buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L c) à X
` Îv
@ ` tv
W
ð\ à H .text ÔV
X
`.rsrc ð\
^ Z
@ @.reloc à ¸ @ B base_address:0x00400000 process_identifier:2880 process_handle:0x00000314
1
1
0
WriteProcessMemory
buffer: p
Ð6 base_address:0x004ee000 process_identifier:2880 process_handle:0x00000314
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ ÌPJr>r>r>Ó=r>Ó;(r>] :r>] =r>] ;ýr>Ó:r>Ó?r>r?^r> 7r> Ár> <r>Richr> PE L ½gf à ( Ô 4 @ @ 0 @ ¬F È Ð à à N °Ñ 8 Ò èÑ @ @ $ .text J& ( `.rdata â @ , @ @.data |f ` 4 F @ À.rsrc à Ð z @ @.reloc N à P | @ B base_address:0x00400000 process_identifier:2560 process_handle:0x0000034c
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L (7û à 0 * nH ` @ @ H K ` , H .text t( * `.rsrc , ` , @ @.reloc 8 @ B base_address:0x00400000 process_identifier:2704 process_handle:0x0000034c
1
1
0
WriteProcessMemory
buffer: 0 H ` x ¨ À Ø ð 0a ð f 4f
@i ê ( Ês h£ `ÅØ qÖê eßþ fßþ £² §§§ °°° ²²² ³³² ¹¹¹ »»» ¼¼¼ ¿¿¿ çº ç» è» ä¼ ç¿ éÀ ê ëÕ¼ îÙ¿ ³ßá ÂÂÁ ÄÄÄ ÇÇÆ ÇÆÇ ÇÇÇ ÄÊÉ ÊÊÊ ÌÌÌ ÌÍÍ ÍÍÍ ÎÎÎ ÏÏÏ ÚÏ ÐÐÐ ÑÑÑ ÒÒÒ ÔÔÔ ÔÕÔ ÕÕÔ ÕÔÕ ÔÕÕ ÖÖÖ ØØØ ÚÚÚ ÜÜÝ ÜÝÝ ãáÒ Âæë Äèí ßàà ááá äää ååå æçç ççç ééé êêê ëëë ììì îîî ùîá ïöõ ñññ òòò õõõ ööö ÷÷÷ ÷÷ø øøø ùùù úúú ûûû üüü ýýý þþþ ÿþÿ ÿÿÿ f X|q Ý M (1w *-w zq P|q °Ý #àw¥ßw 4Þ Æ.w4Þ åÆ.w Dà Þ B øÝ pÞ f ¨ö >® X|q | 8ô öTÞ #àw| Þ öhÞ ¨æw f ¨öxÞ æw¨ö Þ ¨SduÞ Dà àß øI øòî À ÀÞ tà ãw(÷YrFàw¤c c ÀøòîÆ´ icons\_softicons´ or_publiXé!TSG rld èëH édé¸÷¨és\saÀÞ .icoTà õq wúÚ=ùwÁÞ-w| ß ¸÷ ß-wÑê Dà Tà ß lß .&$'2;DOUNA1# ;,$$*3<HQSJ=,! G6($$+)ERH:( RC3'$"FPD4% LO>/&77UNA0# UJ;,8
9QSJ=, -TG5ISRH:
@RCBMUPDVKO?-&$'2;DOUNVV UJ;,$$*3<HQS
ð
4 V S _ V E R S I O N _ I N F O ½ïþ > > ? D V a r F i l e I n f o $ T r a n s l a t i o n °j S t r i n g F i l e I n f o F 0 0 0 0 0 4 b 0 ,
C o m m e n t s P l u m b A p p 2 C o m p a n y N a m e S u r r o u n d : F i l e D e s c r i p t i o n S u r r o u n d 2 F i l e V e r s i o n 6 2 . 1 8 . 2 2 8 I n t e r n a l N a m e I m a g i s t . e x e L L e g a l C o p y r i g h t S u r r o u n d C o r p . 2 0 1 8 @ O r i g i n a l F i l e n a m e I m a g i s t . e x e " P r o d u c t N a m e 6 P r o d u c t V e r s i o n 6 2 . 1 8 . 2 2 > A s s e m b l y V e r s i o n 4 3 . 7 7 . 8 9 . 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly> base_address:0x00456000 process_identifier:2704 process_handle:0x0000034c
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L c) à X
` Îv
@ ` tv
W
ð\ à H .text ÔV
X
`.rsrc ð\
^ Z
@ @.reloc à ¸ @ B base_address:0x00400000 process_identifier:2880 process_handle:0x00000314
1
1
0
WriteProcessMemory
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ ÌPJr>r>r>Ó=r>Ó;(r>] :r>] =r>] ;ýr>Ó:r>Ó?r>r?^r> 7r> Ár> <r>Richr> PE L ½gf à ( Ô 4 @ @ 0 @ ¬F È Ð à à N °Ñ 8 Ò èÑ @ @ $ .text J& ( `.rdata â @ , @ @.data |f ` 4 F @ À.rsrc à Ð z @ @.reloc N à P | @ B base_address:0x00400000 process_identifier:2560 process_handle:0x0000034c
1
1
0
WriteProcessMemory
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L (7û à 0 * nH ` @ @ H K ` , H .text t( * `.rsrc , ` , @ @.reloc 8 @ B base_address:0x00400000 process_identifier:2704 process_handle:0x0000034c
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L c) à X
` Îv
@ ` tv
W
ð\ à H .text ÔV
X
`.rsrc ð\
^ Z
@ @.reloc à ¸ @ B base_address:0x00400000 process_identifier:2880 process_handle:0x00000314
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ ÌPJr>r>r>Ó=r>Ó;(r>] :r>] =r>] ;ýr>Ó:r>Ó?r>r?^r> 7r> Ár> <r>Richr> PE L ½gf à ( Ô 4 @ @ 0 @ ¬F È Ð à à N °Ñ 8 Ò èÑ @ @ $ .text J& ( `.rdata â @ , @ @.data |f ` 4 F @ À.rsrc à Ð z @ @.reloc N à P | @ B base_address:0x00400000 process_identifier:2560 process_handle:0x0000034c
buffer:MZ ÿÿ ¸ @ º ´ Í!¸LÍ!This program cannot be run in DOS mode.
$ PE L (7û à 0 * nH ` @ @ H K ` , H .text t( * `.rsrc , ` , @ @.reloc 8 @ B base_address:0x00400000 process_identifier:2704 process_handle:0x0000034c
buffer: 0 H ` x ¨ À Ø ð 0a ð f 4f
@i ê ( Ês h£ `ÅØ qÖê eßþ fßþ £² §§§ °°° ²²² ³³² ¹¹¹ »»» ¼¼¼ ¿¿¿ çº ç» è» ä¼ ç¿ éÀ ê ëÕ¼ îÙ¿ ³ßá ÂÂÁ ÄÄÄ ÇÇÆ ÇÆÇ ÇÇÇ ÄÊÉ ÊÊÊ ÌÌÌ ÌÍÍ ÍÍÍ ÎÎÎ ÏÏÏ ÚÏ ÐÐÐ ÑÑÑ ÒÒÒ ÔÔÔ ÔÕÔ ÕÕÔ ÕÔÕ ÔÕÕ ÖÖÖ ØØØ ÚÚÚ ÜÜÝ ÜÝÝ ãáÒ Âæë Äèí ßàà ááá äää ååå æçç ççç ééé êêê ëëë ììì îîî ùîá ïöõ ñññ òòò õõõ ööö ÷÷÷ ÷÷ø øøø ùùù úúú ûûû üüü ýýý þþþ ÿþÿ ÿÿÿ f X|q Ý M (1w *-w zq P|q °Ý #àw¥ßw 4Þ Æ.w4Þ åÆ.w Dà Þ B øÝ pÞ f ¨ö >® X|q | 8ô öTÞ #àw| Þ öhÞ ¨æw f ¨öxÞ æw¨ö Þ ¨SduÞ Dà àß øI øòî À ÀÞ tà ãw(÷YrFàw¤c c ÀøòîÆ´ icons\_softicons´ or_publiXé!TSG rld èëH édé¸÷¨és\saÀÞ .icoTà õq wúÚ=ùwÁÞ-w| ß ¸÷ ß-wÑê Dà Tà ß lß .&$'2;DOUNA1# ;,$$*3<HQSJ=,! G6($$+)ERH:( RC3'$"FPD4% LO>/&77UNA0# UJ;,8
9QSJ=, -TG5ISRH:
@RCBMUPDVKO?-&$'2;DOUNVV UJ;,$$*3<HQS
ð
4 V S _ V E R S I O N _ I N F O ½ïþ > > ? D V a r F i l e I n f o $ T r a n s l a t i o n °j S t r i n g F i l e I n f o F 0 0 0 0 0 4 b 0 ,
C o m m e n t s P l u m b A p p 2 C o m p a n y N a m e S u r r o u n d : F i l e D e s c r i p t i o n S u r r o u n d 2 F i l e V e r s i o n 6 2 . 1 8 . 2 2 8 I n t e r n a l N a m e I m a g i s t . e x e L L e g a l C o p y r i g h t S u r r o u n d C o r p . 2 0 1 8 @ O r i g i n a l F i l e n a m e I m a g i s t . e x e " P r o d u c t N a m e 6 P r o d u c t V e r s i o n 6 2 . 1 8 . 2 2 > A s s e m b l y V e r s i o n 4 3 . 7 7 . 8 9 . 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly> base_address:0x00456000 process_identifier:2704 process_handle:0x0000034c
amad.exe