BeaconEye icon indicating copy to clipboard operation
BeaconEye copied to clipboard

Unhandled Exception: NtApiDotNet.NtException: (0x8000000D) - {Partial Copy}

Open duzvik opened this issue 3 years ago • 1 comments

Any ideas on how to fix this? It's an x86 version from releases.

[+] Scanning for beacon processess...
NotSpecified: (:String) [], RemoteException
    + CategoryInfo          : NotSpecified: (:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError
    + PSComputerName        : pc

Unhandled Exception: NtApiDotNet.NtException: (0x8000000D) - {Partial Copy}
Due to protection conflicts not all the requested bytes could be copied.
   at NtApiDotNet.NtObjectUtils.ToNtException(NtStatus status, Boolean throw_on_error)
   at NtApiDotNet.NtVirtualMemory.ReadMemory[T](SafeKernelObjectHandle process, Int64 base_address)
   at BeaconEye.NtProcessReader.ReadMemory[T](UInt64 address)
   at BeaconEye.ProcessReader.get_Heaps()
   at BeaconEye.BeaconEye.ProcessHasConfig(ProcessReader process)
   at BeaconEye.BeaconEye.IsBeaconProcess(ProcessReader process, Boolean monitor)
   at BeaconEye.BeaconEye.Main(String[] args)

duzvik avatar Sep 28 '21 16:09 duzvik

Just started testing this and encountered the same with x64 when executed from a SYSTEM process.

mbmy avatar Feb 23 '22 14:02 mbmy