diff --git a/volatility3/framework/plugins/linux/malfind.py b/volatility3/framework/plugins/linux/malfind.py index a6e739bbf..7d8dd7f18 100644 --- a/volatility3/framework/plugins/linux/malfind.py +++ b/volatility3/framework/plugins/linux/malfind.py @@ -54,10 +54,7 @@ class Malfind(interfaces.plugins.PluginInterface): vollog.debug( f"Injections : processing PID {task.pid} : VMA {vma_name} : {hex(vma.vm_start)}-{hex(vma.vm_end)}" ) - if ( - vma.is_suspicious(proc_layer) - and vma_name != "[vdso]" - ): + if vma.is_suspicious(proc_layer) and vma_name != "[vdso]": data = proc_layer.read(vma.vm_start, 64, pad=True) yield vma, vma_name, data