buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L ¦D³ à " 0 ,
^J ` @ ` J S ` d H .text d* , `.rsrc d ` . @ @.reloc 6 @ B base_address:0x00400000 process_identifier:2732 process_handle:0x00000264
1
1
0
WriteProcessMemory
buffer: 8 P h ` Ø ä xe ê ä Ø4 V S _ V E R S I O N _ I N F O ½ïþ °{ ó { °{ ó { ? D V a r F i l e I n f o $ T r a n s l a t i o n °8 S t r i n g F i l e I n f o 0 0 0 0 0 4 b 0 h ( C o m m e n t s z 1 6 9 6 8 f c 1 2 c 3 4 7 b a 4 1 b 5 e 1 c a c 4 c 1 5 c 3 c e a 8 4 5 b 8 l & C o m p a n y N a m e J 2 9 1 2 b b 7 5 a c e 1 3 a 2 c 6 5 7 2 d 0 9 b 9 a 7 6 9 e 0 f 7 b 8 8 x ( F i l e D e s c r i p t i o n B 3 e a 5 3 1 6 d 8 0 4 0 9 a 0 6 9 b a 6 b 2 0 b a 5 a d 1 b 8 8 6 c 3 5 7 f 6 F i l e V e r s i o n 4 5 . 8 . 4 5 . 2 4 x , I n t e r n a l N a m e Z 8 2 5 1 a 3 8 4 9 b 6 e 3 a f 1 f 1 7 0 1 5 3 4 6 7 5 0 a 0 1 2 0 f 1 7 7 6 . e x e l $ L e g a l C o p y r i g h t j e 5 c 0 c 6 a d f e d 7 d d 6 a c a b 5 f e c d 2 c c 2 2 7 9 a 9 1 \ L e g a l T r a d e m a r k s i 9 2 2 9 c 8 4 2 2 2 5 9 c a f 2 f b a 4 4 2 f f d O r i g i n a l F i l e n a m e E 2 1 4 2 1 9 c 2 1 a d e 3 e 1 0 c c f 4 f c 8 c . e x e T P r o d u c t N a m e Y e 3 b 5 f 0 4 7 9 c 6 0 2 a e 0 d 0 7 e 1 7 4 8 @ P r o d u c t V e r s i o n 1 0 0 . 7 9 . 2 4 . 1 0 0 @ A s s e m b l y V e r s i o n 6 0 . 9 7 . 3 0 . 2 8 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD base_address:0x00456000 process_identifier:2732 process_handle:0x00000264
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L ¦D³ à " 0 ,
^J ` @ ` J S ` d H .text d* , `.rsrc d ` . @ @.reloc 6 @ B base_address:0x00400000 process_identifier:2732 process_handle:0x00000264
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L ¦D³ à " 0 ,
^J ` @ ` J S ` d H .text d* , `.rsrc d ` . @ @.reloc 6 @ B base_address:0x00400000 process_identifier:2732 process_handle:0x00000264
buffer: 8 P h ` Ø ä xe ê ä Ø4 V S _ V E R S I O N _ I N F O ½ïþ °{ ó { °{ ó { ? D V a r F i l e I n f o $ T r a n s l a t i o n °8 S t r i n g F i l e I n f o 0 0 0 0 0 4 b 0 h ( C o m m e n t s z 1 6 9 6 8 f c 1 2 c 3 4 7 b a 4 1 b 5 e 1 c a c 4 c 1 5 c 3 c e a 8 4 5 b 8 l & C o m p a n y N a m e J 2 9 1 2 b b 7 5 a c e 1 3 a 2 c 6 5 7 2 d 0 9 b 9 a 7 6 9 e 0 f 7 b 8 8 x ( F i l e D e s c r i p t i o n B 3 e a 5 3 1 6 d 8 0 4 0 9 a 0 6 9 b a 6 b 2 0 b a 5 a d 1 b 8 8 6 c 3 5 7 f 6 F i l e V e r s i o n 4 5 . 8 . 4 5 . 2 4 x , I n t e r n a l N a m e Z 8 2 5 1 a 3 8 4 9 b 6 e 3 a f 1 f 1 7 0 1 5 3 4 6 7 5 0 a 0 1 2 0 f 1 7 7 6 . e x e l $ L e g a l C o p y r i g h t j e 5 c 0 c 6 a d f e d 7 d d 6 a c a b 5 f e c d 2 c c 2 2 7 9 a 9 1 \ L e g a l T r a d e m a r k s i 9 2 2 9 c 8 4 2 2 2 5 9 c a f 2 f b a 4 4 2 f f d O r i g i n a l F i l e n a m e E 2 1 4 2 1 9 c 2 1 a d e 3 e 1 0 c c f 4 f c 8 c . e x e T P r o d u c t N a m e Y e 3 b 5 f 0 4 7 9 c 6 0 2 a e 0 d 0 7 e 1 7 4 8 @ P r o d u c t V e r s i o n 1 0 0 . 7 9 . 2 4 . 1 0 0 @ A s s e m b l y V e r s i o n 6 0 . 9 7 . 3 0 . 2 8 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD base_address:0x00456000 process_identifier:2732 process_handle:0x00000264
1232.exe