File A1600B802F00BF67.lazagne.exe.avg.exe

Name: A1600B802F00BF67.lazagne.exe.avg.exe
Size: 6,635,326 bytes
Type: EXE PE64
MD5: 68d3bf2c363144ec6874ab360fdda00a
Scanner Name: avg
Appraisal: One based
Scan Debug: Duration: 12s / Chunks: 17 / Matches: 1
Scan date: 2023-07-21 22:21:29

Matches

# Iteration Offset Size Section Detail SectionType Conclusion
0 0 6634414 102 <unknown> UNKNOWN Dominant. Modify this to make file undetected

Match 0: 6634414 (size: 102)

Dominant. Modify this to make file undetected

<unknown> 

00653BAE   00 00 0C 71 00 00 1A 99 01 73 6C 61 5A 61 67 6E    ...q.....slaZagn
00653BBE   65 00 00 00 00 00 00 00 00 00 00 20 00 00 4B 6F    e.......... ..Ko
00653BCE   00 04 5C A0 00 09 90 00 01 62 4D 53 56 43 52 39    ..\......bMSVCR9
00653BDE   30 2E 64 6C 6C 00 00 00 00 00 00 20 00 04 A8 0F    0.dll...... ....
00653BEE   00 00 C4 1A 00 01 DE 00 01 62 5F 63 74 79 70 65    .........b_ctype
00653BFE   73 2E 70 79 64 00 00 00 00 00 00 30 00 05 6C 29    s.pyd......0..l)
00653C0E   00 01 23 99 00 02                                  ..#...

Test # MatchOrder ModifyPosition Match#0
102b
0 ISOLATED MIDDLE8
1 ISOLATED THIRDS4
2 ISOLATED FULL
3 ISOLATED FULLB
Result

Explanation

Colors

  • Green: Not detected
  • Red: Detected by AV

Match Order

  • Isolated: Test each match individually, by themselves. At most one match is modified per scan
  • Incremental: Modify each match after another, additive. At the end, all matches are modified
  • Decremental: Modify each match after another, additive, downwards (last first)

Position

  • ModifyPosition FULL: Overwrite complete match: MMMMMMMMMMMM
  • ModifyPosition MIDDLE8: Overwrite 8 bytes in the middle of the match (partial): aaaaMMMMMMMMaaaa
  • ModifyPosition THIRD8: Overwrite 8 bytes in the first and second third of the match (partial): aaaaMMMMMMMMaaaaMMMMMMMMaaaa
[INFO    ][2023-07-21 22:20:53,426] main() :: Using file: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-07-21 22:20:53,426] handleFile() :: Handle file: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-07-21 22:20:53,428] handleFile() :: Using parser for file type EXE
[INFO    ][2023-07-21 22:20:53,747] handleFile() :: Using scanner from command line: avg
[INFO    ][2023-07-21 22:20:53,759] load() :: Loading HashCache
[INFO    ][2023-07-21 22:20:53,846] load() ::   63468 hashes loaded
[INFO    ][2023-07-21 22:21:29,285] handleFile() :: QuickCheck: A1600B802F00BF67.lazagne.exe.avg.exe is detected by avg and not hash based
[INFO    ][2023-07-21 22:21:29,287] handleFile() :: Scanning for matches...
[INFO    ][2023-07-21 22:21:29,287] scanForMatchesInPe() :: Section Detection: Zero section (leave all others intact)
[INFO    ][2023-07-21 22:21:29,297] findDetectedSections() :: Hide: .text -> Detected: True
[INFO    ][2023-07-21 22:21:29,309] findDetectedSections() :: Hide: .rdata -> Detected: True
[INFO    ][2023-07-21 22:21:29,319] findDetectedSections() :: Hide: .data -> Detected: True
[INFO    ][2023-07-21 22:21:29,329] findDetectedSections() :: Hide: .pdata -> Detected: True
[INFO    ][2023-07-21 22:21:29,339] findDetectedSections() :: Hide: .gfids -> Detected: True
[INFO    ][2023-07-21 22:21:29,349] findDetectedSections() :: Hide: .rsrc -> Detected: True
[INFO    ][2023-07-21 22:21:29,358] findDetectedSections() :: Hide: .reloc -> Detected: True
[INFO    ][2023-07-21 22:21:40,737] findDetectedSections() :: Hide: Header -> Detected: False
[INFO    ][2023-07-21 22:21:40,739] scanForMatchesInPe() :: 0 section(s) trigger the antivirus independantly
[INFO    ][2023-07-21 22:21:40,740] scanForMatchesInPe() :: Section analysis failed. Fall back to non-section-aware reducer (flat-scan)
[INFO    ][2023-07-21 22:21:40,742] scan() :: Reducer Start: ScanSpeed:Normal Iteration:0 MinChunkSize:64 MinMatchSize:128
[INFO    ][2023-07-21 22:21:40,742] _printStatus() :: Reducing: 1 chunks done, found 0 matches (0 added)
[INFO    ][2023-07-21 22:21:41,081] _scanDataPart() :: Result: 6634414-6634516 (102b minChunk:64 X)
00653BAE   00 00 0C 71 00 00 1A 99 01 73 6C 61 5A 61 67 6E    ...q.....slaZagn
00653BBE   65 00 00 00 00 00 00 00 00 00 00 20 00 00 4B 6F    e.......... ..Ko
00653BCE   00 04 5C A0 00 09 90 00 01 62 4D 53 56 43 52 39    ..\......bMSVCR9
00653BDE   30 2E 64 6C 6C 00 00 00 00 00 00 20 00 04 A8 0F    0.dll...... ....
00653BEE   00 00 C4 1A 00 01 DE 00 01 62 5F 63 74 79 70 65    .........b_ctype
00653BFE   73 2E 70 79 64 00 00 00 00 00 00 30 00 05 6C 29    s.pyd......0..l)
00653C0E   00 01 23 99 00 02                                  ..#...
[INFO    ][2023-07-21 22:21:41,089] scan() :: Reducer Result: Time:0 Chunks:17 MatchesAdded:1 MatchesFinal:1
[INFO    ][2023-07-21 22:21:41,089] handleFile() :: Result: 1 matches
[INFO    ][2023-07-21 22:21:41,089] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-07-21 22:21:52,573] save() :: Saving HashCache (63473)
[INFO    ][2023-07-21 22:21:52,638] verifyFile() :: Perform verification of matches
[INFO    ][2023-07-21 22:21:52,638] runVerifications() :: Verify 1 matches
[INFO    ][2023-07-21 22:22:04,297] runVerifications() :: Verification run: 0 MIDDLE8 ISOLATED
  result: ScanResult.DETECTED

[INFO    ][2023-07-21 22:22:15,797] runVerifications() :: Verification run: 1 THIRDS4 ISOLATED
  result: ScanResult.DETECTED

[INFO    ][2023-07-21 22:22:27,490] runVerifications() :: Verification run: 2 FULL ISOLATED
  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-21 22:22:38,932] runVerifications() :: Verification run: 3 FULLB ISOLATED
  result: ScanResult.NOT_DETECTED

[INFO    ][2023-07-21 22:22:38,934] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-07-21 22:22:38,935] augmentFile() :: Perform augmentation of matches
[WARNING ][2023-07-21 22:22:41,188] augmentFilePe() :: No section found for offset 6634414
[INFO    ][2023-07-21 22:22:41,188] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-07-21 22:22:41,188] outflankFile() :: Attempt to outflank the file
[INFO    ][2023-07-21 22:22:41,191] outflankPe() :: Outflank failed with attempted 0 patches
[INFO    ][2023-07-21 22:22:41,191] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-07-21 22:22:41,191] save() :: Saving HashCache (63477)
[INFO    ][2023-08-04 18:28:31,850] main() :: Using file: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-08-04 18:28:31,850] handleFile() :: Handle file: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-08-04 18:28:31,852] handleFile() :: Using parser for file type EXE
[WARNING ][2023-08-04 18:28:32,214] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-08-04 18:28:32,214] load() :: Loading HashCache
[INFO    ][2023-08-04 18:28:32,305] load() ::   77569 hashes loaded
[INFO    ][2023-08-04 18:28:32,306] save() :: Saving HashCache (77569)
[INFO    ][2023-08-04 18:28:32,384] augmentFile() :: Perform augmentation of matches
[WARNING ][2023-08-04 18:28:34,660] augmentFilePe() :: No section found for offset 6634414
[INFO    ][2023-08-04 18:28:34,660] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-08-04 18:28:34,660] save() :: Saving HashCache (77569)
[INFO    ][2023-08-06 16:54:50,613] main() :: Using file: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-08-06 16:54:50,613] handleFile() :: Handle file: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-08-06 16:54:50,615] handleFile() :: Using parser for file type EXE
[WARNING ][2023-08-06 16:54:50,965] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-08-06 16:54:50,965] load() :: Loading HashCache
[INFO    ][2023-08-06 16:54:51,056] load() ::   77569 hashes loaded
[INFO    ][2023-08-06 16:54:51,056] save() :: Saving HashCache (77569)
[INFO    ][2023-08-06 16:54:51,132] augmentFile() :: Perform augmentation of matches
[WARNING ][2023-08-06 16:54:53,396] augmentFilePe() :: No section found for offset 6634414
[INFO    ][2023-08-06 16:54:53,397] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-08-06 16:54:53,397] save() :: Saving HashCache (77569)
[INFO    ][2023-08-06 17:29:01,876] main() :: Using file: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-08-06 17:29:01,876] handleFile() :: Handle file: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-08-06 17:29:01,877] handleFile() :: Using parser for file type EXE
[WARNING ][2023-08-06 17:29:02,234] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-08-06 17:29:02,234] load() :: Loading HashCache
[INFO    ][2023-08-06 17:29:02,327] load() ::   77569 hashes loaded
[INFO    ][2023-08-06 17:29:02,327] save() :: Saving HashCache (77569)
[INFO    ][2023-08-06 17:29:02,402] augmentFile() :: Perform augmentation of matches
[WARNING ][2023-08-06 17:29:04,664] augmentFilePe() :: No section found for offset 6634414
[INFO    ][2023-08-06 17:29:04,664] saveToFile() :: Saving results to: app/upload/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-08-06 17:29:04,664] save() :: Saving HashCache (77569)
[INFO    ][2023-09-01 05:26:57,353] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-01 05:26:57,353] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-01 05:26:57,357] handleFile() :: Using parser for file type EXE
[WARNING ][2023-09-01 05:26:57,713] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-09-01 05:26:57,723] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-09-01 05:26:57,724] load() :: Loading HashCache
[INFO    ][2023-09-01 05:26:57,820] load() ::   85943 hashes loaded
[INFO    ][2023-09-01 05:26:57,821] save() :: Saving HashCache (85943)
[INFO    ][2023-09-01 05:26:57,905] save() :: Saving HashCache (85943)
[INFO    ][2023-09-24 19:22:28,770] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-24 19:22:28,770] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-24 19:22:28,774] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-24 19:22:28,780] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-24 19:22:29,138] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-24 19:22:29,139] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-24 19:22:29,139] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-09-24 19:22:29,150] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-09-24 19:22:29,150] load() :: Loading HashCache
[INFO    ][2023-09-24 19:22:29,277] load() ::   101712 hashes loaded
[INFO    ][2023-09-24 19:22:29,277] save() :: Saving HashCache (101712)
[INFO    ][2023-09-24 19:22:29,371] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-24 19:22:29,372] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-24 19:22:29,568] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-24 19:22:31,558] init() :: R2: Get all strings
[INFO    ][2023-09-24 19:22:31,603] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-25 18:15:47,241] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-25 18:15:47,241] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-25 18:15:47,242] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-25 18:15:47,246] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-25 18:15:47,530] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-25 18:15:47,531] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-25 18:15:47,531] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-09-25 18:15:47,542] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-09-25 18:15:47,542] load() :: Loading HashCache
[INFO    ][2023-09-25 18:15:47,673] load() ::   101712 hashes loaded
[INFO    ][2023-09-25 18:15:47,674] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:15:47,771] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-25 18:15:47,771] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-25 18:15:47,969] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-25 18:15:49,972] init() :: R2: Get all strings
[INFO    ][2023-09-25 18:15:50,017] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-25 18:22:48,831] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-25 18:22:48,831] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-25 18:22:48,832] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-25 18:22:48,836] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-25 18:22:49,118] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-25 18:22:49,118] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-25 18:22:49,118] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-25 18:22:49,119] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-09-25 18:22:49,130] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-09-25 18:22:49,130] load() :: Loading HashCache
[INFO    ][2023-09-25 18:22:49,261] load() ::   101712 hashes loaded
[INFO    ][2023-09-25 18:22:49,262] save() :: Saving HashCache (101712)
[INFO    ][2023-09-25 18:22:49,355] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-25 18:22:49,355] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-25 18:22:49,557] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-25 18:22:51,547] init() :: R2: Get all strings
[INFO    ][2023-09-25 18:22:51,591] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-29 10:08:17,918] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-29 10:08:17,918] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-29 10:08:17,919] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-29 10:08:17,923] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-29 10:08:18,207] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-29 10:08:18,207] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-29 10:08:18,207] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-09-29 10:08:18,218] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-09-29 10:08:18,218] load() :: Loading HashCache
[INFO    ][2023-09-29 10:08:18,356] load() ::   102070 hashes loaded
[INFO    ][2023-09-29 10:08:18,356] save() :: Saving HashCache (102070)
[INFO    ][2023-09-29 10:08:18,453] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-29 10:08:18,453] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-29 10:08:18,656] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-29 10:08:20,664] init() :: R2: Get all strings
[INFO    ][2023-09-29 10:08:20,708] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-29 12:12:51,309] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-29 12:12:51,309] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-29 12:12:51,310] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-29 12:12:51,315] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-29 12:12:51,601] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-29 12:12:51,601] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,601] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-29 12:12:51,602] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-09-29 12:12:51,612] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-09-29 12:12:51,613] load() :: Loading HashCache
[INFO    ][2023-09-29 12:12:51,751] load() ::   102070 hashes loaded
[INFO    ][2023-09-29 12:12:51,751] save() :: Saving HashCache (102070)
[INFO    ][2023-09-29 12:12:51,850] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-29 12:12:51,850] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-29 12:12:52,055] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-29 12:12:54,059] init() :: R2: Get all strings
[INFO    ][2023-09-29 12:12:54,103] augmentFilePe() :: Augment: Matches
[INFO    ][2023-09-30 10:33:46,025] main() :: Using file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-30 10:33:46,025] handleFile() :: Handle file: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe
[INFO    ][2023-09-30 10:33:46,026] handleFile() :: Using parser for file type EXE
[INFO    ][2023-09-30 10:33:46,030] parseFile() :: FilePe: Parse File
[INFO    ][2023-09-30 10:33:46,312] parsePeSections() :: FilePe: Parse PE Sections
[INFO    ][2023-09-30 10:33:46,312] parsePeRegions() :: FilePe: Parse PE Regions
[WARNING ][2023-09-30 10:33:46,312] parsePeRegions() :: Data Directory Section 0 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,312] parsePeRegions() :: Data Directory Section 4 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,312] parsePeRegions() :: Data Directory Section 7 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,312] parsePeRegions() :: Data Directory Section 8 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,312] parsePeRegions() :: Data Directory Section 9 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,312] parsePeRegions() :: Data Directory Section 11 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,313] parsePeRegions() :: Data Directory Section 13 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,313] parsePeRegions() :: Data Directory Section 14 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,313] parsePeRegions() :: Data Directory Section 15 has address 0, skipping
[WARNING ][2023-09-30 10:33:46,313] handleFile() :: Using scanner as defined in outcome: avg
[INFO    ][2023-09-30 10:33:46,323] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-09-30 10:33:46,324] load() :: Loading HashCache
[INFO    ][2023-09-30 10:33:46,461] load() ::   102072 hashes loaded
[INFO    ][2023-09-30 10:33:46,461] save() :: Saving HashCache (102072)
[INFO    ][2023-09-30 10:33:46,558] augmentFile() :: Perform augmentation of matches
[INFO    ][2023-09-30 10:33:46,558] augmentFilePe() :: Augment: File PE
[INFO    ][2023-09-30 10:33:46,759] augmentFilePe() :: R2: Analyze
[INFO    ][2023-09-30 10:33:48,758] init() :: R2: Get all strings
[INFO    ][2023-09-30 10:33:48,802] augmentFilePe() :: Augment: Matches
[WARNING ][2023-09-30 10:33:48,802] physOffsetToRva() :: Could not find matching section for offset 6634414
[WARNING ][2023-09-30 10:33:48,802] augmentFilePe() :: No section found for offset 6634414
[INFO    ][2023-09-30 10:33:48,803] saveToFile() :: Saving results to: app/examples/A1600B802F00BF67.lazagne.exe.avg.exe.outcome
[INFO    ][2023-09-30 10:33:48,803] save() :: Saving HashCache (102072)