buffer:MZ ÿÿ ¸ @ 0 º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ ý:º¹úTé¹úTé¹úTéâPè¢úTéâWè´úTéâQèqúTé'Zé½úTé²PèªúTé²Wè°úTé²Qè/úTéPè«úTéâUè¬úTé¹úUéÓûTé<PèêøTé]èEúTéWè½úTé«é¸úTé¹úÃé¸úTéVè¸úTéRich¹úTé PE d Náa ð " 4 ,A |2/ @ 0v ` ôrG Ü u s ¨ u Ð
D Ð D (
D 0 °4 x
.text d4 4 `.rdata væ °4 è 4 @ @.data S+ G ~G @ À.pdata ¨ s H @ @_RANDOMXV u ¨J @ `_SHA3_25@ 0u
¶J @ `_TEXT_CNQ @u ÀJ @ `_TEXT_CN `u àJ @ `_RDATA u òJ @ @.rsrc u ôJ @ @.reloc Ð u úJ @ B base_address:0x0000000140000000 process_identifier:872 process_handle:0x0000000000000324
buffer: 8 P h u x u } x4 V S _ V E R S I O N _ I N F O ½ïþ ? Ø S t r i n g F i l e I n f o ´ 0 0 0 0 0 4 b 0 C o m p a n y N a m e d F i l e D e s c r i p t i o n W i n d o w s C o n f i g u r a t i o n M a n a g e r , F i l e V e r s i o n 2 . 0 . 0 $ L e g a l C o p y r i g h t <
O r i g i n a l F i l e n a m e x m r i g . e x e \ P r o d u c t N a m e W i n d o w s C o n f i g u r a t i o n M a n a g e r 0 P r o d u c t V e r s i o n 2 . 0 . 0 D V a r F i l e I n f o $ T r a n s l a t i o n °<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
base_address:0x0000000140759000 process_identifier:872 process_handle:0x0000000000000324
buffer:MZ ÿÿ ¸ @ 0 º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ ý:º¹úTé¹úTé¹úTéâPè¢úTéâWè´úTéâQèqúTé'Zé½úTé²PèªúTé²Wè°úTé²Qè/úTéPè«úTéâUè¬úTé¹úUéÓûTé<PèêøTé]èEúTéWè½úTé«é¸úTé¹úÃé¸úTéVè¸úTéRich¹úTé PE d Náa ð " 4 ,A |2/ @ 0v ` ôrG Ü u s ¨ u Ð
D Ð D (
D 0 °4 x
.text d4 4 `.rdata væ °4 è 4 @ @.data S+ G ~G @ À.pdata ¨ s H @ @_RANDOMXV u ¨J @ `_SHA3_25@ 0u
¶J @ `_TEXT_CNQ @u ÀJ @ `_TEXT_CN `u àJ @ `_RDATA u òJ @ @.rsrc u ôJ @ @.reloc Ð u úJ @ B base_address:0x0000000140000000 process_identifier:872 process_handle:0x0000000000000324
buffer:MZ ÿÿ ¸ @ 0 º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ ý:º¹úTé¹úTé¹úTéâPè¢úTéâWè´úTéâQèqúTé'Zé½úTé²PèªúTé²Wè°úTé²Qè/úTéPè«úTéâUè¬úTé¹úUéÓûTé<PèêøTé]èEúTéWè½úTé«é¸úTé¹úÃé¸úTéVè¸úTéRich¹úTé PE d Náa ð " 4 ,A |2/ @ 0v ` ôrG Ü u s ¨ u Ð
D Ð D (
D 0 °4 x
.text d4 4 `.rdata væ °4 è 4 @ @.data S+ G ~G @ À.pdata ¨ s H @ @_RANDOMXV u ¨J @ `_SHA3_25@ 0u
¶J @ `_TEXT_CNQ @u ÀJ @ `_TEXT_CN `u àJ @ `_RDATA u òJ @ @.rsrc u ôJ @ @.reloc Ð u úJ @ B base_address:0x0000000140000000 process_identifier:872 process_handle:0x0000000000000324
buffer: 8 P h u x u } x4 V S _ V E R S I O N _ I N F O ½ïþ ? Ø S t r i n g F i l e I n f o ´ 0 0 0 0 0 4 b 0 C o m p a n y N a m e d F i l e D e s c r i p t i o n W i n d o w s C o n f i g u r a t i o n M a n a g e r , F i l e V e r s i o n 2 . 0 . 0 $ L e g a l C o p y r i g h t <
O r i g i n a l F i l e n a m e x m r i g . e x e \ P r o d u c t N a m e W i n d o w s C o n f i g u r a t i o n M a n a g e r 0 P r o d u c t V e r s i o n 2 . 0 . 0 D V a r F i l e I n f o $ T r a n s l a t i o n °<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
base_address:0x0000000140759000 process_identifier:872 process_handle:0x0000000000000324
svchost.exe