volatilityfoundation / volatility

An advanced memory forensics framework
http://volatilityfoundation.org/
GNU General Public License v2.0
7.37k stars 1.28k forks source link

Infinite determinating profile #875

Open L1mPeX opened 7 months ago

L1mPeX commented 7 months ago

In the win10 standalone version after running ".\volatility_2.6_win64_standalone.exe -f "E:\mem.elf" imageinfo" I see static string: "INFO : volatility.debug : Determining profile based on KDBG search..." and after 30 minutes of waiting, nothing has changed

Volatility 3 works perfectly, but there are some problems with volatility 2