James K. Holland

11 papers A* 3Journal 6Unranked 2
YearRankTypeTitle / Venue / Authors
2024 J jnl
Proc. Priv. Enhancing Technol.
James K. Holland, Jason Carpenter, Se Eun Oh, Nicholas Hopper
2024 J jnl
IEEE Trans. Inf. Forensics Secur.
Nate Mathews, James K. Holland, Nicholas Hopper, Matthew Wright
2024 A* conf
CCS
Joel Osher, James K. Holland, Nicholas Hopper
2023 J jnl
CoRR
James K. Holland, Jason Carpenter, Se Eun Oh, Nicholas Hopper
2023 A* conf
SP
Nate Mathews, James K. Holland, Se Eun Oh, Mohammad Saidur Rahman, Nicholas Hopper, Matthew Wright
2022 A* conf
SP
Se Eun Oh, Taiji Yang, Nate Mathews, James K. Holland, Mohammad Saidur Rahman, Nicholas Hopper, Matthew Wright
2022 conf
WPES@CCS
Ethan Witwer, James K. Holland, Nicholas Hopper
2022 J jnl
CoRR
Ethan Witwer, James K. Holland, Nicholas Hopper
2022 J jnl
Proc. Priv. Enhancing Technol.
James K. Holland, Nicholas Hopper
2020 J jnl
CoRR
James K. Holland, Nicholas Hopper
2019 conf
PervasiveHealth
Louis Faust, Priscilla Jiménez-Pazmino, James K. Holland, Omar Lizardo, David Hachen, Nitesh V. Chawla
edge-cases.md
← Index edge-cases.md markdown
# Edge Cases Samples
This is a list of samples that represent some edge cases where the extractors fail (completely or in part) to parse information we know to be there

**Sample:**

**VT:**

**Description:**

**Other:**


## PE Samples
### DotNET
**Sample:** `"/Users/p4c0/_samples/test-unzipped/98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7"`

**VT:** https://www.virustotal.com/gui/file/98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7/details

**Description:**
It is recognized as dotnet but it fails to extract any information, returning an empty dictionary:
```
{
    "sha256": "98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7",
    "md5": "a32eca5321baaf3d9b62ed129458a814",
    "sha1": "4524e99a3849c815a48579fb916e53cded739f46",
    "dotnet": {
        "Event" : [],
        "ExternalUnmanagedMethods" : [],
        "ExternalUnmanagedModules" : [],
        "ManifestResource" : [],
        "Resources" : []
    },
    "analysis_date": "2025-01-22 13:16:20.897"
}
```

with the following errors:
```
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Format error dotnet file 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 Full error : 'CLR header of file is most likely corrupt.'
98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting metadata tables for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'existent_metadata_tables'
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error extracting GUID for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'guid_stream_guids'
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting CLR version for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'get_runtime_target_version'
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting module info for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'metadata_table_exists'
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting basic properties for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'info'
2025-01-22 14:16:20,897 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting assembly flags for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'clr_header'
2025-01-22 14:16:20,897 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting more metadata/info clr header for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'get_number_of_streams'
2025-01-22 14:16:20,897 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting streams for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'get_stream_names'
2025-01-22 14:16:20,897 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting resources for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'has_resources'
```
**Other:**