Crashes on Windows.edb

[scudette]

Thanks for presenting about this project at VeloCon ! It was a great presentation!

When I went to play with it on my machine I could not get it to work - it was crashing with

$ sidr.exe 1\
Processing ESE db: 1\Windows.edb
thread 'main' panicked at 'called `Result::unwrap()` on an `Err` value: SimpleError { err: "wrong checksum: 2281044506, calculated 2197395251" }', src\ese.rs:164:73
stack backtrace:
   0:     0x7ff77d50332c - <unknown>
   1:     0x7ff77d5173bb - <unknown>
   2:     0x7ff77d4ffc29 - <unknown>
   3:     0x7ff77d5030db - <unknown>

This file parses fine using Velociraptor's SQLiteHunter and the underlying parse_ese(). You can verify with the binary from
https://github.com/Velocidex/go-ese

eseparser dump Windows.edb

Here is the sample file.
Windows.edb.gz

[sf-jonstewart]

Thanks! Will investigate.