{
  "evidence_id": "ev_9fe3a449c6aa867adaabf1b34be9967bba78f98a7d72bc69f9fab835fb7db03b",
  "sha256": "6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469",
  "document": "target-6f2be7b8eb79.exe",
  "image_base": "0x140000000",
  "procedure_count": 6814,
  "segment_count": 9,
  "segments": [
    {
      "address_space": "ram",
      "end": "0x140000400",
      "image_base": "0x140000000",
      "length": 1024,
      "name": "Headers",
      "start": "0x140000000"
    },
    {
      "address_space": "ram",
      "end": "0x1400f1a00",
      "image_base": "0x140000000",
      "length": 985600,
      "name": ".text",
      "start": "0x140001000"
    },
    {
      "address_space": "ram",
      "end": "0x140154200",
      "image_base": "0x140000000",
      "length": 401920,
      "name": ".rdata",
      "start": "0x1400f2000"
    },
    {
      "address_space": "ram",
      "end": "0x140163450",
      "image_base": "0x140000000",
      "length": 58448,
      "name": ".data",
      "start": "0x140155000"
    },
    {
      "address_space": "ram",
      "end": "0x14016ee00",
      "image_base": "0x140000000",
      "length": 44544,
      "name": ".pdata",
      "start": "0x140164000"
    },
    {
      "address_space": "ram",
      "end": "0x14016f200",
      "image_base": "0x140000000",
      "length": 512,
      "name": ".tls",
      "start": "0x14016f000"
    },
    {
      "address_space": "ram",
      "end": "0x140170200",
      "image_base": "0x140000000",
      "length": 512,
      "name": ".rsrc",
      "start": "0x140170000"
    },
    {
      "address_space": "ram",
      "end": "0x140173600",
      "image_base": "0x140000000",
      "length": 9728,
      "name": ".reloc",
      "start": "0x140171000"
    },
    {
      "address_space": "ram",
      "end": "0xff00001850",
      "image_base": "0x140000000",
      "length": 6224,
      "name": "tdb",
      "start": "0xff00000000"
    }
  ],
  "string_count": 1472
}