Skip to content

DllList LoadCount missing #1780

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
superponible opened this issue Apr 17, 2025 · 0 comments · May be fixed by #1781
Open

DllList LoadCount missing #1780

superponible opened this issue Apr 17, 2025 · 0 comments · May be fixed by #1781
Assignees
@superponible
Labels
parity-release

Comments

@superponible
Copy link
Contributor

Describe the bug
DllList output doesn't include the LoadCount column.

Expected output

$ python vol.py -q -r pretty -f data.lime windows.dlllist
Volatility 3 Framework 2.26.2
Formatting...
  |  PID |         Process |       Base |     Size |                Name |                                                                                                              Path | LoadCount | LoadTime | File output
* |  508 |        smss.exe | 0x48580000 |   0xf000 |            smss.exe |                                                                                     \SystemRoot\System32\smss.exe |        -1 |      N/A |    Disabled
* |  508 |        smss.exe | 0x7c900000 |  0xaf000 |           ntdll.dll |                                                                                     C:\WINDOWS\system32\ntdll.dll |        -1 |      N/A |    Disabled
* |  608 |       csrss.exe | 0x4a680000 |   0x5000 |           csrss.exe |                                                                                 \??\C:\WINDOWS\system32\csrss.exe |        -1 |      N/A |    Disabled
* |  608 |       csrss.exe | 0x7c900000 |  0xaf000 |           ntdll.dll |                                                                                     C:\WINDOWS\system32\ntdll.dll |        -1 |      N/A |    Disabled
* |  608 |       csrss.exe | 0x75b40000 |   0xb000 |          CSRSRV.dll |                                                                                    C:\WINDOWS\system32\CSRSRV.dll |        -1 |      N/A |    Disabled
* |  608 |       csrss.exe | 0x75b50000 |  0x10000 |         basesrv.dll |                                                                                   C:\WINDOWS\system32\basesrv.dll |         3 |      N/A |    Disabled
* |  608 |       csrss.exe | 0x75b60000 |  0x4b000 |          winsrv.dll |                                                                                    C:\WINDOWS\system32\winsrv.dll |         2 |      N/A |    Disabled
* |  608 |       csrss.exe | 0x77f10000 |  0x49000 |           GDI32.dll |                                                                                     C:\WINDOWS\system32\GDI32.dll |         5 |      N/A |    Disabled
* |  608 |       csrss.exe | 0x7c800000 |  0xf6000 |        KERNEL32.dll |                                                                                  C:\WINDOWS\system32\KERNEL32.dll |        16 |      N/A |    Disabled
@superponible superponible self-assigned this Apr 17, 2025
superponible pushed a commit that referenced this issue Apr 17, 2025
#1780 - add LoadCount to dlllist output
4d19181
superponible pushed a commit that referenced this issue Apr 17, 2025
#1780 - black and ruff fixes
094ba8e
@superponible superponible linked a pull request Apr 17, 2025 that will close this issue
1780 dlllist loadcount missing #1781
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@superponible superponible

Labels
parity-release
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

1780 dlllist loadcount missing volatilityfoundation/volatility3
1 participant
@superponible