Edit C:\Windows\SysWOW64\mshta.exe
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ =????????(G???(E???(F???(C?????.??([???(A???(D???ichy?? PE L #?R ? & v @ p t @? ?0 d @ ? ` l 0 @ 0 ? .text D `.data @ ?.idata " 0 @ @.rsrc ? @ @ @.reloc ? ` . @ B ? @ >@ x@ ?@ #?R " ? ? @ @ ? @ K e r n e l 3 2 . d l l HeapSetInformation clsid\{25336920-03f9-11cf-8fd0-00aa00686f13}\InProcServer32 k e r n e l 3 2 . d l l RegisterApplicationRestart RunHTMLApplication @ ?d? A?=??HE \ @ ?@ @ RSDS?eTx?J??O?? mshta.pdb b ?U?? ??VW3?3?SSjPGWS?5@ ?l0@ ?x 3?9E???uW?$0@ ?& jX9x#@ uG?=l#@ u>9=p#@ u6??]??t0@ Y?u$?????Wh h S? 0@ F;u??`0@ ?x/%? ?r%h`@ ?\0@ ?th|@ P?X0@ ?tSSWS??M?? ? x0@ W?????? |0@ ?YY?? ??8 ??jj h?@ h ?? 0@ ?? ??V??j j ?u?0@ ?? jX9E? h WV? 0@ ?? jX9E???P?0@ V?????3?3?}?Yt ?u?0@ ??h?@ ?\0@ ?tjh?@ P?X0@ ???W???A?u?+?Z?3?E???? ??x0@ ???t%?u?j??uj j ?0@ ?~j ?u?U?u?????8h@ P?X0@ ?t?u?u?u ?u??E??0@ ?tV???tW????_^[t ?u?0@ 3??? ???=`#@ u hh#@ ?h#@ ? ?d0@ ?`#@ ????Z f9 @ t3?N? < @ ? @ PE u?? @ = t= u?3?? @ v 9? @ ?3?? @ v 9? @ ?j?( @ ? P??0@ ? $@ ?? $@ ?YY??0@ ? < @ ???0@ ? 0 @ ?? ?= @ u h?@ ??0@ Y? 3????8 @ h, @ ?54 @ ?, @ h @ h @ h @ ??0@ ??$ @ ???? ? ???Xh? @ ? 3?]?]?E??P0@ ??????? d? ???$@ ?3?? ?t;?3??=$@ uj ? Y?h? ?T0@ ?9 $@ u$?$@ h @ h@ ? YY?t?7 ? @ ?=$@ uh @ h@ ? YY?$@ ?u 3?$@ ??=$@ th$@ ? Y?t SjS?$@ ?0@ ?0??}??? wI?t?uA??t < wF???E?t??j XPVSh @ ? ??? @ ?=( @ u`P??0@ ??"u 3???????P??0@ Y?tF?????M?? ??P? YY?e?E? @ ?=( @ uP??0@ ?= @ u ??0@ ? @ ??????3??e?E????? ? ????U?V?3??u??t???;u r?]???; @ u? ? ????U??? ?8csm?+?u%?= ?t=!?t="?t= @?u??0@ 3?? ????@ ?L0@ 3?????%?0@ ??? h @ ? 3?E?tK??tF??MZ f9u2?<?x+? s#?E??PE ???#? 3??e?3?M?E?????? ? ????U?j ?H0@ ?t P?????t?\jXf;? ?u3?]?E]????%?0@ ???3????????????U??3?VW?<??????? ? ;? ??;? B?(;??3?^[]???????U?j?( @ hb@ d? P?SVW? @ 1E?3???? ??E? h @ ? ??tT?- @ Ph @ ??????t:?$? ?????????? Y_^[?]?E? 3?8 ????e?E????3?M?? Y_^[?]????????????U???Z f9t3??H<?3?9PE u ? f9Q?]????U???? ?? ? @ VW??? ??;? ?t ?? @ ????80@ ??3E?E?@0@ 1E?<0@ 1E?40@ 3E?M?3?E?E??D0@ ??3E?M?3?;??5 @ u??? @ ?? @ _^?]???h h ??0@ YY????%?0@ ???hb@ d?5 ?$?$?$+?VW? @ 1E?3???u?E?E??????E?? ?M?? Y__^[?]Q????U??u?u?u ?uh?@ h @ ? ?]????U?j ?L0@ ?u?00@ h ?,0@ P?(0@ ]????U??$ ?!@ ? <!@ ?8!@ ? 4!@ ?50!@ ?=,!@ f?X!@ f? L!@ f? (!@ f?$!@ f?% !@ f?- !@ ?P!@ ? ?!@ ??!@ ??!@ ?????? @ ?!@ ? @ ?@ @ ?D @ ?P @ jXk? ?T @ jX? ? @ ?T @ jX?? @ ?T @ jXk? ? @ ??X? ? @ ??X@ ????]????%?0@ ???????? ??? ???P@ T@ ???@ @ ??? ??? ???`@ d@ ??? ??? ????@ ?@ N??? ?1 ?1 2 |2 ?2 ?2 `2 ?4 ?4 ?4 ?4 ?4 ?4 f4 P4 :4 4 4 ?3 ?3 ?3 N2 :2 ,2 ?4 ? ? 5 ?2 ?2 ?2 ?2 ?2 3 3 ,3 43 <3 F3 T3 b3 v3 ?3 ?3 ?3 ?3 (1 2 0 81 ?2 0 ?1 ?3 t0 ?1 5 l0 ?1 ?1 2 |2 ?2 ?2 `2 ?4 ?4 ?4 ?4 ?4 ?4 f4 P4 :4 4 4 ?3 ?3 ?3 N2 :2 ,2 ?4 ? ? 5 ?2 ?2 ?2 ?2 ?2 3 3 ,3 43 <3 F3 T3 b3 v3 ?3 ?3 ?3 ?3 ?RegOpenKeyExA ?RegQueryValueExA TRegCloseKey ADVAPI32.dll GetVersion gGetModuleHandleW ?GetProcAddress TExpandEnvironmentStringsA ?LoadLibraryA ?MultiByteToWideChar ?FreeLibrary KERNEL32.dll ??2@YAPAXI@Z ??3@YAXPAX@Z q _XcptFilter ? __p__commode _amsg_exit ? __getmainargs ? __set_app_type ?exit u_exit &_cexit ? __p__fmode _ismbblead ? __setusermatherr ?_initterm ? _acmdln msvcrt.dll 7 ?terminate@@YAXXZ 9_controlfp l_except_handler4_common PSleep ?GetStartupInfoA ASetUnhandledExceptionFilter dGetModuleHandleA -QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId ?GetSystemTimeAsFileTime ?GetTickCount ?UnhandledExceptionFilter GetCurrentProcess _TerminateProcess SetProcessDEPPolicy ?VirtualAlloc GetVersionExA rand_s iertutil.dll 8 ?8 ? P ? ? ? ? ? ? ? ? ? ? ? ? ? 0 ? H ? ` ? x ? ? ? ? ? ? ? ? ? ( ? ? ?I ? hL ( ? ? ? ( ? " ? " ? ? @B ? M U I <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <!-- Copyright (c) Microsoft Corporation --> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0"> <assemblyIdentity version="5.1.0.0" processorArchitecture="x86" name="mshta" type="win32"/> <description>HTML Application Host</description> <asmv3:application> <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings"> <dpiAware>true/pm</dpiAware> </asmv3:windowsSettings> </asmv3:application> <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> <application> <!--The ID below indicates application support for Windows 8 --> <supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/> </application> </compatibility> </assembly> ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? ? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n p $ F i l e D e s c r i p t i o n M i c r o s o f t ( R ) H T M L A p p l i c a t i o n h o s t v + F i l e V e r s i o n 1 1 . 0 0 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 4 I n t e r n a l N a m e M S H T A . E X E ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . < O r i g i n a l F i l e n a m e M S H T A . E X E D P r o d u c t N a m e I n t e r n e t E x p l o r e r F P r o d u c t V e r s i o n 1 1 . 0 0 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? ( @ ? ? ? ? ? ? ? ? ?? ??? ? ? ?? ? ? ? ?? ??? ?????????wwwwwwwwwwwww??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????wwwwwwwwwwwww??DDDDDDDD@ ??DDDDDDDDGpwp??DDDDDDDDGpwp??DDDDDDDDDDDDD??wwwwwwwwwwwww????????? ???? ????????( ? ? ? ? ? ? ? ? ?? ??? ? ? ?? ? ? ? ?? ??? ??????????????????????????????????????????????????????????DD???DDDDD??wwwww????? ?? ?? ? ( ( @ ? ? ? ? ? ? ? ? ?? ??? ? ? ?? ? ? ? ?? ??? ?????????wwwwwwwwwwwww??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????wwwwwwwwwwwww??DDDDDDDD@ ??DDDDDDDDGpwp??DDDDDDDDGpwp??DDDDDDDDDDDDD??wwwwwwwwwwwww????????? ???? ????????( ? ? ? ? ? ? ? ? ?? ??? ? ? ?? ? ? ? ?? ??? ??????????????????????????????????????????????????????????DD???DDDDD??wwwww????? ?? ?? ? ( ??? ???=?6???`? ??M8h;-W?$? ? ? ? ? ? M U I M U I e n - U S l 0000X0\01l1p1x122 2,242=2L2o2{2?2?2?2?2?2?2?2?2353P3n3w3}3?3?3?3?3?3?34<4O4W4]4g4m4?4?4?4?4?4?4?4?4?4?4?4?4?45 55 5&5,5?5D5J5O5T5Y5^5d5l5?5?5?5?5?5?5?56 6"6,64696F6U6]6e6y6~6?6?6?6?6?6 7%7/757>7C7?7?7?7?7 88?8?889=9O9m9?9?9I:d:p::?:?:?:?:?:?:?:?:;";t;y;?;?;?;?;?;?;?;?;?;?;?;?;?;<<<< <&<.<:<C<H<N<X<b<r<?<?<?<?<?<?<?<?<?<?< == = =<=@=
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de