MinidumpHeaderSignatureMismatchException: EGAP

skelsec / minidump

Python library to parse and read Microsoft minidump file format

MIT License

270 stars 55 forks source link

MinidumpHeaderSignatureMismatchException: EGAP #14

Closed ghost closed 4 years ago

ghost commented 4 years ago

This occured when I tried to parse the minidump I copied after BSOD caused by running Nox App Player. Guranteed unmodified. OS: Win 10 64-bit (minidump-0.0.13). Directly copied from C:/Windows/Minidump minidump.zip

skelsec commented 4 years ago

Hello! The problem is that the file you submitted is in a different format than what this project is for. This project supports the minidump file format as specified by Microsoft here Your file is a crash dump which is kinda specified here. I'd recommend using Volatility or Rekall to parse your file.
As for the confusion: you can thank Microsoft for the naming inconsistencies :)

ghost commented 4 years ago

I understand, btw my Nox player app issue was solved by running their DG readiness tool.