IA32PagedMemoryPae: Incompatible profile Win2012R2圆4_18340 selected LinuxAMD64PagedMemory: Incompatible profile Win2012R2圆4_18340 selected WindowsAMD64PagedMemory: No valid DTB found Win10AMD64PagedMemory: Incompatible profile Win2012R2圆4_18340 selected WindowsCrashDumpSpace32: Header signature invalid QemuCoreDumpElf: ELF Header signature invalid VMWareAddressSpace: Invalid VMware signature: 0x0 VirtualBoxCoreDumpElf64: ELF Header signature invalid WindowsCrashDumpSpace64: Header signature invalid VMWareMetaAddressSpace: VMware metadata file is not available WindowsCrashDumpSpace64BitMap: Header signature invalid WindowsHiberFileSpace32: No xpress signature found LimeAddressSpace: Invalid Lime header signature MachOAddressSpace: MachO Header signature invalid IA32PagedMemoryPae: No base Address Space LinuxAMD64PagedMemory: No base Address Space WindowsAMD64PagedMemory: No base Address Space Win10AMD64PagedMemory: No base Address Space
Name=Microsoft Windows Server 2012 R2 StandardĬ:\tools\volatility26\volatility_2.6_win64_standalone>volatility_2.6_win64_standalone.exe -f c:\analysis\4353.raw -profile Win2012R2圆4 pslist I get the same with 64bit Windows 10 too. I tried with memory captured with Dumpit and with ramcapturer. I have tried all the profiles suggested on the site.
Please can one of the gurus advice me on what profile to use.
0 kommentar(er)
