<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>Hi Brendan,</p>
<p><br>
</p>
<p>I am trying to Migrate my plugin Faros from Panda 1 to Panda 2. I have made all the necessary changes in plugin (faros.cpp) and include in plugin list. While compiling, it is giving lot of error. I believe that error is caused because file cannot find reference
of method and data structure used in file. There seems to be linker issues. I am attaching error file and also attaching Makefile.</p>
<p><br>
</p>
<p>Can you please look at it.</p>
<p><br>
</p>
<p>Also, there is no legit sample plugin for Panda 2. The sample plugin in Panda 2 has lots of issues as it basically panda 1 plugin with some changes. It refers to file that doesn't exist in Panda 2 any more.
<br>
</p>
<p><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif, "EmojiFont", "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<p><span lang="en-US"></span></p>
<div style="margin:0"><font style="font-family:Times New Roman,serif,serif,"EmojiFont"" face="Times New Roman,serif" size="3"><span style="font-size:12pt"><font style="font-family:Cambria,serif,serif,"EmojiFont"" face="Cambria,serif" color="#1F497D" size="3"><span style="font-size:13pt"><b><i>Rohan
Gupta<br>
</i></b></span></font></span></font></div>
<div style="margin:0"><font style="font-family:Times New Roman,serif,serif,"EmojiFont"" face="Times New Roman,serif" size="3"><span style="font-size:12pt"><font style="font-family:Cambria,serif,serif,"EmojiFont"" face="Cambria,serif" color="#1F497D" size="2"><span style="font-size:10pt">UFID
- 10141049<br>
Graduate Student <br>
University of Florida</span></font></span></font></div>
<div style="margin:0"><font style="font-family:Times New Roman,serif,serif,"EmojiFont"" face="Times New Roman,serif" size="3"><span style="font-size:12pt"><font style="font-family:Cambria,serif,serif,"EmojiFont"" face="Cambria,serif" color="#1F497D" size="2"><span style="font-size:10pt">Phone:
352-745-9447</span></font></span></font></div>
<br>
<p></p>
</div>
</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Brendan Dolan-Gavitt <brendandg@nyu.edu><br>
<b>Sent:</b> Friday, July 14, 2017 3:35:39 PM<br>
<b>To:</b> Gupta,Rohan<br>
<b>Cc:</b> panda-users@mit.edu<br>
<b>Subject:</b> Re: [panda-users] REG: Require Information regarding PANDA</font>
<div> </div>
</div>
<div>
<div>
<div dir="auto">Correct, they only work with 32-bit windows. You would have to update them to support 64-bit (and hopefully send us a patch!)</div>
<div dir="auto"><br>
</div>
<div dir="auto">Best,</div>
<div dir="auto">Brendan </div>
<br>
<div class="gmail_quote">
<div>On Fri, Jul 14, 2017 at 12:33 PM Gupta,Rohan <<a href="mailto:rohg26@ufl.edu">rohg26@ufl.edu</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div class="m_6497625022509241922WordSection1">
<p class="MsoNormal">I just want to ask one more question. Currently our system uses PANDA plugins like
</p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Syscall2,</p>
<p class="MsoNormal">OSI,</p>
<p class="MsoNormal">win7x86intro</p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Do they support only 32 bit version of Windows? If yes, then is there any alternative to these plugins or do we patch them ourselves ?</p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">PS – Thanks a lot for your response. </p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Sent from <a href="https://go.microsoft.com/fwlink/?LinkId=550986" target="_blank">
Mail</a> for Windows 10</p>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="border:none;padding:0in"><b>From: </b><a href="mailto:brendandg@nyu.edu" target="_blank">Brendan Dolan-Gavitt</a><br>
<b>Sent: </b>Thursday, July 13, 2017 8:14 PM<br>
<b>To: </b><a href="mailto:rohg26@ufl.edu" target="_blank">Gupta,Rohan</a><br>
<b>Cc: </b><a href="mailto:panda-users@mit.edu" target="_blank">panda-users@mit.edu</a><br>
<b>Subject: </b>Re: [panda-users] REG: Require Information regarding PANDA</p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<div>
<div>
<div>It should work fine with Windows 7 64-bit. There were problems several years ago related to Patchguard, but they should be fixed at this point.</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jul 13, 2017 at 2:44 PM, Gupta,Rohan <span><<a href="mailto:rohg26@ufl.edu" target="_blank">rohg26@ufl.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div id="m_6497625022509241922m_-1660295682344095329divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif">
<p>Hi All,</p>
<p><br>
</p>
<p>My name is Rohan Gupta and I am new to PANDA. I want to analyze malware using PANDA's Record and Replay.</p>
<p><br>
</p>
<p>I want to know if PANDA 2 allows Record of Windows 7 64-bit system. I know it says that it
<span>supports whole-system record/replay execution of x86, x86_64, and ARM guests on documentation. But I have been told by someone that it doesn't support Windows 7 64-bit.</span></p>
<p><span><br>
</span></p>
<p><span>Thank you for any information</span><span class="m_6497625022509241922HOEnZb"><font color="#888888"><br>
</font></span></p>
<span class="m_6497625022509241922HOEnZb"><font color="#888888">
<p><br>
</p>
<div id="m_6497625022509241922m_-1660295682344095329Signature">
<div id="m_6497625022509241922m_-1660295682344095329divtagdefaultwrapper" style="font-size:12pt;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif,"EmojiFont","Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols">
<p><span lang="en-US"></span></p>
<div style="margin:0"><font style="font-family:Times New Roman,serif,serif,"EmojiFont"" size="3" face="Times New Roman,serif"><span style="font-size:12pt"><font style="font-family:Cambria,serif,serif,"EmojiFont"" color="#1F497D" size="3" face="Cambria,serif"><span style="font-size:13pt"><b><i>Rohan
Gupta<br>
</i></b></span></font></span></font></div>
<div style="margin:0"><font style="font-family:Times New Roman,serif,serif,"EmojiFont"" size="3" face="Times New Roman,serif"><span style="font-size:12pt"><font style="font-family:Cambria,serif,serif,"EmojiFont"" color="#1F497D" size="2" face="Cambria,serif"><span style="font-size:10pt">UFID
- 10141049<br>
Graduate Student <br>
University of Florida</span></font></span></font></div>
<div style="margin:0"><font style="font-family:Times New Roman,serif,serif,"EmojiFont"" size="3" face="Times New Roman,serif"><span style="font-size:12pt"><font style="font-family:Cambria,serif,serif,"EmojiFont"" color="#1F497D" size="2" face="Cambria,serif"><span style="font-size:10pt">Phone:
<a href="tel:(352)%20745-9447" value="+13527459447" target="_blank">352-745-9447</a></span></font></span></font></div>
<br>
<p></p>
</div>
</div>
</font></span></div>
</div>
<br>
_______________________________________________<br>
panda-users mailing list<br>
<a href="mailto:panda-users@mit.edu" target="_blank">panda-users@mit.edu</a><br>
<a href="http://mailman.mit.edu/mailman/listinfo/panda-users" rel="noreferrer" target="_blank">http://mailman.mit.edu/mailman/listinfo/panda-users</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="m_6497625022509241922gmail_signature" data-smartmail="gmail_signature">
Brendan Dolan-Gavitt<br>
Assistant Professor, Department of Computer Science and Engineering<br>
NYU Tandon School of Engineering</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<div dir="ltr">-- <br>
</div>
<div data-smartmail="gmail_signature">Brendan Dolan-Gavitt<br>
Assistant Professor, Department of Computer Science and Engineering<br>
NYU Tandon School of Engineering</div>
</div>
</body>
</html>