[Bug] Msg_Parser_2_0

[KRUXLEX]

Describe the bug
On every analyzing a .msg file, get the same error:
Unexpected end-of-input within/between Object entries at [Source: (sun.nio.ch.ChannelInputStream); line: 1, column: 249]

To Reproduce
Normal analyze

Expected behavior
Fix

Complementary information
Convert to .eml and analyze by EmlParser_1_2 works. So if it's a format problem, the convert will be faulty.

Work environment

• Client OS: Debian 9
• Server OS: Centos 7
• Browse type and version: Firefox 68.2.0esr (64-bit)
• Cortex version: 3.0.0-1
• Cortex Analyzer/Responder name: Msg_Parser_2_0
• Cortex Analyzer/Responder version: 2.0

Possible solutions
https://stackoverflow.com/questions/49015718/unexpected-end-of-input-expected-close-marker-for-object-start-marker-at-sour

Additional context
nOpe

[jeromeleonard]

Hello,

did you try to analyze it with FileInfo that can also parser MSG files ?

Regards,
Jerome.

[KRUXLEX]

Hello,

did you try to analyze it with FileInfo that can also parser MSG files ?

Regards,
Jerome.

I was try, but I can't run FileInfo (I have activated this analyzer)

[jeromeleonard]

manalyse for FileInfo is an external program. So you should specify a path for the binary to be able to use it. If you are not using it - or do not know about it - please disable manalyse_* options. This should enable successfully FileInfo analyzer.

[KRUXLEX]

My FileInfo config. I having disable binary.

[jeromeleonard]

Hello. So is it working now ?

[dadokkio]

No feedback in a while. I've just tried Msg_parser_3.0 with success so I'm going to close this issue.
Please reopen it if required.