   00 05 00 5C 5C                                     ...\\
[INFO    ][2023-07-07 06:06:23,777] _printStatus() :: Reducing: 20 chunks done, found 1 matches (1 added)
[INFO    ][2023-07-07 06:06:23,777] _scanDataPart() :: Result: 522-527 (5 bytes)
0000020A   03 00 EC 50 07                                     ...P.
[INFO    ][2023-07-07 06:06:27,105] _printStatus() :: Reducing: 22 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:30,570] _printStatus() :: Reducing: 23 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:34,077] _printStatus() :: Reducing: 24 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:37,587] _printStatus() :: Reducing: 25 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:41,254] _printStatus() :: Reducing: 26 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:44,708] _printStatus() :: Reducing: 27 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:48,307] _printStatus() :: Reducing: 28 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:52,003] _printStatus() :: Reducing: 29 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:55,695] _printStatus() :: Reducing: 30 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:06:59,123] _printStatus() :: Reducing: 31 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:07:02,614] _printStatus() :: Reducing: 32 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:07:06,217] _printStatus() :: Reducing: 33 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:07:09,663] _printStatus() :: Reducing: 34 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:07:13,287] _printStatus() :: Reducing: 35 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:07:16,980] _printStatus() :: Reducing: 36 chunks done, found 1 matches (2 added)
[INFO    ][2023-07-07 06:07:20,325] _scanDataPart() :: Result: 212570-212576 (6 bytes)
00033E5A   06 2A 42 53 4A 42                                  .*BSJB
[INFO    ][2023-07-07 06:07:20,325] _printStatus() :: Reducing: 37 chunks done, found 2 matches (3 added)
[INFO    ][2023-07-07 06:07:24,289] _printStatus() :: Reducing: 38 chunks done, found 2 matches (3 added)
[INFO    ][2023-07-07 06:07:27,990] _printStatus() :: Reducing: 39 chunks done, found 2 matches (3 added)
[INFO    ][2023-07-07 06:07:27,992] _scanDataPart() :: Result: 212584-212587 (3 bytes)
00033E68   0C 00 00                                           ...
[INFO    ][2023-07-07 06:07:31,547] _printStatus() :: Reducing: 42 chunks done, found 3 matches (4 added)
[INFO    ][2023-07-07 06:07:31,547] _scanDataPart() :: Result: 212587-212592 (5 bytes)
00033E6B   00 76 34 2E 30                                     .v4.0
[INFO    ][2023-07-07 06:07:35,232] _printStatus() :: Reducing: 44 chunks done, found 3 matches (5 added)
[INFO    ][2023-07-07 06:07:39,025] _printStatus() :: Reducing: 45 chunks done, found 3 matches (5 added)
[INFO    ][2023-07-07 06:07:42,857] _printStatus() :: Reducing: 46 chunks done, found 3 matches (5 added)
[INFO    ][2023-07-07 06:07:46,420] _printStatus() :: Reducing: 47 chunks done, found 3 matches (5 added)
[INFO    ][2023-07-07 06:07:50,114] _printStatus() :: Reducing: 48 chunks done, found 3 matches (5 added)
[INFO    ][2023-07-07 06:07:50,115] _scanDataPart() :: Result: 212598-212603 (5 bytes)
00033E76   00 00 00 00 05                                     .....
[INFO    ][2023-07-07 06:07:53,526] _printStatus() :: Reducing: 50 chunks done, found 4 matches (6 added)
[INFO    ][2023-07-07 06:07:57,209] _printStatus() :: Reducing: 51 chunks done, found 4 matches (6 added)
[INFO    ][2023-07-07 06:07:57,209] _scanDataPart() :: Result: 212624-212629 (5 bytes)
00033E90   23 53 74 72 69                                     #Stri
[INFO    ][2023-07-07 06:08:00,847] _printStatus() :: Reducing: 53 chunks done, found 5 matches (7 added)
[INFO    ][2023-07-07 06:08:00,847] _scanDataPart() :: Result: 212629-212634 (5 bytes)
00033E95   6E 67 73 00 00                                     ngs..
[INFO    ][2023-07-07 06:08:03,733] _printStatus() :: Reducing: 55 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:07,275] _printStatus() :: Reducing: 56 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:10,786] _printStatus() :: Reducing: 57 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:13,796] _printStatus() :: Reducing: 58 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:17,232] _printStatus() :: Reducing: 59 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:20,419] _printStatus() :: Reducing: 60 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:24,007] _printStatus() :: Reducing: 61 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:27,253] _printStatus() :: Reducing: 62 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:30,357] _printStatus() :: Reducing: 63 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:33,473] _printStatus() :: Reducing: 64 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:36,379] _printStatus() :: Reducing: 65 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:39,455] _printStatus() :: Reducing: 66 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:42,591] _printStatus() :: Reducing: 67 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:45,688] _printStatus() :: Reducing: 68 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:48,809] _printStatus() :: Reducing: 69 chunks done, found 5 matches (8 added)
[INFO    ][2023-07-07 06:08:51,781] _scanDataPart() :: Result: 527891-527902 (11 bytes)
00080E13   00 65 00 00 17 4C 00 6F 00 67 00                   .e...L.o.g.
[INFO    ][2023-07-07 06:08:51,781] _printStatus() :: Reducing: 70 chunks done, found 6 matches (9 added)
[INFO    ][2023-07-07 06:08:54,638] _scanDataPart() :: Result: 527902-527913 (11 bytes)
00080E1E   6F 00 6E 00 53 00 65 00 72 00 76                   o.n.S.e.r.v
[INFO    ][2023-07-07 06:08:54,638] _printStatus() :: Reducing: 71 chunks done, found 6 matches (10 added)
[INFO    ][2023-07-07 06:08:57,892] _printStatus() :: Reducing: 72 chunks done, found 6 matches (10 added)
[INFO    ][2023-07-07 06:09:00,985] _printStatus() :: Reducing: 73 chunks done, found 6 matches (10 added)
[INFO    ][2023-07-07 06:09:04,501] _printStatus() :: Reducing: 74 chunks done, found 6 matches (10 added)
[INFO    ][2023-07-07 06:09:07,458] _printStatus() :: Reducing: 75 chunks done, found 6 matches (10 added)
[INFO    ][2023-07-07 06:09:10,506] _printStatus() :: Reducing: 76 chunks done, found 6 matches (10 added)
[INFO    ][2023-07-07 06:09:10,506] _scanDataPart() :: Result: 527913-527918 (5 bytes)
00080E29   00 65 00 72 00                                     .e.r.
[INFO    ][2023-07-07 06:09:13,290] _printStatus() :: Reducing: 78 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:16,303] _printStatus() :: Reducing: 79 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:19,653] _printStatus() :: Reducing: 80 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:22,717] _printStatus() :: Reducing: 81 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:25,863] _printStatus() :: Reducing: 82 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:29,012] _printStatus() :: Reducing: 83 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:31,969] _printStatus() :: Reducing: 84 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:34,990] _printStatus() :: Reducing: 85 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:38,006] _printStatus() :: Reducing: 86 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:41,211] _printStatus() :: Reducing: 87 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:44,025] _printStatus() :: Reducing: 88 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:47,183] _printStatus() :: Reducing: 89 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:50,296] _printStatus() :: Reducing: 90 chunks done, found 6 matches (11 added)
[INFO    ][2023-07-07 06:09:53,217] _scanDataPart() :: Result: 594600-594606 (6 bytes)
000912A8   41 00 6D 00 73 00                                  A.m.s.
[INFO    ][2023-07-07 06:09:53,217] _printStatus() :: Reducing: 91 chunks done, found 7 matches (12 added)
[INFO    ][2023-07-07 06:09:56,131] _printStatus() :: Reducing: 92 chunks done, found 7 matches (12 added)
[INFO    ][2023-07-07 06:09:59,193] _scanDataPart() :: Result: 594606-594617 (11 bytes)
000912AE   69 00 55 00 74 00 69 00 6C 00 73                   i.U.t.i.l.s
[INFO    ][2023-07-07 06:09:59,193] _printStatus() :: Reducing: 93 chunks done, found 7 matches (13 added)
[INFO    ][2023-07-07 06:10:02,134] _scanDataPart() :: Result: 594617-594628 (11 bytes)
000912B9   00 27 00 29 00 2E 00 47 00 65 00                   .'.)...G.e.
[INFO    ][2023-07-07 06:10:02,134] _printStatus() :: Reducing: 94 chunks done, found 7 matches (14 added)
[INFO    ][2023-07-07 06:10:05,314] _printStatus() :: Reducing: 95 chunks done, found 7 matches (14 added)
[INFO    ][2023-07-07 06:10:08,240] _printStatus() :: Reducing: 96 chunks done, found 7 matches (14 added)
[INFO    ][2023-07-07 06:10:11,162] _printStatus() :: Reducing: 97 chunks done, found 7 matches (14 added)
[INFO    ][2023-07-07 06:10:14,165] _printStatus() :: Reducing: 98 chunks done, found 7 matches (14 added)
[INFO    ][2023-07-07 06:10:17,017] _printStatus() :: Reducing: 99 chunks done, found 7 matches (14 added)
[INFO    ][2023-07-07 06:10:19,893] _scanDataPart() :: Result: 594628-594638 (10 bytes)
000912C4   74 00 46 00 69 00 65 00 6C 00                      t.F.i.e.l.
[INFO    ][2023-07-07 06:10:19,893] _printStatus() :: Reducing: 100 chunks done, found 7 matches (15 added)
[INFO    ][2023-07-07 06:10:22,766] _scanDataPart() :: Result: 594638-594649 (11 bytes)
000912CE   64 00 28 00 27 00 61 00 6D 00 73                   d.(.'.a.m.s
[INFO    ][2023-07-07 06:10:22,767] _printStatus() :: Reducing: 101 chunks done, found 7 matches (16 added)
[INFO    ][2023-07-07 06:10:25,540] _printStatus() :: Reducing: 102 chunks done, found 7 matches (16 added)
[INFO    ][2023-07-07 06:10:28,482] _scanDataPart() :: Result: 594649-594659 (10 bytes)
000912D9   00 69 00 49 00 6E 00 69 00 74                      .i.I.n.i.t
[INFO    ][2023-07-07 06:10:28,483] _printStatus() :: Reducing: 103 chunks done, found 7 matches (17 added)
[INFO    ][2023-07-07 06:10:31,304] _scanDataPart() :: Result: 594659-594670 (11 bytes)
000912E3   00 46 00 61 00 69 00 6C 00 65 00                   .F.a.i.l.e.
[INFO    ][2023-07-07 06:10:31,304] _printStatus() :: Reducing: 104 chunks done, found 7 matches (18 added)
[INFO    ][2023-07-07 06:10:34,116] _printStatus() :: Reducing: 105 chunks done, found 7 matches (18 added)
[INFO    ][2023-07-07 06:10:36,878] _printStatus() :: Reducing: 106 chunks done, found 7 matches (18 added)
[INFO    ][2023-07-07 06:10:39,660] _scanDataPart() :: Result: 594670-594680 (10 bytes)
000912EE   64 00 27 00 2C 00 27 00 4E 00                      d.'.,.'.N.
[INFO    ][2023-07-07 06:10:39,660] _printStatus() :: Reducing: 107 chunks done, found 7 matches (19 added)
[INFO    ][2023-07-07 06:10:42,537] _scanDataPart() :: Result: 594680-594691 (11 bytes)
000912F8   6F 00 6E 00 50 00 75 00 62 00 6C                   o.n.P.u.b.l
[INFO    ][2023-07-07 06:10:42,537] _printStatus() :: Reducing: 108 chunks done, found 7 matches (20 added)
[INFO    ][2023-07-07 06:10:45,371] _printStatus() :: Reducing: 109 chunks done, found 7 matches (20 added)
[INFO    ][2023-07-07 06:10:48,250] _scanDataPart() :: Result: 594691-594702 (11 bytes)
00091303   00 69 00 63 00 2C 00 53 00 74 00                   .i.c.,.S.t.
[INFO    ][2023-07-07 06:10:48,251] _printStatus() :: Reducing: 110 chunks done, found 7 matches (21 added)
[INFO    ][2023-07-07 06:10:51,034] _scanDataPart() :: Result: 594702-594713 (11 bytes)
0009130E   61 00 74 00 69 00 63 00 27 00 29                   a.t.i.c.'.)
[INFO    ][2023-07-07 06:10:51,034] _printStatus() :: Reducing: 111 chunks done, found 7 matches (22 added)
[INFO    ][2023-07-07 06:10:53,795] _printStatus() :: Reducing: 112 chunks done, found 7 matches (22 added)
[INFO    ][2023-07-07 06:10:56,512] _printStatus() :: Reducing: 113 chunks done, found 7 matches (22 added)
[INFO    ][2023-07-07 06:10:59,387] _printStatus() :: Reducing: 114 chunks done, found 7 matches (22 added)
[INFO    ][2023-07-07 06:11:02,273] _scanDataPart() :: Result: 594713-594723 (10 bytes)
00091319   00 2E 00 53 00 65 00 74 00 56                      ...S.e.t.V
[INFO    ][2023-07-07 06:11:02,273] _printStatus() :: Reducing: 115 chunks done, found 7 matches (23 added)
[INFO    ][2023-07-07 06:11:05,128] _scanDataPart() :: Result: 594723-594734 (11 bytes)
00091323   00 61 00 6C 00 75 00 65 00 28 00                   .a.l.u.e.(.
[INFO    ][2023-07-07 06:11:05,128] _printStatus() :: Reducing: 116 chunks done, found 7 matches (24 added)
[INFO    ][2023-07-07 06:11:07,999] _printStatus() :: Reducing: 117 chunks done, found 7 matches (24 added)
[INFO    ][2023-07-07 06:11:10,811] _scanDataPart() :: Result: 594734-594744 (10 bytes)
0009132E   24 00 6E 00 75 00 6C 00 6C 00                      $.n.u.l.l.
[INFO    ][2023-07-07 06:11:10,811] _printStatus() :: Reducing: 118 chunks done, found 7 matches (25 added)
[INFO    ][2023-07-07 06:11:13,608] _scanDataPart() :: Result: 594744-594755 (11 bytes)
00091338   2C 00 24 00 74 00 72 00 75 00 65                   ,.$.t.r.u.e
[INFO    ][2023-07-07 06:11:13,608] _printStatus() :: Reducing: 119 chunks done, found 7 matches (26 added)
[INFO    ][2023-07-07 06:11:16,745] _printStatus() :: Reducing: 120 chunks done, found 7 matches (26 added)
[WARNING ][2023-07-07 06:11:16,745] _scanDataPart() :: Doubling minMatchSize to 16
[INFO    ][2023-07-07 06:11:19,913] _printStatus() :: Reducing: 121 chunks done, found 7 matches (26 added)
[INFO    ][2023-07-07 06:11:22,926] _printStatus() :: Reducing: 122 chunks done, found 7 matches (26 added)
[INFO    ][2023-07-07 06:11:22,926] _scanDataPart() :: Result: 594755-594760 (5 bytes)
00091343   00 29 00 3B 00                                     .).;.
[INFO    ][2023-07-07 06:11:26,408] _printStatus() :: Reducing: 124 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:29,659] _printStatus() :: Reducing: 125 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:33,013] _printStatus() :: Reducing: 126 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:36,307] _printStatus() :: Reducing: 127 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:39,723] _printStatus() :: Reducing: 128 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:43,112] _printStatus() :: Reducing: 129 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:46,539] _printStatus() :: Reducing: 130 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:49,883] _printStatus() :: Reducing: 131 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:53,388] _printStatus() :: Reducing: 132 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:11:56,586] _printStatus() :: Reducing: 133 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:12:00,091] _printStatus() :: Reducing: 134 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:12:03,519] _printStatus() :: Reducing: 135 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:12:07,092] _printStatus() :: Reducing: 136 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:12:10,538] _printStatus() :: Reducing: 137 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:12:13,898] _printStatus() :: Reducing: 138 chunks done, found 7 matches (27 added)
[INFO    ][2023-07-07 06:12:13,898] _scanDataPart() :: Result: 691625-691628 (3 bytes)
000A8DA9   24 62 64                                           $bd
[INFO    ][2023-07-07 06:12:17,321] _printStatus() :: Reducing: 140 chunks done, found 8 matches (28 added)
[INFO    ][2023-07-07 06:12:20,537] _printStatus() :: Reducing: 141 chunks done, found 8 matches (28 added)
[INFO    ][2023-07-07 06:12:23,711] _scanDataPart() :: Result: 691628-691649 (21 bytes)
000A8DAC   35 32 32 30 66 37 2D 65 31 66 62 2D 34 31 64 32    5220f7-e1fb-41d2
000A8DBC   2D 39 31 65 63                                     -91ec
[INFO    ][2023-07-07 06:12:23,711] _printStatus() :: Reducing: 142 chunks done, found 8 matches (29 added)
[INFO    ][2023-07-07 06:12:26,859] _scanDataPart() :: Result: 691649-691670 (21 bytes)
000A8DC1   2D 65 34 63 35 30 63 36 65 39 62 39 66 00 00 0C    -e4c50c6e9b9f...
000A8DD1   01 00 07 31 2E                                     ...1.
[INFO    ][2023-07-07 06:12:26,860] scan() :: Scan Result: Time:432 Chunks:142 MatchesAdded:30 MatchesFinal:8
[INFO    ][2023-07-07 06:12:26,860] handleFile() :: Result: 8 matches
[INFO    ][2023-07-07 06:12:26,860] saveToFile() :: Saving results to: app/upload/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-07-07 06:12:29,039] save() :: Saving HashCache (12587)
[INFO    ][2023-07-07 06:12:29,136] verifyFile() :: Perform verification of matches
[INFO    ][2023-07-07 06:12:29,136] runVerifications() :: Verify 8 matches
[INFO    ][2023-07-07 06:12:34,695] runVerifications() :: Verification run: 0 MIDDLE8 ISOLATED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED

[INFO    ][2023-07-07 06:12:40,493] runVerifications() :: Verification run: 1 THIRDS4 ISOLATED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED

[INFO    ][2023-07-07 06:12:55,967] runVerifications() :: Verification run: 2 FULL ISOLATED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED

[INFO    ][2023-07-07 06:13:11,664] runVerifications() :: Verification run: 3 FULLB ISOLATED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED

[INFO    ][2023-07-07 06:13:15,337] runVerifications() :: Verification run: 4 MIDDLE8 INCREMENTAL
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  Idx: 5  result: ScanResult.DETECTED
  Idx: 6  result: ScanResult.DETECTED
  Idx: 7  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-07 06:13:26,949] runVerifications() :: Verification run: 5 FULL INCREMENTAL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 1  result: ScanResult.NOT_DETECTED
  Idx: 2  result: ScanResult.NOT_DETECTED
  Idx: 3  result: ScanResult.NOT_DETECTED
  Idx: 4  result: ScanResult.NOT_DETECTED
  Idx: 5  result: ScanResult.NOT_DETECTED
  Idx: 6  result: ScanResult.NOT_DETECTED
  Idx: 7  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-07 06:13:37,514] runVerifications() :: Verification run: 6 FULL DECREMENTAL
  Idx: 7  result: ScanResult.NOT_DETECTED
  Idx: 6  result: ScanResult.NOT_DETECTED
  Idx: 5  result: ScanResult.NOT_DETECTED
  Idx: 4  result: ScanResult.NOT_DETECTED
  Idx: 3  result: ScanResult.NOT_DETECTED
  Idx: 2  result: ScanResult.NOT_DETECTED
  Idx: 1  result: ScanResult.DETECTED
  Idx: 0  result: ScanResult.DETECTED

[INFO    ][2023-07-07 06:13:37,515] runVerifications() :: Verification run: 7 MIDDLE8 ALL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-07 06:13:39,224] runVerifications() :: Verification run: 8 THIRDS4 ALL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-07 06:13:39,226] runVerifications() :: Verification run: 9 FULL ALL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-07 06:13:39,226] saveToFile() :: Saving results to: app/upload/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-07-07 06:13:39,226] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-07-07 06:13:39,766] getDotNetSections() :: Offset: 7680
[INFO    ][2023-07-07 06:13:42,544] disassembleDotNet() :: Match physical 212570/0x33E5A, method disassemblies found: 1
[INFO    ][2023-07-07 06:13:42,558] saveToFile() :: Saving results to: app/upload/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-07-07 06:13:42,559] outflankFile() :: Attempt to outflank the file
[INFO    ][2023-07-07 06:13:42,559] outflankDotnet() :: Outflank failed with attempted 0 patches
[INFO    ][2023-07-07 06:13:42,559] saveToFile() :: Saving results to: app/upload/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-07-07 06:13:42,560] save() :: Saving HashCache (12625)
[INFO    ][2023-07-08 08:55:00,770] main() :: Using file: app/upload/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-07-08 08:55:00,770] handleFile() :: Handle file: app/upload/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-07-08 08:55:00,771] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-07-08 08:55:01,306] getDotNetSections() :: Offset: 7680
[INFO    ][2023-07-08 08:55:01,307] load() :: Loading HashCache
[INFO    ][2023-07-08 08:55:01,450] load() ::   38427 hashes loaded
[INFO    ][2023-07-08 08:55:01,450] save() :: Saving HashCache (38427)
[INFO    ][2023-07-08 08:55:01,488] verifyFile() :: Perform verification of matches
[INFO    ][2023-07-08 08:55:01,489] runVerifications() :: Verify 8 matches
[INFO    ][2023-07-08 08:55:01,492] runVerifications() :: Verification run: 0 MIDDLE8 ISOLATED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED

[INFO    ][2023-07-08 08:55:01,496] runVerifications() :: Verification run: 1 THIRDS4 ISOLATED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED

[INFO    ][2023-07-08 08:55:01,505] runVerifications() :: Verification run: 2 FULL ISOLATED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED

[INFO    ][2023-07-08 08:55:01,514] runVerifications() :: Verification run: 3 FULLB ISOLATED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.DETECTED

[INFO    ][2023-07-08 08:55:01,517] runVerifications() :: Verification run: 4 MIDDLE8 INCREMENTAL
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  Idx: 5  result: ScanResult.DETECTED
  Idx: 6  result: ScanResult.DETECTED
  Idx: 7  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-08 08:55:01,524] runVerifications() :: Verification run: 5 FULL INCREMENTAL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 1  result: ScanResult.NOT_DETECTED
  Idx: 2  result: ScanResult.NOT_DETECTED
  Idx: 3  result: ScanResult.NOT_DETECTED
  Idx: 4  result: ScanResult.NOT_DETECTED
  Idx: 5  result: ScanResult.NOT_DETECTED
  Idx: 6  result: ScanResult.NOT_DETECTED
  Idx: 7  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-08 08:55:01,532] runVerifications() :: Verification run: 6 FULL DECREMENTAL
  Idx: 7  result: ScanResult.NOT_DETECTED
  Idx: 6  result: ScanResult.NOT_DETECTED
  Idx: 5  result: ScanResult.NOT_DETECTED
  Idx: 4  result: ScanResult.NOT_DETECTED
  Idx: 3  result: ScanResult.NOT_DETECTED
  Idx: 2  result: ScanResult.NOT_DETECTED
  Idx: 1  result: ScanResult.DETECTED
  Idx: 0  result: ScanResult.DETECTED

[INFO    ][2023-07-08 08:55:01,533] runVerifications() :: Verification run: 7 MIDDLE8 ALL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-08 08:55:01,534] runVerifications() :: Verification run: 8 THIRDS4 ALL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-08 08:55:01,536] runVerifications() :: Verification run: 9 FULL ALL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-08 08:55:01,536] saveToFile() :: Saving results to: app/upload/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-07-08 08:55:01,536] save() :: Saving HashCache (38427)
[INFO    ][2023-09-01 05:26:38,222] main() :: Using file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-01 05:26:38,223] handleFile() :: Handle file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-01 05:26:38,232] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-09-01 05:26:38,755] getDotNetSections() :: Offset: 7680
[WARNING ][2023-09-01 05:26:38,755] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-01 05:26:38,757] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-01 05:26:38,757] load() :: Loading HashCache
[INFO    ][2023-09-01 05:26:38,955] load() ::   85943 hashes loaded
[INFO    ][2023-09-01 05:26:38,955] save() :: Saving HashCache (85943)
[INFO    ][2023-09-01 05:26:39,039] save() :: Saving HashCache (85943)
[INFO    ][2023-09-24 19:20:55,643] main() :: Using file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-24 19:20:55,643] handleFile() :: Handle file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-24 19:20:55,653] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-09-24 19:20:55,653] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-24 19:20:55,684] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-24 19:20:55,684] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 1 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 3 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 5 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 10 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 12 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-24 19:20:55,684] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[INFO    ][2023-09-24 19:20:55,684] parseDotNetSections() :: FilePe: Parse DotNet Sections
[INFO    ][2023-09-24 19:20:56,176] parseDotNetRegions() :: FilePe: Parse DotNet Regions
[WARNING ][2023-09-24 19:20:56,817] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-24 19:20:56,818] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-24 19:20:56,819] load() :: Loading HashCache
[INFO    ][2023-09-24 19:20:57,023] load() ::   101712 hashes loaded
[INFO    ][2023-09-24 19:20:57,023] save() :: Saving HashCache (101712)
[INFO    ][2023-09-24 19:20:57,118] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-24 19:21:03,993] init() :: DotnetData entries: 23918
[INFO    ][2023-09-24 19:21:03,993] disassembleDotNet() :: Match physical 212570/0x33E5A, method disassemblies found: 1
[INFO    ][2023-09-24 19:21:04,014] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-24 19:21:04,014] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:14:12,935] main() :: Using file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-25 18:14:12,935] handleFile() :: Handle file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-25 18:14:12,936] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-09-25 18:14:12,936] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-25 18:14:12,965] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-25 18:14:12,965] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-25 18:14:12,965] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 1 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 3 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 5 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 10 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 12 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-25 18:14:12,966] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[INFO    ][2023-09-25 18:14:12,966] parseDotNetSections() :: FilePe: Parse DotNet Sections
[INFO    ][2023-09-25 18:14:13,449] parseDotNetRegions() :: FilePe: Parse DotNet Regions
[WARNING ][2023-09-25 18:14:14,081] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-25 18:14:14,082] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-25 18:14:14,083] load() :: Loading HashCache
[INFO    ][2023-09-25 18:14:14,289] load() ::   101712 hashes loaded
[INFO    ][2023-09-25 18:14:14,289] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:14:14,387] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-25 18:14:21,487] init() :: DotnetData entries: 23918
[INFO    ][2023-09-25 18:14:21,487] disassembleDotNet() :: Match physical 212570/0x33E5A, method disassemblies found: 1
[INFO    ][2023-09-25 18:14:21,508] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-25 18:14:21,508] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:21:14,705] main() :: Using file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-25 18:21:14,705] handleFile() :: Handle file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-25 18:21:14,706] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-09-25 18:21:14,706] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-25 18:21:14,734] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-25 18:21:14,734] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 1 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 3 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 5 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 10 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 12 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-25 18:21:14,735] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[INFO    ][2023-09-25 18:21:14,735] parseDotNetSections() :: FilePe: Parse DotNet Sections
[INFO    ][2023-09-25 18:21:15,220] parseDotNetRegions() :: FilePe: Parse DotNet Regions
[WARNING ][2023-09-25 18:21:15,850] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-25 18:21:15,852] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-25 18:21:15,852] load() :: Loading HashCache
[INFO    ][2023-09-25 18:21:16,059] load() ::   101712 hashes loaded
[INFO    ][2023-09-25 18:21:16,059] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:21:16,156] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-25 18:21:23,243] init() :: DotnetData entries: 23918
[INFO    ][2023-09-25 18:21:23,243] disassembleDotNet() :: Match physical 212570/0x33E5A, method disassemblies found: 1
[INFO    ][2023-09-25 18:21:23,263] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-25 18:21:23,264] save() :: Saving HashCache (101712)
[INFO    ][2023-09-29 10:06:50,739] main() :: Using file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-29 10:06:50,739] handleFile() :: Handle file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-29 10:06:50,740] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-09-29 10:06:50,741] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-29 10:06:50,769] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-29 10:06:50,769] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 1 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 3 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 5 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 10 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,769] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,770] parsePeRegions() :: Data Directory Section 12 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,770] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-29 10:06:50,770] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[INFO    ][2023-09-29 10:06:50,770] parseDotNetSections() :: FilePe: Parse DotNet Sections
[WARNING ][2023-09-29 10:06:51,257] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-29 10:06:51,258] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-29 10:06:51,259] load() :: Loading HashCache
[INFO    ][2023-09-29 10:06:51,485] load() ::   102070 hashes loaded
[INFO    ][2023-09-29 10:06:51,485] save() :: Saving HashCache (102070)
[INFO    ][2023-09-29 10:06:51,580] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-29 10:06:58,685] init() :: DotnetData entries: 23918
[INFO    ][2023-09-29 10:06:58,686] disassembleDotNet() :: Match physical 212570/0x33E5A, method disassemblies found: 1
[INFO    ][2023-09-29 10:06:58,707] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-29 10:06:58,707] save() :: Saving HashCache (102070)
[INFO    ][2023-09-29 12:11:24,099] main() :: Using file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-29 12:11:24,099] handleFile() :: Handle file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-29 12:11:24,100] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-09-29 12:11:24,100] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-29 12:11:24,130] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-29 12:11:24,130] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-29 12:11:24,130] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,130] parsePeRegions() :: Data Directory Section 1 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,130] parsePeRegions() :: Data Directory Section 3 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,130] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,130] parsePeRegions() :: Data Directory Section 5 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,130] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,130] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,131] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,131] parsePeRegions() :: Data Directory Section 10 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,131] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,131] parsePeRegions() :: Data Directory Section 12 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,131] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-29 12:11:24,131] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[INFO    ][2023-09-29 12:11:24,131] parseDotNetSections() :: FilePe: Parse DotNet Sections
[WARNING ][2023-09-29 12:11:24,619] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-29 12:11:24,621] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-29 12:11:24,621] load() :: Loading HashCache
[INFO    ][2023-09-29 12:11:24,850] load() ::   102070 hashes loaded
[INFO    ][2023-09-29 12:11:24,850] save() :: Saving HashCache (102070)
[INFO    ][2023-09-29 12:11:24,946] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-29 12:11:32,078] init() :: DotnetData entries: 23918
[INFO    ][2023-09-29 12:11:32,079] disassembleDotNet() :: Match physical 212570/0x33E5A, method disassemblies found: 1
[INFO    ][2023-09-29 12:11:32,100] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-29 12:11:32,101] save() :: Saving HashCache (102070)
[INFO    ][2023-09-30 10:32:18,791] main() :: Using file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-30 10:32:18,791] handleFile() :: Handle file: app/examples/40249D63686DCF8A.SharpMapExec.exe
[INFO    ][2023-09-30 10:32:18,792] handleFile() :: Using parser for file type DOTNET
[INFO    ][2023-09-30 10:32:18,793] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-30 10:32:18,821] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-30 10:32:18,821] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 1 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 3 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 5 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 10 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 12 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-30 10:32:18,821] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[INFO    ][2023-09-30 10:32:18,821] parseDotNetSections() :: FilePe: Parse DotNet Sections
[WARNING ][2023-09-30 10:32:19,313] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-30 10:32:19,314] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-30 10:32:19,315] load() :: Loading HashCache
[INFO    ][2023-09-30 10:32:19,545] load() ::   102072 hashes loaded
[INFO    ][2023-09-30 10:32:19,545] save() :: Saving HashCache (102072)
[INFO    ][2023-09-30 10:32:19,647] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-30 10:32:26,810] init() :: DotnetData entries: 23918
[INFO    ][2023-09-30 10:32:26,810] disassembleDotNet() :: Match physical 212570/0x33E5A, method disassemblies found: 1
[INFO    ][2023-09-30 10:32:26,832] saveToFile() :: Saving results to: app/examples/40249D63686DCF8A.SharpMapExec.exe.outcome
[INFO    ][2023-09-30 10:32:26,832] save() :: Saving HashCache (102072)