diff --git a/volatility3/framework/objects/utility.py b/volatility3/framework/objects/utility.py index 018b4a138..473c5a349 100644 --- a/volatility3/framework/objects/utility.py +++ b/volatility3/framework/objects/utility.py @@ -188,7 +188,7 @@ def bytes_to_decoded_string( ) # cut at terminating byte, if found - data = data[:idx] + data = bytes(full_decoded_string[:idx], encoding=encoding) # return with caller-specified encoding and errors return data.decode(encoding=encoding, errors=errors)