From 4bcb339df8df94891af20a2c2160b939af1b2932 Mon Sep 17 00:00:00 2001
From: Jack Wenger <jxwenger@gmail.com>
Date: Thu, 6 Aug 2020 15:06:28 -0400
Subject: [PATCH] added cachedump and lsadump

---
 volatility/framework/plugins/windows/hashdump.py | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/volatility/framework/plugins/windows/hashdump.py b/volatility/framework/plugins/windows/hashdump.py
index 7df068273..8fc82394c 100644
--- a/volatility/framework/plugins/windows/hashdump.py
+++ b/volatility/framework/plugins/windows/hashdump.py
@@ -80,9 +80,12 @@ class Hashdump(interfaces.plugins.PluginInterface):
         if not root:
             return None
 
-        lsa = syshive.get_key(lsa_base)
-
-        if not lsa:
+        
+        try: 
+            lsa = syshive.get_key(lsa_base)
+        
+        except KeyError:
+            vollog.debug("Unable to read hashes from registry")
             return None
 
         bootkey = ''