Oh geez, you're right, Mike! That part had scrolled to the next line
and I didn't even see it, hahaha. Good catch!
All the best,
-Jamie
On 2/23/15 4:53 PM, Mike Auty wrote:
Also,
Imageinfo correctly identified it as
IA32PagedMemoryPae, and suggested Win7SP1x86, but it's easy to miss,
just like everyone reading this thread (myself included). 5:)
Mike 5:)
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
--
Jamie Levy (@gleeda)
Blog:
http://volatility-labs.blogspot.com/
GPG:
http://pgp.mit.edu/pks/lookup?op=get&search=0x196B2AB527A4AC92
Fingerprint: 2E87 17A1 EC10 1E3E 11D3 64C2 196B 2AB5 27A4 AC92