mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-17 20:35:40 +02:00
PEBMASQ: return None instead of empty string
This commit is contained in:
@@ -49,7 +49,7 @@ class PebMasquerade(interfaces.plugins.PluginInterface):
|
||||
Union[str, PureWindowsPath]: The executable path as a string or PureWindowsPath.
|
||||
"""
|
||||
if not cmdline:
|
||||
return ""
|
||||
return None
|
||||
|
||||
# Regex to extract first .exe ending string (handles quotes, paths, no quotes)
|
||||
match = re.search(r'(?i)(["\']?)([^"\']*?\.exe)\1(?=\s|$)', cmdline)
|
||||
|
||||
Reference in New Issue
Block a user