lab52io / Syspce

System Processes Correlation Engine

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Volatility Input crash during memory analisys

lab52io opened this issue · comments

[SYSPCE] SHA256: 53197fed6a68297acb2577e3cbcb6275494941e7b8f57ca9481a08a163398d24
[SYSPCE] MACHINEGUID detected: ffffffff

SYSPCE#>jobs
SYSPCE#>
Job_4c702daa-fe39-4aa6-bc2c-b4df4a4b0976
Job running: True
IM job done: False
EM job done: True
Type: SINGLE_ACTION
Task: READ_FROM_MEMDUMP

SYSPCE#>[SYSPCE] Warning computer is ffffffff, problems while we try to read registry key
[SYSPCE] Warning TerminalSessionId is -1: Image: SelfService.ex 185280
Exception in thread Input Volatility:
Traceback (most recent call last):
File "C:\Program Files\Python2.7.16\lib\threading.py", line 801, in _bootstrap_inner
self.run()
File "C:\Users\ramad\source\repos\Syspce\syspce_input.py", line 34, in run
self.do_action()
File "C:\Users\ramad\source\repos\Syspce\syspce_input_volatility.py", line 660, in do_action
json.dump(vprocess,outfile)
File "C:\Program Files\Python2.7.16\lib\json_init
.py", line 189, in dump
for chunk in iterable:
File "C:\Program Files\Python2.7.16\lib\json\encoder.py", line 431, in _iterencode
for chunk in _iterencode_list(o, _current_indent_level):
File "C:\Program Files\Python2.7.16\lib\json\encoder.py", line 332, in _iterencode_list
for chunk in chunks:
File "C:\Program Files\Python2.7.16\lib\json\encoder.py", line 364, in _iterencode_dict
for key, value in items:
RuntimeError: dictionary changed size during iteration

    PHE ALERT [28]: SeDebugPrivilegeEnabled in user session
    !--> PROCESS CREATED (159236) [Running] ssonsvr.exe