File A1600B802F00BF67.lazagne.exe

Name: A1600B802F00BF67.lazagne.exe
Size: 6,635,326 bytes
Type: EXE PE64
MD5: 68d3bf2c363144ec6874ab360fdda00a
Scanner Name: defender
Appraisal: Fragile (AND) based
Scan Debug: Duration: 184s / Chunks: 176 / Matches: 55
Scan date: 2023-07-21 15:11:40

Matches

# Iteration Offset Size Section Detail SectionType Conclusion
1 0 137993 16 .rdata IMAGE_DIRECTORY_ENTRY_IAT DATA Dominant. Modify this to make file undetected
2 0 139213 31 .rdata DATA Dominant. Modify this to make file undetected
3 0 158901 76 .rdata DATA Dominant. Modify this to make file undetected
4 0 158993 30 .rdata DATA Dominant. Modify this to make file undetected
5 0 196935 30 .rdata IMAGE_DIRECTORY_ENTRY_IMPORT DATA Dominant. Modify this to make file undetected
6 0 196980 748 .rdata IMAGE_DIRECTORY_ENTRY_IMPORT DATA Dominant. Modify this to make file undetected
7 0 197758 183 .rdata DATA Dominant. Modify this to make file undetected
8 0 198033 61 .rdata DATA Dominant. Modify this to make file undetected
9 0 198124 61 .rdata DATA Dominant. Modify this to make file undetected
10 0 198277 61 .rdata DATA Dominant. Modify this to make file undetected
11 0 198368 153 .rdata DATA Dominant. Modify this to make file undetected
12 0 198551 92 .rdata DATA Dominant. Modify this to make file undetected
13 0 198734 92 .rdata DATA Dominant. Modify this to make file undetected
14 0 199070 61 .rdata DATA Dominant. Modify this to make file undetected
15 0 199161 61 .rdata DATA Dominant. Modify this to make file undetected
16 0 199375 152 .rdata DATA Dominant. Modify this to make file undetected
17 1 201321 6 .data DATA Dominant. Modify this to make file undetected

Match 1: 137993 (size: 16)

Dominant. Modify this to make file undetected

.rdata IMAGE_DIRECTORY_ENTRY_IAT

00021B09   00 00 00 00 00 00 00 F0 8F 00 40 01 00 00 00 E0    ..........@.....

Match 2: 139213 (size: 31)

Dominant. Modify this to make file undetected

.rdata 

00021FCD   61 6C 6C 6F 63 00 00 00 00 00 00 5F 4D 45 49 50    alloc......_MEIP
00021FDD   41 53 53 32 00 00 00 00 00 00 00 43 61 6E 6E       ASS2.......Cann

0x21fe8: main 0x140002655 [DATA:r--] lea rcx, str.Cannot_open_self__s_or_archive__s_n
0x21fcc: main 0x14000257b [DATA:r--] lea rcx, str.calloc
0x21fd8: main 0x1400025ce [DATA:r--] lea rcx, str._MEIPASS2 main 0x1400025da [DATA:r--] lea rcx, str._MEIPASS2 main 0x140002767 [DATA:r--] lea rcx, str._MEIPASS2 main 0x140002777 [DATA:r--] lea rcx, str._MEIPASS2

Match 3: 158901 (size: 76)

Dominant. Modify this to make file undetected

.rdata 

00026CB5   00 00 00 00 00 00 00 00 00 00 00 14 65 01 40 01    ............e.@.
00026CC5   00 00 00 D4 65 01 40 01 00 00 00 54 2E 01 40 01    ....e.@....T..@.
00026CD5   00 00 00 54 2E 01 40 01 00 00 00 B8 8F 01 40 01    ...T..@.......@.
00026CE5   00 00 00 1C 90 01 40 01 00 00 00 CC BC 01 40 01    ......@.......@.
00026CF5   00 00 00 E8 BC 01 40 01 00 00 00 00                ......@.....

Match 4: 158993 (size: 30)

Dominant. Modify this to make file undetected

.rdata 

00026D11   71 01 40 01 00 00 00 50 71 01 40 01 00 00 00 88    q.@....Pq.@.....
00026D21   51 01 40 01 00 00 00 C4 51 01 40 01 00 00          Q.@.....Q.@...

Match 5: 196935 (size: 30)

Dominant. Modify this to make file undetected

.rdata IMAGE_DIRECTORY_ENTRY_IMPORT

00030147   00 00 00 00 00 00 00 00 00 1A 1E 03 00 00 30 02    ..............0.
00030157   00 80 1C 03 00 00 00 00 00 00 00 00 00 28          .............(

Match 6: 196980 (size: 748)

Dominant. Modify this to make file undetected

.rdata IMAGE_DIRECTORY_ENTRY_IMPORT

00030174   00 00 00 00 00 00 00 00 00 00 00 00 90 1C 03 00    ................
00030184   00 00 00 00 A0 1C 03 00 00 00 00 00 B4 1C 03 00    ................
00030194   00 00 00 00 CA 1C 03 00 00 00 00 00 DC 1C 03 00    ................
000301A4   00 00 00 00 EE 1C 03 00 00 00 00 00 08 1D 03 00    ................
000301B4   00 00 00 00 22 1D 03 00 00 00 00 00 3E 1D 03 00    ....".......>...
000301C4   00 00 00 00 4E 1D 03 00 00 00 00 00 64 1D 03 00    ....N.......d...
000301D4   00 00 00 00 6C 1D 03 00 00 00 00 00 82 1D 03 00    ....l...........
000301E4   00 00 00 00 94 1D 03 00 00 00 00 00 A6 1D 03 00    ................
000301F4   00 00 00 00 B8 1D 03 00 00 00 00 00 CC 1D 03 00    ................
00030204   00 00 00 00 DE 1D 03 00 00 00 00 00 EE 1D 03 00    ................
00030214   00 00 00 00 04 1E 03 00 00 00 00 00 A6 23 03 00    .............#..
00030224   00 00 00 00 98 23 03 00 00 00 00 00 34 1E 03 00    .....#......4...
00030234   00 00 00 00 48 1E 03 00 00 00 00 00 62 1E 03 00    ....H.......b...
00030244   00 00 00 00 76 1E 03 00 00 00 00 00 92 1E 03 00    ....v...........
00030254   00 00 00 00 B0 1E 03 00 00 00 00 00 C4 1E 03 00    ................
00030264   00 00 00 00 D8 1E 03 00 00 00 00 00 F4 1E 03 00    ................
00030274   00 00 00 00 0E 1F 03 00 00 00 00 00 24 1F 03 00    ............$...
00030284   00 00 00 00 3A 1F 03 00 00 00 00 00 54 1F 03 00    ....:.......T...
00030294   00 00 00 00 6A 1F 03 00 00 00 00 00 7E 1F 03 00    ....j.......~...
000302A4   00 00 00 00 92 1F 03 00 00 00 00 00 A0 1F 03 00    ................
000302B4   00 00 00 00 B0 1F 03 00 00 00 00 00 C8 1F 03 00    ................
000302C4   00 00 00 00 E0 1F 03 00 00 00 00 00 F8 1F 03 00    ................
000302D4   00 00 00 00 20 20 03 00 00 00 00 00 2C 20 03 00    ....  ......, ..
000302E4   00 00 00 00 3A 20 03 00 00 00 00 00 48 20 03 00    ....: ......H ..
000302F4   00 00 00 00 52 20 03 00 00 00 00 00 60 20 03 00    ....R ......` ..
00030304   00 00 00 00 72 20 03 00 00 00 00 00 7E 20 03 00    ....r ......~ ..
00030314   00 00 00 00 8C 20 03 00 00 00 00 00 9C 20 03 00    ..... ....... ..
00030324   00 00 00 00 AA 20 03 00 00 00 00 00 B8 20 03 00    ..... ....... ..
00030334   00 00 00 00 C8 20 03 00 00 00 00 00 EA 20 03 00    ..... ....... ..
00030344   00 00 00 00 02 21 03 00 00 00 00 00 16 21 03 00    .....!.......!..
00030354   00 00 00 00 2A 21 03 00 00 00 00 00 3E 21 03 00    ....*!......>!..
00030364   00 00 00 00 52 21 03 00 00 00 00 00 5E 21 03 00    ....R!......^!..
00030374   00 00 00 00 72 21 03 00 00 00 00 00 82 21 03 00    ....r!.......!..
00030384   00 00 00 00 92 21 03 00 00 00 00 00 AA 21 03 00    .....!.......!..
00030394   00 00 00 00 B8 21 03 00 00 00 00 00 C8 21 03 00    .....!.......!..
000303A4   00 00 00 00 D4 21 03 00 00 00 00 00 E2 21 03 00    .....!.......!..
000303B4   00 00 00 00 F8 21 03 00 00 00 00 00 02 22 03 00    .....!......."..
000303C4   00 00 00 00 0E 22 03 00 00 00 00 00 1A 22 03 00    ....."......."..
000303D4   00 00 00 00 2C 22 03 00 00 00 00 00 3C 22 03 00    ....,"......<"..
000303E4   00 00 00 00 50 22 03 00 00 00 00 00 60 22 03 00    ....P"......`"..
000303F4   00 00 00 00 72 22 03 00 00 00 00 00 82 22 03 00    ....r"......."..
00030404   00 00 00 00 9A 22 03 00 00 00 00 00 AE 22 03 00    ....."......."..
00030414   00 00 00 00 C8 22 03 00 00 00 00 00 E0 22 03 00    ....."......."..
00030424   00 00 00 00 F2 22 03 00 00 00 00 00 FE 22 03 00    ....."......."..
00030434   00 00 00 00 0A 23 03 00 00 00 00 00 24 23 03 00    .....#......$#..
00030444   00 00 00 00 3E 23 03 00 00 00 00 00 50 23 03 00    ....>#......P#..
00030454   00 00 00 00 62 23 03 00 00 00 00 00                ....b#......

Match 7: 197758 (size: 183)

Dominant. Modify this to make file undetected

.rdata 

0003047E   00 00 0E 00 00 00 00 00 00 80 00 00 00 00 00 00    ................
0003048E   00 00 56 02 47 65 74 4C 61 73 74 45 72 72 6F 72    ..V.GetLastError
0003049E   00 00 F7 04 53 65 74 44 6C 6C 44 69 72 65 63 74    ....SetDllDirect
000304AE   6F 72 79 57 00 00 69 02 47 65 74 4D 6F 64 75 6C    oryW..i.GetModul
000304BE   65 46 69 6C 65 4E 61 6D 65 57 00 00 A4 02 47 65    eFileNameW....Ge
000304CE   74 50 72 6F 63 41 64 64 72 65 73 73 00 00 CF 01    tProcAddress....
000304DE   47 65 74 43 6F 6D 6D 61 6E 64 4C 69 6E 65 57 00    GetCommandLineW.
000304EE   30 02 47 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74    0.GetEnvironment
000304FE   56 61 72 69 61 62 6C 65 57 00 FD 04 53 65 74 45    VariableW...SetE
0003050E   6E 76 69 72 6F 6E 6D 65 6E 74 56 61 72 69 61 62    nvironmentVariab
0003051E   6C 65 57 00 5B 01 45 78 70 61 6E 64 45 6E 76 69    leW.[.ExpandEnvi
0003052E   72 6F 6E 6D 65 6E 74                               ronment

0x30492:
0x304a2:
0x304b6:
0x304cc:
0x3050a:
0x304de:
0x30524:
0x304f0:

Match 8: 198033 (size: 61)

Dominant. Modify this to make file undetected

.rdata 

00030591   57 00 00 C5 02 47 65 74 53 74 61 72 74 75 70 49    W....GetStartupI
000305A1   6E 66 6F 57 00 AA 03 4C 6F 61 64 4C 69 62 72 61    nfoW...LoadLibra
000305B1   72 79 45 78 57 00 00 C2 02 47 65 74 53 68 6F 72    ryExW....GetShor
000305C1   74 50 61 74 68 4E 61 6D 65 57 00 A0 01             tPathNameW...

0x30584:
0x305a8:
0x305ba:
0x30596:

Match 9: 198124 (size: 61)

Dominant. Modify this to make file undetected

.rdata 

000305EC   00 00 D4 03 4D 75 6C 74 69 42 79 74 65 54 6F 57    ....MultiByteToW
000305FC   69 64 65 43 68 61 72 00 DD 05 57 69 64 65 43 68    ideChar...WideCh
0003060C   61 72 54 6F 4D 75 6C 74 69 42 79 74 65 00 4B 45    arToMultiByte.KE
0003061C   52 4E 45 4C 33 32 2E 64 6C 6C 00 00 57             RNEL32.dll..W

0x305e0:
0x305f0:
0x3061a:
0x30628:
0x30606:

Match 10: 198277 (size: 61)

Dominant. Modify this to make file undetected

.rdata 

00030685   70 74 69 6F 6E 46 69 6C 74 65 72 00 00 52 05 53    ptionFilter..R.S
00030695   65 74 55 6E 68 61 6E 64 6C 65 64 45 78 63 65 70    etUnhandledExcep
000306A5   74 69 6F 6E 46 69 6C 74 65 72 00 0F 02 47 65 74    tionFilter...Get
000306B5   43 75 72 72 65 6E 74 50 72 6F 63 65 73             CurrentProces

0x306b2:
0x30694:
0x30678:

Match 11: 198368 (size: 153)

Dominant. Modify this to make file undetected

.rdata 

000306E0   65 73 73 6F 72 46 65 61 74 75 72 65 50 72 65 73    essorFeaturePres
000306F0   65 6E 74 00 30 04 51 75 65 72 79 50 65 72 66 6F    ent.0.QueryPerfo
00030700   72 6D 61 6E 63 65 43 6F 75 6E 74 65 72 00 10 02    rmanceCounter...
00030710   47 65 74 43 75 72 72 65 6E 74 50 72 6F 63 65 73    GetCurrentProces
00030720   73 49 64 00 14 02 47 65 74 43 75 72 72 65 6E 74    sId...GetCurrent
00030730   54 68 72 65 61 64 49 64 00 00 DD 02 47 65 74 53    ThreadId....GetS
00030740   79 73 74 65 6D 54 69 6D 65 41 73 46 69 6C 65 54    ystemTimeAsFileT
00030750   69 6D 65 00 54 03 49 6E 69 74 69 61 6C 69 7A 65    ime.T.Initialize
00030760   53 4C 69 73 74 48 65 61 64 00 6A 03 49 73 44 65    SListHead.j.IsDe
00030770   62 75 67 67 65 72 50 72 65                         buggerPre

0x3076c:
0x30710:
0x30756:
0x306f6:
0x306da:
0x3073c:
0x30726:

Match 12: 198551 (size: 92)

Dominant. Modify this to make file undetected

.rdata 

00030797   55 6E 77 69 6E 64 45 78 00 19 05 53 65 74 4C 61    UnwindEx...SetLa
000307A7   73 74 45 72 72 6F 72 00 00 29 01 45 6E 74 65 72    stError..).Enter
000307B7   43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00    CriticalSection.
000307C7   00 A5 03 4C 65 61 76 65 43 72 69 74 69 63 61 6C    ...LeaveCritical
000307D7   53 65 63 74 69 6F 6E 00 00 06 01 44 65 6C 65 74    Section....Delet
000307E7   65 43 72 69 74 69 63 61 6C 53 65 63                eCriticalSec

0x307b2:
0x307a2:
0x307ca:
0x307e2:
0x30794:

Match 13: 198734 (size: 92)

Dominant. Modify this to make file undetected

.rdata 

0003084E   72 65 65 00 A4 01 46 72 65 65 4C 69 62 72 61 72    ree...FreeLibrar
0003085E   79 00 CE 01 47 65 74 43 6F 6D 6D 61 6E 64 4C 69    y...GetCommandLi
0003086E   6E 65 41 00 54 04 52 65 61 64 46 69 6C 65 00 00    neA.T.ReadFile..
0003087E   C2 00 43 72 65 61 74 65 46 69 6C 65 57 00 26 02    ..CreateFileW.&.
0003088E   47 65 74 44 72 69 76 65 54 79 70 65 57 00 45 02    GetDriveTypeW.E.
0003089E   47 65 74 46 69 6C 65 54 79 70 65 00                GetFileType.

0x30862:
0x3088e:
0x30874:
0x30880:
0x3084a:
0x30854:
0x3089e:

Match 14: 199070 (size: 61)

Dominant. Modify this to make file undetected

.rdata 

0003099E   43 74 72 6C 48 61 6E 64 6C 65 72 00 0B 01 44 65    CtrlHandler...De
000309AE   6C 65 74 65 46 69 6C 65 57 00 C7 02 47 65 74 53    leteFileW...GetS
000309BE   74 64 48 61 6E 64 6C 65 00 00 F1 05 57 72 69 74    tdHandle....Writ
000309CE   65 46 69 6C 65 00 57 01 45 78 69 74 50             eFile.W.ExitP

0x309ac:
0x309ca:
0x309ba:
0x30994:
0x309d6:

Match 15: 199161 (size: 61)

Dominant. Modify this to make file undetected

.rdata 

000309F9   01 47 65 74 41 43 50 00 00 3C 03 48 65 61 70 46    .GetACP..<.HeapF
00030A09   72 65 65 00 00 38 03 48 65 61 70 41 6C 6C 6F 63    ree..8.HeapAlloc
00030A19   00 F4 01 47 65 74 43 6F 6E 73 6F 6C 65 4D 6F 64    ...GetConsoleMod
00030A29   65 00 00 52 04 52 65 61 64 43 6F 6E 73             e..R.ReadCons

0x309fa:
0x30a1c:
0x30a10:
0x30a04:
0x30a2e:

Match 16: 199375 (size: 152)

Dominant. Modify this to make file undetected

.rdata 

00030ACF   6C 65 41 74 74 72 69 62 75 74 65 73 45 78 57 00    leAttributesExW.
00030ADF   00 75 03 49 73 56 61 6C 69 64 43 6F 64 65 50 61    .u.IsValidCodePa
00030AEF   67 65 00 8D 02 47 65 74 4F 45 4D 43 50 00 00 B9    ge...GetOEMCP...
00030AFF   01 47 65 74 43 50 49 6E 66 6F 00 2E 02 47 65 74    .GetCPInfo...Get
00030B0F   45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E    EnvironmentStrin
00030B1F   67 73 57 00 00 A3 01 46 72 65 65 45 6E 76 69 72    gsW....FreeEnvir
00030B2F   6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 57 00 CC    onmentStringsW..
00030B3F   02 47 65 74 53 74 72 69 6E 67 54 79 70 65 57 00    .GetStringTypeW.
00030B4F   00 A9 02 47 65 74 50 72 6F 63 65 73 73 48 65 61    ...GetProcessHea
00030B5F   70 00 00 F0 05 57 72 69                            p....Wri

0x30ae2:
0x30b40:
0x30af4:
0x30b0c:
0x30aca:
0x30b26:
0x30b64:
0x30b52:
0x30b00:

Match 17: 201321 (size: 6)

Dominant. Modify this to make file undetected

.data 

00031269   34 03 40 01 00 00                                  4.@...

Test # MatchOrder ModifyPosition Match#0
.rdata 15b 		Match#1
.rdata 16b 		Match#2
.rdata 31b 		Match#3
.rdata 76b 		Match#4
.rdata 30b 		Match#5
.rdata 30b 		Match#6
.rdata 748b 		Match#7
.rdata 183b 		Match#8
.rdata 61b 		Match#9
.rdata 61b 		Match#10
.rdata 61b 		Match#11
.rdata 153b 		Match#12
.rdata 92b 		Match#13
.rdata 92b 		Match#14
.rdata 61b 		Match#15
.rdata 61b 		Match#16
.rdata 152b 		Match#17
.data 6b
0 ISOLATED MIDDLE8
1 ISOLATED THIRDS4
2 ISOLATED FULL
3 ISOLATED FULLB
4 INCREMENTAL MIDDLE8 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
5 INCREMENTAL FULL 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
6 DECREMENTAL FULL 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
7 ALL MIDDLE8 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
8 ALL THIRDS4 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
9 ALL FULL 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Result

Explanation

Colors

  • Green: Not detected
  • Red: Detected by AV

Match Order

  • Isolated: Test each match individually, by themselves. At most one match is modified per scan
  • Incremental: Modify each match after another, additive. At the end, all matches are modified
  • Decremental: Modify each match after another, additive, downwards (last first)

Position

  • ModifyPosition FULL: Overwrite complete match: MMMMMMMMMMMM
  • ModifyPosition MIDDLE8: Overwrite 8 bytes in the middle of the match (partial): aaaaMMMMMMMMaaaa
  • ModifyPosition THIRD8: Overwrite 8 bytes in the first and second third of the match (partial): aaaaMMMMMMMMaaaaMMMMMMMMaaaa
[INFO    ][2023-07-21 15:11:03,791] main() :: Using file: app/upload/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-07-21 15:11:03,792] handleFile() :: Handle file: app/upload/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-07-21 15:11:03,793] handleFile() :: Using parser for file type EXE
[INFO    ][2023-07-21 15:11:04,105] handleFile() :: Using scanner from command line: defender
[INFO    ][2023-07-21 15:11:04,117] load() :: Loading HashCache
[INFO    ][2023-07-21 15:11:04,175] load() ::   53126 hashes loaded
[INFO    ][2023-07-21 15:11:40,229] handleFile() :: QuickCheck: A1600B802F00BF67.lazagne.exe is detected by defender and not hash based
[INFO    ][2023-07-21 15:11:40,231] handleFile() :: Scanning for matches...
[INFO    ][2023-07-21 15:11:40,231] scanForMatchesInPe() :: Section Detection: Zero section (leave all others intact)
[INFO    ][2023-07-21 15:11:40,241] findDetectedSections() :: Hide: .text -> Detected: True
[INFO    ][2023-07-21 15:11:40,252] findDetectedSections() :: Hide: .rdata -> Detected: False
[INFO    ][2023-07-21 15:11:40,261] findDetectedSections() :: Hide: .data -> Detected: False
[INFO    ][2023-07-21 15:11:40,271] findDetectedSections() :: Hide: .pdata -> Detected: True
[INFO    ][2023-07-21 15:11:40,281] findDetectedSections() :: Hide: .gfids -> Detected: True
[INFO    ][2023-07-21 15:11:40,291] findDetectedSections() :: Hide: .rsrc -> Detected: True
[INFO    ][2023-07-21 15:11:40,301] findDetectedSections() :: Hide: .reloc -> Detected: True
[INFO    ][2023-07-21 15:11:51,909] findDetectedSections() :: Hide: Header -> Detected: False
[INFO    ][2023-07-21 15:11:51,912] scanForMatchesInPe() :: 2 section(s) trigger the antivirus independantly
[INFO    ][2023-07-21 15:11:51,912] scanForMatchesInPe() ::   section: .rdata
[INFO    ][2023-07-21 15:11:51,912] scanForMatchesInPe() ::   section: .data
[INFO    ][2023-07-21 15:12:39,772] scanForMatchesInPe() :: Launching bytes analysis on section: .rdata (137216-199680)
[INFO    ][2023-07-21 15:12:39,774] scan() :: Reducer Start: ScanSpeed:Normal Iteration:0 MinChunkSize:8 MinMatchSize:16
[INFO    ][2023-07-21 15:12:39,774] _printStatus() :: Reducing: 1 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-21 15:12:40,031] _scanDataPart() :: Result: 137216-137231 (15b minChunk:8 X)
00021800   90 1C 03 00 00 00 00 00 A0 1C 03 00 00 00 00       ...............
[INFO    ][2023-07-21 15:12:40,133] _scanDataPart() :: Result: 137993-138009 (16b minChunk:8 X)
00021B09   00 00 00 00 00 00 00 F0 8F 00 40 01 00 00 00 E0    ..........@.....
[INFO    ][2023-07-21 15:12:40,280] _scanDataPart() :: Result: 139213-139229 (16b minChunk:8 X)
00021FCD   61 6C 6C 6F 63 00 00 00 00 00 00 5F 4D 45 49 50    alloc......_MEIP
[INFO    ][2023-07-21 15:12:40,318] _scanDataPart() :: Result: 139229-139244 (15b minChunk:8 X)
00021FDD   41 53 53 32 00 00 00 00 00 00 00 43 61 6E 6E       ASS2.......Cann
[INFO    ][2023-07-21 15:12:40,533] _scanDataPart() :: Result: 158901-158932 (31 bytes)
00026CB5   00 00 00 00 00 00 00 00 00 00 00 14 65 01 40 01    ............e.@.
00026CC5   00 00 00 D4 65 01 40 01 00 00 00 54 2E 01 40       ....e.@....T..@
[INFO    ][2023-07-21 15:12:40,615] _scanDataPart() :: Result: 158932-158962 (30 bytes)
00026CD4   01 00 00 00 54 2E 01 40 01 00 00 00 B8 8F 01 40    ....T..@.......@
00026CE4   01 00 00 00 1C 90 01 40 01 00 00 00 CC BC          .......@......
[INFO    ][2023-07-21 15:12:40,635] _scanDataPart() :: Result: 158962-158977 (15b minChunk:8 X)
00026CF2   01 40 01 00 00 00 E8 BC 01 40 01 00 00 00 00       .@.......@.....
[INFO    ][2023-07-21 15:12:40,674] _scanDataPart() :: Result: 158993-159023 (30 bytes)
00026D11   71 01 40 01 00 00 00 50 71 01 40 01 00 00 00 88    q.@....Pq.@.....
00026D21   51 01 40 01 00 00 00 C4 51 01 40 01 00 00          Q.@.....Q.@...
[INFO    ][2023-07-21 15:12:40,907] _scanDataPart() :: Result: 196935-196965 (30 bytes)
00030147   00 00 00 00 00 00 00 00 00 1A 1E 03 00 00 30 02    ..............0.
00030157   00 80 1C 03 00 00 00 00 00 00 00 00 00 28          .............(
[INFO    ][2023-07-21 15:12:40,927] _scanDataPart() :: Result: 196980-196996 (16b minChunk:8 X)
00030174   00 00 00 00 00 00 00 00 00 00 00 00 90 1C 03 00    ................
[INFO    ][2023-07-21 15:12:41,010] _scanDataPart() :: Result: 196996-197026 (30 bytes)
00030184   00 00 00 00 A0 1C 03 00 00 00 00 00 B4 1C 03 00    ................
00030194   00 00 00 00 CA 1C 03 00 00 00 00 00 DC 1C          ..............
[INFO    ][2023-07-21 15:12:41,029] _scanDataPart() :: Result: 197026-197057 (31 bytes)
000301A2   03 00 00 00 00 00 EE 1C 03 00 00 00 00 00 08 1D    ................
000301B2   03 00 00 00 00 00 22 1D 03 00 00 00 00 00 3E       ......".......>
[INFO    ][2023-07-21 15:12:41,067] _scanDataPart() :: Result: 197057-197087 (30 bytes)
000301C1   1D 03 00 00 00 00 00 4E 1D 03 00 00 00 00 00 64    .......N.......d
000301D1   1D 03 00 00 00 00 00 6C 1D 03 00 00 00 00          .......l......
[INFO    ][2023-07-21 15:12:41,086] _scanDataPart() :: Result: 197087-197118 (31 bytes)
000301DF   00 82 1D 03 00 00 00 00 00 94 1D 03 00 00 00 00    ................
000301EF   00 A6 1D 03 00 00 00 00 00 B8 1D 03 00 00 00       ...............
[INFO    ][2023-07-21 15:12:41,153] _scanDataPart() :: Result: 197118-197148 (30 bytes)
000301FE   00 00 CC 1D 03 00 00 00 00 00 DE 1D 03 00 00 00    ................
0003020E   00 00 EE 1D 03 00 00 00 00 00 04 1E 03 00          ..............
[INFO    ][2023-07-21 15:12:41,172] _scanDataPart() :: Result: 197148-197179 (31 bytes)
0003021C   00 00 00 00 A6 23 03 00 00 00 00 00 98 23 03 00    .....#.......#..
0003022C   00 00 00 00 34 1E 03 00 00 00 00 00 48 1E 03       ....4.......H..
[INFO    ][2023-07-21 15:12:41,210] _scanDataPart() :: Result: 197179-197209 (30 bytes)
0003023B   00 00 00 00 00 62 1E 03 00 00 00 00 00 76 1E 03    .....b.......v..
0003024B   00 00 00 00 00 92 1E 03 00 00 00 00 00 B0          ..............
[INFO    ][2023-07-21 15:12:41,230] _scanDataPart() :: Result: 197209-197240 (31 bytes)
00030259   1E 03 00 00 00 00 00 C4 1E 03 00 00 00 00 00 D8    ................
00030269   1E 03 00 00 00 00 00 F4 1E 03 00 00 00 00 00       ...............
[INFO    ][2023-07-21 15:12:41,332] _scanDataPart() :: Result: 197240-197270 (30 bytes)
00030278   0E 1F 03 00 00 00 00 00 24 1F 03 00 00 00 00 00    ........$.......
00030288   3A 1F 03 00 00 00 00 00 54 1F 03 00 00 00          :.......T.....
[INFO    ][2023-07-21 15:12:41,351] _scanDataPart() :: Result: 197270-197301 (31 bytes)
00030296   00 00 6A 1F 03 00 00 00 00 00 7E 1F 03 00 00 00    ..j.......~.....
000302A6   00 00 92 1F 03 00 00 00 00 00 A0 1F 03 00 00       ...............
[INFO    ][2023-07-21 15:12:41,389] _scanDataPart() :: Result: 197301-197331 (30 bytes)
000302B5   00 00 00 B0 1F 03 00 00 00 00 00 C8 1F 03 00 00    ................
000302C5   00 00 00 E0 1F 03 00 00 00 00 00 F8 1F 03          ..............
[INFO    ][2023-07-21 15:12:41,409] _scanDataPart() :: Result: 197331-197362 (31 bytes)
000302D3   00 00 00 00 00 20 20 03 00 00 00 00 00 2C 20 03    .....  ......, .
000302E3   00 00 00 00 00 3A 20 03 00 00 00 00 00 48 20       .....: ......H 
[INFO    ][2023-07-21 15:12:41,473] _scanDataPart() :: Result: 197362-197392 (30 bytes)
000302F2   03 00 00 00 00 00 52 20 03 00 00 00 00 00 60 20    ......R ......` 
00030302   03 00 00 00 00 00 72 20 03 00 00 00 00 00          ......r ......
[INFO    ][2023-07-21 15:12:41,492] _scanDataPart() :: Result: 197392-197423 (31 bytes)
00030310   7E 20 03 00 00 00 00 00 8C 20 03 00 00 00 00 00    ~ ....... ......
00030320   9C 20 03 00 00 00 00 00 AA 20 03 00 00 00 00       . ....... .....
[INFO    ][2023-07-21 15:12:41,530] _scanDataPart() :: Result: 197423-197453 (30 bytes)
0003032F   00 B8 20 03 00 00 00 00 00 C8 20 03 00 00 00 00    .. ....... .....
0003033F   00 EA 20 03 00 00 00 00 00 02 21 03 00 00          .. .......!...
[INFO    ][2023-07-21 15:12:41,549] _scanDataPart() :: Result: 197453-197484 (31 bytes)
0003034D   00 00 00 16 21 03 00 00 00 00 00 2A 21 03 00 00    ....!......*!...
0003035D   00 00 00 3E 21 03 00 00 00 00 00 52 21 03 00       ...>!......R!..
[INFO    ][2023-07-21 15:12:41,633] _scanDataPart() :: Result: 197484-197514 (30 bytes)
0003036C   00 00 00 00 5E 21 03 00 00 00 00 00 72 21 03 00    ....^!......r!..
0003037C   00 00 00 00 82 21 03 00 00 00 00 00 92 21          .....!.......!
[INFO    ][2023-07-21 15:12:41,653] _scanDataPart() :: Result: 197514-197545 (31 bytes)
0003038A   03 00 00 00 00 00 AA 21 03 00 00 00 00 00 B8 21    .......!.......!
0003039A   03 00 00 00 00 00 C8 21 03 00 00 00 00 00 D4       .......!.......
[INFO    ][2023-07-21 15:12:41,691] _scanDataPart() :: Result: 197545-197575 (30 bytes)
000303A9   21 03 00 00 00 00 00 E2 21 03 00 00 00 00 00 F8    !.......!.......
000303B9   21 03 00 00 00 00 00 02 22 03 00 00 00 00          !.......".....
[INFO    ][2023-07-21 15:12:41,691] _scanDataPart() :: Doubling: minChunkSize: 8  minMatchSize: 16
[INFO    ][2023-07-21 15:12:41,691] _scanDataPart() :: Result: 197575-197606 (31b minChunk:16 X)
000303C7   00 0E 22 03 00 00 00 00 00 1A 22 03 00 00 00 00    ..".......".....
000303D7   00 2C 22 03 00 00 00 00 00 3C 22 03 00 00 00       .,"......<"....
[INFO    ][2023-07-21 15:12:41,736] _scanDataPart() :: Result: 197606-197667 (61 bytes)
000303E6   00 00 50 22 03 00 00 00 00 00 60 22 03 00 00 00    ..P"......`"....
000303F6   00 00 72 22 03 00 00 00 00 00 82 22 03 00 00 00    ..r"......."....
00030406   00 00 9A 22 03 00 00 00 00 00 AE 22 03 00 00 00    ..."......."....
00030416   00 00 C8 22 03 00 00 00 00 00 E0 22 03             ...".......".
[INFO    ][2023-07-21 15:12:41,755] _scanDataPart() :: Result: 197667-197728 (61 bytes)
00030423   00 00 00 00 00 F2 22 03 00 00 00 00 00 FE 22 03    ......".......".
00030433   00 00 00 00 00 0A 23 03 00 00 00 00 00 24 23 03    ......#......$#.
00030443   00 00 00 00 00 3E 23 03 00 00 00 00 00 50 23 03    .....>#......P#.
00030453   00 00 00 00 00 62 23 03 00 00 00 00 00             .....b#......
[INFO    ][2023-07-21 15:12:41,780] _printStatus() :: Reducing: 105 chunks done, found 7 matches (32 added)
[INFO    ][2023-07-21 15:12:41,886] _scanDataPart() :: Result: 197758-197789 (31b minChunk:16 X)
0003047E   00 00 0E 00 00 00 00 00 00 80 00 00 00 00 00 00    ................
0003048E   00 00 56 02 47 65 74 4C 61 73 74 45 72 72 6F       ..V.GetLastErro
[INFO    ][2023-07-21 15:12:41,907] _scanDataPart() :: Result: 197789-197850 (61 bytes)
0003049D   72 00 00 F7 04 53 65 74 44 6C 6C 44 69 72 65 63    r....SetDllDirec
000304AD   74 6F 72 79 57 00 00 69 02 47 65 74 4D 6F 64 75    toryW..i.GetModu
000304BD   6C 65 46 69 6C 65 4E 61 6D 65 57 00 00 A4 02 47    leFileNameW....G
000304CD   65 74 50 72 6F 63 41 64 64 72 65 73 73             etProcAddress
[INFO    ][2023-07-21 15:12:41,945] _scanDataPart() :: Result: 197850-197911 (61 bytes)
000304DA   00 00 CF 01 47 65 74 43 6F 6D 6D 61 6E 64 4C 69    ....GetCommandLi
000304EA   6E 65 57 00 30 02 47 65 74 45 6E 76 69 72 6F 6E    neW.0.GetEnviron
000304FA   6D 65 6E 74 56 61 72 69 61 62 6C 65 57 00 FD 04    mentVariableW...
0003050A   53 65 74 45 6E 76 69 72 6F 6E 6D 65 6E             SetEnvironmen
[INFO    ][2023-07-21 15:12:41,964] _scanDataPart() :: Result: 197911-197941 (30b minChunk:16 X)
00030517   74 56 61 72 69 61 62 6C 65 57 00 5B 01 45 78 70    tVariableW.[.Exp
00030527   61 6E 64 45 6E 76 69 72 6F 6E 6D 65 6E 74          andEnvironment
[INFO    ][2023-07-21 15:12:42,029] _scanDataPart() :: Result: 198033-198094 (61 bytes)
00030591   57 00 00 C5 02 47 65 74 53 74 61 72 74 75 70 49    W....GetStartupI
000305A1   6E 66 6F 57 00 AA 03 4C 6F 61 64 4C 69 62 72 61    nfoW...LoadLibra
000305B1   72 79 45 78 57 00 00 C2 02 47 65 74 53 68 6F 72    ryExW....GetShor
000305C1   74 50 61 74 68 4E 61 6D 65 57 00 A0 01             tPathNameW...
[INFO    ][2023-07-21 15:12:42,068] _scanDataPart() :: Result: 198124-198155 (31b minChunk:16 X)
000305EC   00 00 D4 03 4D 75 6C 74 69 42 79 74 65 54 6F 57    ....MultiByteToW
000305FC   69 64 65 43 68 61 72 00 DD 05 57 69 64 65 43       ideChar...WideC
[INFO    ][2023-07-21 15:12:42,087] _scanDataPart() :: Result: 198155-198185 (30b minChunk:16 X)
0003060B   68 61 72 54 6F 4D 75 6C 74 69 42 79 74 65 00 4B    harToMultiByte.K
0003061B   45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 57          ERNEL32.dll..W
[INFO    ][2023-07-21 15:12:42,171] _scanDataPart() :: Result: 198277-198338 (61 bytes)
00030685   70 74 69 6F 6E 46 69 6C 74 65 72 00 00 52 05 53    ptionFilter..R.S
00030695   65 74 55 6E 68 61 6E 64 6C 65 64 45 78 63 65 70    etUnhandledExcep
000306A5   74 69 6F 6E 46 69 6C 74 65 72 00 0F 02 47 65 74    tionFilter...Get
000306B5   43 75 72 72 65 6E 74 50 72 6F 63 65 73             CurrentProces
[INFO    ][2023-07-21 15:12:42,209] _scanDataPart() :: Result: 198368-198399 (31b minChunk:16 X)
000306E0   65 73 73 6F 72 46 65 61 74 75 72 65 50 72 65 73    essorFeaturePres
000306F0   65 6E 74 00 30 04 51 75 65 72 79 50 65 72 66       ent.0.QueryPerf
[INFO    ][2023-07-21 15:12:42,228] _scanDataPart() :: Result: 198399-198460 (61 bytes)
000306FF   6F 72 6D 61 6E 63 65 43 6F 75 6E 74 65 72 00 10    ormanceCounter..
0003070F   02 47 65 74 43 75 72 72 65 6E 74 50 72 6F 63 65    .GetCurrentProce
0003071F   73 73 49 64 00 14 02 47 65 74 43 75 72 72 65 6E    ssId...GetCurren
0003072F   74 54 68 72 65 61 64 49 64 00 00 DD 02             tThreadId....
[INFO    ][2023-07-21 15:12:42,292] _scanDataPart() :: Result: 198460-198521 (61 bytes)
0003073C   47 65 74 53 79 73 74 65 6D 54 69 6D 65 41 73 46    GetSystemTimeAsF
0003074C   69 6C 65 54 69 6D 65 00 54 03 49 6E 69 74 69 61    ileTime.T.Initia
0003075C   6C 69 7A 65 53 4C 69 73 74 48 65 61 64 00 6A 03    lizeSListHead.j.
0003076C   49 73 44 65 62 75 67 67 65 72 50 72 65             IsDebuggerPre
[INFO    ][2023-07-21 15:12:42,311] _scanDataPart() :: Result: 198551-198582 (31b minChunk:16 X)
00030797   55 6E 77 69 6E 64 45 78 00 19 05 53 65 74 4C 61    UnwindEx...SetLa
000307A7   73 74 45 72 72 6F 72 00 00 29 01 45 6E 74 65       stError..).Ente
[INFO    ][2023-07-21 15:12:42,351] _scanDataPart() :: Result: 198582-198643 (61 bytes)
000307B6   72 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E    rCriticalSection
000307C6   00 00 A5 03 4C 65 61 76 65 43 72 69 74 69 63 61    ....LeaveCritica
000307D6   6C 53 65 63 74 69 6F 6E 00 00 06 01 44 65 6C 65    lSection....Dele
000307E6   74 65 43 72 69 74 69 63 61 6C 53 65 63             teCriticalSec
[INFO    ][2023-07-21 15:12:42,453] _scanDataPart() :: Result: 198734-198765 (31b minChunk:16 X)
0003084E   72 65 65 00 A4 01 46 72 65 65 4C 69 62 72 61 72    ree...FreeLibrar
0003085E   79 00 CE 01 47 65 74 43 6F 6D 6D 61 6E 64 4C       y...GetCommandL
[INFO    ][2023-07-21 15:12:42,472] _scanDataPart() :: Result: 198765-198826 (61 bytes)
0003086D   69 6E 65 41 00 54 04 52 65 61 64 46 69 6C 65 00    ineA.T.ReadFile.
0003087D   00 C2 00 43 72 65 61 74 65 46 69 6C 65 57 00 26    ...CreateFileW.&
0003088D   02 47 65 74 44 72 69 76 65 54 79 70 65 57 00 45    .GetDriveTypeW.E
0003089D   02 47 65 74 46 69 6C 65 54 79 70 65 00             .GetFileType.
[INFO    ][2023-07-21 15:12:42,536] _scanDataPart() :: Result: 199070-199131 (61 bytes)
0003099E   43 74 72 6C 48 61 6E 64 6C 65 72 00 0B 01 44 65    CtrlHandler...De
000309AE   6C 65 74 65 46 69 6C 65 57 00 C7 02 47 65 74 53    leteFileW...GetS
000309BE   74 64 48 61 6E 64 6C 65 00 00 F1 05 57 72 69 74    tdHandle....Writ
000309CE   65 46 69 6C 65 00 57 01 45 78 69 74 50             eFile.W.ExitP
[INFO    ][2023-07-21 15:12:42,555] _scanDataPart() :: Result: 199161-199192 (31b minChunk:16 X)
000309F9   01 47 65 74 41 43 50 00 00 3C 03 48 65 61 70 46    .GetACP..<.HeapF
00030A09   72 65 65 00 00 38 03 48 65 61 70 41 6C 6C 6F       ree..8.HeapAllo
[INFO    ][2023-07-21 15:12:42,639] _scanDataPart() :: Result: 199192-199222 (30b minChunk:16 X)
00030A18   63 00 F4 01 47 65 74 43 6F 6E 73 6F 6C 65 4D 6F    c...GetConsoleMo
00030A28   64 65 00 00 52 04 52 65 61 64 43 6F 6E 73          de..R.ReadCons
[INFO    ][2023-07-21 15:12:42,678] _scanDataPart() :: Result: 199375-199436 (61 bytes)
00030ACF   6C 65 41 74 74 72 69 62 75 74 65 73 45 78 57 00    leAttributesExW.
00030ADF   00 75 03 49 73 56 61 6C 69 64 43 6F 64 65 50 61    .u.IsValidCodePa
00030AEF   67 65 00 8D 02 47 65 74 4F 45 4D 43 50 00 00 B9    ge...GetOEMCP...
00030AFF   01 47 65 74 43 50 49 6E 66 6F 00 2E 02             .GetCPInfo...
[INFO    ][2023-07-21 15:12:42,743] _scanDataPart() :: Result: 199436-199497 (61 bytes)
00030B0C   47 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74    GetEnvironmentSt
00030B1C   72 69 6E 67 73 57 00 00 A3 01 46 72 65 65 45 6E    ringsW....FreeEn
00030B2C   76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73    vironmentStrings
00030B3C   57 00 CC 02 47 65 74 53 74 72 69 6E 67             W...GetString
[INFO    ][2023-07-21 15:12:42,762] _scanDataPart() :: Result: 199497-199527 (30b minChunk:16 X)
00030B49   54 79 70 65 57 00 00 A9 02 47 65 74 50 72 6F 63    TypeW....GetProc
00030B59   65 73 73 48 65 61 70 00 00 F0 05 57 72 69          essHeap....Wri
[INFO    ][2023-07-21 15:12:42,767] scan() :: Reducer Result: Time:3 Chunks:162 MatchesAdded:53 MatchesFinal:17
[INFO    ][2023-07-21 15:13:31,392] scanForMatchesInPe() :: Launching bytes analysis on section: .data (199680-202752)
[INFO    ][2023-07-21 15:13:31,395] scan() :: Reducer Start: ScanSpeed:Normal Iteration:1 MinChunkSize:2 MinMatchSize:4
[INFO    ][2023-07-21 15:13:31,395] _printStatus() :: Reducing: 163 chunks done, found 0 matches (53 added)
[INFO    ][2023-07-21 15:13:55,824] _printStatus() :: Reducing: 173 chunks done, found 0 matches (53 added)
[INFO    ][2023-07-21 15:13:55,824] _scanDataPart() :: Result: 201321-201324 (3b minChunk:2 X)
00031269   34 03 40                                           4.@
[INFO    ][2023-07-21 15:14:19,922] _printStatus() :: Reducing: 175 chunks done, found 1 matches (54 added)
[INFO    ][2023-07-21 15:14:43,732] _printStatus() :: Reducing: 176 chunks done, found 1 matches (54 added)
[INFO    ][2023-07-21 15:14:43,732] _scanDataPart() :: Result: 201324-201327 (3b minChunk:2 X)
0003126C   01 00 00                                           ...
[INFO    ][2023-07-21 15:14:43,737] scan() :: Reducer Result: Time:72 Chunks:176 MatchesAdded:55 MatchesFinal:1
[INFO    ][2023-07-21 15:14:43,737] handleFile() :: Result: 18 matches
[INFO    ][2023-07-21 15:14:43,737] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-07-21 15:14:55,562] save() :: Saving HashCache (53145)
[INFO    ][2023-07-21 15:14:55,614] verifyFile() :: Perform verification of matches
[INFO    ][2023-07-21 15:14:55,614] runVerifications() :: Verify 18 matches
[INFO    ][2023-07-21 15:16:42,558] runVerifications() :: Verification run: 0 MIDDLE8 ISOLATED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-21 15:18:39,658] runVerifications() :: Verification run: 1 THIRDS4 ISOLATED
  result: ScanResult.NOT_SCANNED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-21 15:21:01,017] runVerifications() :: Verification run: 2 FULL ISOLATED
  result: ScanResult.DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-21 15:23:23,511] runVerifications() :: Verification run: 3 FULLB ISOLATED
  result: ScanResult.DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-21 15:26:19,505] runVerifications() :: Verification run: 4 MIDDLE8 INCREMENTAL
  result: ScanResult.NOT_SCANNED
  Idx: 1  result: ScanResult.NOT_DETECTED
  Idx: 2  result: ScanResult.NOT_DETECTED
  Idx: 3  result: ScanResult.NOT_DETECTED
  Idx: 4  result: ScanResult.NOT_DETECTED
  Idx: 5  result: ScanResult.NOT_DETECTED
  Idx: 6  result: ScanResult.NOT_DETECTED
  Idx: 7  result: ScanResult.NOT_DETECTED
  Idx: 8  result: ScanResult.NOT_DETECTED
  Idx: 9  result: ScanResult.NOT_DETECTED
  Idx: 10  result: ScanResult.NOT_DETECTED
  Idx: 11  result: ScanResult.NOT_DETECTED
  Idx: 12  result: ScanResult.NOT_DETECTED
  Idx: 13  result: ScanResult.NOT_DETECTED
  Idx: 14  result: ScanResult.NOT_DETECTED
  Idx: 15  result: ScanResult.NOT_DETECTED
  Idx: 16  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-21 15:29:39,699] runVerifications() :: Verification run: 5 FULL INCREMENTAL
  Idx: 0  result: ScanResult.DETECTED
  Idx: 1  result: ScanResult.NOT_DETECTED
  Idx: 2  result: ScanResult.NOT_DETECTED
  Idx: 3  result: ScanResult.NOT_DETECTED
  Idx: 4  result: ScanResult.NOT_DETECTED
  Idx: 5  result: ScanResult.NOT_DETECTED
  Idx: 6  result: ScanResult.NOT_DETECTED
  Idx: 7  result: ScanResult.NOT_DETECTED
  Idx: 8  result: ScanResult.NOT_DETECTED
  Idx: 9  result: ScanResult.NOT_DETECTED
  Idx: 10  result: ScanResult.NOT_DETECTED
  Idx: 11  result: ScanResult.NOT_DETECTED
  Idx: 12  result: ScanResult.NOT_DETECTED
  Idx: 13  result: ScanResult.NOT_DETECTED
  Idx: 14  result: ScanResult.NOT_DETECTED
  Idx: 15  result: ScanResult.NOT_DETECTED
  Idx: 16  result: ScanResult.NOT_DETECTED
  Idx: 17  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-21 15:32:48,758] runVerifications() :: Verification run: 6 FULL DECREMENTAL
  Idx: 17  result: ScanResult.NOT_DETECTED
  Idx: 16  result: ScanResult.NOT_DETECTED
  Idx: 15  result: ScanResult.NOT_DETECTED
  Idx: 14  result: ScanResult.NOT_DETECTED
  Idx: 13  result: ScanResult.NOT_DETECTED
  Idx: 12  result: ScanResult.NOT_DETECTED
  Idx: 11  result: ScanResult.NOT_DETECTED
  Idx: 10  result: ScanResult.NOT_DETECTED
  Idx: 9  result: ScanResult.NOT_DETECTED
  Idx: 8  result: ScanResult.NOT_DETECTED
  Idx: 7  result: ScanResult.NOT_DETECTED
  Idx: 6  result: ScanResult.NOT_DETECTED
  Idx: 5  result: ScanResult.NOT_DETECTED
  Idx: 4  result: ScanResult.NOT_DETECTED
  Idx: 3  result: ScanResult.NOT_DETECTED
  Idx: 2  result: ScanResult.NOT_DETECTED
  Idx: 1  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-21 15:32:48,770] runVerifications() :: Verification run: 7 MIDDLE8 ALL
  result: ScanResult.NOT_SCANNED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-21 15:33:00,438] runVerifications() :: Verification run: 8 THIRDS4 ALL
  result: ScanResult.NOT_SCANNED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  result: ScanResult.NOT_SCANNED

[INFO    ][2023-07-21 15:33:00,450] runVerifications() :: Verification run: 9 FULL ALL
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED
  Idx: 0  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-21 15:33:00,450] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-07-21 15:33:00,450] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-07-21 15:33:02,687] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-07-21 15:33:02,688] outflankFile() :: Attempt to outflank the file
[INFO    ][2023-07-21 15:33:02,689] outflankPe() :: Outflank failed with attempted 0 patches
[INFO    ][2023-07-21 15:33:02,689] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-07-21 15:33:02,690] save() :: Saving HashCache (53237)
[INFO    ][2023-08-04 18:28:28,711] main() :: Using file: app/upload/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-08-04 18:28:28,712] handleFile() :: Handle file: app/upload/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-08-04 18:28:28,713] handleFile() :: Using parser for file type EXE
[WARNING ][2023-08-04 18:28:29,073] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-08-04 18:28:29,073] load() :: Loading HashCache
[INFO    ][2023-08-04 18:28:29,165] load() ::   77569 hashes loaded
[INFO    ][2023-08-04 18:28:29,165] save() :: Saving HashCache (77569)
[INFO    ][2023-08-04 18:28:29,244] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-08-04 18:28:31,506] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-08-04 18:28:31,506] save() :: Saving HashCache (77569)
[INFO    ][2023-08-06 16:54:47,495] main() :: Using file: app/upload/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-08-06 16:54:47,495] handleFile() :: Handle file: app/upload/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-08-06 16:54:47,497] handleFile() :: Using parser for file type EXE
[WARNING ][2023-08-06 16:54:47,848] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-08-06 16:54:47,848] load() :: Loading HashCache
[INFO    ][2023-08-06 16:54:47,946] load() ::   77569 hashes loaded
[INFO    ][2023-08-06 16:54:47,947] save() :: Saving HashCache (77569)
[INFO    ][2023-08-06 16:54:48,026] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-08-06 16:54:50,276] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-08-06 16:54:50,276] save() :: Saving HashCache (77569)
[INFO    ][2023-08-06 17:28:58,742] main() :: Using file: app/upload/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-08-06 17:28:58,742] handleFile() :: Handle file: app/upload/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-08-06 17:28:58,743] handleFile() :: Using parser for file type EXE
[WARNING ][2023-08-06 17:28:59,104] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-08-06 17:28:59,105] load() :: Loading HashCache
[INFO    ][2023-08-06 17:28:59,196] load() ::   77569 hashes loaded
[INFO    ][2023-08-06 17:28:59,197] save() :: Saving HashCache (77569)
[INFO    ][2023-08-06 17:28:59,278] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-08-06 17:29:01,538] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-08-06 17:29:01,538] save() :: Saving HashCache (77569)
[INFO    ][2023-09-01 05:26:56,460] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-01 05:26:56,460] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-01 05:26:56,464] handleFile() :: Using parser for file type EXE
[WARNING ][2023-09-01 05:26:56,816] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-01 05:26:56,827] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-01 05:26:56,828] load() :: Loading HashCache
[INFO    ][2023-09-01 05:26:56,926] load() ::   85943 hashes loaded
[INFO    ][2023-09-01 05:26:56,926] save() :: Saving HashCache (85943)
[INFO    ][2023-09-01 05:26:57,008] save() :: Saving HashCache (85943)
[INFO    ][2023-09-24 19:22:25,560] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-24 19:22:25,560] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-24 19:22:25,565] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-24 19:22:25,570] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-24 19:22:25,915] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-24 19:22:25,915] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-24 19:22:25,915] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,915] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,915] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,915] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,915] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,915] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,916] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,916] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,916] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-24 19:22:25,916] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-24 19:22:25,926] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-24 19:22:25,927] load() :: Loading HashCache
[INFO    ][2023-09-24 19:22:26,054] load() ::   101712 hashes loaded
[INFO    ][2023-09-24 19:22:26,054] save() :: Saving HashCache (101712)
[INFO    ][2023-09-24 19:22:26,149] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-24 19:22:26,149] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-24 19:22:26,354] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-24 19:22:28,357] init() :: R2: Get all strings
[INFO    ][2023-09-24 19:22:28,402] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-24 19:22:28,413] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-24 19:22:28,414] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:15:44,135] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-25 18:15:44,135] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-25 18:15:44,136] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-25 18:15:44,140] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-25 18:15:44,424] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-25 18:15:44,424] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-25 18:15:44,424] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,424] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,424] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,424] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,424] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,424] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,425] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,425] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,425] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-25 18:15:44,425] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-25 18:15:44,436] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-25 18:15:44,436] load() :: Loading HashCache
[INFO    ][2023-09-25 18:15:44,568] load() ::   101712 hashes loaded
[INFO    ][2023-09-25 18:15:44,569] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:15:44,665] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-25 18:15:44,665] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-25 18:15:44,862] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-25 18:15:46,859] init() :: R2: Get all strings
[INFO    ][2023-09-25 18:15:46,904] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-25 18:15:46,915] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-25 18:15:46,916] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:22:45,740] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-25 18:22:45,740] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-25 18:22:45,742] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-25 18:22:45,745] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-25 18:22:46,026] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-25 18:22:46,026] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-25 18:22:46,026] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,026] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,026] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,026] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,026] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,026] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,026] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,027] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,027] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-25 18:22:46,027] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-25 18:22:46,038] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-25 18:22:46,038] load() :: Loading HashCache
[INFO    ][2023-09-25 18:22:46,168] load() ::   101712 hashes loaded
[INFO    ][2023-09-25 18:22:46,168] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:22:46,263] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-25 18:22:46,263] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-25 18:22:46,461] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-25 18:22:48,451] init() :: R2: Get all strings
[INFO    ][2023-09-25 18:22:48,496] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-25 18:22:48,508] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-25 18:22:48,508] save() :: Saving HashCache (101712)
[INFO    ][2023-09-29 10:08:14,785] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-29 10:08:14,785] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-29 10:08:14,787] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-29 10:08:14,791] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-29 10:08:15,076] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-29 10:08:15,076] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,076] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-29 10:08:15,077] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-29 10:08:15,088] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-29 10:08:15,088] load() :: Loading HashCache
[INFO    ][2023-09-29 10:08:15,227] load() ::   102070 hashes loaded
[INFO    ][2023-09-29 10:08:15,227] save() :: Saving HashCache (102070)
[INFO    ][2023-09-29 10:08:15,325] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-29 10:08:15,325] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-29 10:08:15,527] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-29 10:08:17,526] init() :: R2: Get all strings
[INFO    ][2023-09-29 10:08:17,570] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-29 10:08:17,582] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-29 10:08:17,583] save() :: Saving HashCache (102070)
[INFO    ][2023-09-29 12:12:48,141] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-29 12:12:48,141] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-29 12:12:48,143] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-29 12:12:48,147] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-29 12:12:48,441] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-29 12:12:48,441] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,441] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-29 12:12:48,442] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-29 12:12:48,453] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-29 12:12:48,453] load() :: Loading HashCache
[INFO    ][2023-09-29 12:12:48,591] load() ::   102070 hashes loaded
[INFO    ][2023-09-29 12:12:48,591] save() :: Saving HashCache (102070)
[INFO    ][2023-09-29 12:12:48,686] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-29 12:12:48,686] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-29 12:12:48,888] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-29 12:12:50,898] init() :: R2: Get all strings
[INFO    ][2023-09-29 12:12:50,944] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-29 12:12:50,957] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-29 12:12:50,958] save() :: Saving HashCache (102070)
[INFO    ][2023-09-30 10:33:42,909] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-30 10:33:42,909] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe
[INFO    ][2023-09-30 10:33:42,911] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-30 10:33:42,915] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-30 10:33:43,198] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-30 10:33:43,198] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,198] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-30 10:33:43,199] handleFile() :: Using scanner as defined in outcome: defender
[INFO    ][2023-09-30 10:33:43,210] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-30 10:33:43,210] load() :: Loading HashCache
[INFO    ][2023-09-30 10:33:43,348] load() ::   102072 hashes loaded
[INFO    ][2023-09-30 10:33:43,349] save() :: Saving HashCache (102072)
[INFO    ][2023-09-30 10:33:43,446] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-30 10:33:43,447] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-30 10:33:43,645] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-30 10:33:45,646] init() :: R2: Get all strings
[INFO    ][2023-09-30 10:33:45,690] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-30 10:33:45,696] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.outcome
[INFO    ][2023-09-30 10:33:45,696] save() :: Saving HashCache (102072)