I am using the 2.1 Windows standalone exe. <div><br></div><div>I have a dd image of memory from the subject operating system and when I try to use pslist with the Win2008SP1x86 profile I get the following errors:</div><div>
<br></div><div><div>Traceback (most recent call last):</div><div>  File &quot;&lt;string&gt;&quot;, line 185, in &lt;module&gt;</div><div>  File &quot;&lt;string&gt;&quot;, line 176, in main</div><div>  File &quot;C:\volatility\build\pyi.win32\pyinstaller\vol.pkz\volatility.commands&quot;, line 111, in execute</div>
<div>  File &quot;C:\volatility\volatility\plugins\taskmods.py&quot;, line 138, in render_text</div><div>  File &quot;C:\volatility\build\pyi.win32\pyinstaller\vol.pkz\volatility.win32.tasks&quot;, line 72, in pslist</div>
<div>  File &quot;C:\volatility\volatility\plugins\overlays\windows\kdbg_vtypes.py&quot;, line 40, in processes</div><div>AttributeError: Could not list tasks, please verify your --profile with kdbgscan</div></div><div><br>
</div><div><br></div><div>When I try to verify my profile with kdbgscan I get the following for all profiles:</div><div><br></div><div> **************************************************</div><div>Instantiating KDBG using: Kernel AS Win2008SP1x86 (6.0.6001 32bit)</div>
<div>Offset (V)                    : 0x8193ec90</div><div>Offset (P)                    : 0x193ec90</div><div>KDBG owner tag check          : True</div><div>Profile suggestion (KDBGHeader): Win2008SP1x86</div><div>Version64                     : 0x8193ec68 (Major: 15, Minor: 6001)</div>
<div>Service Pack (CmNtCSDVersion) : 1</div><div>Build string (NtBuildLab)     : 6001.18000.x86fre.longhorn_rtm.0</div><div>PsActiveProcessHead           : 0x81954990 (0 processes)</div><div>PsLoadedModuleList            : 0x8195ec70 (0 modules)</div>
<div>KernelBase                    : 0x81847000 (Matches MZ: True)</div><div>Major (OptionalHeader)        : 6</div><div>Minor (OptionalHeader)        : 0</div><div>KPCR                          : 0x8193f800 (CPU 0)</div>
<div>KPCR                          : 0x803d1000 (CPU 1)</div><div><br></div><div>Any help would be greatly appreciated.</div><div><br></div><div>Jon</div>