C:\Users\imbmi\OneDrive\Desktop\tool\Git\volatility3>vol.py -h
Volatility 3 Framework 2.0.0
Failed to import 'C:\Users\imbmi\AppData\Local\Programs\Python\Python310\DLLs\libyara.dll'
PATH = C:\Program Files (x86)\VMware\VMware Player\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Windows\System32\OpenSSH;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Users\imbmi\OneDrive\Desktop\Git\cmd;C:\Users\imbmi\AppData\Local\Programs\Python\Python310\Scripts;C:\Users\imbmi\AppData\Local\Programs\Python\Python310;C:\Users\imbmi\AppData\Local\Microsoft\WindowsApps;C:\Program Files\Bandizip;C:\Users\imbmi\AppData\Local\Programs\Python\Python310\DLLs
Traceback (most recent call last):
File "C:\Users\imbmi\OneDrive\Desktop\tool\Git\volatility3\vol.py", line 10, in
volatility3.cli.main()
File "C:\Users\imbmi\OneDrive\Desktop\tool\Git\volatility3\volatility3\cli_init_.py", line 625, in main
CommandLine().run()
File "C:\Users\imbmi\OneDrive\Desktop\tool\Git\volatility3\volatility3\cli_init_.py", line 228, in run
failures = framework.import_files(volatility3.plugins,
File "C:\Users\imbmi\OneDrive\Desktop\tool\Git\volatility3\volatility3\framework_init_.py", line 125, in import_files
failures += import_file(base_module.name + '.' + submodule,
File "C:\Users\imbmi\OneDrive\Desktop\tool\Git\volatility3\volatility3\framework_init_.py", line 152, in import_file
importlib.import_module(module)
File "C:\Users\imbmi\AppData\Local\Programs\Python\Python310\lib\importlib_init_.py", line 126, in import_module
return _bootstrap._gcd_import(name[level:], package, level)
File "", line 1050, in _gcd_import
File "", line 1027, in _find_and_load
File "", line 1006, in _find_and_load_unlocked
File "", line 688, in load_unlocked
File "", line 883, in exec_module
File "", line 241, in call_with_frames_removed
File "C:\Users\imbmi\OneDrive\Desktop\tool\Git\volatility3\volatility3\framework\plugins\yarascan.py", line 17, in
import yara
File "C:\Users\imbmi\AppData\Local\Programs\Python\Python310\lib\site-packages\yara_init.py", line 7, in
from yara.rules import compile
File "C:\Users\imbmi\AppData\Local\Programs\Python\Python310\lib\site-packages\yara\rules.py", line 17, in
from yara.libyara_wrapper import *
File "C:\Users\imbmi\AppData\Local\Programs\Python\Python310\lib\site-packages\yara\libyara_wrapper.py", line 315, in
libyaradll = cdll.LoadLibrary(library)
File "C:\Users\imbmi\AppData\Local\Programs\Python\Python310\lib\ctypes_init.py", line 452, in LoadLibrary
return self.dlltype(name)
File "C:\Users\imbmi\AppData\Local\Programs\Python\Python310\lib\ctypes_init.py", line 374, in init
self._handle = _dlopen(self._name, mode)
FileNotFoundError: Could not find module 'C:\Users\imbmi\AppData\Local\Programs\Python\Python310\DLLs\libyara.dll' (or one of its dependencies). Try using the full path with constructor syntax.
What's the problem
It looks like there is the yara library missing, see dependencies: https://github.com/volatilityfoundation/volatility/wiki/Installation#dependencies
Be sure that another dependencies are also installed.
Which python version did you install?
It was 3.1.0, but when I changed it to 3.9.7, it turned out well.
volatilityfoundation
