{"action":"created","issue":{"url":"https://api.github.com/repos/Rurik/Noriben/issues/4","labels_url":"https://api.github.com/repos/Rurik/Noriben/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/Rurik/Noriben/issues/4/comments","events_url":"https://api.github.com/repos/Rurik/Noriben/issues/4/events","html_url":"https://github.com/Rurik/Noriben/issues/4","id":63275093,"number":4,"title":"Tex tfile doesnt contain any data","user":{"login":"oasec1","id":4145850,"avatar_url":"https://avatars.githubusercontent.com/u/4145850?v=3","gravatar_id":"","url":"https://api.github.com/users/oasec1","html_url":"https://github.com/oasec1","followers_url":"https://api.github.com/users/oasec1/followers","following_url":"https://api.github.com/users/oasec1/following{/other_user}","gists_url":"https://api.github.com/users/oasec1/gists{/gist_id}","starred_url":"https://api.github.com/users/oasec1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oasec1/subscriptions","organizations_url":"https://api.github.com/users/oasec1/orgs","repos_url":"https://api.github.com/users/oasec1/repos","events_url":"https://api.github.com/users/oasec1/events{/privacy}","received_events_url":"https://api.github.com/users/oasec1/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-03-20T18:01:43Z","updated_at":"2015-04-10T00:08:20Z","closed_at":null,"body":"The text file that is created once Noriben is terminated only contains what appears to be default information, see below. This happens every time. This is the latest beta version.\r\n\r\n\r\n\r\n-=] Sandbox Analysis Report generated by Noriben v1.6\r\n-=] Developed by Brian Baskin: brian@thebaskins.com  @bbaskin\r\n-=] The latest release can be found at https://github.com/Rurik/Noriben\r\n\r\n-=] Execution time: 47.61 seconds\r\n-=] Processing time: 4.41 seconds\r\n-=] Analysis time: 1.43 seconds\r\n\r\nProcesses Created:\r\n==================\r\n\r\nFile Activity:\r\n==================\r\n\r\nRegistry Activity:\r\n==================\r\n\r\nNetwork Traffic:\r\n==================\r\n\r\nUnique Hosts:\r\n=================="},"comment":{"url":"https://api.github.com/repos/Rurik/Noriben/issues/comments/91385562","html_url":"https://github.com/Rurik/Noriben/issues/4#issuecomment-91385562","issue_url":"https://api.github.com/repos/Rurik/Noriben/issues/4","id":91385562,"user":{"login":"oasec1","id":4145850,"avatar_url":"https://avatars.githubusercontent.com/u/4145850?v=3","gravatar_id":"","url":"https://api.github.com/users/oasec1","html_url":"https://github.com/oasec1","followers_url":"https://api.github.com/users/oasec1/followers","following_url":"https://api.github.com/users/oasec1/following{/other_user}","gists_url":"https://api.github.com/users/oasec1/gists{/gist_id}","starred_url":"https://api.github.com/users/oasec1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oasec1/subscriptions","organizations_url":"https://api.github.com/users/oasec1/orgs","repos_url":"https://api.github.com/users/oasec1/repos","events_url":"https://api.github.com/users/oasec1/events{/privacy}","received_events_url":"https://api.github.com/users/oasec1/received_events","type":"User","site_admin":false},"created_at":"2015-04-10T00:08:20Z","updated_at":"2015-04-10T00:08:20Z","body":"I'll test it in a few minutes and let you know the results. Thanks for all\nof your efforts.\nOn Apr 9, 2015 7:22 PM, \"Brian Baskin\" <notifications@github.com> wrote:\n\n> Thanks.\n>\n> I've just pushed version 1.6.2, now with better debugging support. I've\n> been unable to replicate this issue or understand how it occurred.\n> Hopefully this new version will help. When running, use the \"-d\" argument\n> to enable debug output. Then paste your console output here, as well as the\n> relevant entries from the .LOG file.\n>\n> Console output would be similar to:\n>\n> C:\\Documents and Settings\\Administrator\\Desktop>Noriben.py -d -t 30 --cmd\n> \"malware\\am.exe\"\n> --===[ Noriben v1.6.2 ]===--\n> --===[ @bbaskin ]===--\n> [*] Using filter file: ProcmonConfiguration.PMC\n> [+] Features: (Debug: True YARA: False VirusTotal: True)\n> [*] Using procmon EXE: c:\\tools\\sysinternalssuite\\procmon.exe\n> [*] Procmon session saved to: Noriben_09_Apr_15__19_16_42_601000.pml\n> [*] Launching Procmon ...\n> [*] Launching command line: malware\\am.exe\n> [*] Running for 30 seconds. Press Ctrl-C to stop logging early.\n> 87% complete\n> [*] Termination of Procmon commencing... please wait\n> [*] Procmon terminated\n> [*] Converting session to CSV: Noriben_09_Apr_15__19_16_42_601000.csv\n> [*] Processing CSV: Noriben_09_Apr_15__19_16_42_601000.csv\n> [*] Enabling Windows string generalization.\n> [*] Querying VirusTotal for hash: 7e1f8d4ecf04c4019e85028db719a98a\n> [*] Querying VirusTotal for hash: 4766b32db089fe85db28681af5373085\n> [*] Querying VirusTotal for hash: 1fe4ec38b2b48ba2ab8c1c78ca5c9b9e\n> [*] Saving report to: Noriben_09_Apr_15__19_16_42_601000.txt\n> [*] Saving timeline to: Noriben_09_Apr_15__19_16_42_601000_timeline.csv\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/Rurik/Noriben/issues/4#issuecomment-91379580>.\n>\n"}}