Emba scan is running for more than a week about emba HOT 10 CLOSED

In emba/helpers/ folder you can find a running_modules.sh script. You can check the actual running modules with it.

./running_modules.sh YOUR_EMBA_SCANS_LOG_DIR

Result should be similar to this:

[*] EMBA module S16_ghidra_decompile_checks currently running

from emba.

Thank you for contributing an issue!

Welcome to the EMBA firmware analysis community!

We are glad you are here and appreciate your contribution. Please keep in mind our contributing guidelines here and here.
Also, please check existing open issues and consider to open a discussion in the dedicated discussion area.
Additionally, we have collected a lot of details around EMBA, the installation and the usage of EMBA in our Wiki.

If you like EMBA you have the chance to support us by becoming a Sponsor or buying some beer here.

This is an automatic message. Allow for time for the EMBA community to be able to read the issue and comment on it.

from emba.

1.4Gig is quite a huge firmware. To have a better impression if this is normal we need more details

• What spec (CPU/cores/RAM) has the system you are running EMBA on?
• Can you provide a link to the firmware for internal testing
• How are you starting the analysis process e.g. which scanning profile are you using

from emba.

System Details:
System load: 2.19580078125
Usage of /: 45.8% of 247.88GB
Memory usage: 10%
Swap usage: 4%
Processes: 245
Users logged in: 1
Architecture: x86_64
CPU op-mode(s): 32-bit, 64-bit
CPU(s): 4
On-line CPU(s) list: 0-3
RAM: 8GB

Scan Mode: full-scan

Link: https://downloadstore.boschsecurity.com/FILES/CPP14_FW_9.00.0210.fw

I tried ./running_modules.sh YOUR_EMBA_SCANS_LOG_DIR but didn't get any result.

Please let me know if there is any other way to check the progress of the scan.

from emba.

What was your emba init command for the scan?
The 8 GB ram is definitely not enough for a huge scan I think.

from emba.

Usually 8 cores with double RAM (16gig) is a rule of thumb as minimum requirement for basic EMBA tests. See also https://github.com/e-m-b-a/emba/wiki/Installation#prerequisites

from emba.

Please let me know if there is any other way to check the progress of the scan.

Check the emba.log in your log directory which stage EMBA currently is.

from emba.

btw. is this an encrypted firmware image? If so, you need to decrypt it before throwing it into EMBA.

from emba.

In logs it looks like most of the scan modules are completed, lets see when it is completes. After completing scan I will increase the RAM core.
Previously I scanned .bin file of the same size and it was completed successfully but this time I am using .fw file, not sure about encryption. Please let me know how I can confirm this.

from emba.

Please reopen if needed

from emba.