diff --git a/volatility3/framework/plugins/windows/malware/pebmasquerade.py b/volatility3/framework/plugins/windows/malware/pebmasquerade.py
index be54300ff..72b138bae 100644
--- a/volatility3/framework/plugins/windows/malware/pebmasquerade.py
+++ b/volatility3/framework/plugins/windows/malware/pebmasquerade.py
@@ -49,7 +49,7 @@ class PebMasquerade(interfaces.plugins.PluginInterface):
             Union[str, PureWindowsPath]: The executable path as a string or PureWindowsPath.
         """
         if not cmdline:
-            return ""
+            return None
 
         # Regex to extract first .exe ending string (handles quotes, paths, no quotes)
         match = re.search(r'(?i)(["\']?)([^"\']*?\.exe)\1(?=\s|$)', cmdline)