From 2cc72e2059b98195889937c3adec5c4557099a6a Mon Sep 17 00:00:00 2001
From: Matt Nadareski <mnadareski@outlook.com>
Date: Mon, 8 Sep 2025 20:10:29 -0400
Subject: [PATCH] Add a couple ActiveMark notes

---
 BinaryObjectScanner/Protection/ActiveMARK.cs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/BinaryObjectScanner/Protection/ActiveMARK.cs b/BinaryObjectScanner/Protection/ActiveMARK.cs
index 7471357c..b92a1246 100644
--- a/BinaryObjectScanner/Protection/ActiveMARK.cs
+++ b/BinaryObjectScanner/Protection/ActiveMARK.cs
@@ -31,6 +31,10 @@ namespace BinaryObjectScanner.Protection
         /// <inheritdoc/>
         public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
         {
+            // Investigation notes:
+            // - After the section table, "Code_Name=ActiveMARK[TM]_R5.41" was found. It's not in a section.
+            // - In the stub data, there's a string for the download: "http://d.trymedia.com/dd/..."
+
             // Get the entry point data, if it exists
             if (exe.EntryPointData != null)
             {