Otmar Adam

# Edge Cases Samples
This is a list of samples that represent some edge cases where the extractors fail (completely or in part) to parse information we know to be there

**Sample:**

**VT:**

**Description:**

**Other:**


## PE Samples
### DotNET
**Sample:** `"/Users/p4c0/_samples/test-unzipped/98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7"`

**VT:** https://www.virustotal.com/gui/file/98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7/details

**Description:**
It is recognized as dotnet but it fails to extract any information, returning an empty dictionary:
```
{
    "sha256": "98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7",
    "md5": "a32eca5321baaf3d9b62ed129458a814",
    "sha1": "4524e99a3849c815a48579fb916e53cded739f46",
    "dotnet": {
        "Event" : [],
        "ExternalUnmanagedMethods" : [],
        "ExternalUnmanagedModules" : [],
        "ManifestResource" : [],
        "Resources" : []
    },
    "analysis_date": "2025-01-22 13:16:20.897"
}
```

with the following errors:
```
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Format error dotnet file 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 Full error : 'CLR header of file is most likely corrupt.'
98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting metadata tables for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'existent_metadata_tables'
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error extracting GUID for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'guid_stream_guids'
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting CLR version for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'get_runtime_target_version'
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting module info for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'metadata_table_exists'
2025-01-22 14:16:20,896 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting basic properties for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'info'
2025-01-22 14:16:20,897 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting assembly flags for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'clr_header'
2025-01-22 14:16:20,897 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting more metadata/info clr header for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'get_number_of_streams'
2025-01-22 14:16:20,897 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting streams for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'get_stream_names'
2025-01-22 14:16:20,897 - 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7 - ERROR - Error getting resources for 98eca73a0e33a41a72ac55c4bd0a75e5c83fdc3de382d031346045105cdf10e7: 'NoneType' object has no attribute 'has_resources'
```
**Other:**