83 lines
No EOL
1.9 KiB
JSON
83 lines
No EOL
1.9 KiB
JSON
{
|
|
"evidence_id": "ev_9fe3a449c6aa867adaabf1b34be9967bba78f98a7d72bc69f9fab835fb7db03b",
|
|
"sha256": "6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469",
|
|
"document": "target-6f2be7b8eb79.exe",
|
|
"image_base": "0x140000000",
|
|
"procedure_count": 6814,
|
|
"segment_count": 9,
|
|
"segments": [
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0x140000400",
|
|
"image_base": "0x140000000",
|
|
"length": 1024,
|
|
"name": "Headers",
|
|
"start": "0x140000000"
|
|
},
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0x1400f1a00",
|
|
"image_base": "0x140000000",
|
|
"length": 985600,
|
|
"name": ".text",
|
|
"start": "0x140001000"
|
|
},
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0x140154200",
|
|
"image_base": "0x140000000",
|
|
"length": 401920,
|
|
"name": ".rdata",
|
|
"start": "0x1400f2000"
|
|
},
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0x140163450",
|
|
"image_base": "0x140000000",
|
|
"length": 58448,
|
|
"name": ".data",
|
|
"start": "0x140155000"
|
|
},
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0x14016ee00",
|
|
"image_base": "0x140000000",
|
|
"length": 44544,
|
|
"name": ".pdata",
|
|
"start": "0x140164000"
|
|
},
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0x14016f200",
|
|
"image_base": "0x140000000",
|
|
"length": 512,
|
|
"name": ".tls",
|
|
"start": "0x14016f000"
|
|
},
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0x140170200",
|
|
"image_base": "0x140000000",
|
|
"length": 512,
|
|
"name": ".rsrc",
|
|
"start": "0x140170000"
|
|
},
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0x140173600",
|
|
"image_base": "0x140000000",
|
|
"length": 9728,
|
|
"name": ".reloc",
|
|
"start": "0x140171000"
|
|
},
|
|
{
|
|
"address_space": "ram",
|
|
"end": "0xff00001850",
|
|
"image_base": "0x140000000",
|
|
"length": 6224,
|
|
"name": "tdb",
|
|
"start": "0xff00000000"
|
|
}
|
|
],
|
|
"string_count": 1472
|
|
} |