MalScore
100/100
MalFamily
Ispy

abbb23455433.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 19/67 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 731.50 KB (749056 bytes)
Compile time: 2017-06-24 02:37:17
MD5: 0faa783fe3f89f627fc839440790a01b
SHA1: 8e033fa7df342cc8938657b1328784276b679333
SHA256: 19a7ecb9932d1def96b627a180d320d3e7fd0b761a11b312683c0b679f116441
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 ,+(h|R{9 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-04-03 12:18:03
Last submission: 2018-04-03 12:18:03
Filename detected: - abbb23455433.exe (1)
URL file hosting
hXXp://gamers-by-night.com/abbb23455433.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-04-03 05:57:07 [19/67] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
,+(h|R{9 0x2000 0x8fc44 589312 2bf9fd325526423ed484e6af39485f5a e1eb23d3752bfa8ce8e934c2e6fdbfbcfe8b123d
.text 0x92000 0x25f40 155648 aea50ba37a83f13feccac358c43ac23f 8e439e56384d8206f1483cf12d798dc9eb3ae2a5
.rsrc 0xb8000 0x6b8 2048 d91c5a7d8c35cad1155d5c4d94995105 9c3efcca9433a9644a7f8e5c8a3ed7f497d1abef
.reloc 0xba000 0xc 512 e6d80ead30e583f437ed3b54f9bfe926 f9b0acdcf83bb5ccd3fb8b97f8b52314c4c92525
0xbc000 0x10 512 11861de5f4ff695b40b6dfba783588b2 81902ac8160b6b88994a69b421d49cdde09787cd
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0xb80a0 1068 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0xb84cc 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Beazer Homes USA, Inc.
Assembly Version: 0.0.0.0
InternalName: abbb23455433.exe
FileVersion: 10.11.30.1
CompanyName: Beazer Homes USA, Inc.
Comments: lsspu3lnvwf
ProductName: Active Directory security and Group Policy Management
ProductVersion: 10.11.30.1
FileDescription: Active Directory security and Group Policy Management
Translation: 0x0000 0x04b0
OriginalFilename: abbb23455433.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
mscoree.dll
KERNEL32.dll
IP Found
10.11.30.1
URL(s)
No URL found
Beazer Homes USA, Inc.
9449db58-62c1-5f9
9449db58-62c1-5f8
9449db58-62c1-5f5
9449db58-62c1-5f4
9449db58-62c1-5f7
9449db58-62c1-5f6
9449db58-62c1-5f1
8U9
9449db58-62c1-5f3
9449db58-62c1-5f2
abbb23455433.exe
ProductName
6e7
InternalName
1daae0e2-c881-bd
0Y1
(u)u*
!%"
9449db58-62c1-5f11
9449db58-62c1-5f10
9449db58-62c1-5f13
9449db58-62c1-5f12
Translation
VarFileInfo
Assembly Version
8.S
FileVersion
,e-e.
Copyright
VS_VERSION_INFO
StringFileInfo
9449db58-62c1-5f0
000004b0
Comments
FileDescription
lsspu3lnvwf
0.0.0.0
OriginalFilename
LegalCopyright
2018 Beazer Homes USA, Inc.
CompanyName
10.11.30.1
Active Directory security and Group Policy Management
&-'
ProductVersion
set_GenerationEnvironment
*4$l
KjwtZ/
`,b_
" Yt
g]N(
Otemu+
,$/;
h>+{
[\~{
,!au
ijZ#
#9f84
Int32
.r L
E_u
,9/Jh
2CW
eraM3]PX
`=-CA
DX_
ToStringWithCulture
I+K
'st8
riz I
]VL3
sq7J?
-9@r8b
0fES
oU}x
!M)
#{!$
UlVXP
PV-c]a
(2)O
$CsV
''~ 2=
jH>h
^(vwFd;
"eJONl
?rnO
\q",c
JH-v<
_QF/
E k;
n)Cc
A20]
uLv
6Y=;-6
eQ|t
Ceq|
hP5t Yt
2S.
+*K wI
$;u#^
jmmI
2we$
YpO
5E t&
&r7X
Kt(X O
vRid
.%hf
CbgI5Z
0xJ_&
j$w=
1}C<
IW8=k
AdvX*
9}xO
g&!*
68 c
dHfX|
$>WK
un\K
?Cp)
8-qwV
l*V 9
|4?{lD
ZZb'
&nH+
efXM
qYKP
v&B/
PTR5D
Mh]D
%qnWu
YW4=,e
Y`/]
CurrentIndent
Q|=o{i
|3(o
'1D~
-s\c
w-N,
4yhJg"{>
>/-\
qD (d
f9zSq
3yBQ
q6YS
XOK)
d\O#
+ VN
7[<V
bL(&
[j0D
X'jx
eore
jWF?
7wbPAF
I*d1
Y(d6
>YUh
YNl"
rnP0
TDCe
A{9NV
s4KE
bQ"8
O0QnZ
}<*0+b
nZ&3
wqj _
x_~YfR=
Dazt
Y8.}`i
Z|8X
X& c
J[my
10r9g
J1bL
B6
P,0I
qR30
lK,
System.Security
n[YSw
%2V?
=|/q
UXAZ
ResolveEventHandler
s_ZX
e9"<
*mj0
bqx"
Bs(y
g^'l
Zn(G
-[ B
))p.T
!^u]VS
O MvV
>lUg
W:S%
jwqwAd
~ m6
&vhX
oFww
0 u\
d_ojf
f9NRB%
hXu;
gxT_
s! n
Ag>5
ko4R
Y E[
txpG
1-18
lz]M
.4/Y
e:!z
ml;
XRP7
l =D;Ew
jeU'
ywH!
&-uN
k^HO
K~0
set_Text
TFqYJ
|C#}
wd:)
)o7l.
@|a6
Z0|~U~t
sKkE
.b0@
)Q4G
iZ[
.yAm
?T%41P
D,':
EBw1i
./]}5
BU*s,
3 8 C O X d r
z9bM
SZHZ
~)9z
<rUD
PbNT1
Vcm@{
C)4|
^+[j
q1JuB=
},NR
o?a-
e</#t
iVd^N
>{R.
aAp\
hInx4
:<`'?)
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD2
jH/@U
fT$l
(ON|Y
^9a
1WKM#
RO!i
4]IW
=8UW
8\8i
.K~u
p\zW
8}(K
Z.Mo
!SkL?
pBmy8
txZ&q
X:vt,
+]wu
9`=K
eRKn
sX}Y
Char
!+7X.xT
90ca
:(l)I
BJ:%
6B\ M
ygfi&F
JeQO
]zvz;
bl@V
[Jxu
m :}
W __
Dl~N
'@kL
SBLj
Pgc/
*V,f
@puk)
V9''
+RF
r,f;
G@gg>t
>R<`o
W[J|l/
~?o&%
A8HZ
*C U`7
[oDx:
:?7Sol
,&FZ
get_FullyQualifiedName
^S[
AfCE
878>n+RM [
49Xi
3t #zh$@
};o
?3`
cRC
~g{]
BO;D
tB/z
)u`p*
1|)@
,t)
Fa]c
K]Zb
eLjc
B^{2
Oh ;"
h&EcdqOQ
Y =L
JN U
EIh*
Sv8
h">W
O"?v
ZTK:L
2{swO
C%:2
!9Cm
"Mb4
7Vz{
.text
<g0g9U5
X(YJ
*}BC
{!0x KV
SR_sM9
WQ|t
<?@j
3E{w
Un8}^X
w8mJ
.cRZ}]1`
xHrt
^nA_
_D%E
;`Pb
js9+Bm
Bwqa.&^
R Q
ANS=
B2B2
+2o0Zo
mw|p
"=U[ehk
; -+
RtCt
IC.v
/_5eal
IC.q
D#Am
rnuB
NBmi
r f(
q$ Y
(,NMN
dpH
0 F+
C3X*B
.&rD
x9*,
z_],0
BA^Z^
K5H9F
;F>x
HR3p%p
6hGa
(o*w
Bq<qk
s7 sQD
cIFP)
+SZ
gzQc
V$x (
WGLc
\, z
#qQ@:
zA
"meh
SZ_%1
,mH3 ?~6emH
M*`)1^Q
u*f~
u1z=
o4>Q
Ze\oA
lf8m
0@6"
TY7:
#Schema
R{:8*M
It;&
6kFE
wVWf
$|k^
b1CB
V2 I
eJcx
>]!n+LJ
rl#rX
+~\V
q5RL
$p34)
* 3=
{7p&?
AFbq'
U"u~L
_g29@
0BDQ
W,3z@
uiiL>6[
`7FC
7tIz
;~9)
N&hr
<f $
"4V1
$x\>
1:v c
?d?p
9| N
O)5>[
=}HI9(
!6/of^
6q4
p0^
2$>;{
y?oE
fpa,$
~S ld
W~ lT
Ex3bb
.c 1
T Q
RuntimeTextTemplate1Base
cw|d
UbzK2
t9]-ZS
WpfXrP
0qWl
pcz7
vk*
~K|i
Pml8|
GHB_
=~t2>x/Y
NT :\
aaIfFv s9
Pc02
T` .
k1QEd
Pnm9%
#in@n
aMxe
S,ci
\c%>
P+f]
])eDp
aGl~
S=>\
aVl
({l~
f<P\
v)WGq
)R{_=2n]
ux\a
nS,n
`4:,]
N9u
aEX 'i#mD7M
1]acQ>
YzDq
,Mv$
acyfV
vxUGAz
q}DT
*dawk
~GXS]
C$gg
4G^`
c %JZ9
j)W|
sU?Z
V_D
}D2O=
I:8V
96TW
jC"
mk}N
{!vt
;S EF
'N1"
get_Assembly
LE:=
$e\W]d
(V d
oQRd8
D b_
6#PB
c,?U
=e\S@
4S_f
t^&#
LG]#O
^>q@i{w
NiVa
#";X
R[(_
( tz
7.e*
ZjCj
Y,s
(T F
6}*J
wfV4
I< e^
O<(!
H~F#";@
O r>k
OniS
)0Bv2|
9YL@ x
]V4
YFZz
.GP+
+!?~;
!t7\
h^a,
d#E@>
Hha.[~}
7 Y+!]
KNw p
ra6#
( , M
&_u:
EReT@>
op_Explicit
=I+[
71:b
.M3C
Ss"H
%A4bv
z 2:>
q-%]
R09B
:?$Z{ >
+%go
}KpD
Q:0$~=
-8 6*
Dm%AX7
U|4Oy
Fagk
m/Z
l##]
-Vch
* ,
5V7
zyA70$
oR]b
kPEQ"_
&7kAk
i]es
>GiC9
]\}D
e2 R
eu M
`~fw
\*8
IjZq2
k5CS
+Zq/
System
EventArgs
JQ_5 Re/y
Application
QG-
wtS=
\j7)0U
W>:z
A>({
jXBH
)'vO
O0R8
{_8g
`Z)]c
=)pr!
fK{7
oObOj
|~ t
r^.h
pOB&i
MethodBase
]ge{
Xyc1
9|-(xs
YIu0
o7"Y
P3eA
{M b"
g>o.I
'KppG
{'8}Yo
MVd=
s#Ic
l(WG F
=5|(
HVg>
|T2U
HH G
?N@#
yxhdo
02t;
mB*
*4D$6SY\
ay61s
u}C
{<y
'DAn
BeginInit
L5@X
`TU$RF
[-E5y
N9<wwVBy
zx9h
<WT ) u^)
|BRz6
/&=R
+|y@W
3;Mt
<sfn
[M<F
>)Ij
~9;m
YYV* >
2 gn
:X73
o P
Q7eu
89X{
q@Y)
QPT}
k|P~
#;s
}T.h+
I!TCZ
CX 0T
@Dx:`$< TL
?{/Q
x)DHq
7,BoM
q.l"0Z
_XPZ
Qj"R
{X@[
Ry4`
oH+]
{2q#-
ImSo
l-qZ
,!2y R
S6Cw4
$g L
LYr:W
k!`J
7V&k
oFTL
Kr]s
S[]i
p:gz
;!LR
t%(}o{
E,E&
x=h&
;d:w
Mhcs$
_tg!O6z
["g
]OP3@
["g
g ~o
gVa$
IRlo
64v=Y
C=a2
_CorExeMain
NMg{
O@?"
cc}}
h0yv
i7S
UDK|
qGRtZd
]EA}Q
+R@@
nlzlD
Px9|
^? l&
1&N>}uZ
SBkP/
\BT3
"hoBirx
LHJW
|JddC
H B
A P!
F uy
Xf0&
I*E@L
T,n#pH\
dF'-O
usmBt
.vP5
: X
EnableVisualStyles
% jK(
5BL<
V!bO
z#:x
pZ"\
3,tt
J!BGdq
k2RVX)11$
.(6`X1I
SJ`o
e kV
}B7x
k(v ]
VrwCp
[&s
@ 1!J
^mN tcK
jZJi]>
|;!?
u yU
bUr!
$8m
ODS@
tr3Y
%s=v
axec
HcA_
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
k,/mBkW
voIE
=E?Mz
H0Q*
m `+k
+|Q!
`spB
&'LC
`vJ
tr3
$$t6;LC
LG[aG
,kiD
Ev-{
q2JX\
fI5z
xA{G
:,|o
g v#[
k#oM
?e^S
y<m+
]uTWZT
rUUL
/ES8
^<n
VJe_,/nh
9#A"
R)LYK
_<rF
a{fmD
A03|t
`5Huy<
xIDAThC
93BS
aR[#
set_Name
Default
Ed#+
o:DM@R
"#>$r
l(~~
e@Y @
%,\SV
CR+0
EX7Dn
S{b6
ruR
?2ho
iLr,R
'rfm
0]]?B
vpeMM
8D/<IF
%nw#
UInt32
e: GE;
X 8F
%;%
a7QF
Q!_NW
F40,o
g1H'S
x*z(
Np}}
#sc!
"*BP
AmhE
&ntL
U-GfxY
U{_Q
Jfa
#@5*+QY
Wn[x
PX%qp3
!-Fu
'ZOz
U}:I
E>]]?
\)bD
:PG'5
uY6K2
Y71H
q5_kE
_wI)
Gww\D
8,thU
8_ <~
`$nw
[=Q%]
get_Count
yc.dM
bdFZ
{T <O
jN4J
VU^%~
0q?z
[cUf
gWXR
o(o*pw~
qRp3jU
%Microsoft.VisualStudio.TextTemplating
B6F8
~`oQ
*FEt
6d/K
Zaa;
yFPE
LJ]D
@8z5
(8ZB
NFjB
r+ZW{
eIH>:
x c0
"r? o
|k m
6'4
\<-a
lm(c
5?,
%Lt7
G40X
~WJ
h.h]
gG]*
|LFg
:[j5
KQP2
[LNPYc
^P F
E|aY
B7f)]z
gC2v
3Z$
"er>
ICustomAttributeProvider
1U8(
W" XA
K D?+!
l^"Z;
in6jH
DC+4
uOJ}W
hoh,
v jp,
WsqrR
<VE _
@r,/
i]k
58GO\
|Hr@
&i2:
Q"*l]z
G \,zCn
pQGB ?
*@ ;:
L*/
\t/N
|g/T(
# 4=
ix < \B ?sR*
./g)
2vBc
SWj&
@|:i
tr\J
m1"&
>g-c-
P,</
[+kB7
!#)gK
GetData
1_2tx
B=_xs
JeH>X
,u~g
z M
rEcN{^
hZ t
lrmT
Ub3V
[:'
2#f^%h
b?Z6
VLWw
)Eqn
SettingsBase
L094z
uksX
!Kj d
$&+l
%vZl
Zvd%
PO,zg/w
-M^5lD
X.sp@*
Imik1
\uI+
P+Pp
3EB~
,8Kx
T #SC
6Z;z
,lfW
~ L9
m#y6
xPQDG
r.#RN
V /:
B"T_ ^
nEM
`U&5
#%ox
No}Ce
s<VI
N[X
H)c)k(
oCaN;
,?8pp`
G8:K
[R'2
?teuV
w8mym>
{MTg
0d5-;e
PMun
?)(s
95S
V Kl
5Bgkk
TKM
"Z*z
Invoke
zUi=
>6U?
P'M\h_w
9~K)
)b uU
X >
QkY
=sfBL
,}6S
H*t
)`d(
f3c)
gAE7
AeACO-
=dlAg
rM"mV
kne`
hQ}K
EO:5
H(fF
dpWn
BQw7
vv=Tf
&8V{
?wQG
MUJB:
P +
Array
tOP=
U$<|iM
_rfA
]}R
u+@DCQ
NB)'
%3od
N- M
fi%O
FPRb
^^lx
[l$f
;HE$
3?w'
q."j Jt
Hd[3
dI*7
B_U#
+F 2
A2 3^
ID~h
]I^@
)te>
B !4
6Tn`[P
;,-<
MtP(
*yJD
lMJ)
)"k
fy4?Ic?
Tn*<
Adi=
f:JO
^7WD
-"A v
o!{O
Z L:
nJg
%riE
n3""
[i1g b
J2:|
}Cy"f
ZZjiB
- Rz
_~r]
>"gxS
nr'h@
FKo&
arP<
R9Lt
5okg>&
:Kdz
^rTc
/7+?1
8Td@{
z9SjR
gw_
FormatProvider
^T#+
ZbU
l7Fn
]B1kxK
MA@>
0 x>
3"miiH3
p "U
H!Ik
iN N
RH,M
22Q
LHT;
=Z^Tj1
|Yj2I
k^l}W
b'gL<
JZH f
2m#T
A7~;6M
EQor
:]w$
3,ro
@*uJ
.[*}
~e$F
b $9x
@S+q
P(=^
$b4T
RuntimeCompatibilityAttribute
KRT7
/$s5T
+sbd4
CFJk
3Dk)# l
$R3B.f8
K.MY
6C)q
cO[
X<?}I
zvye
Yc<q
v? o
.Wy5
[`K
dW[F
;ol^1
@x3W
qRK|b
MW^:p
eMC'
o~u<#l
@DX7
Pj>
yP3#J
d7L1
^@=8
4<$&
C!ps
vmgog
[Z \
i-n9
Size
5SX4C
31vf
w$jK*c
pDIv
?&Jon
9wh"
)uS{
sqi-
Gy=0
;Wa\
hpgR}
a^Y^\
WX =
Js=Ch
\;[m
z$@kz
w"87
d*}\@GQ7
nU:
Sla'
+Fcby
:U/c
<tZ
f{ |*jy
fimw
dPi[
O9~g7-wM
Clear
\2 S9
s^xS
Y m(
m' _[
U_d9D
C@ &
n\{{T
s au
g!gd
B%B6
!M#
G+`H)
yt6,
#4S!V
y,Ni
IERs9
+TRT
B;iAO_
a :7p
s8qu
A O?
l"rO
V@$.
iM~.@N
v)C;
btD _
GjC
s$@x
'UQ5
MKie
fo@0s
8Uk;
TWtw
|sG:
`Z&j
cucld
k
>nf
83dX
Vdk
fZj%]
:rox
*0x
W %e
n..U
2Ss(
aH"0
H*1*H
?+0p
ERaV30
Q' '[:
ResourceManager
ME"o
<`1
TO+9
GetExecutingAssembly
gI:A
*x-
^D2S0
eO[nW *
<I]/
UW4$
ContainerControl
| |
9U5f
Sx}n
t@&F
h5Q
1 h#
1nrZR
^_cRO}
*8I?
[$tyA
UPq /
M)4k
-2V)
i_C~
mNv:
NMP[#
!S:&r
I ~poVG3
@a^u
$` W
#SBN
'; ;
}69;
FhT
ilRN3
:^L F
(L@J
_ze)
DNJp[
/02#
^e, ^
l1w[
Tl'^Mb49
~:Fb
6ZN\z
*nXC
$1h~
hYT_#
5s~b G
%g h
sfCo
W >)
ZaTn
=f`T`
)+!R
/ ^.
@[=)
OiS5z0
F`k)n
KW)@T
oq]
.Ht}2
^/m*
jg;dJ
h3Pi
pbi}
}BNMH
EK{1
^)n.q
oo1W
+iY}
N(24\
z&])
zc4Z
uG[y.
Smsu"
]6N3
%y'zN
[SA/
&jZE
Close
;rL+A?S
[l}6f
c=xM4a
SJoe
[1YOp
tIDAThC
9 9IO
UN+>
T B%
z}lNN
B4?I
WkF|
)SUZO
W`t+u
yVqw
376 8U
4A9\b
fPbn
:;em
Read
nC8
f sU
RI1P
8c?)2u
cfr!
/>n>
._*K%
kL2gs
shf)c
|y1@
1 KJ
r=<%
g<K}/
D' R
'=G>#
q24S
W{
>:^B
N<)$
8.|,
S |F
1{ Mt'9
4h;e^E?8Fa
>OCpY
; O/([
p}tVp
7MF}uv%@
#k$w
rj. I
:o{n
V q~c
#!%{
!Z =p
;(/:Q
MarshalByRefObject
$,,|5
`4;h%XQ,Cw
XL"l
n7owc
D<zO
x {,
=]},wb
VG8)O
EqgT=
@af9
HQ
RpIb
BW=W
d K2
=YO7
cmB&
y?|lJ
/FzE
mW;w
"Hi
h,4H
..!u
'i(K`
G: /f
6b C
ControlCollection
E)vd
8u {
3[f 5_
^m\[
<u2-ytOU
\zL j
mC%@
w3g+
V<rJ4
eB5Z
+U}
<2RkJ
ToKx
Fpr$S
nUH
+M $
%!<mU
~M M
o0au
RuntimeTypeHandle
keC1
fs+B
xrj
!w=L
f6Rh
v/<S
_k20"'
!q:JF
SVk|
RK_3
F).;$
@C[d
hz;i
+C6O
_?9{
6m^x
(Go^
<1PLY
?7T(f;
b,V%
+b=E
-GGo
klAR
?p0G
d x^
{e X
Pc 2)i4W
3d^{K
'Zso
\ S4
F[7^
m;"f
gWC
Dtjs
-Yq=D9
%K{?F
Qj&2
fXw)
MK#K
7UU6
A([u
]3|cMb)t
ND0R%s
EZ,0
L y|d&O
Jm<=
3x'hu
&"Ss
l AG`.
mgI7Kc
mtv
\ymK
Fy6R
Km
\Y%[v]
H Ry
k0K3
IrUS%
tjXm
Z;9?
a=}|
Jo SU
N!l2
<Q ~
ZZ"
voU
(Rt$
7\0f:^w
5Det q
FEL'
C8aTk
Hk k'
;.0B:
vru?
IJk#s
Z5<
c;)4'.
(rPS
=2}l
or5^
_8Eh Zs
/& [
An?k@
LB^L
{5cD
,f S
Sl41
']`9ky
kI48<z
CK[6
!This program cannot be run in DOS mode. $
|13]
E2pjV6
'lx/
Ym(r
^H3tM
HZcik
aj_ x
~Y*\/
1m$#
M4] l
t|OB
7oa5
eZOTsv
/?%
G--YK^
s=Qg
+DWuk
mk !
4v0 Ln
^-fR
833@
C2)
{rGF
QP`l
CbyZ
krF`
eA>ahf
v!MjI
L8J!
)Rr?
E|z/
8Kf q
'rbm
7XhI
#>$LVo
set_ClientSize
~I<_U\
`WltQ
F&#Y
w(N}4
_<v
piNX
[,))
:;B
$;)8
(Uji
A;bkNw
jKxw
%*mX8
,8R;
Aj\?
KX.C3
JW9a
@} eo
vug;
:45q
U>k_
S,]I
.)D-
cz4k|
XQiR
zuk:K
v9h\
tGK>
Rd\$
8f};
YKiB
_A8a
=j|I
mCWD
qwULH#
^.Vx"
bG2m
\f O
2 tb
do'e
K{~9
v6)
&pErF
'|tZ
uL g
pBss
m-3\
tBQg
Sps?
Y3Rma:
6xo
9JjH
w%!+
},$H0I
m^W~
:h`
Y`J/u
>]c
CyEd
UE)J
>lk
/g3
fO&^
$F\N
vWY,x9^O
"ktR
/|~Yi
&-q=Z
:x.<
|&:
IOEF
R%&Nu
q/z
Keie
baMC
x`0/
Zwt_Y
'7bs
s!Lw
] :d
%_ 5
lk%Q
b=h@
N8]5
}l"K H
,\}`
ResolveEventArgs
<oUv
BlockCopy
n@<a
1&iH|
H/xZ
%ff=
'fmh
)0u*
!tf9
nt#q~
B2x%
8g>3B
! PK
=>|k
\6aOP
b_N.
fiW4
WM6ep9\G`
E/"d
YT& gnd
&sG$
?!]
c]#W
|%*?
!3L"4
U+4<Q
U_[
Z pB
:nv`
[@%O
(WX
/-_k
`Ms9>
!!%u
IGpH=/
!c(`
UB& ^
mK~9/~D
NO.Gl
get_NewLine
zRsy
=b^L
Nr7nQ
HHC_^M
wq3X
> :
s]5V
S[BS
;xrm{
c7(o
,Mq8
zR
S~Q\
k Dnr
'~M^
rO4m0
9[=g
3 TD
StringComparison
H\&V
4G#a
CompilationRelaxationsAttribute
RX>HK
;;c
]gL $|
.96i
{|403'7t
M 7A
MemoryStream
d c
$)nr<
O([h
?u Q
lESS
V5T<
WX0k
os~>c
3.e0
o1$?W
LZn$q
s%Y<
-h+6
f+4[u
#-e>
!Foh
.cQp
>t;KNy
kv't
Kf@w
0bOn}
mK M8vF
UJ .
l<'B
OOo8 m
rpPIb
*+2H
F):`k
_8&WN
}pSg
D%jE
o<j^)
9=g_
5vby
/8 q
:I*DJ>
TSSn$
/\S03X
qvM"
|EY.]
>#W\
R_=pq
s$ifJ(
jtK!
ZAg
}qP0C
B!4U:I
w! _ 6
i\9M
2X"2
M{3^
q>i~
xLF
-;q4
p^x
26]s
N s:
]}|U
J$ /2m
A M%p<#
)b;@
z+D
| <^
/cn-
#aC4
lxw`Y
l(<F
, G'
bD{c
uUL\
oZ~L
Concat
q=M %U
zmg
[-]4
W7TF
_W}*
`zL
~>}vj@
#C+L
HkV%
eduu
Xe(*
zX1)
;byjn
&Tv1
`Dj
OCNm
/ +N
}< g
Y E/
qlxc
Hl*O
6mXu
+9~7
NBxr
6#u^
K 1$
'm
8agq
hU "
Y *1
"EzuyP
WyY
d|@V
`!{#
>[^c
nWW*
J ul
TdplQ
Ph@?*
+mm9
HScC,
? cP
k8i2
r3VIQ
IHDR
o[ S:/
x<!>C
.sZ 5w {W"
3ZV8b
System.Text
f -O
lWGh
U8 I
#M_ue
|ixW
oi[~
jV]
pa$F
d,yF
Lks5
d4h6
=e6v
r3.t
~D;1
&UD
+dx9
j\~1/,xW-
xC+@
g&o3+
2oTG
6#4q
_d#\
Un -
qG&u6
vc!^h
/";LI
FH)p
6M#46
laV
8PN0vlY_
=73kB
.RUF
V(KW>
+ Xj>
\S<_
Pm%;
lpPJ
`(`P
8Mf-Z
)W e
bz5{2
92]v[
K^,4
j!8o
format
'ME
T:,w
.BVc
.msX
YBj
i{x8-
fxr[
9{enh
JJ1*B
PVEhQK
7PrY#
M4V4
q{$U9
^i*^
6"JPAc]uA
Yd~[
3\PX
hJ|l;
Wq3@
h*lX
8[8NDZP.;
_n:q39
}Qsfp
`9<~
RBY+
C a.v
ziw(J
B"z.
n?0A}tf
alnf
" 45
est-
q-0"
V]haMxj
Z{qr
sXuF
j8\jz
Y >;yG
HK<
( >v
System.Configuration
Km n>X
DoI
RBYo
;{JBV
e Gt
Y|~c
7I%
4n
Vma<
sPF.
F,/E
U|/v
px2uF
-;4"%
zSRV'
wP~60
p+P=p(
7 NN9K
;xPy
f5PT
@c-9y
{88H
=c5m
a sM
q+KY
x9&C
Lx
y'W!
%[37
^}d6
|@[V
n9bpd
i V^y&
GILX
G0Q#
{\%PP0
XH0)0u
A3 ,
k5V4
VZ:V*
_QH1
^ok*
}fm
H lC
i/T>qun
#EWcZ"<
|^ov
@D,f
b!w>
plXoM
&TOd
&Q8y
tSBzq
*La3
Qr|*
N01m
7Q &
/7K3
6D'`
7pT]M
l_4
.W@D
!Qx< j
SbP*]
7x l
J M7!
&cXl
_ PI
6[&s Kf
CJz,
vK0V
@WSvJZ
u"I
x-+
6kjc
6br(
B@wA4
)b^)8
c,w -
`=sj
qUT`
Hm2E
@6NJ
C8Id0
xvI
N/eC <
AE=":l
-bXu
Bf!I
pLdy\
57^.1
SE+=
Y?#*f
4z \
\j r
L'%v
vxHQV,
O-yW
N+@q
%E&g
5u]$N5
4c%`
cx!#
OH~d
2Ds_
S|2'c
I Qx
KG](4
S -z
M/>Q
f@2/
QU D
R$Ej
!AA
^%wZ
Ew;#2D
;J|T
'tA4V@
<a{Q.#
BPvI
. @x
1,A+
^,F^
ZDe/K
>F6#
G2Lqi
lVhz
B4:3e 1
aA>e
xCWo+)
r,$4
JEfR
+Rx<
zkU7
DWk5ns
PJV`
?{o<
#iV_
AK_56
&K$0
d] V
|`S
%'2`~U9b
shO
kKCq(
)*PA
]Y70
?& 5W
kQ<M
1.0.0.0
U}+K[J
_>IW
"C;M
$d[L
R:S$
jh;%
Mh
cs=P
Aa 4L
3gF"
`\%TAOh
YR$0
^GZ
h0T;
u+-y'
;&<<]
!pLIY
nQ`2F
Stream
[RYY12
v< -
@ydes
-nDUR
AHx1
vw~<
-1@^
P |
J-d s
\b15
lT 8
4Nybk
'3zTU
%wbeN
I5gmvB
(s>"%
lxZl
=nqL
"_-kA_
h)=F
nj&Q
]0?v
HMiv
d*0S
Lve
>11N
.CtI
tbs]
+L=I
u}_j
s`IvQU^]
"L@v
=2 D
fD'D
cA
Q!6P
oJ{fY
+wj+F
&a/Y
8zxM
=4O
xlcf
UP}I
LXaHU
7G_rx
E)/$
f'{4T
,f]u
MxiEM
0eUf!
Z ;B
[q(E
hz,x8
9*@/
Z:L\
e~` 4
1 l `
R5[A
wDc0
61x2Sq
&O o'
A`QX!
cyWJ
3O4!~B Kg
4A_;n
j3g~'9
/yv}
DU> p
TbuP^
xnJSB2
Dt"T
|}
ID##
Ie$(NQ
&{u d
.]50
c8v3T
g]]@
3NFg9
>]urH}qpS
|@O !+ -
u*,m
t>EWl
I\XyrI
#.O3
IgN5FCh
1 x+
:~ M+
H/&HN
_&EW
8 >d
dDo'0
\&q_
.saDS
-kZsg
CvbVy
y>zT
m\6U
V55\
xI>O
F<8R?p
M3?~
ZgJ`
j5a<
Nf/s
qcSx
fXsc
tR Vt
n<3p
qO+5
gt|
78*R
^me;r
MMp
1A;Z
""NIr
_;b/
ydjL
0f c
>MAO
T7|@l
c4(T
)'7P
2n4d$
aE?W
1}N
4{ MK
5eAt
kZ5V
D Oj
5*Et)UB
djpPf
8C06qU
3jy
"*)wy
VJWg
PE}H
AX{j
B0 k
oei
mR)^
l}H4
-Fie
y\nW
oORD@
95 1
=[.2S
Cf$
k@h1
U)=H/
$n\|^)
ic#.p
IFormatProvider
yQ0
/0*/
Z@{H
r_{%
YkJ}
k5Wh
rQaK
cjx
|E=h4
l,Rb
PictureBox
l6hb
mH?Gw
BX3T*
,ka#
Point
<jIU
( *
UYls
UWr+
*naE
ZQN7aN
@ $,
8#vZ%
k$ i
KAPR
F&kM
?JsM
ie$d6N
cS*P
C 5dy
_ii
]Z%A
_2*%
n -}
'd|1
T|[v-
ImcY
)OP)C
F$x{
v`AE@
`"/
S.q`
!4+7
4O-~
5:Fo2=
=Jf}x
jjtA
$W* gn/
rEUe
2jFw
j.e05L?4)
add_FormClosing
AET{
+L}tZ
xVX6
b _
LGno
??\
\"%V
\"%Z
9_5;`d
T> 4
?;E
?YZ+C
f7g%s
\ 'R
# <ge
r+AdL
&v:U
ul Cp+b
hefn
z]FQ
iO\4ng
Y*d
qYzXH
M#g|
n pu
HL y
[ =!
#U}~
B|&N
d& s
V!`y
WT C
&V +P
O$Ra
*m.=
v Ex+
rFPZ
o q 6@
%~'>
3r?w
Error
40 =9
Err{N
S_>t
_^C?
W<PkW
W@{
boSm
3@!I
[Qpb
@SY\
NCXW
;Y"7
%cK{
!{F,
h F=d
(Xq]J
29z-
Xbk>X
U1@
!KKK
}E`?E
> Cd
d*W]tZ
_\0@
add_Load
bwBr
R1Rs
GA _2q
c+60A
HD8m'
zoBr%
Jk-+
]Xq+
_6m=
HDB?
(4Q?
.adseW
;*(+
RX]%#
|y$@lb
i\$5^
6QJ/
(jT6J~
Mk %
,4bJ
%J ,
&L1%R
F!`Fa)
_tyb
&Q}
pze&P
;0(}
QM`WZ8_
re_]
nx?wK7v
7P\q
I Og
#aZB
^}S
2QvLl
j|/6
G-X
e<,Vr
SWb1
B|da7cf
</#H'#
i)vW
d$9i
wn5
F8HB
yU3A
P=/C
IDisposable
<@Xl
V49p
Bfjr
`Yz^
xt}T
mPZv
~vax
,3V)
c^Iu
g| J]
Q(.-
?}"lg
0\9Q
>`mn
Q.Ev
N:{o
6jad
V$.a K
)Jgg/5[
7k >
inUl
7@C~5
02s^
\`5V
rP. Y
Sn(.
-$Xg
yve@H3#X!N
U,|}
!;X
(<NZ+
'u`_
{I8J
kBt{^
h=t1
uGZ;
ckG$
uJu1G
N[@-
LH?"
@T ,b
[O_5ld
_# 2
[RU!}
qm b
9d#
0H><F>
Fm+\m
zm;D@
8. m
=6gP
yrKx
K+xI
X8g$
9IE$
w X
{Jb3
G[o
w #]
.A)>
&}3=
V1oT
xTQZ
4#Z
++Pr
#GUID
U,#5
N|.`
4sH%J^
?us@
7Qul{;
j!|/
kB5z
q88u
p t'D
set_SizeMode
)x?t
:~_j
Had<
0D\6^
:O q
AblZ@u
**. Z
K =u>
es0K
c8rr
,`-*
/^'q
.RL9
(NA$
s8Vl
zu>1
nKTx
FKM5&}J
yiKg
-(_$
4*c:\e
("%+?I
F7>;
aDCz
e=#
XY-I0
2o(v}
jFQL
loeO
#qfg
E^VY
' 9\
o}"A
&.&&Za
]~g*
ozn>Hg2
b-?fI3
ZUcQ
7.dL:
`po$&
h(T$
'Re~}U6\A"n
;H]s
09:hMx
OtPI
=C/g
M]s
>~!\
RsuK
)w\H
c!^p
21Y)
Z]s1
;,z3
z|EEc
~cQm
GWL|Z
1
Ib6,
sdWX
`?L]
]m7Wo
&;s9
_9J<
$m$0tu
[)[9^n
S;_
C Q"
R` G
x@#~
:;B_
T~RU
_'p`kl^
'qYb
45=,
cd1:
<G=(
O7JJ
awX3(
VyYt
ch<+
k_ce
u&&h
hnq\3S?
f8J7
#sT[
p$6h
+<.\
x,Y/
" uw5-gabm
N3"2 h
Qc[@E`t4
%Zs8*
ToArray
R7 9
& M4
'7\W+
8q*]2y
jpk
TG'!
Replace
o#yi
ih 1
t_E[
/rx4
laR2
McAjf
5Hly
u lp
JpK
5?sr*
)fC8if
jD59JE
l oC
[0vd
pQtA
,bK)
:PuN
8uc.;
a_9J
tfVFB0 8Vpi
:hI$
|z9I
Jo}4U
+\d"
4pL^\
rPrM+E
@GdVv%
L0.?
g#sF
6j pg
q +K+
75-
XVP?
uIDAThC
>QL
+$R{R
<L7g
4)Dm
vy!7J
)tE<
_W1K
y]$P
B8WE
gnNHu
7b'E
jx 3~,RV
z,DASK
t \
6[c?7[
KSx*
h1k=
O6Yw
K]#l
f4Vf
qgJw
\Dy,
hi-k
;#5D
WU: <
y2lkb
_I?s
ANLp
%rYn
y)H/
qtZ
OT!<'
O,fn
25& i
wi4:
|uu
5qs|
lj3gX$
<jZ=
Pl$ I
G?bt
YX|%_
PNG
/)xed
j Xr
CFB{
5JriZ
ASA
5]Cq
>:]93
Ov(,
Ge J
+L '`U
as'
Vs()"
I\.f
Bi!V
a#z0
Mmta
^S
lI#x
)!4M
m8
11@Q
X<FV
N;$0
?OU9
t;T*W
xEeX
VyL~(b
bf3X
1h4 (#
qVB8U
2P'Px
57<[
)Qn,
0PcY,)
=%$.
"|86v7_
13Ka
d,-UU
ZsG1
B1V[(
5dClq
clyK
>S=9
Substring
Y;
*m =
>LO6
D42}
*_FLU
t\@D
2Z_a6
c do
+]@7
CompilerErrorCollection
OxB
1XhJ
0]%U
6 /
d21'
@pITgK
~pEq
xnPd
c0apg |
s9Su
tOog"K
0r/)}
N2 5
@6#]i&
`i\*
(Q It
_;]M
xuE4
.mRy
2 -z
0 2`
>h}8
d b[
nRD{
>vu
@!o~
(3U;
;lB/Pf[BI+
.9R
]u0j
|ED%8`
MG 4<
@NO+H?*
$.Lm
yp*I
cZ0 k
0MV8
LX$kU
gO<4
Ut)
@Lq8
(0n`
]!;Z
7?vz
n|%O
~#A:
$bi,
p56a`v
,wz^
@3beN
ix> r
$2tr
,q;Gz
J+eU
t"vG-
djho
lu B
RkAT
"Hd!c.
QfHI\S4p
Z_pU
l 3f
"0,o
KY1Tr
"t.
_|$<
R+ee
5gBC
D!>SW
[d C
fm'!L
AssemblyCompanyAttribute
K@l/U
QSj }
%1N4
%B(,k
x$Sq
PV /
X O,,P
F(Q ,
< XXjK
'OzJ~N
d)`wn
g yj'4G
Rf*
d8cPH
WJ_?
1p+u2
42C,}
O\C/i
Y!el
N[F;
>Sum
GImj
Qm=cA
v 9T
AppDomain
1OI^
a X|
dt}I
m!A7`P^
v2.0.50727
8a l
m"Lpo
irLd
Zp6G
UD%U
\'jup
t)8C
:H-`
YVTv
hga1
|nhw
v#`e
#p!8
;TX@d
8{^XR
}, ^
]_bw
?b`-
rHqZ
_aU (
RPlzK
<GWWN
pT #
RnWY
m^*
.3>e
[lt
K%p8Y9
RFFO
`vIn
j,J=
Q8&8
C $,
~ |
!S7_.
9By:mi
}U3%1h$
Control
AOZ_
^p{i
B1'
s|+Y
` 'm
ChsD
w*/0
L$zY
Oo Cl
`C,[E?!\W
8 GL
ma >E
Y KY
HAW:4
J 3_7
yY./
3*V1
bg|.
T/Gg
].akku
Type
a; Y
xwFw
"A1-
g8`7
t}b+
+%Xl
V ]!
cP\Z
>Z^A
J?{l
^Fu%
WJ/
bB N
98aF
K,~C
|4$vSUQ
w^M%
3h}w
* VF
,3e^
f92T
pk]&D
JKb~
PMZ,
~Tez
n~$Z
68v,
OM}T
4T U%
TR?Q
GE^Y
^8y
8c ]G
O0yV
get_ToStringHelper
{'qF
P ND
zY$mn
,?n]&
/moL
0:bz
<AyJ;J8f>cXd
WQrX
Bbm{
9&{/
4"U
U;5U
9;}l
kP mj,
dbTIHs
)`3j
P%(!/C
~_CBj
}S$
zNv
l@slc
Wr P
v.uQ5b
ap_oM
j9 N,
~Ex#|G
fyx$
b0RE
;xWa
1<HNr
M/_d
I 0t
*Nd%
<'~D
%.9j
SMWg
M1 _
AR6L
-Z4$
: ~<
8O&2
]E x^8
PKxG
W!U5
.caP
~)h]P
t@ y
bj "
~ 5R
GetString
|8 %[
PH aw
p>Q:
bxI
oyIO
y6gb
9`s{
Nr= A
'M^Q^
Bb:K
]HO=
JZ\
DDl
u+ki:P1_
..qH
sxxJ
T61i
AutoSizeMode
~=kvD
%g}BFm
UPjejg
c>wd
4 W[
KnM^
?77 +
7(Qd
@Y5N]
+_`/
| ''i|@6G
kr <
7(4^#
RR kD
G G$
O>A
;}Oq,"#
dzli
0 9a3?
&|x/_
9HF>V
9V]:
?hsh#
0KO*
QB Q
N >A6w}
+-<|R,ad
s w~j
jb >
G_}N
c(#u
0'UI$
`.rsrc
I4a9lq2O
%_kf
2Ouc9
]P%(
'|(P_
wQan
1-D8
8zF_/
1h"k
uk5,QcQ@
yUVm
GdX
9P/VrP
q bkb
(>o
?1zn9
6\RL
/#ql
5=C}av
8_0B
D44*
x<%r
6gX&K!
nH|/
_eyq
/7O
qQ{8
fmC
aTW\
/E.K <V
{_Dy
g2[,
UQ,?>
*|wJ
3]8~B
o5 Y3
+I DSze
L PL+O
Y5PK*G}
\ h
n2a$
*zQ.
eK_#
sN!+
~kmZ
2F*
a$27
e`
)Sw~
I3xX
GFv8
cje
~[<iJ
} yT
#3/%LEthi
_oC
u>Gr
RpZx
p!X
j#K>
Akc8
mb3"
K;V
| i|
@k2c^
jL S
i\y$
`j87+
F 5&
LQ{%
{`1M
mrIW
Lsn
@$ p
Zni'l
,- G
Na/Fb
Yu]pN-
6Ttz
^O9}
* o\M
TP/
oP'P,s
Zm/6[
/pS9L
]%xy
l~ Fd
U;Ot
3 !/MR
"`H
/sFr
n=Dd
60=!A
C$5D5
TJ/n <
@F]m'~
MJ!x
kr6F
3}Pk@
set_AutoScaleDimensions
2CY+ E
!2I\J
0FX=A
H14f;
f@H{
y 6
9@[h u-
Xv,
?718
n7{[X F
BwjA+
:@Cd
~ P1
X|N
Q|^I7
gUp@ORn
-Y"a(
b6z9^<1'
rv1~
n|+
SH,,
RH]-<C
)P.FA
,|Rw
ZP6b
6u1
m38^),S
t'cth
lZP@COz
set_IsWarning
Append
$yyi
q 2j
2xPL
:`Ul
n/ 2yiO)
;<c_
3~GJ
]m&Tx
p,n
x-,0
O}8C
oQnI
|{!I
o3 V
+YN9
V'b
68:1b^
B6%KA
Od).
DM-
1m&1
,pv)
eEM&l
86d((z0
jLr2
@fV4
E}7:
$3h;
+. [0
e}[zP
-Esx
H9y#
JZqV
U(Ff
};r
_qm0J
#/D;
UIpfFU
)26[5]
*gBc
X#=
=~jT
BWpJ
|+*)
jueB
<(} /w
/wBN
Uf+4
bi#N<
V9)&m wF
#UKg
wwEB
Xf!$
F Th*9
~#kC
m 6[
zf|(#
Al~n
FtK,>
EnvK
ED*-
tx ::^n
ik46
u |
/vL0Z
^[x{
%`dP
vRg] p
V 8XO5^
TjS6s
4$Bf
aS$E
#Strings
7uGB
<p"'
Image
zR{VZ
H}9?
z6kLV
,vsZ0
a0yIO
R0K _O
XbeQ
GAMQ
j1 a
o?IH2-
?a"T
?ly )
X N pX
hK /
6 p)w
/q!I9
,o.2
SE gU
Fyg'"3
=l}c
5 Dqs
Yy'|
QW^c
dN5O
ZEgtu
Z]w[
w6h v
Z8NJ
jGLMl
^U r
f-#_
i. S
j8*o\
tV?7h
S'D
So
`[66;
^fO3%6
SN}S
X 0MKB
UCbF
afU"
0 &8
GetType
Z(G&_
q)T V
~Afm6T
j4_|
;G} Y1
y3V_
y*M,
!%2g
4hj"
"osy
r xoh
(`t?
fY8#
v'$[cS
e#d,h^
}m@L
{n(8
hUn[
=(}O
qEk9\
,T H
7@{G
xy[ W
DlFvl$V
|m`2
Rh`~
c5af`~
HXw}
H&9m
,Q#{)
mdXkn /
Ag.]2
/|l%
kFxj
tDj}<v*
Z:Jx
(s\&
ifJR
W rj
Vblg
Vl gYR&
\{m*
"?cQ
{xOh
iy av1
fsHr4
)Yt d
1"u)
y6eq
e$V
0'?:
gLB|,W
rZ{5jK
*pA:
|R o
NLK-
R-"+
+=?c
Z^T
7T:7
k?"gPIr
<@; %
bUt #6aCH
ep^T
6Mis
)HMB
~vRf
o=GyW
05fw
?g"y nv
I%L-?]
k$]g>
#J\e
o{Ce6
~/&u
BZpF>=
JJK_
VtW[
,!.Y([F}
B6nU
RyBL
$*LX
aXN~
; 9U>
%J;1.
:G- N
4&&"6PIt~
;UT p
=)97
I_vuH
+c.L'
^N sT
Form
D2 -
r[ iQsX
P=ag
Al>Xq
1X$2
tEsS
P 7
O J
|Dgo
-{((!
2h^:
sj|3
^?;
%BIh
b<Ob
E7pG9cqm
Vo/+J
- & b
M$7I"
e[qQ S
xC{.
jwY j
Jo!(il
?g^
v@Nk
l;8|D
z]#v
qDe>W?
Sj(q
ewE'c
$9yq
PtW|
@-{&G
n|a:
3CU-
Die`
#S w
kQ6KW,AM
?A/W
IDAThCc``L```
A6J=
>DY_/
KQ{oD
C-h]
q_5!e
=Nk
B;mP
M^3Xn
pI!V"
f/Om
'/K\-i;
NZc(Wl
Otb8wE|sTl
.w; U
:afU
sWbP,
d2@8
G/{A
or|^W
Ng=
)h+D[
o\qQ
a{7
H>a0
ResumeLayout
QEqo
b':5J
U/5S
Y5sM
LU%~J
j rS
<.E{
mYTo
w C YG
*^1F
PhnU n_F
ValueType
System.CodeDom.Compiler
v+\ jO\R
(|n7B
SetCompatibleTextRenderingDefault
sb9+
Wj\#51
0or@N50
ixKB
CCYq
z tG
K rm
wHel
reoi
y/3ob
2i.)
@naLy
46c7@
m#74
&7_Dp&
\mzR
/=Te
8'27
t@}P
7,sO
*/DY
WZ3/}
r 7A
* D`
%0"x
s/[C9
q)y%
0ya[
d[3
OCh;
`pWn\HP
GBm^cj
2mMlm
\My3
Osw$h'
(QV&
&QGf
o]YZFNN
0ir7\
d0Q;v
$PSE
EaX
d^$n
0ya
:"WWd
d!Di
U#ePNKI&c5
8QsD
@ 34
}_E<(
Bn5n
ToString
Jb`/d3/S~
gu_
Yw &
Ea|L
6 *n
P;VM
8^'e
+t Q
O]DJ
|F=3
:A?e
TN:z
nWsS
m+Zo]E3
].{]<
@~ A
-Q@l2
r-F"
CS?SoqUs}
g)k!
~%>
bRX$g
vq.D]
`@X=`
8K[/g?
T 2;3d<
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
!O9IY\H<
e>k%
+R'3

,v#gA(O
He X
f2iJ
iWOfV2
#Djh]Z;
args
A"A=nv
x?G\j
p+A)
oHc2
dU#h
4y+
KVVB
|ZzV
`GLf
(N>D
x7%
}!_
message
R}M/
^)CW
,VAd
oj`Z
~oA,`
7k] U
0j@'
'Q^y
c k,]
gSnV-
W/ ~F
`YEn[
5 o2
#/Oo
`#/
xeC+
\w7=w
mMVy-
Dn @\
}@+!)
lv[v
Mn/'5 ~o
) e'\
=\CA}
DVYn
Lcv]
.ctor
% ,;
1%JD
wwC%
<dD)aC
sPQW
|^}WO
k*!7
Hb`B57
?H5
zRl\f
N| N
S@b4
:.P he
;a+?
"f(W
CJQac
,CEA
G>S
78Fw0
}/93_
yqDf
N BR\
fTOs
A 6n^Yw
OL=Z
/ |D
ZeG
pHx@
*P=9
Df[:hZ
:q]^
MUx@x/
0n!
=1Hf
EKG/C<2
AJv4O#
\n=>;
Module
+pE
2bi-
0b <oZ
."@H_
6{L"\
pQ6d
ZaR[
erNI
~Pa0U1
r1Bh
@.reloc
p/106
m z `
.C$k
Ra |pZ
J 2K
"|!*.
J`V_
B .I
!yM
=,g
| *\
a.-/
V_pKk
Pj(
?1H>tH
Aom{
v%$0*
1nU.
y1zz
ZybA
`V5Q`
W3[3
]l[V#
g3z#
2fo4]4
w/jJ
LyIt!
@qmQ
D|oH
(F~^Y~
p=]|
;f^"
vcjG
q|J
f, A
np{9
\s7[y
w34zH
-8d
g!;6*h
M}l
r<*%
9dY01
<YDD
3 c)
?=m|
`QUBv
voYz
PopIndent
)svE
(%NC
H4U:
!sW`
Cn^:c
set_TabIndex
Zu.y
= M/2
87#Y
pu8
/T@w
d3wi
jHaW"
G}Li}H
| h :
7u3QQu
2~(sq
Oe'G
)e:V F
{ER-
/: ;
KwU j
(Umq
W2 r
_BD@
(MM"
`C+H>
^ t.5
a+pj
OWLu
kJ0X
p8_ mH
C rtQ
m)4
GA,T
]9Oi
}H\D
qv&7
)o[bj
eRUe
B7T>
l0Y& X
_!55
qf\>
-iZ*
NZ)W
X9 b
F7% EP
@2_a
3W"^
PYa{V
>`w+H
r%o)
zc N
.! 1
@O?K
>?k4
u271
CyTi
B|6.
TJn{{
Synchronized
&a &
H(0,HOqV
OfdvA
dk=I&
u/>f
9dcZ
k1^C
rE(A
rSy;y
tHGL
TI?pv
O2;p
4kM3
V7k
n\dc
+4Kb
x}GL4
'5/W
_s&!
L,SA
;f}D
*fAo
\fd%i
{ C.
Qu[g
Ayaqh
]`N~
vku1
4::h&o
lg#\
W[h3
xP `
@x~LL
!fH}k
lh*w
`H.#>HG
"+/B
I3 >
,o@hl
,T TK=)^<
m*+4
v;O}
g:G=xlu v,A4-
jp~G
iLhO^
2<>E
J~aB
BUj)g
DI< ;
QC64
(o L
Obce yY
CKMXy
xk|C
3Q5
Fq9Lk
[%,q
T [d
&m^*
az2m;
c9o"J
m@)H_
Qahn
{uS(
"Z%D
<{i
!{ p
4<zs
&w:!
v\.
?[I|\
Fy!/
v j!_
s$2M
:(pj
=5Yul
oDe,
&uYu
1Zx{
Q0&^
Sb"Sbo
reaH
b(`
Mmn|
LT'N-
{Tr
``ZX
&7)bG
>.ZH$,
9[ai
pM)}8T
||%|0Ts
S2{\
M/'pk
zA!K
cb46
>dku'
;0Dn:
X/f*
<l/)
4Pw@{Y
XvEX
4oA.
|tN
04EPF5
|Qi~
}2*VG
]GK-z
m[2Z
6}v@i
Ob2('A~7
dKQY
IIY{
1)\!
3aE7
/6mby
StkW
b!F=n
hd(
kg~]
rv5y
"): Gg
3Og
f_`}W
2aNU2
B>Mg
e3An
IComparable
mZ(m"
V*7S
XeR[
gHAG
`3ykd
YM+
S(m/
&Y(c
<gDE
+}x
yRW
#RO~
bo7+
=S91
1edX
+'{
{/,0t<6
IWWy
j qw22
}gTn*
XgL+
H, (
NX!q
Z=Ow
B:&G
52!A
H`zK
&k[L
;~C5
Z&!Y
,R X
W; c
d;&g
O@42f
2M;
'CJF
+`HPW
x X;
X,ueFN
aExO
;.Yx
p(
8v Y
zr`l
w9eJrZ
H7!z
8r$x
q<kp
-}C
1+ g
~t{ e
TH@8
:< t
@Wz)
get_Evidence
3k Nwt
.`)T''
zQ$n
E;i8
Is[t7
M94f
['FA
z]YxG
x*93EbWQz
HOe k
$Tq~
?A19Q
!HW;
wPL`VZ4%#
uw .
J;+vk
s }D
[ef_
S+;$
PR-i
\nZMb"SLB
w %y~
<He"
z &S9Q
z+o)
J?e3
C6Xst
Lk%a_v
%L%AE
Y` +
X!n)Hm
~\,~_
s&4IJ
* \.
o$Gs
;xEuO
Q41
*2U>
| Ak
sl4W
76<otK
6R@/
;tm~
5~^.
zfL[
At*i^V
UUFK
lT^'(c
w).*
AwOO
4o@TMb
A?@o
1vt)W
yf7
#^U3
u }le+?
'e%
lo5 p
pG0q4\}
d j-
;D6D4
45ln5
'OfK
^ Rl
z59e
?1Cl
}fHk
NY31
mb\\
:F_&T
f;6o
D: Q+
nhXb
( pJbKC
I6Cj
Q&fRY7
5TR
)XyCR6
tBxE+

e98V
40%2
%}%%
;25)
M [>v
:Sem
c:G$=
ContainsKey
Z<yO
d{6.qee
}AUK
| GcO
+$PV
RuntimeTextTemplate1
H9X@
R~],j9
HGn*
f18*
0 5(
f*/Q
*10P
8wtrZ
SbD5
fu5
9PLSIqJ
Eg<Q
GYyqx
xUEN
,%} `
[D(
c\;=:z
iNFf
-N ,
( TJSG
)eaE
,=/9
^8I
IAP`
W&jI
lG3l
j,^eZ
Sb;3
ew~P]
*}=I
d}O90
W$/t;r
nL)m
t=m-p
pv*
x,Q1
&F2%m
Bo`r
w:Bs
v;R5
[xEL
#-*IG
#p G8 fvJB
~_=m
4Kk2
LN /"
RTpy
>}E4
X%s\
qP =4
IntPtr
2X&l
3rW
\ H|
E >BDl
9yh$n
7e[u>%
E\11d8>
X@7@!M
< };L
P6 ;
^n`U
i ZI
'|N\
~K(Y
Wq dnQ"}
44DF
$&li
_GI-
IA(v
. 8!r
@l$I.
%x*;4
r>kWV
{>M!
)V.c-]
!V;P^.QF
!vdK b
/&j.
1k?s
5358
~B6
,$ >
Jjrka
e[#\j
+Um$R
%#@Bp{
>uxB
p 2{
$T2ku
vcZ_
kz1l
mscoree.dll
RMh|N
vKt]
Ew.
N<8^F3l
)^( gwI4
[mXt:E
ozgS
! GFB
*ro!
_/5
JV6
YzxM
k{8uX:
Y 3 4d,'
$F NGH
K>j2
Gth
a` 68
Dnjz
:w3s
P, :
Na|>
Z2\i
C`c$n
ICloneable
?H{ir
_|d(
]TXJ
_N@P
(8^
"-RT
B#Hz
.p ?
fUyo
rmS3
7Gk1
NEr(%A9
KdSiM=
f<{8
X#Qh
nw*
vHjX
UoX- @2
Rj;n
?OO)M
j. g[
`(jOu
+ki=9
Rrn+
gf6MB#B
JYp#
^Z}~
y^N9
pS~~
Xu<}
V-w8
b&AC
` "P8
f9cZ1
U@.{!
MT1_
6-W^p
4e&?=`]
D(Xi
SF'x
?S1D
Kq1nEeT[{
( kZ
! g7
6RV j
OOvT
W]c: 2
|#=$
sa&
=In5
, tZ
`GU<
[ *7
XSM2
+f"f
aNMr
6SasC
<RPM
A61>
0oT
Rb57h
RM`a]~
N.WL
>AcacR[
?>V'
}e7,
]j1P
u*=*
K]S8
s &J
2f^a)
VirtualProtect
g&y$&
:" n
KL.(
gcAW
ryga
fq;<!
=3:D
5Z(%Q
6 ..
}`rPs
6~Y
QKkf
>DT7F
rj
. a,
hB NN
IDictionary`2
lqx=
: G>u
pX$O&
e3YN72
Pu6~
g^="
f@r>
R0 21R
i3ny
EndInit
XI~
ByqJ
bZ3z
3c(x
Z~=w$
%::p
T??sK
^+% +=^
3fK3
/eOb
S=oe
:b=F
EditorBrowsableState
k.R
*'`W
IvIHp
d y
`""-
c49R
)p \
L7 W^{
z(.k
$1{6jT
ho
(Ox=
yat?)
O{vh
I>Ssc
A*MX
/n$\
ysDZ}
sN$
s,Bd
'C7N4
.r+]
ixPw
85.=
d~tT
aW}[q
DM\y
m@L-
R!nc
Bdfc
`.:]
nCR3
,n9#
F|wD
~M9h
RIz+
%H)k
[|4a
Xq<~
6=iH8
B20J
$nG_=6
:j3!h<
.r-1'
ndtD&
2f^9f
j &7
$rb2
?."bv/
rpi9
hQcb
6z U
w"XV
M}rhf
Dx;e
k~]
!;B3~
aoh*/4
Y*7:
*<GKqmR{
GN O
M Hf:
;Md9W(
nzWVY
`R xFlCh
9bruzZn
Grg $
R1 Q
Uh48uz
:c
-[ >
4Y d
>.Wh
laET
:FPS
4!2x
{mag
ApplicationSettingsBase
~{RJ`
4Z<
k9c"
E0m<
7N@N
* 43
(K;3
gqN9 t:%
]t<l
2F2a
HwbC$
n17g
ML 5
f9g:
e*g]
^A3c8
P8h"
8[1F
($ }x
D;v3'
t$2@
t_1e]
3 R
'{I@4
xa_%u
Qt2bK
eZ5b
|p`J.S
{JI}!
&jw%
i4Nvfj
Zc%<
JB)?|
2l879
V+ &q
$moe
R&ks
@UL:
<435
rMXG
)(^G
_7)y
l 5Y
~,D\
e ~_
]e+|
`|xR
>{E9qA
nZ 0
15.0.0.0
X+$|
&7+gF
RXd
mH-vFL
q=!m
T]~FX
fg t
T6|R
c@$gX
@4ma
w(nV
`N7
>- S3t
i,>
0q0|
?#~o
Y@BmE
R0]=9
P@h?
icG0
{^x@
@*6@
m[Qi
?cHU
fP:=
CXp{n
P~25
8!/rr
D@GfT7
U# @ve
c)?8
73:$
< C/s
L PK
kWkU:{
x~Gpi
I O'Q
M.~ L
wz`[
AFB
qpe
]-85
@ NO
| 6m
0eeR
6P=d^s,W
Wevx
I"&=t
(kC9A
EWT
GC_`Q$
-*u\Q
"K='
0R"~=
Lt437
AkO? 1ZY
Eb][
hMji5
C#c"
X(B,
4Q{I
DVvv
)_0S
&aLVnDBQ
0#Iy|
Emy:
+lw2
LXf0JBp
;;#V5h
UE|@
?omQp
c"Wt0
V-Ra
_Yyb
asiB"
.: `/i+
v+k+
|;l89]
UM[@!;
-kW2
u42
Ps88
H0E/
ZdS%f
L$-z Cl
qN2N
' 7UH
^{^
I13NR
( tANbr
F0/]'
[T&
*zZS
eL_Z
[ PX
N>vR
Qn-f
y5g8
;\?4]
3s+rw
<F!(4
5H*)v
xk,l/
SGFU
1>'AA
UU|*
y": P
prC]
XLAVhc
C =}
1r,5\`
B:Mt
tL*j
Q-k3
J^Hy
@_SF
ICollection
Rg(~y
Mf1
Warning
1>'q7v)k
iw39
c%c,j
A4E@#
>h6
eJMh
9Gk#B
u0 DV
z@0]Hi
B:M1
^o2!
Zilj
oZ#P
oc<
$d,h
!FmSK
t) M
&CP5
>')3'
`-4Nb
db>4]
Dtz>"l
i?,#
' 2 ? N
DoyY
}|pgk
[b}F
Lk) CRa
q eCGMB
fV 1
<Sm][q
P}i1
4dYr
ParamArrayAttribute
phL_@
.U*<#
Wt_qA
sj?F
> EV
\5~{
Om#[
? "YV1
ZG^Ad
ER*u
%eb4g
[OVow
8FIC
k#u`X
4XY#
L+5e=1
t6'U
Nu[
|v|7
*.q%
j|oNfI
aZU{s?
"ppy
<-HF){
s x;
x_yrv
o<0J.
koP!
T@oS
X6]y
[yY.
Qrl}X
RH~G
Pg 2
U`R|
!KQs
:B>p
a%Z=
`tC[
b_;
|EF
c-S7
&My9
]lne_
EVSz
'^[{-
5o'X
j9L4
YMw h q>ez
!PK@1Q>
7jAD
(
^XK|]
I{aM
I:h}^
l ,
~*5E
RG[J
Pu4i
2N12
]\eu+X
NN%']#
M@..
vo|b
0,jb
1&~
;I'~.
e _'
MyA.
O|C
!kF?6q0
ZbqG
R"Q^
sRUG
S 1k
r Ep{s
nM^H^Y
vwpZ
;U:0
{P/Z
${!(
r=[K
ComVisibleAttribute
?WD!
5sr3p
<f,M
\no5!,
ksFz
E+F(
fbkA
KyTH
|2|W
ErSt
;HxIv
l] i
?-e""
WqF|
) 5ig
JYs
:5C
Go#X8
1Elp4bA
i\)T
h 7)B
7~m2
$TuE
aQ>k
GT 7
^pwsX/q
Bq9\A
J m {
u(W1+
!oF|
b<d_
K9Vv
q%qji_
VD;U
`&o.
4 i,Hl6&
'zyO
X aF
s.8
IUIm
VqvJ
[TVJ
t#gG
$k*m
System.Security.Policy
Y$i~
|Kv2
F tInh7
#@#C
HYdR
?aKc
J@:(f
kXzR
PiLQD
t92t<
FO`[Q
O lp`J
"v8
% mty
Fr #/
t%nL%
3{
set_Session
w 0n
oM{@
FaEf
/ f
SrMJ
&BhS
Ac:
J0o>5
(_3szI
l.yT
JNb4
0lji
c? 8
,H.i3
(.8Dx
HlZ
cA<6
G{M0
(oxkP g
BDdF
u~Mbv
:nND
Gk|cX
GenerationEnvironment
`Hyug
K&)r
,Yhz
DM
B#a"
"NPr
F[%q
L}-EC I ^
gs3Dh
$1"k
67c L
nS){
K _A
KuCY
sk'6
)pvK
* rST
VGci
eW4e|
R#N<
4#"
V7B>
Or
E-`9
3r2a]
p&oP
A 7QD
,r:.W
2>A4R(
$iI_
e?$2
wN`1
A4{]{U
CHy0
C8\7T
kG!+w
egZd
o@[
|[Zw;
W~IG
t0SA$
$1N`
VDB5:
qYLO
SJI
S&h|l
QrqQ
;pUC
I}E)
U$QN
-ZLXS
H;`hH
.MEuV
gL,
;z$
GetHINSTANCE
4x5*
Q0 F
Buffer
cCT}
Q_nV
ATl4F
TI
--* m
"?MT
fV
3FB5z
1*}O
JJCt
Rc\$l
eYy
v0,b%
-!_^
%#[Z
$]uV`E
Vx#K
u@a\
ag>3D
apZB
gZ>l
w}o[v
Ca"7y
kq ?
OQixH
jO_b
)$]wd
]VKF}v
0qNj7D<
ewp;
Utml
E,cT
|u{#
HcUy
;ih"V
q ?
[)YM
h-d$F
q&oK}
GYI
"7@6
r_kDU
DdCX
kc8;(qG
gk&B
e# |
D4 6
a`6z&
B}c=KrrP
* V<
/zO}v
N:qXu>4m5
xg^c
\&+3
( M
+XTt!
HFO
Copyright
)+w]
P\np
Om9ZZ
A}_0=)
ljy
w'3WH
u44M
H ?O
x!nA
p_*1XF
o9_P
r7"Y
:eZ\
6n^F
_G.J
Z4:93
V"/.1
T*$*R/q
`$/(
% ?Mn
\g@/.
)zAnt
[P8:
WBl~
set_Item
rKB(
CCK=
=i?J.[
8I!D
SE2g
0-l'*Q5
T+mS
"BsD |L
W'yh
E3rd
WTR,\
2=Yq
HJ^ZD1=
Zbu
sm&.
Fq=}
K+I
'fpN
cg6.?
w>Bk
#sudm
H
z:m)
XKBz
'/`o
m=*j
_>y%
6:;v
@8[6tZ
i6Vo
{eQ
||;S
hfI<5
(xZa
)HTx\
o|h\
|ko>
G.yvB
C4*]
k c
9Yut
*R8_
bfzo
+zd`
8zC08Hn.
QSitr
r N##ja
CFB
Hb
Gx{O
*w!$NM O
|^b&Z*n
U1 l
%ae&
Lit jtT
Enter
yC!T
vIDAThC
44pB
8N\t]
c}V_
J> ac
o4^#
hu=1
l&bI
"_o
-lNE
W0@W
@ -
)Z.4
Xx;
x:Ie
Math
o!K3Bn
pr"k
7.}4
.hx8
}gMT
w`l@
>*rl
cgDa
nJ V
F@`I-'x
hlL,
d kQ
mndgrhsz.exe
Oq`g
DC1P
Dh =P
.#xN
0EE&
@x?K"
&|x=
({rh^
SuppressIldasmAttribute
}M^O
`G O
kGzn$
j' !
t52u
qr'wz
Qdd)@^>
b*E 4
:Qmw-
7P96
O|_+
_?@=M^4
=!b.
-r+S
J%e4
M8[Y
)}l0m
7!uy
h2+H]c46e
s$d`
w]|$-w
>%w%
r:#
x]lw
nCVH
GLV?
YFfp&
lq|of
z-Mz
JLH`
Vfe'
*NsQ
73,?
(`TU3
2CBp
zqIx8^
qfOU
V*c^
_mWMd
5,db
(JZ3
E 1$
;1'-
m$p5
pB)|
8?ld
d<i2^
L(TY
iIF
B.c,
=<~7A
Hyk'
L]mh
.b:W
@-_]=
J23+
w7:+
%EtX
-c&t
wxo:
Ax (
2HNc
6a{L
AssemblyProductAttribute
;/P
M:\zd
7Gk-m
ayZ*{U
l]AX.
<Module>
,d}y
,rBZ
'9B
:("W
|m_<
DQ%U
PjZs
/}T m!
LB >
'}3Q
{7@,
xc!$
Bb)o
/l% u
sp<w
pv6
E#:P
X/Iw
'cCS ]
0)sSe
SizeF
_L{w|
7c[j
cEKEYP&
=c _
z4_J}z
'"G.
KhH7
W08:
8FgM
DeflateStream
DXDq
edGV
q4qi
F+ wZ
:26>h
cr 5
u7?8
Yr|'O
8SXP
]@\~
m,Wp
)5Sta
bX.C
L*oK
SB<+^k
PK8i
\"#9-
,e2p
>R%Z
W\O W7
L}mx
R+QF
T},q
,ho5
PT M!Ww
4+({
pjmS
(RaQ1
>OF-
l~VVHysT
5|3#
Ot5
^).U
V]}t<D<
gPca
Uz:X
5h D
MZB=
^npZVk
Rb8_
0Z} MH
Q@V$
8CEX
aA8q
l*k5
'k]\
set_Image
-@$?
a1';
1!;-
;2Km
x3U<K
b 0tG7P
vkB7
yuD
$iG"
EventHandler
ET)(
R:k&
F"A'
F.J0
oQX8
WJkp
f] ?
Xd?{4
#f5=
GeneratedCodeAttribute
,IBayR
'9 Y
'02EB
)BBm
z![s
[[)v
+]QS
c\lD
X8]8
PushIndent
EU/9-N
eX%t;
1}F QNvd r
(8U^
UW oa
]xc'
[`?k
Nj! y
_5t\
~j+#nQ
IFB;
$J3D
VKo$
D|"&nk
rHBvv)
w_@%/m
6*FS
0 >TG
YYGL
m _L
B)n
cn=^
PTi/
Y7L"
Y5Vi
X~<h9
set_Icon
q L4!
System.ComponentModel
eXLBZ
b\J'q41
Gp&"{H
E|;o
wpu
M.d5=.*
@;D
'At|
.ZM6)
DZaQK3
L^C p)
se{L
KwUg
,F0N
eLS,B%
IP1[<!5
5VO
20Z
bnhL=
cFzT
:)G
^{i&
;R%*
Dm_N
A6,
cH]?K
ayI]n&
X<f)
4NGa
9Z%.
ay^d
Bv\1
kw>B
h%3JM"
ak[
7GML<
_{019
U2S{
8Pk9H(
*KhL,
r@Un
]o-9
TO>O
b6El
3 Q[
Y~y~"
T-I S6
b^Hb
A0jU
GGCx9
t -M-j
LH^PRL
(B@T
c!kC
pdx7
C|V#V
9l{-
@tj@
| sv
&e?|pQ:
H 6U
z<p_
"A%zc
-)U
BxTQ
>]4au
[{7"
disposing
d~ZI_/
6w3N~
x &R
@ N
Remove
\-kQ
J76t|^
6rd`
8mVF;
a1rS
=L!*
ZpW
hM<J
iUq_
'h#5
&PRv
7T ?
4`1y
RWW+
oy$*6
uNi}
)NF0
z@P
K|.kO
AAr<h
N~tNrs~
>@}o
KZ,>+
=yZ
h4r)
s3k[
BI6v
xW<
uj9c^
I.v(U
n,kd
Y$F
YO6
S7_5
/Vr\
[]&CuZ
PB&'
P-jD
AhpZ&
C^hy
$d/<u
$QnL
?@H<
&\| w
XPnN
e\>
'alf
+> A
R "7
T_'w
rfM,n
pv$g
kY[_
56\W
Data
K%Q=
;E''
)U|;
Ck[@
C[Xx
s:=EY
# m:
,"]0
<PrivateImplementationDetails>
8'yG
, LC-
<cZr
u%<6
OKFd/"'
w:"_B
\X13
G<S7
get_Controls
CNH]
E WaS
M,@7
3y?1
t:?q
l:O )
SH =s
KpF
\Vo^tSlG{
]>PX
B3D^I
[}gDd
i]Md
^yzM
RY8)
Z+]a
F~Fw
wJk)
qKd=o
z4TA
eD>}
=_.mM
Je*re
sKV5ZCx'c
* a
4,a@
_{M
= fu
mg)IT
"D-L
k`m
WKQZ
DG=vS
o0a{JT
u2l6
^U;3
a_ Z
q]4i
3tbS
933_Q,
eZ B
D5^ek
!x*4
F?h8 3
3K3A
n#$R
V^wc
UQqa
wTH8tp
j?b;
;LvY
2=vA
LKy2
%EK7
}q9(
46MiJ
f6;I=
;~5Op
t4v,
#v*k
qdM_g
+Rf v
b};S7b2t
;+90
E1:g
bsthK
qG^4
c}Chb
r^Fi'f
+ S]I
vU{>
z-O2
[!8Z
D*-r
&+1@a
kt8C
B co
bf f
pi=y
sE#i
.cc
CF//7,
'!m#
$$!+mtSC
xTWiG
0m|?
GN1?
-_i
D3MJ
nb$2
<:70
Bao.
eANK
dk"J
\`O$`
J7^*4sw
75 C
3\<]
zI5H!l
%#Bu
wp}BD
XhkPS?
E/X^>
get_CurrentDomain
@m"l,
$I
\THs
FDka[kbS"
H;{C
6 jE
cWkd
P3=^=
RSF
6+XEY
N]qQ}lx
}c;
3 @Z
V-Ea
|<+c
`+!D
p$46nM
#;Jz
q[rw
&6h}
ICrp
)f/:Mi
U7\i
dec@
dg.D
q{q.
t 8Km
7C/h
uFs:
3"3fa
*7c[
j\90
pC7Cq
LJP-~
3G5]
K.~+
^VY[x%
7Eyk
.XXU
.n8g
8 O!
]Kdw
R;>;q
CP}O
ST
x)w6
h}^X
#3*Y
cre*
F-e;/
LP(_x
?$]3
"CTB
>jM
T[66
:n'
TI @[wk
,qei
.l2
'ULL
8CGY
L*#
O0kc
trDL]]
P:)9
LJ?b
w?]_
:8S?'' m
AHn
?L\Z
x~Gt
At J
$'@!
(>2J|
4OgU
sXo
%Mst
Yu6 Y l
</ [
]Oh3
I3tx
&sdZQ
xP8h
UI<b
37? X=
j( J
r#PE
|dw~
y6uKs
+c2d9
1C-%h
)2I*(
*cs`+)
:~$~
/v*u1 Y
CY"&h6*
qWVG
YPJ_\r
qSax9]=*D
!.%_
B (=
0[Y4k$
@m-_
Ubo2%
yFS]
DG ,
o` O
YzJY.
5!Oo
F`n[
.>f*
vdF,1
N0|d
S}.j
DFH~}
xE-q
PINH
mg$!P
g NJ
1\?4HO
UGDf
wIDAThC
qNI)OCt
>[2D
/zH9
i$ Od
Q l,,42
m&Bc
!Z ;
&+.e
)F[X
eK}~p
U9(U;
nHucpla
=Vo2i m7
5 vNi
vC9W
M,:J
l2JX
Av@|
):zF
oMGz
*! A
V}oYU
oTh
q,F<
1-7yV[
F5,t
B=^[G
t%Tz
FWR_
]b-p
{x{k
luHxH|
t 1
0%\4
']Y1
XHh *!9
*bwL
02xyN
[ ZVY
Gr5m&
wkM=z
C ps
/Uvf(`
[Ts;>P
(oNQ
$m _
?.2O
vZW8
,RHY
Bqz#8
Ml@m
8)~?iZ
Y[sPY
O0SS
|5A^
z:iX
}uahT
@tdK
JF x5
vt]4
,g5>
)3<]
{5of
O xh#
gDw.v]
WON8
LGq` T
b(R_1
+{,V
7]H}
lX# S
Olk'{
b$g
'3v o
0FAHp#
x%v]
Na.L
JAs?w
`Ze
aGN
J2M,
kgID
>~A`
5_1P
5vix
KA$&QY
:4u ~
EDSJ
Q,V[r
g%h9LHb
"V J
/CT^
)x"g
dJ[\
ZI?_
ZAJY
rIX;
p6;n
sObv4
l\Q:
OB !
RI:(
(D>o
, _RQ
Ql%r6 f'
8r7%*
Z3[G
lk37
1py8
S?(z
ZUU+
.aLk:
wQs)
l* ZU
KPRk
[4o,p
kSY:
%h>58\
3(.
\:N7O
SKdQRDJ
| Tn
&+fG
&Z7/
4GzL
w,be
" 2 H S g
LTMB
a`V
WTYfN
D N{Na
C>u,
qtrH
xY C
*O76
k!4]
| TE
/*tj
Marshal
jH w
<2[KUY9`
'F-"
6,<x
m)%]t
nVXnBY
Ot..
]{ilDpcT
%]\]
)O|cA
?t!2
XZc$
IW4c
E] Z$Q
tin1
PvYz<
Xy::_8*
3] |
d.JZ
;l5$XIg'
&vngI/
6fR$
vzubwa,
:5d<-
Jz)&=
O u;
g)v2
\:?/D
36Li
dZ)A W
9*)
kZ x
-0g4c
@ kN@
p,%%u
t[[p<
$4%{
CZ&[
c#0b
mBz]
o Ge>ve
pcr
(`A,S+
QI"2
HoA4^
xZJn?
? 0r
720{
622c
oI|#>
System.IO
WrapNonExceptionThrows
Wujdu
Rt@#
{&HX
XR:5@
wOc
hO
Errors
S< p+
z!O0@
3u{1
VV#_
us%v
` !t8
4CAQ
wx ;H
Xmza
o?nOAn)Z
k:M,
w4?$TM
D` A
get_InvariantCulture
u){f
](A?o@
Uc1v
(;JTg
b$fZ
8-E&
h`JH
$;CU
zP<|`=
d1a3336b-98bd-95.Resources.resources
&oa8G
^6a$
1l/
}CI
&0: ~
m(2b
r7I%
get_Session
qoxjh;
2&(I
>JY6
0WPa
IB2D
CV.
X^.h
Rv#6
Q<l3
MQT\
WS[
>A5w
wK,j\uw>Y
pHt8
tZpN
)/j
+^aOy
H-P'
e H8
FZoX#
h _9R
[a1@
$j!H
e bn
6nG6
t uE8
G3m8
.+_U
62 l#<
f<
V`XM
"2(T:v
"(#(
P.=E
:c]h
We6:
6Q[4
CMXq
mh=Y
kh'@
%C*`B^a
o.x(
&<cOd
.+h
}BG#q_%:
o<=#
Evidence
0. V
Qr__+H-
{g.y
} <};
E; 0.
)h ^
!^+ P
xF47
{9^<E
/p\N
Hy76
|OpU
KX%:
h%J}m
\0tT
jeng
6*/F
Pi{|
gtEJ
h4X>v
%7?".Ai0p@?
w$Z>
o0Y<
OGti 1$
Q c?Y}
.DJ$
+r-R?#lKm5c
f''Gb
3Bi 0 V
1:v/
eoSO
~ J+
&67`
)DT#
{*g>L
QrBb
y2X\
-n{
;c}+~
QW3LN[
Bu[e
ewuG
<XV1
II t
&X&x
[S)]
+k<9
.H&X
J 1
a=0x
4'Z.
K "l
XOtl
U|[e}C9kYR
FQzO
{u/z
pYH& [
Sx%o
yCo^
[om`
/V`@
~pNR
0]K(l
ZGeOt
zQVw
5v R
o?Kd
Yjke
{$cn
~u.x
S, N,h
lRuBw
.@l^b`
3gbG
0;A|
pc }
BY!d
WJic]
6.+>
1x3
\a*0
vEXmf
Dsc/D
String
d[@;
FbG#U
^j H{
Xx}'
set_Location
,2G
j?V.@
eZIo
x>Y\UH5<
)Q{w
+^|xj
"/'2
(kj~
/4%qIH
<1bL
get_UTF8
~[yGmq
HHBJ
c8uJ
Mc4L
JEap
.:ILx
S3RI
|>l
E0Hk
qIDAThC
l^'+F
] 2SlBZ7d
My\`
Haj.E
=@`Q;I0
v~IY
Ovcp.7
?@ a
^d=NCCM
M DLp,D
Ea6'
X^6@
FI}O
/|`8
L%D
XcYd
j/Hg,
T2ho
~[CS
\n9YE
7 m8
Ko#`
Pfg*
^3op2(
r9 ]^
P{Kt
YpAy
CF_\
>pU~
^jf8
>Y=P!
dls|
;O^
<P^P3
xK"C
_4z<Sg
-?$Z
|d1]rB
w>Hq
j[(lo
ZFq}
FU5c
!W,jem
Ohh:Q~W
c7d ]
<-_"
QK-T
&N2s
M3E9RB
CSaue
+tU^|\
Cg?E{
Session
C;co
pfv
lC j
9:i
^',U
@#Yfe
CompilerError
`SSF;q9
A0K
EV@E=D.
g#I7
)5J<q:
DD g"
Q3=m
lY U
$|sH1
!s X
B2X&
cQO@
0%hER
]rT
3c 7
y2!t/c
"2IW
_S3A
nV+uJPz
@9~j
#Q2]
/i08X
8UC
;&%G
%^Tu
)2ZdU
0A`Z
sE 7
ExvW
zp>G
2rh[
y^D
D6mN'
PTJ
o6rFj
s<kL
., *c)
8X01a
:|)I
LG 5
3tn%
^>{H9
V6)=Xe
C3
O-LY
mJ->
[NP}.z
GJB2
jlnE%m
GuidAttribute
A|oJ
mKE*?5<-
l-p$
B/%\
%+xr;G}
UC +
tOQ6
ho O
l+/\
Ze"z
8 BK
{Fo8
ztN-!
G(c]
5 pG
ccO6#
Z d($G
pmrD
kJGo?
j>`K
u?(-
{wEr
iB )`
] ?
hY~j
;H+~E
vG%"Rx"
tzXWB
XZa
<6gl
+}9n
~H*)
k$z'
q8T*$
slp-
!'pU
Gtr/
;1Xg
rrUB
_]6{
6; ,
a!v.h/
jBd=
l |L1
w@I>
nM)9
5Rj.
9|^'L_h
v_lJ#75
CS<cN
aP)m
^y~[
(3Wn}
-d=f
MGoE
-cI,#
>04oveWJ
"W$\
K2 %Vc
$ Lg
eo>=
Eb g=@
%kEZ
xi1U
Kc(D
a +e
!u<%
jB)N
)<IN
p$
5p?yh
9Hw?
`%D@
-,Vl
U$KXO
^x<|
c8A!J6?
0?(P
add_ResourceResolve
D~Zo"
2:V@`
U|~.,
#Ro*Y
X+fc
GFE;
AssemblyTitleAttribute
!9+:
b&+o]
UY^mi
7F0 XL
VB`_iB"
K%+[/
'<^)
V Y
+,G#
_Uk`
_jg~
#ZT^
UK_M
Oid|
MemberInfo
D1A1
.<o-
zxfWc
t/f"9
.z5`04N'
"b;z?A
@oFG
x+$EYx
C6j$
P"x
}1I|
CNkT
r_5b
&.Kt
5pO ]
i~V9
=l6u
~%Ni
}39fY
v_7 $aGh
2"{!
@039
XH*
v_L/
BRGW
get_FormatProvider
'Z'#:
]12Xg
jt&n{
M>C*'
ZEFD!
+,g,OsQ
][@)
y`<,"
-cs{[
x@(|*
`IXvU
9.>G
G8&v
A'%
j'%'Z
.520
C|V;
t^R7fMI
$pJt
COP/
[+f3
9kV6
(#jD
*Jg>[
A7^P6n
zV}!d
@~ a
hV9_j
~Cqt
@J*<w c
}dJ_
H w&
G on
7Xl`VF
) (
+ 4pK
rXGW
pJ.,v
HPwU
$'1i
`]B#G~
^G`!~QT_P@
?3uz
}Pns
.Uo=-
3I @
fYSU
axT
HtbF
[jj0U
]^ B
${khSk-#
,R T
fPVLJ'
":u0W3
\:%
5+9c
bMMk
$DKQ
J&wL9
i{#:n
tC2Z
eQq3
UC^
~*68$k
@8{Y
fn>S
iT3Q
1O
GiPGp
\?D|
goL;
get_Chars
0F5$
ku}m
Oe`t
6^vIL
j$)B)8
#gJ <.
9sc$
FpK
x_p:kM
4}bhx
&Df#
cQd
xRU'
^df!
j|n1'@
NjNx
.[6%;
S1z$
7 @ J
i 4.
bh?2q
"-"1u
fOsrOR H
'J
s`A n^~
"s2<
T;V*
5>b;Y|
UMb*
S&og
t}qp[1N
AssemblyTrademarkAttribute
6WSN3
Lq ' :
MaC+
y\ e
(:A8
qU 5
wny}I
0<@<
(1
9w
8R~8
?z.~
OQhG
!SLJ
R`vJ)}(
wcAa
U D
Assembly
,+(h|R{9D
#08z
0h]t
? Jk aM
Do08
9fYcw
;&HY
b pl8 _
Uus|
B]?M
s7e(m
XM00
?)QuN
RK;X
g~-3
_KyP~
1bkv
SuspendLayout
891vJ
kr`L
pU7
J>%
D<a:
+i t
qPjR
6Ip4%
|#jI
'wCI
RrBR%
/31r3i2
-76'
set_AutoScaleMode
_ +
B`kP:Iat
JmWA
OSM{
@agi
B".cH
H w:
!Y+#
;.lg]H
NeM v
mndgrhsz
%rd
is A
^dCU
yL; BoX
Vx:X+
!N;{
g%W{
B(%
i:"=EV
>qn0G6@n
phN8
G@|.
= x'#
_}L[
+ik@2
S+R2
8m08h
7]MI,^.
vve`-
^zHW
M3'&
ge{T
=@&E2
!$\
")z4
0:qc i0
o Z$
IiQ(
Rx=P
AX [
t= v
/ ,W
rH-6
l,cm89
"T]8
4iMl
tMM!
J~hk
Fl>/
~{HI
[8U#
q{ #
&l%
;EG c&
NA$,
~kC]
~{H3
+ie 7
0YvY
,}Y d
L[wi
UwyEo)
;HD0
Yf`J
%p8Uf23
T<}y
LFDsn{
l^]1R
q%uq
T 0w,
eX ?
#4)2a)$X
~`w l
PJi' *
@QC6J
F[Mx
-PS9
QNT-
8JvG#
1o.hDm
=$lp
/P8+{
U=3qA
{/H}
;i 8V
SIz,
8l62
r st
F`> =~=w
bO 6
aUXL
c\=w.9e
_ lQ@qc
-Ug OEt
H`r!9
AssemblyCopyrightAttribute
bO`b
s/'2
@]#e
9~-p
4Yli
*II
5s>
rm:(
OFn}VBy
?|w+p
.}wc
\!Lh
4)K
4#@j
rQzR
KK8d=
'2N6
;D@=
G6Ar}
-R"z
/^n1W
,fvs
Y@BK~
v1 n
`HHb
`HHn
:e2C
Ub'hm
System.Windows.Forms
M_N2
3'aR
qM<?
76-r
QmX3e'
Q39^9
HZ^X
ZL 6
(DIl
;RJ
2C ']>S
K5uF;
W3Nk
qVpU
E-r |
,LPg
|W{s${
nj*O
$F'O
'n^'_
{F13
?^=(
N{12`[KB
e=e\9
-1)v\
B}>t>
7:#Z
Q9.3
jr F,
$CNf
i HV
QF
Z_Gm
}h1BMm
z{`.
o;>h
z~zc
CT6'a* 2
%$$6
NK'7
]='9Q
Qj=vn;
5'J&
>3o&6
^):gi
}KbRx
ESF=
Xn]7}
6h9Rl
a"`E^
98U
WKc}
D19,
f E!I
yl]:F
`t!Ls
Vf?FXB
r_+8
8M fU
$nY
w=?!{
w%Xx
C8sKm
oCHs
,!z;
7OEt
u0w/
sa0ra
-j}[N+
.cctor
HmJW
<8pW
"nm*
R"(J
/pXz
CY]t
]E/
;9G#
4k~i
Bi]
MP[@
Z 9&
4ipJ
\ H?B
*$XXg6
*ut5
mvfJ
P! /
SH [
O}E b
&#e[+
\0p5
g,Ps
wM;$
pBr"
p719
>hY=
a (P
w]Gkw*)<RA
i[8
CZb^ e4C
3-r
j'|j_H
2&IX
zi!>;
RArXH
=S5{_j
hgEo
System.Reflection
"SF)
|AVw
]O Go
VyxI4
{Ktx
.03d/
^ex2
lW!7
= [gN
GU$ /
Az^$
++r#
`#wx
/7L%
q>Wx
_3 !H
1k I
x/`b
VqX_
A-+W
J fv
inwC
2p>E
ASN~!
pT8}~5
1V([bCY
Mxb")
D<;s
TzV0gZ.%
-ejY
?7O
/!>-Y
Ho4>b
H"+
zt)P-
W7og
IvkI
ea0nA[d
)?^`
9WM<
"5Pk
=m?
@=#.
cf }
'7
l ;v
`?P
M]Ax
-%AB
.HE3R
7oXm
AssemblyDescriptionAttribute
{{!kC
qU3!
R'XM
;g"
/k|dm]N
a+8Wt
\Qpl
v]CV
O$xt
jw"YI
Oavi
YwN&=
B_O*
P9i
U_Z
w:pk
S1$'
U2[B
w^21
+%t 2
77:E}:Ix
Ka)y
`lfC
w&o~
wZ&x
`wU[
.7;+(U
Lvj <QLb
"2)Eu
%x|)
/xPC
tZ@Y
8h29>o
#|b
IjWr
#iqS8
HZ'!R:
0Vckl
TransformText
n.LS
cno"H~f
ViA}&
$S`Nui
YM>Z
pZ/Qd
3I4`
%rd7$
&PZ\
q?}}
ziV=
f,wk
System.IO.Compression
xmF
;nm.
z/DO~{;
8Qr^fs
,8Iq(
pGe%
+`4 ]
%i[
z #I/}
3j'o
sQuTi
xGi~
=k4>
x )f
_/wj3]
$3f833e35-3f0e-49bd-bb7c-f296928269fb
Q7Q}a'
IBz]
6 *I
<7D&
=ldDj
)2L(GdQq
#jP
MQK"]
OUN.2
b}M
;[0@gR
z4M85
q:@bY
yFH!}$
Jh~|
5(g/
5deJ
jK1w
_ ?\
dQH'4
get_CurrentCulture
$ K +
[:SA\g
-$9l
JF6f
mLV:
7wF(#O
{P<B
kuw3c}
)lk)
5hxO
a~?(Z
IContainer
_!m6
)~<Zv
3X .
P7>e
LD :
f{ 1
_G|Z
g6k
?^g?
@(56
7Kh ^
1^Bz
Dqq~
2s-j
6#v/
{lDAX
Rb4\?
TFUL
!k4=
T\8r
t]3T
n] *
+"/R
/;ML
gHvDW
a`#qB9:r
PGOs
vRua
X)D|
J`6.
>/s
RWTF}
O D_
<?09JS
Nk7t
|q Wf
0QgKD
<3ol
1MQ
BXl"^
oQ->
>@U]R
6ppd2
eZ&iL
m!}eC
;Bl9
6|?- |f/
}~TGI
[9 (
VE}j
(;M,Y
:WF~
HI47b
w1p,[
9Wfe
Ytl2
M/gh
KjI]M
7r$7"
SY'z
Xlz)
d1u- s
,%>K%
M'X9
JE/<b[w|
L2 B9
NSDU9
<8*~B
8hV^m
* 5'Q
TNQi6X1(
tg!8
nzII[/
]GH?
x71T`
?eca
4:1S
kY+O
T{jQd
$Db-
o:~~
ISerializable
J213
QMP
\<TZJ
8ECZA
lK@K
bL2)
)l-
oX)I
w3iw;
<E U<
B,sc4~v4
{9Py
*!' Y
hls
#z >
&&$@
=# '
T'7,N2
q<Qky8
6 h6C~A
/V ufn3
=# !
]ClO
Bs<P
iW<*C
(\ah
m]xT"A
z ~X.uT
L[Ts
A&0T
b4*3
6Rp?
j#aD+
cJMv
% E[
_~6 _i
:Cr}
Ge&j0+Y
Vzq
\rz7
^&fsrz[P
5tMM
0})`
f8C&`U
{g0a
PtC=
7725
y6zOdM
<!@!C9Tv
"v:w?I
mCPX
ny~;
-s~5
xa89W
bD_9
DW [
CZ{Z
YghfcW
UCyQ
>w q
q[j3
AS\"
X 1B
_D7A
,d)w
O=Tdles*
_TX}
(>_S,
M4+5"p
Y6F.
:yf$%z
mEv+
#]7I
#ek&
5<<j
{8V8
-Ylx
C^@<|
%l9)&B
A}yb^s
l*a/
>(J
U 5o
c<8/
h?RP
Op_7
D (n
prC zI
j#B0
;Iy"
w8iq|
>r5(Q
/>zp
1r$IO
0 ;u
Ir|a<=
C*qc
8ad^D
!TcUW
9Z:g+6T
9o>'
XyI2
<3]S
p3B~#
hxb
/z$/B
,Q1j
|RJk
Nbd8
O*^^3
% t{3
0N9}
0 H_
n< Rl
:#v
wlJ$\2_y{
|.f3
4QMg
~ Xy
iLe
u!^I
4V\f
P4 El
vr>Z
->Jil
A| !.;
N<dJ
9A R\
Ggk3
:od7mI
3:sE
fYOk{
/9tn
mc/Y
v/&_
E5!_m)
f(j?#
pSrW
T)o$>e
OE.@D
.E8W
+JO^M
i '
List`1
J >o 7I
Xw;+
t1b
aciW
AssemblyFileVersionAttribute
|#!e]
nxHJ2
InIJ
Fok}T[K
\Mbk
FZ?@O
e7Hr(
N 7#
+Pgd
System.Resources
|1>,
uP:q2
4XJe
V4::
@!?j
v*Zy
aI^B?2
hp<
"to [
\a'*
2y7;
!g2v
4hN!
<o8t
ij<0
EC':RG
K]t;V
F[ V
rlC)
P5}}
/6"L
*rBk}
I1y .
nhv%L
a]69V?
'P
Icon
C 7<H
:R==y$
,YD;
2:Om
yWI$q
?'pcA
q4^U
rja VN
Q=V&
bB B4
]Y6
oo/
< g2
ftj]
.4+d
@ T^
% QJ
/.ai Rc
F(b
*8t}l
`"@LI
QkDU;9
0NZL
fr|9
*dg}
2JCN
97v2
N^?9
y,j7P
j4w^3
R c
DNn.h8bH{3
7f^ w3R
q2L,
)v {
',6^
6=w
-2qd|
,:!!
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
YE<xb
VN?C1k
Kp|X5A
ppoT
;b?a D
1K7.<
k *V
?ouM$
zw,`M
6i-cE,^
nGBS
a#RrU^
&1E7
}1 [,
4/=u
Kl6uH
qRQ
Eq`.
9"BnL
p;*<X
I}yK
pkhm;X=
dwLMuA
$TEYv5
<&CO
*dI-
"TY*
Mc Q
P6~#Ag[
:_`,K
)J@$
A2H
j _4
kn`'
'.oY
_fie
:.x\
Q9 3
_ +[PD
Evn2
FH(
=556>*
_cKM
HE0t
AgP
7:8%
B(Da
=yT(
t3vm
5@`5hGS@D
Vny(
_56$r
m_hD
"IqR
: )l
-uGR{XX
System.Drawing
Z(2-u
hDj0C
jQ9a
H,4<
1mzF
0@ xw 6C
p'_l
ZlcJ
*a>LL&
!$)hZ
I v`SLI
D}V7A3
sQ6|
My9n
X$`=
B[,b
xOa:O
S{H7
6WFU
4{ K%
GSR HhT
AtU}
An@!
Y7[z
pfO4d
;m(I
W/Nn
[,nr
],*T
)go;
b R2
0(R-
~Qk|J
BYN5
/Gh3
(]3
PH{c
/pa%
;"on
NJye
Dtvo
-&<*
t?0;
u 2Ppe
sgUTv
E ^v8
c{v#&%
KXcn6
Pk3X"
Monitor
h^A-
vxRy
@nFO
VQ0n
\`/
`[, x>
q$EX
#gtT
lG D2>4
)([k"
1O{{e
/8;[#
NI~;n`0#
"OA|z
X0Q`
Fn ?
"21v
;N8c.n
y bx
l @[
gAMA
%;ju8J
.Ji+z8
Zr\
b^/{
'`au
SY)+
Ie\S^
TCO-
h/@ 5
@=vh bh
rvOK
8hY
& "\
NK&W(.
@09t
,k`u_
WQH5
AssemblyConfigurationAttribute
W@;R<
qc('<
a_W`C
_d"=
)tHO
CultureInfo
$Fq*6
i@ X
[tc
k32
hl%z
IFS3
VMEcL
qv3T{
:.@{
tK5P
wgb!
FI:=
km3t
{O-bk
9Uv>
i|0_t
x_"~g
5S2#
~}(U
AM((
?(3f
V$q
wr 2
!$zMwL
fB@E
O-vqu
gdB!
km3X
IsNullOrEmpty
6ai8
,Tar
]$I|
P3b
B4UG
b8J8
<8KMJ
r30H
>/iE
/(SJ{
O46Hg
> Rm
S;I
KFE2
tk'i
R5g~
uD#`
S`pF
}FIps
Pzcc4
-N21
1` v
U($~
<y!J
1'^"+M
a]qL
q%N7m<M
R;e.
Pa]+)<~}
DJZ*#
<w;f
>MtB
.?sw
Ejl5
M<u/pyM
s("&$
F@&vV
8 K6
E1Bd
ins-
MDd$
M/$g'
QLMt
[`+O
rzjd
l!qu
IBRYd67
b&~>:
!(>PK U
oo$8.
.Q;7}]/
$0bk!d$
V\;g
v5`
<ml
'uBF
A6Qi
|8a7
pIyY'
8M*`d.j
gZaZ
w T{QJ
F {:
d [ZBR<Om
4Q?#?X
R+:
mJ` >
,{,/f
|U3J
gm^nZ
y (f
#C2)
Ku[_7
5bK!
c e
?1eQ
NI8n
vSk&3
8VAmL
RkD"
H P[
?SKm`
\oV HQ!
"Q5[N
*s=J
_dpng4j
dao?5
zu DJ
=@8OY9
v~.$
M@se;
B 43Y>
y3b1s
+V9m
~.tC
'qc,
8hv@
[}"?t;k
jGi/
M_PKEl
lI(#^
|vhUj
7{FA
w[?r
]@!'X
UZ<@
9zW
8_ PZ8
RgBQ
` &9!Z
0("
y='s
eck
CGpGE
!Sr~
n^rO
+&
;P- =
o5VZ
qPuU
q Sx
00HT
KiX-
3\BH
43z1IU
A;}&
r$5^
Gn_z
o>dg(P
I3Kd
h5+*
a9/
> L"
1'[A}
-T|
FAQ7
ArgumentNullException
;RJI
jg36
b+>~y(
&e 5
g91Y
indent
d zYU
[?!i
WGfs$i
pC5<jY
i4Tq
r<E4
V B>
'NQ.+
r j|sZ
g!>0o
ui@w
|R YG^
_S\}
kkNH
#kKS9
kkNu
O~4:
@s^&?
;=|i
Q!7`
FST(
?Le
Om^u
8?pU!V4
@0\rPA
J@s
Am a
>3Kt
un^B
C>(jf
:]rA
hQv*
LmHs
mk sH
.N=O
F p-
J- A
. '$
L)92
5s_)4c
W\S F
th=T
set_Size
Kt!
d*Tx
5Z_M
?cO;
iOW'
,;Jf
cN*UW
l[~a
VBKh
TqCf
4MRu
an5e
2cJ#
l-hd
uQ9
O \#
O;id
{8hnC
sHQ\N
Zkj`
`TE"
+w1Hx
aGaP
7vcRi
|n^,l
`,2T
y=c
Nt3k="
JZ<Q
f_+;3
; V|
s&8\
6T:U
Kgc
Q\eg
#T6e*
J~ [
@YiK
Jwu$ut
r2SH
N%Hf*
_[.s-)(
>C d
+EO"T
|y@^Sc
}a=5#-
]@Iq
y6mo
USB2
`+nO
7HpF
$H-DK4
PYedG
Digh
s {Wc0v
cW c
;tVF
KJY2:O>< p
| a\
0h_Yg
F Vd"
gWL$
s MW
D8C
4tIp
{6]t
l*XY
D 0s@
tX>d
3cC*@$
KF|F
}%m)
yE 9
c: 0
c3wG'k
WlT
dGhG6
o*Y<8Id
k}=
}v_\D
VW]M
S3|8
\YfOB
e5!aG
B )4
GetManifestResourceNames
lJFn
yK'e
rg.
EDfHk
akeBX
mjI*
3wQ
`}j1B
!~~x0?
V8Jr
/J pS
_(;4
4|t
iwO~]
55^E
pa)vpI
2?"\:W
w2+uk
` Ht
uGf6
73/9
Ub.JN(w
25r+
<=I^<
)G(RS
1.>
%5PL
PVEz
<Cuk
:h=yz
QDH%
:+#k
OiALpz
Ot|Q
scp:Lp4A
set_ErrorText
u[C_
ia <
#Blob
p%Vm$
TLc[
(g{
vV]H
.O!OX
Z.'q
E7$E
value
axlG
m1V-
2018
#~kbG
8O *|
~Bu.
Gf`zKj
@V$Jk
?fnulv
V|.LW
8Xw%
Q/cD\0!
+{hM
I*}UG
g(*RL
V=p+R
/ZyZ
g Ba
PeaIP
3: (>
\ Zm
"Uji
=?pE
tH)e
u^%J
,}
-rwF{
:/s/=
k(h^@d`
q-m.~|
Sv9u
+/(m
l&'?
x7 c
zk /=E
Bcw)
}QrFpS~
&B:nX
&!i|S
"}I+Z
U UXi`
[%H8
f]g8
[ddI*
+! 6
nHq+
`\Oz
s)Z }?
ITZ3
w*I|
;I}.
{2I'4
CV[
Y}Ty
=Qo6
Tn821
*h),
r {D
)1JW
OI-i)r
.:B-P%T
Cf =
4v_m
&n}~
3 ?|
k\NE
z4qu
QkO:e
"HZ`e
oKby87
c6vN:
ip[~
XV<
-FmT
@W^5
,,kF|Cc
=\]>
o@|=
;3oG
dE:z
xz {(
W`Sq
AfsR
zTN!
\ !2
(M9w3;
]pn]6
~Wmt
ug!!I
oo8G
tk1&LI$zv
?BaO
$ V3
~|a _
- j_
(t#~
6c2 |
pkN`Y_
[1BRX>
N>`e
hVWgvB
OfH')
""+pw
Fk% e
]B k(
G&C+
T
<!#D
\Lc!
1!:yVB
@3_<
s.')
XEiG
Rh4
([EA
CT`d
\kX`
A8X0
je (
'A)$`
l($2
p^nk9[-
+n^g
|'fG
Z^k5
P#6bI
F2Ka??
MqPKq1
SJ1T
BlJ5
q vy
<`GL
?,1=
7`vU}
*cse[
BHea
W1W2p
\&[s
a]f-:
#wv xTf-c
KNl=
:) @
s=fF
rb/
*!.x
,l*U
XpZev
pAqQ+
3(}b =
9w4V
-Eml
bB2
on9lP
?a@1
V$/P"3
>>1b
&:"y
<pZS
WriteLine
FormClosingEventHandler
mQ!1
K)#:Ct
mp"r
%M#-'
LvKX2
PR"*}
$,zj
U/xq}
o.uV
mA,5
mJ}}Q
*dILS
vw{G
|~j
.eV4
;V6vTi
TgN#)
;;pT
qV'ep
uY?f
(
G"@+`
wWb;Z
Nnui>
(MAfC
H5AnCX
)]5P
J^/#-q
D.D
av_Jr
>R]f
S>^v
]XW0
eAA>
!Ox9H
sGsb
3fQ`6
qU}h
MF5%
m:mm
DjR.B
o9ll
e* *
&GrvXk'
~unx
_!QQ:
iit
"X),
NTtI~
H>Y^
iEL9
o<[~
6;y7
>~"(
Kh8=S
W25_e
?*5%
.F4O
*]^Qg
0Ynm
\|'p
q&^k]KS
=.'X*
)_7i
`"BkM
wZeg
KbCV
~Gr?JE
md;b
YJY;Y
s//v
aB@PRu
&] O
H KE
FoM4
&U<@
uwz2
Ck$/ Pl
/yq)
p,1+1:/
Ub_U
.EjO1
I]6,9
vs%5]n
c@*1
LDvxp+O>p
7P Q)9I
laK[r
sX%V's
'Jhn
WM)vS
Y;#D
T}v0`a
,):Z
#+N7
w)|b
V B2@
.p5Gc
,v(e O
sy ~
F;bt
<%gF
M*|j
{c$<[
>vz\
{" ^
RuntimeFieldHandle
1 ]7
l, G
&}J=
TQJr
yC~D
YD<$
~>a
^gs/{
E'DkG}F
_o%.N>e
_gZz
1Jm gu
mscorlib
(f*TC !
_gZs
{pk'
J9w@>p
8$o>-
N9z\
;<y
F9.
DvPa
Vz>C
z-Lj-
,0tq
P{0c
AhH +JcG
xWdIL
Write
l, .
4qO;s|3D
lfp.
)sqR
Vgq.
/.8@j
u3${%fi
$N]Jb
8dnv5
M5.19
1c' M
F>2
:)PD
}'&Gsdg
o7 ?9
)t:
sObLO
, \XK
?$aTD1
%"^u
ZSQ? D
4P@<W
x~PDw
trNb
:&43
"#(13
Bs'8clg
Emp8
k<C_
)W1S
sW]-
F_,u
]ZNa`zD
z% T
GetMethod
o6?7
|Quw
yTkg
@p,S
b%eg
B_1g _
mM@2
dex@}*=Wc
!1tt}
"0p/
8e~:
BDr.
+gS_
QxlLP
nIS9[
W ; !
JW"R
Rc{^
PX]-
X 1
v8u9
e95l
,4[qd
hH6P
j}![8
_`R=
O=~y
u!/a
WR-a
EH#9
$~bY
@dvh
ezu9
pX`J
LDr Z
rZqa,#
(Zm^I
5;k%'
j<u.
:!BgO
[6ZSy!'
bDQ~
>vJ;
mcm8
VGq7
2aEk
+lKr
objectToConvert
,q!1
}-,B
b/Kff
*3ch
]HS%L
w_r"
=!:_
--ur
@6;
{Wv
1`?1
3b ;
`M8w
6)Y^+DANW
iaAx
SuBuD
mWGt
5McSY
!nwX
[Gy#R
Tpb~
fs]hz
]: Oy)
IEnumerable
$-l#Dg7U
9vLH
ToStringHelper
fl_[pa
r Ov
G~1R
di Z
mTVrr
2rkN<O"+
ToStringInstanceHelper
qD%w
H'(4m7
S7cr)
=c_5
d6h$cMT
9ZKrN
'uFp
|+Yc
K?<_o
WcC~
cX8|
G =,d
GzPS
HCh$
GJ>a
8`/,
get_Name
\pS,
p*B1b_b
y!Jf
Wo.S3
c89L
s`xf
<}T
2N( F9n
y$q,j+
kfl=S'
NgG
fl:V
[.2
,a5T\y
i:7}R
=+E
$7!^
=WCm
|LQn
De$V
\V0M?
.tBp
)zJK?t
"`1
!) W
3"3j
L<S5[O
B _7W
<q?u-"$k
w<r+
sOns
"pc0
w7(3
UG~!W,
Z8*c!
~='Be
@/XK
-Tp}
IS0I5
E:2+
]^#E
I dF
/9r6
Jy
bY?]),
mHV9"o
!%;Qr
?PEM3}
1L-cp
R<c_/
cA,[
Gjt&
rb>4
$- s
GIn
91)Y
WXVm
q.r
XzE1u
bXVr
L|$9
6R(ZtZ
y1G
H# 1
y2al
&A[S;
xoerrr
lx*T
-hU@
YV-5
hT``
gJ&d^
E5/)
IgF w8
?6|r
3P#
rJ,<>f
w5_93
;R^'YW5
F^O(
^=73
#')Wl
I/:F,
I_ a
I\}0&
-=|3w
HY]`
7:VnW
t{jDN
E 1?
Ui (8XiR')d`7
.QaP
.0#.W
KNj&
get_GenerationEnvironment
!HP{
B6i%<U
yz(F
?Qa<
;\c1
@/5v
g(O.
{nCkR#
e\{
HA^U
MkK-T
@P(
cvjR
$:A}-
u eH
rG6
KcJF"
@KbN
get_Default
<p!
MZPz
&DI
p8;]
kernel32.dll
.+;Y
n7N9
|]!S
.$^b
}/N
o_Lo
M,Pu
7Z8|9
Ar'6
j;tl
CW2U
7AY2)
mc [
Q13k
7$F:
G>N[
3* $
fJ;#
ewVCM
c:,M[
b}y|GD$
?s5
?^(
4o0[l>
n%kT.bI_'.
=.MA
G3bo
; B#
-OWs "
~d{D
D[Mz
#zK:
e*R?
Py}S
`wR#&
0'PMK
Ws :
$]bW
PrW3
x^5
h#@<
;-H@u
}7Na
2t U;
X$n.
<4OtY
X5#a
SANs
=cdXl='
L":cr
YPd2
m'1Zss,
97U\{X
2@+
$VI!vAt
b_4(
J{B0
U^l]
QRB*h
3n;'
HO/oK
Q;jVE
4R+>6
%}8$
gqJ5}
Y-Q4\
*3 ]
5Rd;dx
:zd::
G gF
\jFy
[,h)
j-;1
X& 1
^QUqf\
^c{
v %b
@*5p
a %?t
|7PF
0I/$
bM:x
)Wfr
SZ$4
~? ]K
9%HA
a%{~nu|#d
8+e&
"]i (=T
^> H
urF7
zc QI
f{&K0>
n,7`kN
o?XP
d -KDNs
S#C+
27PQ
R[Kn
HzQ<hb
I.0|o
Rl?{B2
S!>=
YEQ
I:z:w
"SYt
!}(w
Je'`
H(Y6
5->Q
Mu;S
Szz
j;F#
bQ hA
z/XxA
{CIy
vhLv
EnRR
G$.4
zG%wK
sF%Wt
;mqFs
J]ch
6:]"
Y;mn
o`R%
<?}Nyv-(yf
1jQbd#
^}(ZD
HtyJEoE
CXD26s
j _d
n (b
*5).
Y e
dYxG
p:& Xz
GOV
VWcfn
~&b#
"(=
TLgl
7aj;
Form2
Form1
b1p
^E5e
Gw M
Ryv/
System.Globalization
3@^\
f _O
,I^;
j6im
!bxI
vVo;.!
hfGQ
l,
s;R^N
RK9|
1{Yd
pWcY"
\XJ}7
e.nXo
\\ (d
$:n`
v]N|
Fc
^St `
=IT:r
fa33
=h'7
H7lT
A/cE
ZCoB
3,_s
XaF9
F 2mh
!!bn
"PG*M
Q~Ja}
CreateInstance
9a(k
.V(~
uV~V?
-w4:
OYi ^6
f.DXk
`Nta
(=~N2
++6j2
,y*v
5R^*W
System.Collections
dFR)
Y"q|I
afN~PG=
;tuD
=Noz
_idDsK]]y
a "5
f.C
mVS
System.Runtime.Serialization
! `3
Environment
+WE
J7E+
p'*g
]c)yj
gz~c
M\:F
WBe1
iY(H
Hm+v
R]k'
/V R$u
+DHf
6zxl
h" (
get_EntryPoint
Of#<
Lk/}
e[2O
MC|7
`g-?E
)$a6
]S`\P/
=5$I
jj~,7
7Pkyg
T?Qq&
Xyq}
LcP*
sojq
Y++_Q
'fV4
mN8Y
[5d^
<gCo
1Pm{
S6B_
>>u3
TNo%2
.$3q
v`(
%:SxW
yxg*2
KRl3
~6/cl
P"AP
2*wJ?
P"AT
t8 i
M~K<
{s%-p
1sPT
F@o|@
7^(
7TeB
f3&"
2q((s
7_5I@
> |A
Gq#&
PB4Za
S:&X
r-I4
*+c&M
49&DNY
rO7\
xLz+
Intern
yj3g
ComponentResourceManager
cdw*iK
Oax+
?~UT
?3"Y
gOdV
&"ay
1S;e
hCUG$
eJ<-m
4#|$B*9
`l4m
_Tsb
Xj$#
;1Iz
\2&k&
z ;X
2u}'$q
.nm1
6pAh
alJ
cNT"
ry`vo| y
LXQ$
e Wba^
L E6 _~9
oc}4
`' L
wV<r
%^{HMK
0=R$
"P0S
#%')
IU{%`
NZCP
/&
kqMb
=hQm|
I=?[
U.m'
L|Qq
@vVY
$lb!
Q} !
TDlB
bpb1 d
q#EL
px,j
-biA
?qA6U
o?%y
>)x
-4)=
e"'E* N
`UYg
ru:SH
9Y4V
E<qaI+:sR%
s[Od
PvqP
}8.=Y
Yo@
hgb:
PSF@
X%.)
;PEa
~|:a.,
6xW>i?
0u?pCn
`Dw>`
13Svt
%uKa
m=Cw
=u.+Tt
xH;/
'UGk$
)Bp v
:p T
? G
WO;=2
SEh]2u
\_<>
5k__
YLr?.
l#XQ
ojR
E6|.
a**I
^"0S
UM^0
}GK$
w%G'
V4Xe&:}
MdeS8
$T~=
A4o 9
e?80\
cQ]Q
Ii)5S
-'ms
,mKE
b`;q
!uVA
Evfy
get_Length
eqsU-
\>y4
?\4g
Y3br
+]`t
Ea'i
DqL
!x] }
2atx!
=dcIG
v.0u
UrNp
7)Kkb
IEvidenceFactory
slb)
-rlF
asxw+
x"HY
2F|
INc4
4 w+
FPP(g
Q]t)W
.U\IEz
hMM\
{F}8
7e)
%pj
7%_M=
d)Rk
liR.
1Et 1B
$tUW
DE8AF79676FDDB60C1FA4569B52989FEE063F91E
=u;Z
zFL&ip
I5-T
aUdl^\1
5/yW
r&&
9+cF
v{r
d#*$;
j!NST
z6/A
59gJ
tl|5
[PAt
[*Dl
M(B#6
<O
AJCw
208$
zOn#
eRbx
zcq+[0
Mq1_
ZYb?
xc5h
|fv3<Qs
T6,A
JWsh
!P{S
F1H8
mK!uJ
A34K
bw19^
^36D
q\rt
*p=.
?T'b
?T'd
hs~o
qz#6
gg=[
jBb
set_Dock
xn8,
X[.TA
Nn"4^
Gg{!
k%PW
%kmi1
i={fBEG
|sx,
+c+Q
S^ub#1
!8Tp
E2'n!
W?SP2
B_OyR
<}QDr8
o i
;uZV}"k
wXRJ=a
Mf p
9;`,
Q!O4
D`jS
1Tn eUI
C>XV
'._D
`>OV
}3iR_P
;I,?
YjFho
'OL'
VZm#
`r<S
)qG_
A xX
M_ZF
&A.w
9 ej5
43i7
| 9k
x`SdN
7+#k?
bo)f
]1SE
14DR
$8*Pu
ha+,
kZbW
"9E@
j 3M
6q'N
uDt9
8fHq
d(3{IC
e R1
d)xEr
9x|3Q0
=KZl
,ZfV
ra"6
wl+ y
]VaI
2C;%
`zM#
#X"[3\3aA
9{@VlO
}@G O
P'^#
3j?Zl
i,"^AC2
Bk*
!}IY
6de#
g+<3
,ob%
[".V
q L^q x
%@C>
D Y
R_hk
eI R3k
g| n
`1]T
In^Q.
,;'j
>wV0<
{iWd
pHYs
4`HA
G5S)
m qO#
%_!N
mqjr(
M3@s
x];-
e [t1
!N#a
r29m
L1[\N
x~U%
pojBa
pxt``
g;F+
?Z|~G
%;Umi
f^L(
q 45
ag7L
cB_d
ZH(mvs +3
u%;u[
_B&
aw\h
2p%&|
c7K+-;
GetTypeFromHandle
3 UF
]*!=`
>NZ3w#
rP{Cc*;
R [Z
T?pI
\\,1
pnq!Ax
2Jm}U0
&Mm9(
?O?=>
>9: b
'kvtj
:Qe
_U!,2Ey<]
Etw<K
4U2i
#4tT%
g<mWO
|lAF
b}1:
w-mPt=S
S+ro
VQtz
@Nx\
p \3
<H(e"
UZ4l
Byte
ruNL
hf4;
8bLs
6_K|,\
Dispose
+tJ1
W\fM
\e+GY
5&oG7
b#v5
|A5a
Tqh5
ja!-
"mSv
@UBr&
mQ`pdY
DPhF
.,[C
dUNed
6QC
dAB
^0:C
kT!z> y
E-_~
JCd^
6 ]
s5&t
T)mk
y2,5
/yB.
|M)\
P"%L
P/(3
T\{tJZ2
_cW/
}m<U&
Nfz+
<w 5
c 3F
l\:3T
'8o_
6yri
8fU1
C_~&
AaKI
h]R(
7K|C
}(0&
`Cd
` /'
lC9/
OHu;
~O2v
g"`2e
q l#
get_Item
gDH
pyF1
tmEA
y~o;,
u8N<
: L<
r,ol]&
5S=:G
sa{o
z}]}
Sj6q
Q>8D
A} d%
c0"Bk
4|& q
t2EZC
&_at?
'S]:
m#QD3
$Ut).
L.M@
}1<#|
Ein
b3Y1
G[q]
`S9%mZ
ap#Ej
3up
YK<d
zj*#
=hba
:%2f
bH*y
WFYfY
_N*b
m^g\Lq
k!f_M
P ^u~
v,O_
B8Id
z+jyyH
`I]v
`uA|
jjC5K
*^tT
5])C
/Ptc
Q)zI(
Q686
Ez!q<
A8`zD
<p=
9fa6
N2q
nu;Wn
3Joc
!,0t
mOC9
U"Ht
up#>7
2_eQ
HVt-
PictureBoxSizeMode
7C&F
|ln6
\dVV
`m#M#J=
<w2a
y<"oL
rWg
Hr=G
Rly~_
=7h^
E!)b
BN ff
P|#VA
wkI
SrJK/v
nE68#
]Kso
SetData
SSJ9
c<kcz
406)~jI
w2\%
E]3f
R&h=
(K:i:Z
yUb7
u/w*'
H_nu
;22q
w|=`
%Cdc
>|2-
Y4qj
O4Xo.
sy{X
%F,D
|YjhZ
!ulu?X
aUro
E^{A
\|@D
q<K88S
>lX$
\ZjeE
h~_Q
QgM8
<I,
pVgY
Pic>r
F>vW
loj
Oiz%-$
,W(<
_A+i
VJVI8V
gie
O:GBQ
sxbxQ~J[
*+Rl
J8GW
m@t^wt
5W
I%'%h
&}cD$M
5Zz_
!y"1\
g.{}Y=
+|8*
x}@ Q:q
9B,T&
kwc
uz O
'RFa8
g`0sx7
k.JK
:6IPb
.c"x{U]
%f{V
[o#N;
ReadByte
*sVI
,lM q
>c@]
Z;6 nA
Jf4m
GkQ1Es E
tA!d
L@!g
/$ m|
[g-%
hcnl;
;{kT
E4
M^-B
-pDr
+\2s
4xE&
j)nTrnogGr
u8vl
@e});
8:&F
:*w/2
@~BO_
Jf4$
{n(O
0`sP
RDr-
Po48
q{$X)
f7C*B7
YkvL
:E4
c'Br
ZILS
e4`,
%b]6
Eq6vkz
15\b
weQ[
3[[6U
4 YK}Z
^sK/G
Vu)"8G
US5(6
MVNe
td3
+o3(
X:$]
1swR
-jO5bEo
=~ `
@Y9K
J~Zq
Im9F>X`
iM%
.!L=
MbWj
b&m<bEX
! osVPZ`
vmF4
>>lV
C< J
] > q
J>`B
9S-B
/`2?k
] BO
bQ&u%
Y[^V_|
d3YW
qFEJ
e; a`D
~q>k
mdIP
*mrS
@R9S
#p/fd
O^{`
~BCN
NG;8
EY "
]CYT&
PC"f
&HJ~
m?@k
/QPR
=o1p
*s2/W
xOCAH
(HD^
{c/%
UTs/C
\y~#);
l}Q>D
HJeN
w$h3
eaeT
,; *^Y
j3u6
TR]G
i!$V
AutoScaleMode
20|Y^g
z@Y)
"*NU
}{oz
`dn;v
nQ7P
L2m.
q#!g
gvg)
/\-%
MV(K
b@:\
5PK2
&h N
qz j
12T/
0Rh,[
t:Q#
]g{V
Ll(@
m|AZ
+#tb
jz c
A0um
{6 &
X Zc'
f/>eh
J#S"W
s!4)
6" \
~}olhq
"npV0
Zn{>
,.s5
8z'9
D/h_
~Hz%
JXR<
5Z;6
~x|p
g`U:
C9Oi=
Roi}r
g'p>
1~\9
)*n>
Lb~7oJ
[X}F
Pbih
LEBy
lI
EL%8
--cl
(xOi
N3H
f $
(%8!I
WH
@I[U
4ii Q
P0{0
moBIj
WozS
^Ei}
UU{w
1kCi
iGHbu
XbDv0
A,Q!
5@hi
x"1?EJh
4_+/i
opKG;Y
b p\
5<@<
@<$p
aLqr]H'
=>oI
$/Cb"
=jX-
o`q*
/fmmxK
!0cQ
7!mwe
flY4:<
Y7j~
$) 8
#+5w
RBq(
7k~M{
=>+fW
9<_y
kYyZ)
F{&=QA
Fr7J
3*l_
fU]9
4~++
D@Di,lE2
H]{I
qUqMz
4r$q
WF0w
x<Z,
l]_$
*$_i
0GIC
n(F({
] x.
lSOq
0~V:
@Y:HZL
BGXg
F$"1
:O xo
{0 m
:R{o
ACw7<4
,OB|
_nJ
'086
Pr7!tz
BVs-
?b2l
("\
3z%AA
jWAc?
cW={?
7}H5
NSo;
;1_]X{
Cic3]9^
2~v ^vjF
o_k:7
. ;Z>j
uH9LH37
Wqq
pU>5
Sp&=
]`,P
az"o
?Qfnh5
uZeC
UsJYEW
.Qg{
:EL!H
Hy`i
0 ~N,[B
0ci
"N%+
*YaRHA
<hGQ4
sbkWD
iHl
Z9!E
g-A
9 rE
\1pc
lK;}!
Q(~Y]
4XIRx@
'{@]
lIU:
qelS]H
K,Yf<
|rhY)
s+e$H
AppendLine
~ v%
+ ^o
%+{v
V&74
A&?V
)jK8&Zk
?OXWc
`J-m
*>8G'
%:sP
5>f:
(:"n0
<_h,5
. :P
*BGf
)FCZ
DT^0W
#i|O2
dzV
j{buB
q._h
#8^-
o{"S
BSJB
Ir?
j04z
1kN,z
n%Kp
Wl. )
?YB
V$w'~J
E*9m
t# :M
g OAh
\ YR
~/aNkT
wTIJ
I[*&,k
@ +*k+o
[{Yu
tw0R
N:[%o
E
?G9K
sPKLa
fV.O
w=~
Txf'Z
Fzg8r
Ag[
15j\
&>>m
xb W
6Gy>
Uw64
8Hat]
KZwW
`pt.a
d]SG
|7V]
j.o_
=kb!
2rD7
@vbW
Yx b
Y~z}
:pAI
C4WcHe
Reih
JK 3GC2>y
$hqm M(
jU1W
Ox+|
N;X2pthO
_s v
pKlLnQ\+
{g)^
B rgU
p&h@
7+Ov
QUu P
`3Y=n2
XHCf$
*]f`O
=6-Oe
I,H2
(~"g
]Byc
VU~&K*p
HW%S ?[kw
&%7V
L0'Y
KB :
,D3U)5
G8{@(BH
F8..
h4h{
|WiX
EMXC(
%Pru*
$bn:H
g]s\d`xY
-9E/G
y`cw
e0~l5 v}
zD-}
Oq@9
!y&>
tt^0
Jf[Z
\]X[vN
]F64}
*(\R
n=n#mJ
<U`.?
;3-]
=A|f+
_FB&C
?Jyw
;^~3
A!|8
ija1#
pju!
ZBHE{=D
{q Y
B\X;2
$?f^
V/wnAv
->A7
>l{!
je2H7
d!XG(
1w$G:r
dA76
"3wy
@?ut
se~0
}2 z
eG2u3`
G%L^
t="8
I3{71:U
"Jx8
sks5-X
W?[U
"]T}
Wb`c
%=(F
5rAJ
WN:j_L
bk)O
39-d.
W9!_
1x6G
C8hHo`
BHLQ
Zt<@LS`
VfoC4
Y7w9
\Mush
0^'`m
sLz PR
WT,Z
GK Aj 2
pV!\O
QJ+nE
6f4o,&
0(ur&Q
K ox
na 3
/y`EG
'A#,
/D#t
4 Rf=
I}"BM
RK8Y
'N$R
sSS!}
<:zX
`vTakFMA
K2xu
ynE J
CS5A
cG?n
jN\S/pt
IEND
-Ft\
"Qf {
".}W9y
GetObject
s]27[
],spi
Urq7
{ &}
Aq 40
@0} O
fqOeT5
`$yy
o-SgT
qh;v
z _D=W
(6 X
tL)}
0s2&
c"`s
2!~k
|)"g
;PYg!
uJ0s\
"`sl
T FiJ
U*K
$5h;
MrRc
E$ z
Lf|(:
`^|I?P
TN'I
{Ti5
(t5R
)oFt-
)_qt
"q2nI
a%hw
)g4V
mat$:;
DockStyle
210s
7['-
qrI]<
kV93
z?&SF
StringBuilder
XW Ir.7
mh{&LH
/]S"
2KZ6
_F"C6OG?.
+j^p]
8<2M
get_Errors
Q CI
(C_i
{o_c
T%-[
1W]D
jr4 61
K[RI
/XGW
f+F]
+,{K
T&bsY4
qZ-5yv
XY-;n
`z-}V )
$#J%y
2qC(
w;
./LsZ
s=x*
B;Kd
W &xgF
m4:[
SVn;h
,_dF
D{Mc
5pBO
m^M9c
X,/%
aU(E
v##' '[
n@/`
Md!0 H
pE%O
^DH:(
J15@
&Gqt1
.5To
_9x*
u&TU+
RF
\1_
]d*G
6G?)
i=^@I
{Utw
[)#@
p$0f
p":+
m&TN
2{[b
oLRTgN
KYQb'
!4S}
FormClosingEventArgs
zb~f=
FICL-
GetElementType
[<}a
CeP(
OlR#
m}RvY
E;,;
,c?F
VbCH9W
lE7z
$7B!
mxsD
-N3 #
N#N
"N'm
c3&nr
$H3V\
1:4kc
$8%@;
MjDQ
OmjD
{hYj7n
GL$N
E3Tl
ClearIndent
# fZ
f :j
d~.\
./i- H
=S4X
kGbA
ohTL
\f0]Q
_XWC
v /K4
\{G;
Z=@m
`!')/
$]"{
Hp~y
&(Ev0
@V0\o
"5$n
:3*
X0BC
687T
UM5m
xn]B
rBHNT%
uZ*-
:[?V.
uB2|
7.Wu
= 25
]2hO^
^X:q]
IQ^h&
XHQfd
LwDl
~ )>D
Hu_2J
+aKa@
[Ga<]
JU3Z
W pc
_"0Po4
!k$B
"Va$
OB|-
{wyz
CqAv
f+aq
7Q-"h,\
Gd`a>
IvsZA
~S~0
InitializeArray
X""M
M@g^b
P}Tu_7
l:@fAg
RJ@3
u]<
"T+xd)
R(|H
%kLr
K.6mI
Qsw a2
p~_ $
IzAg
EditorBrowsableAttribute
U-^(
|PS`
Z2*:dT
`S1_
- V9
^*BWZ
Ig~f@
HI`K
tv?P
Tc ~
HM?*~|
B+p+
((2dw
v.a
S$SD^
LR9rZ
8x.._
v6ty*
*ZX; (e
P _UJ
wS8i
734G<
\O)o Y
S_!'
G% su
Load
/}z*
<jwX4
W=mJ:
g}y&y
nj1Bb
"B#Q
{-lU
5j"I
'8NA
h pn
~V@#
0z(D
=IK
E_ z
}V V
Dictionary`2
)D_7
H<}/
}-R
Ht58
e(Y!KGz
y(HY
s?o3
6Y {bS
gh+n/
\*1AM
} 1o7
UyWlN
2-7$R
A_P2wW
ka;/
$UMe8J
~wsLh
mP1L~kz
-Wjg a
_=$Y0(
ISupportInitialize
iGb~8
YIMEe
hM5_w
!+ .
xk](c
JTF)
RuntimeHelpers
oMNU
j${3
)`:k
C-/b
&pKd|
IhExr]
nDmIk
Bbfa
bp1,f
Q>L8
PZ-C
k<I:
b/4W1;R
Q ?n
YfoXh
C*oY
oh$6
7=-=
.&<4
DSz(H
~RbQ
Qs F
cwApi8
Q~o
iT7{^
>G1<
Object
BPd[
u+l6^w
5@A-
<\QN
{wG^c
wLit
<!4n
%up;<4
i_Iz
M 0:
TxGs
NMb S
/ndQ>
O=Q q
textToAppend
hoGg
rTj
o?@b
q_/t_
.<.K
UF`"1
i0D']
}PZH
~{y(
PL KZ
]I>"
r=?0
Cl b
DZ<n
@!C.|
MethodInfo
q5%yn
g19?
{Q,H`
iN'
j&YS
<#d@
'8!|
M"b6:
|oK'
Tq*
j7y`/
OXMK
^ue
@ieT
Z0t.
9~"0
#U+
)fg&a
G?s+
XZd~
Bkqk
VLqX
XhV oh
94cg
jFdz
!inO
SOV-
5xR~?|
LKYZ
o";$K,W
@ Y+
v""R
J|a/
7aY_^
b|p~
tN1U
ZCQa
F D#s
,8C1
[v=
$k;p8
Exit
qk&{
#n_B
5RY$
+4FS
eIZ^
iLyW}
&'o]
(>yi
M5,{w
/SYt]
`hP\x
P n}
Hj$BJ
9:)-Y
L<\5
W>4r
NUXu1
?msL
gB!9V
\k Z
!S8l
Hvla
Yz}U
V@3{
iL@I
S77t
?(!6
L<W0
a/a'
{Z&#
M'0z
&a7S
3a)EL
'2e}
?%9/
# P:l
Hma0H2d>
c$Z&
2eC
-"TW<e
`u-"2
: T=
OIF1+
p:[v
:10K9
dbq0V@A
ec h
E`i
N3@t
QUr
C_Ylre
l#m}
~x/
dky|
`:.f
UsUpe
yO`Nx\'
System.Threading
4Eqd
G x
,=
zHB A
s w/9
kXM
9Y^&
V\`BeES
%T)/:^
i5O5"
^PJR
,^|"
+zfr
TK8'
;TQ
"J_|
$0,P
(oxC"M
C(T_
C.?z
[zl
/;w,
L#}5
?3i2>
-oOj
t$X9
ol`]
Nf@9
H N5
dLH%
[u%YY
set_TabStop
mO*yk>*9
o#iI
e)]O
[<DJ
1w X
|l' k
set_AutoSizeMode
alBu
+a,_
UcE5\
UJ%5TD
zI 8,
>Z7Q
M4-@
=*A(h
\^]OB
/Qqr
I0-1F
3T[0k
2x|iA
k+]J
"uUV|p
@_%f}
cq r
% ;eJ
%jUJ
O?:"
C.e5
&h(?
4e *
sd7*n;WG
oO&4
EndsWith
>TRX
S9a
s#owC
m]59-
8l=3
6TsP
( n#r
$raY
_gM]
Q E4
F4-+
Vf
9Flp
'p\Kd
X56D
!0 X
\?enN
Ik2E!
l S:
;i1 >
<cJ.
<?Xo+R
]5QKG|r
^pyYG
]:Ap
CJC#
';6
>Mx2
.Ih6$-
cDjO
k<P w
XNJB
/\}N-J
zt[j
`7`Oq
.<dO
1(WC
T<8Frs
u6l_
X" =
_[8"5
sU<=
~ErB
cH:Y
LKV ?
5@\(
5A=
If\2
7/>
knp
o PT6_
)CL$
7H5;P
=+7~
KxW6cm
&v7
9{E:2~-V
truO]:
emZ5@
XA0#
4EIe
[=<e
l!&p
j5f9
7^XL
f#)~
xp3B
6axo
O B-L
f_NB0
Irw"
79#b
(?"d
/=gX3
c)~?_9
zU?{
iGFvH1
n42D
w|7j
N~\#R
bf#N
;WyL
eMp-:
T@6Z"
Fa+j
nJ|J
0:Go9LC
X 7D ft
`P+>!
e qq0H
~m* o Pe/~
!:j3
f92.V
h1K]U
TluS
Zr 6
$Upo
(>_vCI
UO H
u( /
`YVd[
rB)g'
<cg
RemoveAt
KN8"
u@s4E
, tH{
System.Collections.Generic
Ll~6
q:~uo
x{=M
$~u
$fE\
System.Runtime.InteropServices
v3mwe3
O( W
awz
f._~A
]@w3@Q
;<1CZ
t7z+
dW)l
AF_V
H{yR
?@?m
Zg;l
p*9eI
^OOf
* wa
'\5Z'
6pAT
g< ),
)8{#e
Xnf8
wHI,
&f8>
:-p)
nHnu
SOh=f
{FN2
System.Runtime.CompilerServices
^&yr
e=oG
9ASM
?AhF
f!d+ L

|>r?f_h
L8hP
r%&\C
W5f
HKx+
NOZ
hoJz
~5[^C
pnUs
~X>p
7!L{
dQnF
),CQ
_Y0J~9K
L5N
?"q%
,wyW
PvT|'k
Sb>&
=@GS
/)_o9a
YGP`
Uvz^
set_FormatProvider
oo 4&
smJTx
[V-)
L,\P0
^3Qr
N_J2
;pTM
|\a_
NA_S
W=DW
{3=[
a$f$/
7Jip@[
!hx)
)&$
` L
}f{7
1 5`Di
PmTb
" C<
4Zn0
)?"z_
sB.5
\|~Y
!Gy*
AH5*
:Jfgm
CompressionMode
N'ZyGT
&g3z
P`0Wo
IQoI
f -t
ut|5
!2tn
< p,Z
niH!.M-
C0Za
4@*
-g]e
ri<\3Ps
f$"e1
|n2v=
[~A
5LEs
;%>/:
YEJb
$(`:[k>"3
$ pR
^'.5,V
Lil=
X0PwV~
JS:
3Cj6
i|NJ
NRE>k/__
#Ba5
O>:d
7p0
c\7+
V+@[
zG>=
qX#~
56!6[yZ
LG<TF
AI(0J1
BwC0
xgf
+R7|
[ YW9k
I5q{J
zl#8
3~U0
w}YY
GF<]
X sGI
get_CurrentIndent
-gT8
$lc
21 0+
#8G:P
6"g[
yLI
wh[2c
,E{Z
xw_
"xG)
nKrXVX
t 9Gkn
<mZ
*%d]S
7R}*o
."di?
c~{/
5Z6
'pk`rf?
_,dw
7k@m
92"Zz
<# jDx
YxjFxMuW
*h_U$
Rh:L
>h5|
GW.6X
5$2/Tk u
L.~ "Si
x L.
{9:k
eDh5
3IycH2m0}
5C<1
;R}-8
OH,{G
Zf;Plf
vOO.=
J@+
<.oxs']2
1r5Ce
ME1?EdG
a)mLpM
Z25z(%
b~\6p
'sfR=G $
$Yo:
+DK
m1hj
HMu+
V~#t
G(x_
$:JU
QW<i
b` *b
Ra(XQi
AxDR
Z'J
i/;+M
]l{I
>Dlp q
>;HV
z&TM
1783BA030420F6BEE6B097ECA175A0DA47736F77
5uu4f
{=\2T
&Olt
Oh?[k;
k vX
Encoding
,u<#
rpA:
UVQf!
v[Hua
QM~z
P_ZJW%S
.eK!
b XB
BA'-
]R,22M?q
IEnumerable`1
&7'
MHc4u
(+Wf
[viPY
get_Module
c 4@
9M>'bx
I\=v5
8RHS
'G r
_ K|1
9B8#
Format
W> R
^|HS
p"&h
|jcqWG]
<l1G.,
1/h&
s%{o
0m9IK)
/$D2
{n>!
]bQa
tx&"
{?XBw
L|00
;{6@L
D*,<
!4p\w
EGJy
$79Q
9i(K(!H
pK@5Sr
96&o
(7)r
k|.,K
|<9!>
G 0^-
.k[S
yz>?|^
lY%D
tTJ{
!KvZ'EvF
Komf
rVg`
\N$h
je%M
4jr-
rY}(
eb,;
C=p.`AI
Nu W
|. k
~AHF
)rZ,
aZ
ZFml n
@ xO
Y[UV2*Z
Y$j0
>g=j=
O"=?
_[i7[
ka&*
`pV3R
JxSr
naXW
@ZQv
q u D{
M*"l
W"z
.Qm_
}S<E
sL4|
Dus7
cA><:<
/.35q
&p]^
u ]d
%\R*
5 Ky
~k5D
)DRM
System.Drawing.Bitmap
0}1
Pot]
f0X7
Ld*\+
f |$
B'gU5S
P%#`
vO(A
yV FR
?U<+C
=Ap
'1e`,
(KKr
|[R8N$
R*kb\
:kiN#
Fw\K
J@9'B;w
/FQN
tnb3
QTX"7
bx,I0Kh]
B7 ?
pye;C
9DTg
x*,;%
h,N"
<j]b
Dw(8
_xn~
N?Q5
F@
xu0O
I?_"
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04_64 Seven04_64 VirtualBox 2018-04-03 12:16:55 2018-04-03 12:19:50 175

7 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04_64 Seven04_64 VirtualBox 2018-04-03 12:16:55 2018-04-03 12:19:50 175

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\abbb23455433.exe.config
C:\Users\Seven01\AppData\Local\Temp\abbb23455433.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\abbb23455433.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\abbb23455433.config
C:\Users\Seven01\AppData\Local\Temp\abbb23455433.INI
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Windows\Fonts\ahronbd.ttf
C:\Windows\Fonts\tahoma.ttf
C:\Windows\Fonts\msjh.ttf
C:\Windows\Fonts\msyh.ttf
C:\Windows\Fonts\malgun.ttf
C:\Windows\Fonts\micross.ttf
C:\Windows\Fonts\segoeui.ttf
C:\Windows\Fonts\staticcache.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.INI
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Users\Seven01\AppData\Local\Temp\abbb23455433.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Users\Seven01\AppData\Local\Temp\it-IT\mndgrhsz.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mndgrhsz.resources\mndgrhsz.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mndgrhsz.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mndgrhsz.resources\mndgrhsz.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Users\Seven01\AppData\Local\Temp\it\mndgrhsz.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\mndgrhsz.resources\mndgrhsz.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\mndgrhsz.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\mndgrhsz.resources\mndgrhsz.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.default
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.default
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.default
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2460.34843484
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Microsoft
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2460.34843484
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2460.34843515

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\abbb23455433.exe.config
C:\Users\Seven01\AppData\Local\Temp\abbb23455433.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Windows\Fonts\tahoma.ttf
C:\Windows\Fonts\msjh.ttf
C:\Windows\Fonts\msyh.ttf
C:\Windows\Fonts\malgun.ttf
C:\Windows\Fonts\micross.ttf
C:\Windows\Fonts\segoeui.ttf
C:\Windows\Fonts\staticcache.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll

Write Files

C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2460.34843484
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2460.34843484
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch

Delete Files

C:\Users\Seven01\AppData\Local\Temp\abbb23455433.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2460.34843484
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2460.34843484
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2460.34843515

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\abbb23455433.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e1dbe01\754d2dc0
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus\FontCachePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_CURRENT_USER\EUDC\1252
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.3.5.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7080f698\2196f656
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|abbb23455433.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|abbb23455433.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|abbb23455433.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7080f698\2273d723
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission\Xml
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Namespaces
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus\FontCachePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission\Xml
HKEY_CURRENT_USER\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

HKEY_CURRENT_USER\(Default)

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
kernel32.dll.GetFullPathNameW
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.VirtualProtect
kernel32.dll.GlobalMemoryStatusEx
uxtheme.dll.IsAppThemed
kernel32.dll.CreateActCtxA
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
user32.dll.RegisterWindowMessageW
user32.dll.GetSystemMetrics
user32.dll.AdjustWindowRectEx
kernel32.dll.GetCurrentProcess
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
kernel32.dll.GetCurrentActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
kernel32.dll.GetModuleHandleW
kernel32.dll.GetProcAddress
user32.dll.DefWindowProcW
gdi32.dll.GetStockObject
kernel32.dll.GetUserDefaultUILanguage
user32.dll.RegisterClassW
user32.dll.CreateWindowExW
user32.dll.SetWindowLongW
user32.dll.GetWindowLongW
user32.dll.CallWindowProcW
user32.dll.GetClientRect
user32.dll.GetWindowRect
user32.dll.GetParent
kernel32.dll.DeactivateActCtx
gdi32.dll.CreateCompatibleDC
kernel32.dll.GetSystemDefaultLCID
gdi32.dll.GetObjectW
user32.dll.GetDC
kernel32.dll.GetCurrentProcessId
kernel32.dll.FindAtomW
kernel32.dll.AddAtomW
mscoree.dll.LoadLibraryShim
mscoreei.dll.LoadLibraryShim
gdiplus.dll.GdiplusStartup
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipCreateFontFromLogfontW
kernel32.dll.RegOpenKeyExW
kernel32.dll.RegQueryInfoKeyA
kernel32.dll.RegCloseKey
kernel32.dll.RegCreateKeyExW
kernel32.dll.RegQueryValueExW
kernel32.dll.RegEnumValueW
kernel32.dll.RegQueryInfoKeyW
mscoree.dll.ND_RI2
mscoreei.dll.ND_RI2
mscoree.dll.ND_RU1
mscoreei.dll.ND_RU1
gdiplus.dll.GdipGetFontUnit
gdiplus.dll.GdipGetFontSize
gdiplus.dll.GdipGetFontStyle
gdiplus.dll.GdipGetFamily
user32.dll.ReleaseDC
gdiplus.dll.GdipCreateFromHDC
gdiplus.dll.GdipGetDpiY
gdiplus.dll.GdipGetFontHeight
gdiplus.dll.GdipGetEmHeight
gdiplus.dll.GdipGetLineSpacing
gdiplus.dll.GdipDeleteGraphics
gdiplus.dll.GdipCreateFont
gdiplus.dll.GdipDeleteFont
gdiplus.dll.GdipGetLogFontW
mscoree.dll.ND_WU1
mscoreei.dll.ND_WU1
gdi32.dll.CreateFontIndirectW
gdi32.dll.SelectObject
gdi32.dll.GetTextMetricsW
gdi32.dll.GetTextExtentPoint32W
gdi32.dll.DeleteDC
dwmapi.dll.DwmIsCompositionEnabled
user32.dll.SetWindowTextW
user32.dll.GetProcessWindowStation
user32.dll.GetUserObjectInformationA
kernel32.dll.CreateEventW
kernel32.dll.CloseHandle
kernel32.dll.SwitchToThread
kernel32.dll.SetConsoleCtrlHandler
user32.dll.GetClassInfoW
kernel32.dll.SetEvent
kernel32.dll.GetStartupInfoW
gdi32.dll.GetDeviceCaps
user32.dll.CreateIconFromResourceEx
user32.dll.MsgWaitForMultipleObjectsEx
user32.dll.SendMessageW
gdi32.dll.GetLayout
gdi32.dll.GdiRealizationInfo
gdi32.dll.FontIsLinked
gdi32.dll.GetTextFaceAliasW
gdi32.dll.GetFontAssocStatus
advapi32.dll.RegQueryValueExA
user32.dll.GetSystemMenu
user32.dll.GetWindowPlacement
user32.dll.EnableMenuItem
user32.dll.GetWindowTextLengthW
user32.dll.GetWindowTextW
user32.dll.SetWindowPos
user32.dll.RedrawWindow
user32.dll.ShowWindow
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.DeleteFileW
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
culture.dll.ConvertLangIdToCultureName
gdiplus.dll.GdipLoadImageFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageType
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipGetImageEncodersSize
kernel32.dll.LocalAlloc
gdiplus.dll.GdipGetImageEncoders
kernel32.dll.RtlMoveMemory
kernel32.dll.LocalFree
gdiplus.dll.GdipSaveImageToStream
oleaut32.dll.#8
oleaut32.dll.#9
oleaut32.dll.#10
gdiplus.dll.GdipCreateBitmapFromStream
gdiplus.dll.GdipBitmapLockBits
gdiplus.dll.GdipBitmapUnlockBits
gdiplus.dll.GdipDisposeImage
cryptsp.dll.CryptGetProvParam
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptSetKeyParam
cryptsp.dll.CryptDecrypt
cryptsp.dll.CryptEncrypt
cryptsp.dll.CryptDestroyKey
cryptsp.dll.CryptReleaseContext
user32.dll.PeekMessageW
user32.dll.TranslateMessage
user32.dll.DispatchMessageW
user32.dll.PostMessageW
advapi32.dll.RegSetValueExW
kernel32.dll.CreateProcessW
ntdll.dll.NtAlertResumeThread
ntdll.dll.NtGetContextThread
ntdll.dll.NtReadVirtualMemory
ntdll.dll.NtSetContextThread
ntdll.dll.NtWriteVirtualMemory
kernel32.dll.VirtualAllocEx
kernel32.dll.VirtualFreeEx
kernel32.dll.VirtualProtectEx
kernel32.dll.Wow64GetThreadContext
kernel32.dll.Wow64SetThreadContext
ntdll.dll.ZwUnmapViewOfSection
user32.dll.DestroyIcon
user32.dll.DestroyWindow
user32.dll.PostThreadMessageW
ole32.dll.OleInitialize
ole32.dll.CoRegisterMessageFilter
user32.dll.GetMessageA
user32.dll.EnumThreadWindows
user32.dll.SetClassLongW
user32.dll.UnregisterClassW
kernel32.dll.DeleteAtom
user32.dll.IsWindow
oleaut32.dll.#500
gdi32.dll.DeleteObject
ole32.dll.CoUninitialize
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
advapi32.dll.EventUnregister

Execute Commands

"C:\Users\Seven01\AppData\Local\Temp\abbb23455433.exe"

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-04-03 12:18:19

Detected family: #Ispy

TheSystem Itself @ 2018-04-03 12:28:02