buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L ¥¶þ à 0 ¸ ^Ö à @ @ Ö K à ¬ H .text d¶ ¸ `.rsrc ¬ à º @ @.reloc ¾ @ B base_address:0x00400000 process_identifier:2264 process_handle:0x00000220
1
1
0
WriteProcessMemory
buffer: 0 H Xà T T4 V S _ V E R S I O N _ I N F O ½ïþ ? D V a r F i l e I n f o $ T r a n s l a t i o n °´ S t r i n g F i l e I n f o 0 0 0 0 0 4 b 0 , F i l e D e s c r i p t i o n 0 F i l e V e r s i o n 0 . 0 . 0 . 0 > I n t e r n a l N a m e A m a r a c u s e s . e x e ( L e g a l C o p y r i g h t F O r i g i n a l F i l e n a m e A m a r a c u s e s . e x e 4 P r o d u c t V e r s i o n 0 . 0 . 0 . 0 8 A s s e m b l y V e r s i o n 0 . 0 . 0 . 0 base_address:0x0046e000 process_identifier:2264 process_handle:0x00000220
buffer: P 8 h Ü à L L4 V S _ V E R S I O N _ I N F O ½ïþ ? D V a r F i l e I n f o $ T r a n s l a t i o n °¬ S t r i n g F i l e I n f o 0 0 0 0 0 4 b 0 , F i l e D e s c r i p t i o n 0 F i l e V e r s i o n 0 . 0 . 0 . 0 < I n t e r n a l N a m e A d d l e m e n t . e x e ( L e g a l C o p y r i g h t D O r i g i n a l F i l e n a m e A d d l e m e n t . e x e 4 P r o d u c t V e r s i o n 0 . 0 . 0 . 0 8 A s s e m b l y V e r s i o n 0 . 0 . 0 . 0 ìâ ê <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly> base_address:0x0041e000 process_identifier:2408 process_handle:0x00000204
1
1
0
WriteProcessMemory
buffer: À ä5 base_address:0x00420000 process_identifier:2408 process_handle:0x00000204
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L ¥¶þ à 0 ¸ ^Ö à @ @ Ö K à ¬ H .text d¶ ¸ `.rsrc ¬ à º @ @.reloc ¾ @ B base_address:0x00400000 process_identifier:2264 process_handle:0x00000220
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L ¥¶þ à 0 ¸ ^Ö à @ @ Ö K à ¬ H .text d¶ ¸ `.rsrc ¬ à º @ @.reloc ¾ @ B base_address:0x00400000 process_identifier:2264 process_handle:0x00000220
buffer: 0 H Xà T T4 V S _ V E R S I O N _ I N F O ½ïþ ? D V a r F i l e I n f o $ T r a n s l a t i o n °´ S t r i n g F i l e I n f o 0 0 0 0 0 4 b 0 , F i l e D e s c r i p t i o n 0 F i l e V e r s i o n 0 . 0 . 0 . 0 > I n t e r n a l N a m e A m a r a c u s e s . e x e ( L e g a l C o p y r i g h t F O r i g i n a l F i l e n a m e A m a r a c u s e s . e x e 4 P r o d u c t V e r s i o n 0 . 0 . 0 . 0 8 A s s e m b l y V e r s i o n 0 . 0 . 0 . 0 base_address:0x0046e000 process_identifier:2264 process_handle:0x00000220
buffer: P 8 h Ü à L L4 V S _ V E R S I O N _ I N F O ½ïþ ? D V a r F i l e I n f o $ T r a n s l a t i o n °¬ S t r i n g F i l e I n f o 0 0 0 0 0 4 b 0 , F i l e D e s c r i p t i o n 0 F i l e V e r s i o n 0 . 0 . 0 . 0 < I n t e r n a l N a m e A d d l e m e n t . e x e ( L e g a l C o p y r i g h t D O r i g i n a l F i l e n a m e A d d l e m e n t . e x e 4 P r o d u c t V e r s i o n 0 . 0 . 0 . 0 8 A s s e m b l y V e r s i o n 0 . 0 . 0 . 0 ìâ ê <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly> base_address:0x0041e000 process_identifier:2408 process_handle:0x00000204
1
1
0
WriteProcessMemory
buffer: À ä5 base_address:0x00420000 process_identifier:2408 process_handle:0x00000204
2145457315.exe