search

tking2 / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 1 forks source link

pslist table truncation (handle count) #266

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Hey guys, I don't have ability to commit at this second, otherwise i'd fix 
myself. If the handle count is larger than expected, the number is truncated 
(see below)

0x8872fad8 wmiprvse.exe           5648    668      6    149      0      0 
2012-03-19 08:19:56                      
0x88069a38 wmiprvse.exe           1564    668      9    203      0      0 
2012-03-19 08:21:25                      
0x884e02f8 logon.scr              1932    424      0 ------      0      0 
2012-03-19 08:30:05  2012-04-06 20:22:40 
0x882447d8 naPrdMgr.exe          21556    668      7    187      0      0 
2012-04-02 08:25:34                      
0x8a209558 wmiprvse.exe          25592    668      0 ------      0      0 
2012-04-05 02:04:44  2012-04-05 02:15:47 
0x87d528a8 explorer.exe          27340  26808     12    366      0      0 
2012-04-06 20:44:38                      
0x876fcd88 searchprotocolh       28456   2652      6 6...2 ------      0 
2012-04-06 20:44:46                      
0x882e0bc8 cpqteam.exe           28452  27340      1     37      0      0 
2012-04-06 20:45:12                      
0x877c7b18 UdaterUI.exe          28664  27340      5    108      0      0 
2012-04-06 20:45:12                      
0x87919a38 WindowsSearch.e       25476  27340      9    220      0      0 
2012-04-06 20:45:12                      
0x87c00768 msiexec.exe           28464    472      4 6...2 ------      0 
2012-04-06 20:45:15                      
0x87c10b18 McTray.exe            24988  28664     17    228      0      0 
2012-04-06 20:45:16                      
0x87ccb760 cmd.exe               27544  27340      1     30      0      0 
2012-04-06 20:47:20                      
0x87c5f1e8 searchfilterhos       27192   2652      4 7...5 ------      0 
2012-04-06 20:49:15                      
0x87946aa0 memacqXP2k3.exe       27620  27544      2    144      0      0 
2012-04-06 20:49:22                      
0x87c187b8 wmiprvse.exe          27640    668      7    127 ------      0 
2012-04-06 20:51:07

Original issue reported on code.google.com by michael.hale@gmail.com on 1 Jun 2012 at 1:25

GoogleCodeExporter commented 9 years ago 
This issue was closed by revision r1804.

Original comment by mike.auty@gmail.com on 3 Jun 2012 at 2:55