MalScore
100/100
MalFamily
Ursu

bokf.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 35/65 Related 2643
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 296.00 KB (303104 bytes)
Compile time: 2018-05-31 18:32:40
MD5: 1c0983e3ea8fef075351004b0936d3a1
SHA1: 6e472e60ef44aac518e765d31a8e52442742a223
SHA256: a6d83194f725b2ae7a5fe19ddb8f2afb6a49955033821eb025dc70edc5de9496
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-01 13:57:03
Last submission: 2018-06-01 13:57:03
Filename detected: - bokf.exe (1)
URL file hosting
hXXp://gabsten.dedicated.co.za/sites/default/files/5/bokf.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-01 10:26:55 [35/65] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x46d4d 290816 4c8e498e2aa9c36ccff6e6d6f59b4274 4aa49ac973a285ded82bd6b9f2459689d18130a6
.rsrc 0x4a000 0x49a 4096 eb02d56c180c21034bfe22c87777e31f eaf99e9f7266586340c9718170d53406d53f4b6e
.reloc 0x4c000 0xc 4096 49e573d75c33826f8b6aff9a22a98f63 f03e36fddb4fe96b7c0cda2acd66222dc64671a7
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x4a054 1094 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2008-2017 Apowersoft Ltd. All rights reserved
Assembly Version: 1.1.5.1219
InternalName: Apowersoft Photo Viewer.exe
FileVersion: 1.1.5.1219
CompanyName: Apowersoft
LegalTrademarks: Apowersoft
Comments: Apowersoft Photo Viewer
ProductName: Apowersoft Photo Viewer
ProductVersion: 1.1.5.1219
FileDescription: Apowersoft Photo Viewer
Translation: 0x0000 0x04b0
OriginalFilename: Apowersoft Photo Viewer.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
System.Xml
FIle type: Library
USER32.dll
KERNEL32.dll
ODBCBCP.dll
GDI32.dll
mscoree.dll
IP Found
6.9.0.114
URL(s)
http://www.smartassembly.com/webservices/Reporting/L
http://www.smartassembly.com/webservices/UploadReportLogin/
http://www.smartassembly.com/webservices/Reporting/UploadReport2
http://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
http://sawebservice.red-gate.com/
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
String too long
<RSAKeyValue><Modulus>0bV1qZA+QL1yZh22yHehJLOzO0/4vUwm6LfL7VVn6Sso0kaOligyF9MvAC8ynG7N9Njfi8GI1/FGI6teSWvG7BgWXkQyC4nYg0Rlx+NWfracm7nOYUXG4TiJPoirh2vfMerfcxgbe7Skb4ftGEX9u6iIEMf1q1orI2K61tELzk8=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
Please wait while %AppName% is sending the report to %CompanyName% through the Internet.
SmartStackFrames
-
Powered by SmartAssembly
appdata
StackTrace
connectingFeedback
sendAnonymously
IEnumerable
SmartAssembly
DateTime
AssemblyIDs
SmartAssembly.Attributes.PoweredByAttribute
Cannot connect to webservice
ERR 2006: This template was not properly processed by SmartAssembly
@1B2c3D4sfg5F6g7H8
UploadReportLogin.asmx
v0.0.0.0 from 31/05/2018 16:32
We are sorry for the inconvenience.
InternalName
OSVersion
{logo}
K93oCu6gaxOwgopMMWs1ZicGYHIKRADt4j3TbNWeyp8=
Object
Failed to save the report.
StackFrame
I prefer to send this report &anonymously.
mscorlib
UnhandledExceptionReport
ExceptionStackTrace
fdssssssssssssssss
retrySending
Software\Wow6432Node\Red Gate\
Error reporting completed. Thank you.
Translation
More
Ignore this error and attempt to &continue.
LegalCopyright
%$&$'$*)+),).-/-0-HGIGJGMLNL
error16
Key
saencryptedreport
&Send Error Report
errorMessage
31bf3856ad364e35
Value
Length
True
Comments
Apowersoft Photo Viewer.exe
Debug
GetServerURL
Transferring report.
rosoft.NET\Framework\v2.0.50727\RegAsm.exe
continueSendReport
&Continue
</RSAKeyValue>"
ditto
Cet6Xe47iuuUqL/f4Go16Q==
preparingFeedback
continueButton
Apowersoft Photo Viewer
Rank
&Save Report
1.1.5.1219
default
.ico
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
dontSendReport
debug
Shutdown
fsdy]
TotalFramesCount
SmartAssembly Exception Report|*.saencryptedreport|All files|*.*
ERR 2006: {0} @ 0x{1:x4}
dsfs
VarFileInfo
If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.
Workstation
dsfsddfD
TypeNames
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
labelEmail
FileName
Email
\Microsoft\Windows\
Name
To help improve the software you use, %CompanyName% is interested in learning more about this error. We have created a report about the error for you to send to us.
ByRef
network
poweredBy1
Copyright
SmartAssembly.exe
Method
Preparing the error report.
This
{0} Fatal Error
UNICODE
SystemInformation
{data}
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
email
%AppName% attempted to perform an operation not allowed by the security policy. To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
6.9.0.114
SHA1
{0} cannot initialize itself because some permissions are not granted.
UnhandledException.Objects[{0}]
DoNotCaptureAttribute
{5B8BAA4A-6002-4C94-BAAA-FD015F287031}
Assemblies
error
cancelSending
SOFTWARE\RedGate\SmartAssembly
RemovedFrames
CodeBase
"<RSAKeyValue>
SmartAssembly.SmartExceptionsCore
ReportID
2008-2017 Apowersoft Ltd. All rights reserved
&Email address:
ERR 2001:
FullName
UploadReport2
ERR 2003:
&Cancel
CustomProperty
ASCII
current
LegalTrademarks
ProductName
panelInformation
8$U
AnonymousID
Static
Powered by
Message
Null
Pointer
/AddExceptionReport "
transferingFeedback
d98c1dd4-008f-04b2-e980-0998ecf8427e
Save as &File
Could not deserialize the obect
UserID
X64
4axrt5biN/muKPbmlwY3+w==
pleaseTellTitle
You probably try to launch {0} in a partial-trust situation. It's usually the case when the application is hosted on a network share.
Reporting.asmx
%AppName% has encountered a problem.
ProductVersion
CGkmgzWpxZs9atUtI1mgyUcahF6FgQ6wtfTka4pJSGE=
__base
&Don't Send
PreviousException
Assembly
TypeName
DoNotCaptureFieldsAttribute
UnhandledException
OriginalFilename
&Retry
ExceptionReportingForm
System.Windows.Application
saveAsFile
Data
<RSAKeyValue><Modulus>0bV1qZA+QL1yZh22yHehJLOzO0/4vUwm6LfL7VVn6Sso0kaOligyF9MvAC8ynG7N9Njfi8GI1/FGI6teSWvG7BgWXkQyC4nYg0Rlx+NWfracm7nOYUXG4TiJPoirh2vfMerfcxgbe7Skb4ftGEX9u6iIEMf1q1orI2K61tELzk8=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
&OK
Count
headerControl1
headerControl2
headerControl3
To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
Connecting to server.
&Quit
AttachedFiles
ServerR2
N/A
8D7qilzN8+CSpLPqxEf66kxDdsJ3R9lyp2tAQtP2EEs=
ERR 2004:
SecurityExceptionForm
TtvSnOsbT5ucO/89V4OscA==
(0x
Path
Please send the Exception Report to {0} Support Team.
UnhandledException.ILOffset
Lqs9z8whpWlhgTohs/FEFA==
Software\Red Gate\
Assembly Version
PresentationFramework,
temp
CompanyName
FfpDaj2Qbx/USBKNveGrhZHVczKEHP+3vkZr7xReaoU=
Objects
#rundfdsl32 .exe#
ggggggggggggdfgdfh
panelSending
bmY0GvtxvNav7Y1b0myYXg==
ILOffset
ERR 2002:
*** Information not reported for security reasons ***
lqBGV/jkLhpfgF1ymGkEYKe913eXXk/TxV8+ERpGqG0=
TypeDefID
\Mic
ObjectDef
ERR
System.String
UnhandledException.MethodID
Exception
%AppName% attempted to perform an operation not allowed by the security policy.
Apowersoft
Current
Field
panelEmail
poweredBy
If you want to be contacted by %CompanyName% regarding this error, please provide your e-mail address. This information will not be used for any other purpose.
waitSendingReport
MethodID
continueCheckBox
Security Exception
windir
completedFeedback
ERR 2005: The 128-bit encryption is not available on this computer. You need to install the High Encryption Pack in order to use the reporting feature.
NameID
FileVersion
quitButton
VS_VERSION_INFO
Error
Do you want to be contacted by %CompanyName% regarding this problem?
http://sawebservice.red-gate.com/
CustomProperties
StringFileInfo
pleaseTellMessage
saveReport
label3
:!K1I
ServicePack
ExceptionStackDepth
Save an Exception Report
%AppName%
000004b0
(0x
gdfsdfdshshsgsdg
dsgfdg
FileDescription
warning16
UnhandledException.Objects.Length
data
%CompanyName%
Microsoft Sans Serif
UnhandledException.ExceptionStackDepth
.png
AssemblyID
Start Menu\Programs\Startup\
sendReport
OSPlatformID
AttachedFile
dfdfdsf
Please tell %CompanyName% about this problem.
You need to run {0} in full-trust, or at least grant it the UnmanagedCode security permission.
NETVersion
SmartAssembly.SmartExceptionsCore.Resources.
JiB0
wO:
,H&&&
%O%O
OO)l
%O%L
7O<N
OEOOO;r
.QOOt
ExceptionStackDepth
CoOO|
%O%Y
FNO'KMNO
,NO%O&R
v8]0}~R
R{{T
s&:
*O#O
*OL&h
SystemPens
OO)v
Int32
%O%O'
5B t
AFhw
;Q%O%O
;Q%O%N
s'9c
4]OO
<OOO
'HO@O
R\${
jtjI{p
NoLN@@
@(N\
'KNLN
|ROO
=OOO
OO%L$G
O%N
$:Vs
o[ys
vlV9
WkO@
OO;_
er&r&4@
wO:F
%T&N
get_Height
W32%
7,
u]NO
TBOO
OO;F
|bv@
OO%L$^
D;\u
DateTime
&OLN&
,%&+
6S:?.
%O%Z
$@%O
HONO
teNL
,%&&
Substring
OO%%
v"Z'
9[&A
3zv&
GetGetMethod
/1W(
GBE
_9Kv
IOOOO
5lOO
AZQ9EP@
get_IsByRef
get_Controls
Kt*OIC
P Tq,
T%O%O%O
Version
OO'S
KFNO&J
zMOOv
KFNO&H
05{c
|EOL
CryptoStream
NO&K
get_ModuleVersionId
D=%=
%F|w
s O:
<|5[Z50
&OHN@
KLNJ
<O<O
%O%V
;HDZ
E[&B
;W&J
HCOO
,?`>
]v0#F(
/oOLN:
3LO:E
9D w
'GOO
C%O%O
eEl R
mO O
_=XrO[OO?^%M
'O8N
Y,z#
WLOO
COOO@
C%O%\
: e1
PtrToStructure
j=`i
DNOO
ControlStyles
.DNL
<O*O
RqFv'
Marshal
W6@O%c
-,LKd
5KF~
%OOL
^^^:E
OO'"
4N@O
wDOOO
NOOv
N}gR
D&-
OMJO
Oju=
nog&
user32.dll
@O%O%O%O
op_Explicit
RuntimeFieldHandle
JHYp
MOO%O'
:G&^
System.Security
Q3@i
NOL}
sMOL
:G&F
KMOO)v
vF;X
pwlA
pMNO&N
h8RRw
NOLr
NOLN
/N,O
)o)=
*lOLA
s2&Y
j0OOL
@O';<OO
,3&&
-?OO%
%C%J
rB.NB
GCHandleType
;tNO
Tt BF
MS[Wy\:
EndInvoke
3^K|@
F>_P>
&N%M
&N%L
dY3<
v`7i
*jr:'
9[v<J5_v?G:Dv?C:I
K:@v
?`OO
j?5"
NOL(
WriteElementString
?.?=)
!LN*O%H
.$XE
bN V
get_IsValueType
TR n
NOL8
,/&&
/wG !
.M3J
[lN@MOOO%K
@|8^{
XwrJPQ1CM
EnableVisualStyles
T1r-U
1SO8
~NOO&N%H
g6C%f%L
[n_p
wZnS
NOOL
O%N
Abort
&O"O
:^%O%O
{z}
set_MinimizeBox
~N9Bx
|!%O%O
KGOO
shL3
?O=O
B@OkN
.L<O
!p6]
O"PT
NOOu0{C
:ZM6
7? Y
%H$[
get_ControlLightLight
XiNO
NLN@;~
KEOO%L
0|O@
Joj,
c4MeQ
;DOO:E
Y* +
]>"A_
HOO:F
~NO%O
(ObN
&+/
KEOO%e
Format
OOL$
hrLNOO:_
=[O;9
7;JF
,go"
Y{19
2D$D'O_OO'OONO%O
NOOO|
51K|
:\sb;Ws
_LN%L
:G&O%A
7DOO'
HlL9Z
r L;
^O@L G
H*_"Y
AppDomain
I}OOO
;O*L
KOO'i
GetMethod
w:W
k j
3pQc
[t:_>
;OOO)
-,& o
get_CurrentDomain
ThreadExceptionEventArgs
;O*O
GNO8G
05,=0&p
~?[I&
sdfgdsfg
Z{]v2
PADPADP
H{wg/
get_CanFocus
sDO:
`LOL
N`OO
OO;G
PaintEventArgs
"O*O
yWOO
OpenSubKey
eMbc
0KO;u
O&O
LN%L$U
LN%L$S
DDOL
@OOO
_%N%Q
GEOOKOOO
&Z1b3*RTOL
6\OO
0LOOq
FromBase64String
z$NL$@%S
o" +*aBBEhNOLN@OO
wO;P
Cv_:[v
*OOO
oNO;^
oNO;]
ToByte
"jV0
9F*_
B#OO
[PNO
L)N[W
d~BJZ
z OO
'NOO
@b<9
RELN
5T?Em'
j%O%O
Path
set_Text
+8apnn
[CE4H
\b<R
c8OO
NN@Od
oNO:]
sPO:
soLNOLN@
ESNO
UTF8Encoding
coLN
S 9jR
t8<t
bL?H
p~}|
#Blob
Control
|j:U%I
-(&&
wa;E
;T$Y
ww@f#
p*OL
COOJ9^
get_Year
;Rs ;Ks
B-G%
G9Gy
,c&&&
%o&N
!@Ob
*\C#
G9Gv
; NO
kEOL
kEOO
60?\
, &*(
=O-L
GetILOffset
:E t
$@%J
@OO;B
]u1P
BindingFlags
?lNO
6k1c
IDictionary
Type
<O-N
,S&r
;Y%r
ORw\!
JwVo&
?oLN
NMOO
=+G
8MOO
IEnumerable
aO&O
aO&L
F 8;
s^O:
J{Cq
GEOLfOLN
iNLN
D;Iv
GMOO
u>>g
WNO%s
%k%O
@OO)
A DN
'Z@O
=OOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLX
CSOO
OEOOL;K
(NOO
#DOOO;F
Cursor
e:LN
LuKA:_
^WiO<)
@*OO
*O"N
Ly;O
CQOO
$E DG/ A
:[%_
5OOO
aSNO
K_LN
%^%O
^W /
NeutralResourcesLanguageAttribute
get_ExecutablePath
OOUr
Char
)N!L
pppppp
cN@
L;VA"9
(NO|
=OOO)
^\1K
KELN
C:J|
dK*a?m
;_s`;C
get_Name
GetValue
Bd%O&N
ib+q
?fNO
;oOONOOO
[%O%O%O&N
*y%O
)VO@
&r$2
HLNL
w+@F
%JVk
IDATx^
GetSystemMetrics
QOO%Z
M:Jv
t#{g
9Hr.>g
G%O%D
k`Kd
wP~5]w
)N=L
th+1I
/ 8K
._Sr
lIOO
:lw0G:Fv?C@
^JOO
w !
5#OO
\;jl\?
#N'O
'O-E_>
O_OO
>1>6E
E@OO;A%O%^
@OO)l
wCOO
Bv\;Ov
#GN@
n^$@
_&F%O
NOOv1w@
1F*J%W
LNOLN@OOOOOOOOOOOOLNOLN@OOOOOO
)NOL
Wt1C=
qO]A2j
&ae
MOOO NO\N@OMOOJONOOOOOINNLN@OOO
^:Ew
^J!Lf
M&N*O%O
<O?N
'LNLN
Ftow
/^OO
dae(
k$OO
ToolTip
T%O%O
kernel32.Dll
+\Z|^U
LLNO
*.#)
0dNO
, &&
H_OO
QvKe8
RegistryKey
uo:V
'KOL
1cO;:
DialogResult
Dwpkm
MNO:o
KOO%O&R
'AKOO
z8a{
vJF)
MHy@
ReferenceEquals
!$OO
.text
List`1
{@N@
# 8T
:G%:
:G%;
GetString
`X'pu
set_Proxy
KFNO&N
feNO
j]Yw7
Component
Lv_:\v
ExtractIconEx
GetObject
sCOO
8@Ts
w3 OO
g/ ?
COO8p
o[% M%
K:Uv
E}OO
:G%_
Convert
2NHTz
|@u;
dKMk
&O!O
Button
:G%N&C
]b]N
C' !
System.Configuration
g6@O
FlushFinalBlock
:G%M
kIOO
OO9u
a'WyE8
StreamingContext
lQOO
8N/O
:G%C
$L'O
\^^^:C
@OO'd
SmartAssembly.Attributes
- &&&&&
'VMMO
KnMN
X v?]
Y:b{
2C;Z
7SO;_
\<M4
PerformLayout
|#5|
8O&O
j(dO
OLN
:G%N&p
/N/O
-'&&&r (
0&OLN@OO
X=OO%O%X
StackTrace
e!-G
RNOJOOO
koOO
ySwL7
%K%V
:na+
%K%P
UH6k
KOO
i"~B
6 K9
3~XY
,F,$
/KOL
v{eW2
- &&*(
CipherMode
NZS)
F8`8
8 NV
J(f&#Mc$
ulR`4
ODBCBCP.dll
SmartStackFrame
A$R@
DrT}
nqz;
KEOO8o
hDOL
o%O%O
WriteEndDocument
&f%L
,O@OO%N
$#"!
GetFrame
A%I$X
serverUrl
N_LN2
7GAN
voLN@;p
GBOO
?:&
Z[NO
System.Net
_9krO[OO<R
[9K|
SetBounds
:|R
- &&*o
KCH$
}]26X
`.rsrc
8?[V
OnTextChanged
k_OO:b%O
OOO:
L:H
CZH2Fv
@00&
CreateDecryptor
get_Default
kNO$
0$O:
OO)vG:C
7RNO
v%O%O
StackFrame
lLOO
kernel32.dll
'GOL
'OoOO
jX}
b#/8
'O_OO
lBOL
css&%e
l@oO
2+h:
Enumerator
P@O%K
tO;e
y%O@
?O!O
8-<_2;&
OBOO%O
2OO
Y3`*
knh\
Dga F
~NLN
C%KJOONO'O_OL
ONN@
Jbx@
LNO&N*N
DD@O
OO9]
R NO
uZw=B
/Lz
Flush
:@$[
b&P]
mOOO
;Ssb;Ws
EQ~M
=@;O
, Lu
. \(e
`4 B
{>|S
Hw_9]y
add_ThreadException
Lj!:
1GL:[
OV^^^
-O O
:IOO
2s0?
'LLOL
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
'INNO
5G%O%Z
Focus
'HN@
COOL;H
8{'/
kLOO
BOL$R
CWOO
0SO;~%O
aOJG
RCOO
NLN
get_IsPointer
OO%L
InBOO
Bj&a
O_LN
OO%K
L;GK
PlatformID
OO%G
O}<A}
OO%A
%'F!
{ FK
wDOO|
IOOO
Rrk_OO:Q
NAOO3
1kO;u
.MLNPOOO
NO*wH:
PictureBoxSizeMode
eu@T`
)z
V%M$@
g~NO
C:Ev
^5Jv
]NOO
LWOOO
@dUyn
t+OO
WebRequest
pAg K
/O9O
^IV>
hMOL
c~lLT
GetProcAddress
OO%p
*|"]
gFN@
H;Wu
;^OO
gFNO
-@&r (
$\C
7WONOL;
=O.O
GetBytes
Y,jG
VJf_
d=Q
Dv _:T
6mDbj
A:8[
*O7O
Process
S*Sj`.
tS?'
'O!N
K 8]
OO'KNOO
Kv_:\v
%f%O
OnPaint
- &&*oT
SmartAssembly.SmartExceptionsCore.Resources.ok.png
8_OL
_%K%Z
OO%1
Ugoq0
OO%3
c)U{
Btr
$ ^G
aO%L
`NOO
&++++++++++(x
kernel32
[sMN
yYju
get_Top
Write
"g_Nb
0/NO
H 06
#O#O)
Mw#'
FDNO
NRTFJrbf
@OO@
8}OO
get_Assembly
Ur#~Qz
wn>Jj
AnchorStyles
:*Dr
@O%A
System.Xml
JS}{
*!NO
UInt16
3#Fh Y
%-&%-%1- o
^)ctZ
a Q
*y.K![]
N NO
N_(S!3
MeasureString
MySettings
YkNO
$v&~
)6g7aL
fELN(
*Z1C
3oMN
DgUf
i]Wb
K:Bw
DrawText
)NoO
1+L:J
xEOL
-:&&
+NLu
7,LNk
get_ClientSize
@OO:
+x7Z%2@
5^*Z}
MOOMOOOOLNML
& .He
)N<L
OLN
Invoke
OO~j
xoO
SoapDocumentMethodAttribute
M:Iw
System.IO
)8?
WrapNonExceptionThrows
get_Now
=+P9
AsymmetricAlgorithm
k_t;
I@O)
3PO@
*&c.2
OOOAP
$QBMO
!.G4@
+] ,
ujTO
oAOO
GLN@
N@O'IMOO
1_L;S
1+ 5
oZ M
OO;K|
EeP'e
Qi^]TKGFF9F9x
wMCc
3:2rLT
wyOO
@XOL
&&&* +
E BI
CM C%K
kroB
:D$L
OOd G
]$O&N
get_IsStatic
OLLN
Lt)NA@
%{$O
Cv_9]v
<Iuq
ELNO
QK4Ts
xN:k
:2_g/
xxxxxxyxyxxx
SEOO
xN:g
2D$N
1_O8
OOOJ
&J1>`
(X)n[
HEOO
STAThreadAttribute
1_O@
jc?s@;H
n|M`lN
0 wo
;DOOv
L(O
Z) *(@
n\}(
jMNO
QG ,
-*&&&&
;GNO>
:Jw N;
)*\"h
MuG6
9]Z
t`:I
.22X
xZAO|
J9L']QE
1W+D
OOOs @
zD,a
0NOO
:_%O%L
#NOO'LNOO
2GLA
MOO%H&O|N@
-g&+
3DOO%}
yu5bL
zjtjt
K91&
|f;LN
soOONOOO
System
EventArgs
6GBL
N@Ov:
Application
L]b91
84&rc
,(+)
HL C%N
VOO'
H:\v
svO:
jNLN
gffffffdhs3434.My
;vsT
<sK1%
w>I)
!@MN
;KOO
GLN|
7DLN
NNNN
oVjn
OEOONOOO
OEOONOOL
%J,|
=O=O
LN*N
LN*O
_(p1
,3~.
`(i(
,)~.
;()vq;-
:R'v
YNO@
| vf
KELN%L
XBOOO; %O
MG52
AO%O%N
N3nd
s]NO
*AdZ
>!OO
_OH
_OO
lE+qg
jb.`~
1{LA
=O?N
XNOO
MethodBase
#Strings
%m$@
9zk }
{MNO
System.Collections
Image
<NOL
.OOO
XNO|
)kNO
9\)uD4G
:]%O%O
^SNL
WOOO
WOOL
%E%7%?
G9Av
$^OO
2}Xd
NOLNN2
?7 y
@d(d
D)X )
8n#v
O7O)
Environment
qNODN6G
6jNOv
COOLA
@a1@e;[
@O;_
DOOO;F
pT/6
.:;')
OOO%O
OOLNt
Yda#
^#u#
cdB6+
JxTq
?kOO
OnFontChanged
:#OOO
- 4E
#[ a
Q^,!J
QmE~
1XN@
SLOO
{WNO
^!}rG
W&O*O
N@vJx
BLD@)
DGeAr
1kO;
%T#(h
OOOOOOLN
7O)N)
w v_3
G'O_OO
oHy^
YC&-U
@BOL
OOOv:
)OOO)
2_O;
bOOO
GEOO&N
VC1v
YNO%p
oNO9_
_`9&=
pO:l
iKLN
EN@O;@)
HO C&O
DOOO;R
OLN@OOOOOOOOOOOO
AOO%M
K9@y
get_Position
System.Diagnostics
GetEnvironmentVariable
K9@v
GetType
set_StartPosition
COOL:
u D+
=SK@
'KNOO
;O8O
DOOO;
MOOs
&N%H
>eOO
$$$$!$!!!
)w F<2
t~;S
p9v#
ZOOHOOO
:f,=
;%NO%G%J
G|*T
OMNOC
q,@O%O
sFep
K:Ev
Mh~S
LN%M
FB$$J
1bg_
KoOOL;T
oLNO*
Activator
%O%N
Fn!a
,v&&&&&
H;Xv
$=p/
1tN*N@
$lBOO
*) y
>f,/
ZOOO;A
KMOO
ZOOO;C
E NO%O
hDOLN5U%O%Y
OLN@;b
LG@O
s6O9
&1u :`
pvK^
ZOLN;F
1oO:S
OpenWrite
HL C%K
set_Anchor
&u !
set_TopMost
LLADNEOO
$U%O
^KLN
Qqr
<opq>lV
D Tz
"*Ad
ZLN@:A
MOOt
cDOO
pIDATx
DLN@;
pr]"
9Q*K%Y
ProjectData
HL \
OLNOC
1HJ5
&vS :
set_Location
@L@O
Color
G@OO;s)
fshNOO:d
:B t
dNNO
Bfx^}
kWBKCP
'=UY
|_" iP
>N!O
KrO[OO9E
set_BackColor
qNOO
SetClip
+oNO
'SLML
2WJ;o
\rzr
{1\|
IPNOL
szOO
Txjk_
get_UTF8
{:[9
&O=O
:G:g
get_Width
* 8p
L<%_
t\',
. C H L ] p }
dUO'E
K:Wu
DNOMN@O
WQ~g
?DOO
vDLNs
K6e
ooOO
licenseID
^cpj
.>ry
CCOO
user32
AH D b
SystemColors
;G&G(GMOO
lfj}
}DAO
tK@O
LN&vN:C
PJA_([
7mNO
2@(0
{oNO
zOFO)
I{ ]
KEOO&N
<<OL
-/ic
o"_
shell32
*KOOQ9Uv
get_ManifestModule
)u 9
SmartAssembly.SmartExceptionsCore.Resources.data.png
LN*C
POO%O&O
q}&'}
-3(3
NO
SaveFileDialog
8O O
[OLN4C
DOOO;V&N
BitConverter
UnhandledExceptionEventArgs
E<KK
0ANO
Rm@J
bcp_colfmt
?*!
!OL$q
KIOJ
(KOO
n=^+\
.O"O
-%&
:\v<J:Bw0G:Fv?C@
Label
KoOONOOL}
MOO_LNOLN@OOOOOOOOoOO/LNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOO
B@O@
;D
ANO*
^"HwZ
UGTF3:h8
CNNO
\%OO
&&&*
get_Second
-%&&
|MOL
MA -R
Form
^hnZ"
RHLN
&&&&
aO&E
;+NO%p
bN5L
,O+*
DOO'
$p#AZ
COO'
Gz8m
GetAssemblies
Xq }
WOLN
KOOOO
a2OO
h3OL
CommonDialog
wN4\
V0e[
+yED
!@(O
KFN@
^bxx
RBvC
a<?RKN
OOOdH
nO<O
sYO:
H$L C)
Delegate
AssemblyName
DOOL
2PbO
COOO
Kq0>
%O\
COOL
LYOO
&I0BW
'OOO
get_Visible
ALOO
#pP{
dbdl
}FQ3
D&sY
Seek
'MOO
woOONOOL
V0OO
&E%F
;N3O)
X$2+
OnClosing
&NO%K$N
4Q8>.
G%N%U
Y%$g
#7ek
<d-W
_X[
LMOO
=L7O
J:Tw
dB@O
VOsA;}
I i'\
OP t-
LastIndexOf
&OlN@
7 &
Os 2Fs
\pe5
Enum
vFNL
#.zf
&NL}
CopyArray
*L<O
KEOO%J
*L<@
get_Day
(gOO
L(A9
GetTypes
set_Name
{hN@
0LO;W%Y
3G&N*L
2n@;
Default
KEOO%O
uHEz!
IOL:P%}
CkfBa
+O=O
+COO
k-NO%
MNOL
kLNOL
DzX<
+
rQ01
=O@%I
E"O@
!OO%s
P7@D
get_Length
NNOO
w0G:Fv?C@
su8Ds
1#(
ILN@O
tN8D
MNOu
_%O%[
DESCryptoServiceProvider
!h`o
fxDO9
:UNL
ILOffset
<?2
BOOOd
NRNO
[KOO
%N%O%O%O&N
I+OOO
*;l]s
qVH $
Kr9NOO8/
Y(q^GI
mNO%O
KoOOLA
6LOO
SUr ;
{||yyyy
OOO%O%N
vMLN
GetSystemInfo
Contains
K:Wv
ResumeLayout
- %k
Tgn+
8dO;x
lBvs
1/L;
NOO
NAOO<SL
rCnk
[BOOL:
Oxf &
Ak\Xx
*TOL
B@O%O)
'OOO)
=zs58~s
ValueType
_9I,
COO%O&N
'@=O
System.CodeDom.Compiler
set_TabStop
[rKOO
KCNO
, d0
^*O%[
"VYV
XoNL
CLN@;s%N%O
{DOO
HLN4V
0OOL
W%N%L
ToLower
W%N%O
R ".
=O*O
=O L
w2LN
h:OL
^:H(
@N@%O
gDLN
!NR*
get_Count
I$bC
data
ZV|Gbe
MOOZOOO
Trim
nLN@
GetTempFileName
,GA]1
EJNO
/NOOO
"_|bn
' 8l
tOOO
GoOOO@
KgbF@t
H:Fv
@<%&
ButtonBase
OONN
vOOO
\&$Q
'N!L
k* B{C\
)O!O
GELNKLN@
Namespace3http://www.smartassembly.com/webservices/Reporting/L
Sc8><A
:\&D*O%O
NMOOO@
m~N@
:@$J
iXyx
AcNO
GetField
fI"w
:P&X
`OO@
O!O
kqNO
SmartAssembly.SmartExceptionsCore.Resources.current.png
%i&N
NO&q
c0dQ
"uF
7cOO
EtY72
[OLI5K|
!."*
S@U\
*GOL
/Ic "%
+l1W
uOFO)
FormBorderStyle
@NOO)@
N)lX
O[OO<_
#O#N
UInt32
ToInt32
CXOO
IL C%K
SerializationInfo
ldNL
@oOO;Gv
DNO'KNOO
WebClientProtocol
+Os
nW{H))
^'MN_O
get_Version
Zt qX
@O ]RS{
set_Dock
OO%O%[
[EOO
$O!O
ToString
L;J t
NL$P
-3rY
set_Timeout
%Y%O
P"NL
\yry
D?tf
-2&
Utils
LN@O:B
GetWebRequest
_9Gv
Cursors
#N L
7oOO
FMLN
cH cw
('L$
_9Gy
\KOO
OOLN@
&&&*o
su8Kp
-qB3
e9{;:
^%O%L
ClearProjectError
HL G%K
Split
ec(6
{NO&N*N
XGT*
2[I:H
ONl +
x$A
j0X`
4N*L(
gLOO
TQDd
s>B
nOLN5
iwC2%0
CreateGraphics
wSJz-
HX->
GWF8.9888886x
1sO:S
Qz^>
ICryptoTransform
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
TrDw
fNOO
&VNL@
GetObjectData
-OO|
&&&*(
;X&@NOO
[LOO
F%H$h
NOOL:]
COO%[
a?7d
Ue(<
8 <0
COO%^
fd(:3z_
:NO&@
HOOO;D%O
ShowDialog
/NOO
?_lU
10.0.0.0
QDVC
Hlve
rKs
7XOO
K:Vu
dbJ?=
/NO|
OLF@
I+Jf
]NOINOL
set_FlatStyle
L@ObOOO
jO@O
ooLN
=OLN)
@w_9]y
<;:9
'fgg
(DOO
System.Security.Cryptography
>G7y
p& H@
~I=H|
`RMf
Gjp"
wV;H
MemberInfo
.l'-
3K {z}
n`@5
SettingsBase
;O"N
:plq*1
CtX4C
Start
LN&vA@
Combine
sB8j
o u
ben}r!
j>})
oLOO
&S%L
aRZ~
N@)vY:
DLN@;*
'OMLN
261F
CLNOLA
wqTHG( ]
OKOO@
ENOO
X%N%O
r'NO|
o
Ne>!y
0OO%K
o
o
DOLN;V
mIxm
{oLNNLN@
LinkedListNode`1
888a:J
FOONOOO
OO%O&[
`5nHr
OL$^%O%O
MethodID
?'OO
s2$g
0SLA
9a&g
7AOO
7-OO
-+&&&&
Int64
^rh^@O:F
7_a~
LinkedList`1
;] !
doNO
_LH
9OOO
e0Gh
,Q q
oP
XmlWriter
sOOO
o[{!B|
pHYs
.ctor
1g |K
SgAM$
:Zv3VG:@
RCC
9SNO
)O O
UNS.
PUUQQTTLKKKL
Z8pr
OOO~
/}n|
OOO|
,2NO
0hpJ
<OLN)
OOOv
Mv@P
X% $@%N
OOOr
=O!O
HOO;r
!!LN
Aj uci
lbYR
?N)O
+H o
RnOO
&* 8q
get_Text
8.9Z^Z
C(?y
!OOO
"*? !
rmOL
Y O@
ju;.N
OOOO
OOON
OOOL
9=%=)
GEOL
GEOO
_COL
QMOOv1k@
v{_=
@&O)
^OLNOLN
!OO%
DrawImage
Name
OOO9
KEOO
~%DG
/@OO)
?87(j
eTNO'O_OO
'OONOOO
Gv_:\u
K'N@
~J9G
[oOO
+O O
OOO)
)} I
OOO'
OOO&
'COOG
Bj>D
0oO;_
c=1}
gNOO
6L=@
_ t8S=
}G^J
]N@@
:O,O
}NOO
:99X
SelectObject
_NOL
>pq/H
0DN:g
Module
[<B
7fO:
~NOO
J;v'OO_O'OoOO
a]J}
ZFlV#
9]y?K:Av?G:Fv?CC
Array
,$&+
+"cd
_LOO
]NOJOOO
#fOO
kcqj
^OOt
LoginServiceSoapT
OBOO
@.reloc
}'5D
GNOO
O@OO
, &&
2bO9R
zJE$
CompareExchange
GenerateIV
A
9'>Q
,OuO
Ov C97
AsM9
&DNOO
N@'OMOO
GOOOO
HNOL
,X3
NO%O&M
?MOL
CDAO
-O O
Byte
get_Chars
uNOL
U NO
&FMOO
%j%O
CryptoStreamMode
m&kKm
=@ O
*w%O
OMOO
MoveNext
*o%O
CqOO'ONNO
U^q}
get_MetadataToken
t[NO|
:Cv};A
7WzuX
u$<u
get_ExceptionObject
@:[%O%L
)vv;G
'@LLO
C
KFNOL:
bAOO
F@OO
zVj?
s[:R
gZU$
_Q a
+ONO
eNOL
& ,w o
wGNO
_&^
OONOOO
=XWPm
+O*O
ShMN
b;g)
lJ@O
)vN;D
)vN;G
TYOO
)t I<
GetVersionEx
_9|y
pQ~}
wMNO
#N=L
&LMN@
LJ@O
2bWs
d >#51{4q/
$:4?
.VOO
+&N*O
_|U/8
AmMN
}ktH
MessageBox
yD[os
+OO%G
get_Location
ARNT 0m
?%L$O
,2&&
K%NO$JAOO
~b?g*A h;D
_NOO
System.Web.Services
RAOO
^UyN
OO9
/O N
H&NL$@
WOXB
<+OO
'Hsv
hoe%
FOOO
qMN@t
p-r> T
G?y.C
O O
Z{XR
U^^];F
gffffffdhs3434.Resources.resources
NOO;E
VhOO&N*M
gjsl
set_Url
+NOOL
M L,
set_TabIndex
%G%N
G'k_OL
UploadReport2
i|eq
%a%O
US+`
2,\;
WG57
~1ML+
&Q%L
<`1o
pA]s
J5Wv
1.;P(
7O*O)
sH;d
COLN@
c6MN
;Ks;:
$xAO
#O O
get_Item
Z(NO
.NO%O%M
FileStream
C)uH;K
Zjz
H &m
RuntimeCompatibilityAttribute
get_FieldType
_6%t
KOOO
+,)!
#DOOO;2
1{O@
Assembly
0)Q
2DN4R%
sR@O
%G%O
.resources
DelegateAsyncState
*O<L(
kOO&q
KO_OO
8P*O%O
, r
GraphicsUnit
qc ]
&&rq
============================n
<RNO
M.(}
%+s
NOOv1
NOO;u
"]A\
gLNb
-Xmwxj
VJOO
_&N*O
>Cu~5@v?K:Ev?G:Jv<B;
,%&&*
G%L$@
U hM
0VA%
-A&&r
SuspendLayout
Y^]_5C
"@#O
_bY
#NOO
"j9g 6
o/8y
VvLyp
%,N?
GEE]N1
/SkggF
C'KNOL
::esl9
aL*O
U5O@
IDATx
LTPP
;DOO
GetHdc
^OO:E
RSA1
@c0m
.nEpIK
4,OO
OO^j
T&Im
NewGuid
4dB
'OOOL
rP1'
@OO
,D&&
BOEO
BOEL
GEOO%L
ZbP,
v8K@
V2OO
;>O;
_HNO
B i=2[O6eq
2DOO
;}'O_OO
WNOO'gNOO
\(fW
G:Jv
2~NO
F5Fv
*O%K
_NNO
%nSi
%F%O
Objects
LN)u
3)A
paOO
%J%,%!
gP.
+# N
IContainer
=L)@
Clear
VOLN
y^=o
get_OSVersion
8~O:\
Cv_:@u
:O=O
7LNO
H>OO
ynL[
+ 8)
_b`}
1+ y
0O@O
I}OLN
gELN
-W&&
#DOOO:
T4N=
.nB*
O \t
|L5Iw
%}%O
'OKOO
MF$f
l NO
6aN\
+
&]%L
zJ*'
?Zib
aAOL
DDDD
AN\9c
'b%JM
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
vR(T
6n]C)
(*!;
'OMOL
;Y$@%O%O
ISerializable
JOOO
K7AO
Dv_:\v
5# 8
3COO
"cT1S
1dN5S
OO&O%
T;G|
FontStyle
gNOL
s^C SggzB
D;Fu
set_DefaultExt
>bNL
e:8J
N@%N%
'O L
set_Height
BoLN@OOO
FmG
NajRw
ZFOO
"OLN)
BN7f
uEpL
'PMNN
@OO'PMMO
!62}
*> (
vdNO
sViVt
*L:@
=k@O'}
OOO
!O+L
!O+O
OOL}
wM:K
tN4H
r[ Z
=WVj
NOOu0[C
>@*O
'IMOO|
_#$,s
be-BY
set_MaximizeBox
piNO
JBOO
c^O@
%[c|E
sq :
?YA!
ipM<}]
ResourceManager
Show
MOO
'' kG<
GetExecutingAssembly
TDOL
%G%!%#
OOLN
GELN
)O#O
PropertyInfo
XmlElementAttribute
uzG^^
z}7
kOOOO
W1r
FZ|a
HOO%O%Z
|r@3
U!LN
XDOL
7K\NLN:J
Z__??
MOO_OOO
:Hs
>aqg
, &*oj
NO%O%U
-PMN
IG G
NO%O%\
k_[I
IWin32Window
3DLN
F*o
OO%D$L*
get_IsEnum
d Z
5`L~
vE8I
&Z1X
x)<s
sJ:c
iFN@
lR%F
:D$N&G
N L
2_O@
5G%:
7NJ:n
cHRM
CreateProjectError
fOO'k_OO
1NOL
OjMN
HOO%w
cab/
C%K'O|NO$N
eg.n
N@OO)
k3 _G
GNNO
%yEh
OO'ONOL
8t%s
G'NOK
Interlocked
uLN@
;~Y`(
add_Tick
"`+*
EgoO. ,
pHO9
!L'O*
*2az
_'PMMO
4MO9q
3,q;
]7P!
OO'LNOO
sSNO
J*NO
Gw K?X
.[NL
1>3}d
, &&
x=OL&YMMO
K?LN
JJOO'OKOO
E@O%N
cIAp
sZ:Q
2CO;
[oOLNOLN
WFN@
bN&L
#@NO
:!%K
cCOO
%K{+
LoadLibraryA
oO O
Empty
=O-N
'gOO
`^F\
'gOL
<@O'VMMO
YX
{t~<
<i%O%O
D3KK
nJLN
JM @
"O|O
)vM;Z
$78b
&&&&&&
X0OO
qIO
1wO%N;[%A
KCN@
OoOO;Gv
&fA=f\S
(OO
NLN|
<hvo
+|2E
:G'VMML
fdU x
ZLLN@
f&J4
'!)t
VONOO
dRNO
rONOO3
<Rz8
get_Keys
&J%Y
% ,L
xv V5
&...././/...x
kCOO
vF#O
IndexOf
*O<O)
&O:N
set_ForeColor
NLN@
1[O:P
R"%O%O
@N@J:A
d<OO
2CO;s
Close
)r%
yNOOsG@
%I$8
NLNO
=VO@
- &&&
Encrypt
&>|
T_Q^:F
>BT;
B@OO@
"Powered by SmartAssembly 6.9.0.114
A'{P5
&J/B
o+Pv
~wd<
xxx%
set_Enabled
orsu
wO;y%O
appFriendlyName
FOO$j_LN
PqnP
%KOO
t\q3
!T\
Read
!;uo
v1C@
3$N@O@
.O-O
iN iH
,{&&
~OLFO
djD|
gDOO
/<I)
RUNO
) e{
qO:A%O%L
;BN@
value__
=zDDDD
M:q@
e:Q|=f
OO)uO:@
@O'IMOO
6gc
B(.n.l
;@N@
*OcN
set_Interval
?MN@
*r[)
t: ^
~MN%L
);OO
r('
!O%N)
L@O@
k%O%O
AddRange
get_Font
SNOO
gAMA
"t4u
A%O&N
PNOO
X%N%
"O)N
1]G;L
GWR2
Y\8C
d4=x|]
'OVl
;.rO
G}-|
dZ==x
LOO'
C&N
7L>@
O\N@8}
J3 h
C9Dv
Bx0ZS1}
k%OO
tN5_
&lMOO
KoOOO%D
n6>u
1OOO
G{9 (x@
Ceiling
2C%O%o
get_Left
.cctor
W%O%[
Ev<#F
AsyncCallback
{]OO
~INp
set_FormBorderStyle
6,ax
mscorlib
W%O%O
&N%L&LOOG%O%O%O%O
GetArrayRank
ZkQZaSA
hO@%N%O
<EO(
o7y{
j&B&
7fN;q
+iao
ZKLN
[LNOL
663
Ro;X
7M{:Q
Refresh
{POO
:Tsr:
B:Bw
%H$X
_OOL
2j@@
s@:@
K9Dy
O8O)
'JLOL
j&R/
Oz])(G
LOOO
yzfd
, &a.
flX$
Ur{\L
4R'Se
ControlCollection
sv9Kp
50OOL
"F
MNO
8%@O'O_OO
RSACryptoServiceProvider
0>1A|
Guid
yMOO
?O*O
OOO&F%I(
(OO|
]>88
v8S:
pG?Lx
C#NO%N%A
@ /
WhNO
2D7CW
bKOO
PrM"
@pOL
NWc.
*G%<%$
}"NO
N} O:]
<@,O
+O/N
\N@O
ContainsKey
System.Reflection
;P&W<
DrawLine
=51=
$;8 LD
NLN*t
@Jpb
pdW/-!
%O&^
%O%O%O%O%O%O&N
(OOO
&&* +
RuntimeTypeHandle
,NOO
H!AJ
e-LNO
gNLN
3 OO
D&@_OO
8uix
is9:
X[fee
OOMN
Yg#uYRK
h&O*
l'Dt%
] :W
cnNO
set_ControlBox
UInt64
AONO
CGOO
OLm]F
ToInt64
t#v;Dp
!L #
GOONOOO
jELN
)g8q
$q%O
/Y/S:{;f
o\
Size
umMh
Append
e_B
(<OO
get_FontHeight
u;O)
d`2
.*OO
set_ShowInTaskbar
Rfc2898DeriveBytes
%v%L
+IOO
op_Equality
\VOO
%O&N
(l^^^'
vNIO)
:D$_
N@O@
N@OO
l )
[LLN
,K&&&&&
THo8|
.v+\
9)M
I`LOL
LZYO
NOOu0sC
;OLN
qNLN
N@O|
K:[v
Xi=SM
^O@M%M
1{O:P
/O.N
%G%7%"
&j[K
7%O%L
d{Rpkb
niin~%
TextBox
NLOO
sNB:Iw
toLN
$@%O'OOOG%N%O%L
OO%O%K
^LNAOOO
$ OO
Z&xe
^`OOOOOO
(0V
%Q%O
%X%O
0WM@
N= 1
AR'H
X>vzA
_wI;H
Ljq\
[KOLN
s N:
!VXp
N:@v
>kO:T
3[O P
LOLr
,9&+!
N@O9
UMOOu0oC
eMrK
1pRNL
JNLN
+KOO
2_wL8E
0R b
N@O)
:D$5
- r
Hd;8 f
Ayd{h
s@LOO@
|w~XZ
OAJ;
:Q&N*O
jg?R
CLOO
v cV
yTNO'O_OO
n@O
EndApp
1KN:h
?MOO
"H( ,
oJNO
?&.
@O'KNOO
b8s
3G3O;
:Bw0G:Fv?C@
OO%O%G
A%O%T
KeyCollection
/&j,
ZH $
OO%O%L
fELN
LN(O PO%O
tL:i
OO)vG9B
&N*O%O%O
A%O%K
OO%O%Z
@_OO;L
OO%O%]
A%O%L
$~me>f_
g%O%L
m@MN
PO%O
?;a1
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
NO9j
get_Rank
ISN1
&ANO
B(;<OO
=Fn\{
Mi3"]
o>
HdOO'
HOoOO
66p. *
<OO'VMMO
S%G%L
4nXv
.!OL
rT1@
T/RT
vV4U*
?OO%
get_Message
!This program cannot be run in DOS mode. $
* +
&OLNA%_%O%O%@
DelegateCallback
Oz] 2
?IOO
>MOO
File
*O%O
pNL$O
9^*O
8aO;j
wN@|
cJXk
FEU
* 8
gLLN
6_G@;g
))e8
G%O
ArrangedElementCollection
XmlTextWriter
q}:T%N&]
Dispose
uRmFY
OOOL:T
$c%O
G%O'OOOG
+DOLw
U&cK
WriteAttributeString
1SO;Z
HO@Ov:
NZ`S
J/b4
@Yog#
>^@'
'OO
X%O%[
f&Z&sZ
K2)!
"O O
[%K
D)vN;Z
ServicePoint
FromArgb
OEOONLNO
vO;H
;xNO
OM\:~k
X%O%O
Y% :U
{3_p
7JO@
w`;[
c%M$]
QON@.
get_Window
PU~}
gGN@
'IDATx
fCeH5
tJDE
set_ClientSize
rONOL=X
0WLA
;-.
OlNOg
'DOL
XKNO
'DOO
7NOO
KoLNOLN@
'dM@O
+;E
get_Key
[vG9Sv
wPC|
TRM^s
YB)kBQ
PoweredByAttribute
V]_Q:J
-+=o=
{FOO
!O;O
%N2O
get_IsPrimitive
0MKo
'DLOL
r t+
U!c/
&@KOO
4T"Z 1
}dQ8
LO@O
&A0^=
=gya
_=XrLZOL=P%O
LOMS
O=L
v,zw
SetProjectError
\egj
AddValue
6~OL
/f5B
sLOO
]Z]6
[ELN
ReportingService
QLOO.
H_:G@
OOO'5
EC~0
7M:e
UjGJ(p
c>RX
vOLN
_8W%N
D y[C
[qNPOO9I|
5$}J?
;+OO'
)6MN
jFfZ.=EO
J:Bw
N }lQ
op_Inequality
DSOO
\$@%O
e|)5
GetManifestResourceStream
7+ y
HO@O
GetLength
sHO:
lo;\\
zMnE%
%]%O
-|P
SeekOrigin
|Xm1
KCOO
'LJ@O
x$pd
Strings
]^^^:C
Delete
<Bv|;Ov?K:Ev?G:Jv?@:
IntPtr
get_Right
*dB
O@O'O:OO
Cv_:\v
MOEO
#9(&
2SN9@'
x-$8
4@2{]d
:=#"
ymO@
2X-e
/DOO
tOl
WJCRK^
e`-%j
@MN@
MPb?
N2p-
3UME:y
KUOO'
S5[S
N7OO
tEOL
G%K
EOL&
r4U1/$
H;Au
kMOO
GONO
kOO'
i-4+
gdi32.dll
Microsoft.Win32
r{$z
&O*D
FileDialog
FOLN
&O*O
:Ur
ldP,.
Y]_^9B
H!NO
und
`O)N
:G%@
~IJV
j_LN5^
-I(/
6,IC
8Ae)
v _@
LNQz
PBOOO;
GNOOO
2G%O
InvalidOperationException
:1OO
^MN%L$U
[:_`
%[%O
_OO
S NZ
oTm3
'COO
&R0pO
+OOO)
RijndaelManaged
;LOO
2G%O%N
R^Jx
2G%K&f
get_FileName
&+nr
8L@O
GCOO
~G/S
by\yJ
tx2ONv
ZMN
:RNO
GOOLN
3O&O
OO_OO_OOOO_OL^OLN@OO_OOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOOOOOLNOLN@OOOOOOOOa;*78NOL^
@N@JOOO
2b@;
~OOO)
add_Click
-OoO
*OOO)
PK
^LNO8_
FOL&
Rj2_
@oOOO;k
`OO:b
vNOO
:d%K
OOO)vSA
BlockCopy
I7n8
GetProperty
b!OL
%,22
1WO:T
DockStyle
j;NL
)eA#~
:gsJ:U%H
GetCustomAttributes
y)u
*NOL
hS+Z~
yv W:
[COO
SizeOf
1 O:S
sHao
6 8Z
6SF$
DOO&N%N
\NO%
M@OvI;F
MOL}
5W]N7RJ
>Ee
SecurityCriticalAttribute
KFN@%O
YNOL
iYo
hLOL
set_Title
I^Q}
G9]y
L#*E"
ZS-SH
&+'~
SmartAssembly.SmartExceptionsCore.Resources.error.png
CS}Y
KEOL
set_Visible
H/NO
CLN@@
ANOO%K
nCLN
pEOLA
0nNL
qBSJB
&&&&*(
&&&&&
B"_U=
,"&&
v9^6
C:_v
5G%N%G
System.Windows.Forms.Layout
wOOOt
%O%O%O
sC:d
BQNO
%D$@
H-<S}*
TC;SUA#
R0#y
NLLN
Boolean
woL
ur,<
SOO8B%O
\wvmlhfddYYNx
get_Checked
.OR& o*
,O O
ZT <XD
!OoO
j\Za
UJ?j
DCOO
~)1
COONO
'DN@
DOLOOLN
gEOL
gEOO
EzO/O
%m%O
MethodInfo
2 LN
lH"f-%8
'IMOO*
& !a
4MO@
'OKLN
dD@O
_%K%O%N
HLN;_$$
=C'OKOO
rOO
CompilationRelaxationsAttribute
an_
-J2IH
UNOO
JOLN
O:O
7lgo
1OLA
T2NO
nLLN)uvO
;h%O
MemoryStream
AddLast
C'KNLN
[^^^:A
iTOO
@u8H<
^OLN;B$@%\
get_Graphics
#sv+L
M,zv
get_ControlDark
8888:^
HttpWebRequest
]AD]H
}OO
HMOO
%{xL
.O=O
>#NL
&^%L
r!3Bs50Fco
GetServerURL
;DOO<-
:\v?K:Bw?D;Iv?C@
PADPADP[
}'qh
bvNO
h$A
v8P8p
mrd
?OL}
3GN@
+@<O)
kN3?#
OKOO
bN*O
OKOL
'GOO'OKOO
SPotFBc"
XLAg
<DOOv
NaOO
/0g@6x
\;Fu
+hN
6JOO
^OOL
~5+
~tU;
%H%O
cMOOu0WC
gGOO
3:N@
$Wkb
\sk\N@:F
aNLN
I8]$A
7NL
5WQ{`h
B@O
[_=W Fj
=G']JOO
9]v<J5Av?G:Fv?C@
o7wz
IENO
*{ 3
H'0Y
IEND
VYKu
NL$'
o6Zx
SetToolTip
BringToFront
Microsoft.VisualBasic
$HMLN
NO*wO:
7|N;U
Q[/L
XU~ .
1SO:S
b {c
7FOO
pM:Iw
HDOL
, &&*oi
B 3H
ThreadStart
|vOO
1kSQ
yB$&R
`nOL
dpk8
--&&
;r%]
&B1J
VM ]@
2[:m@
L L-
X)1> >
&* +
buildFriendlyNumber
7`O:P
7cO:~
OPOO%K
:\v?K:Au>G9Gy?C@
_M;
t8)_1,(
}%5K
'PMML
$mNO
'PMMO
cmNO
@OlNO
+m ,'
dK@O
DOOO
OO'VMMO
Mu8 9
Rectangle
yiO@
_("bI
v{"cXU
[~oe
'IMOO
get_White
OO'IMOO
E)_F~+]?
SNOO$
$DOO
[OOOO
%@%O
NOOs
? %L$O
m/Bz
pq}Af
Concat
(.*r$
CIOO
S9I)
Vrr*
StringBuilder
get_Data
5S%G
3o{B
=@,O
&77
[&N
M wV
|M4J t
;V&*
kW-EG
C&K
&{ )
68a+.1
IWebProxy
O:[%O%O
FOLN:X
n$@%O
LN@O
4Q%O%O
iN@'
&&*ot
&&*ou
sQO:
%e%O
,UNO
R[N6
CompilerGeneratedAttribute
cLOO
get_Hand
GNOLA
- RCC
<)eS \?
DGOL
get_IsInitOnly
~<yUhv0
NO&N
'KOO'
oOOL
eAOO
'OGOO
3qw{_
lF@O
Zm&2
Mf_
uE_ffS
$HBOO
;'N@
[G u
*O<O
QZX
a'5;
SmartAssembly.SmartExceptionsCore.Resources.default.ico
DOO%N
SMOO
=Tji
wN:k
1WO;
iN$|
%O%O&N
Copy
Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/`
)N2O
get_IV
AssemblyFileVersionAttribute
I)O
@%O%O
@u T<
GOOO
System.Text
GetName
@EOO
1WO@
CMNO
DEOOL
6wNO
2Z@;
|L8c
iE:]
LLN|
IL C&L
GMOL
System.Resources
Y'("
#Y)ol"%
NOOLg
K)ZJ
O9I|
ee;C
'NKOO
w%M
:G%9
8iNO
uF+IK
bnPW
zjOO%p
rO@Os:@
a d#G
VkOL
Z@OO
w #vph
OOO)
]& 6m
GetElementType
o%O%N
set_AutoScaleBaseSize
(:&+
. 8j
vnw,
CTOO
bLN@
+ ^L
3BO8`
HMNO
$OoO
#OoO
OLN)
s8;U&J
v9OL$O&[
#MOL
(E@OQ9Uv
J#vM^
bNNO
yNOO
WriteStartElement
hLOO
#6N_ykKTf
?DOOOOOO
nSTj
(IMOO
(LD.
1unea
IOONOOO
PSNL
tV;+
Icon
SKOO
b;OO
t&Ba
AP}
W%s [D
KNOO
"N@O
KNOL
`nBC#
DelegateAsyncResult
1MHn
:TJR
t K=
sWO:
--&&&
K| [
oLLN
{hon@Vg
GoqCp
'LMNO
!LN*r
FieldInfo
Font
DOO;B
:C&Z
QM~y(#
\C@O
&0*O%O
xcNO
:%O%O
cGN@
#|i`*
LN'L~@O
:D%W
=FOO'k_OO
G:Fu
LN%D
G:Fv
LN%@
7aN:g
@j,k
INOL
LN%L
INOO
oBtR
"O<O
'{P5
Z%O%L
String
Z%O%O
INO|
DEW(e,
ICollection
^FcP
System.Xml.Serialization
Copooopooopopooopppppqpooopoo=
2J@:`%p
!fhx
\NOO
w U|
CB*p
jG4
=SK:_
1GO;[
$bCB
AuN@
|Z[LN
} \z
C%O%O
LBOOO;'
;H'L
oOOO;
O!O)
Timer
HN@O
tj)5
jI/b
+o*7
UploadReportLoginService
wOOO
ooOO%I
InitializeArray
).OO
%O=O
&b/D
qOOO
LcO*
%L$@
`R}
9Ks.=
pCOO
Ng~e
G|z`
%L$O
uMOOv1_@
RI2Y
*L(O
%N0O
Microsoft.VisualBasic.CompilerServices
UFAO
get_Namespace
2_k_OO:Z
JJOO%I
Jh/Ul
JJOO%O
pro"
xt^d
hiNL
ToArray
'#=;
#,..299
TOOO
CreateInstance
Wuliicc``YZMx
.-`3
AOOO
EditorBrowsableAttribute
Yn]`%
*O?N
:@ t:_=
`MOO
P]_Q:B
ZOOO
C%O
@ywv
@%O%O%L
&KOO
@NOC
+:i3
L:c$C
V7C|
%U%O
Av0g
)&k/w)
9VS(
CLNM8r*O%O
[COOO
RMNO
qMNO
WLN@
{ NO
OOO%_
EN@O
BOO|
6*MU
xFOL
BOOt
'Nd>
@NO$
:[@~|
vO;A
OOO%H
82 P
TMOOO
G,AO%G%J
rq>8
OOO%A
&N*N
&N*O
Attribute
j;W
n================ABA=========E
OOO%p
System.Drawing
:U%J
?:@O
BOOO
@)JO
get_FullName
9;0:
.`OOO;F
k48B`
~\N1
*_QJbO
@YOL
.d>N
"?NL
G,sG
"9
" OO
[vG:Qw
[vG:Qv
('&%
Dictionary`2
BeginInvoke
G;B
UZjf
LNOL
&INN@
&O,O
zR>{
NN8Z
\ EJ
GWMC
N:Cw
?N pB
IL F*N
';<OO
&$NO
$zNO'OOOL
SE+h
&&&8T
%W&N
%O&N'
NOO%
-;`k9s
_OLO@OO
Wb&b
sGO:
(LNO
)O;O
OL$P
4k[ wh
-k
Reverse
DLN(
{WG\
+DOL
DLN'
@LOO
+DOO
<O&O
BOEO*
OL$@
BOEO)
OL$J
add_TextChanged
LNO
OL$O
/FMN
RuntimeHelpers
z]EjSs&P
c_(]@J
;HNO
7 OO%O
0GO;{
EMNt
&&*(
BNOO
_:Fu
*kL(
get_Platform
OMOO<A
'&<o?>!(>/-o,.!! ;o-*o=9 o% `
1TJ`
D-}#
"/m hi
~L8K
lVPm
w?LN%M$P
G:\v
%J$#%%
<Bv|;Sv?K:Av?G:Fv?@A
oFNO
1^:;O
#O;O
fBNO
0LN
;,f$A
M@77cx
Aq>VD%
Atsssssssssssssssssssss s s s=
%K%[
'MWD
|yyy
kF.#
FromXmlString
$WMNN
\O@OO
2O*O
0WM3]
Object
9q_E
+DOOu
OOOO)
{EOO
OOOO*
Registry
-? Q
aVN@
:C%[
sDg.
DOO8@
**********%x
OOOO'
V:99 u/nE
`z;O
d{5b
k83G
~MOO
a@J#
F*K
,)OO
NO%N
NO%O
EEwh
$M%O
OOOOC
%h%O
get_IsArray
rOONOC
w3N@
9C2I;
_:Ev
_:Ew
O)L
8OL}
P9n|
'<HOO
mLn@
0XO;T
, &&*o
h9OO
v #F
\R?7f
get_IsAlive
FlatStyle
E#4~
0[O;m
,B@O
ltIO
2G%G
!*k&%
)N(L(
;j%O%T
h4dL
;G&N*K
t9F2
[.OO&O
EditorBrowsableState
+O4N
KEOO%LM
1NOO
}|r/Q
W^VQP
^OO@9E
OOsOt
kOOLN
L:Av
!hNO
K9Vy
8K%H
Y8!8=<|
+@OO)
3U!e
CQq
,]&+1
d;;Gz
'wKOO
CYOO
MN@O
OV_Q^
-5#Z
Pt~=
CLN'
6NraN
{COL
_CorExeMain
*7pN
5Fkh
oOONLNO
U wD
HOOO;
soOOO;
~ 0e_
C&N*O
.O;O
qlLN
)}OO
ScaleCore
-+&&&&&
Stream
[BOO
[ .?
0SO;Y
$7x"
nFWl
iw4
SecurityException
FLNO
2G%>
WqO@O
)?MALb
<OL&YMMO
|/gZ
&z%L
$O&N*O
&&&*(H
PJOKJO'mMOO
dxtJ
v [;F
r30P
lOLN
wVNO
4>@@
Pe3p
g1OOO
jQ8H
Exit
Free
UDfW
'@=O)
get_Bottom
%N%O
S~-0
qu^.'
-NO'
_`95
1DN5`%p
x@h ~I
&&&*(m
SmartAssembly.SmartExceptionsCore.Resources.warning16.png
rOOO
|LP]v
y]mk
QKJL
fMN@
uRsV
@KF1Y'{
=LNO
7OAN
eU8~
;Q%N%M
get_Minute
wwwwwwwwwwwwwx
DOO%O;I
COOJ:C
add_CheckedChanged
KAOO
3r)zsX3
}XLN
2+ y
hQc{
+OO%
-K\0
<LOLry@
^u`BX
~}:\
rNMOO;HrKNNO9]
[MOO
CrO:OQ
DataType base64BinaryE
jq2>r
95)M
Dukc
(EOO
6LJb
xEs]q
KaE%
JELN*O
DOONOOO'L^OL
JELN*I
MgLN
4O<$
@<dL#
x7K
<*NO
@rC}
z Az
!rOO
alit
CVOO
d]B7
B Yi
p:"|{

=O)N
&* +
eYdzv
@6OO
_:Jv
2N@L
3_L
qJ|
+bR/
fp6O
:O#O
OperatingSystem
OMLN2G
&l,F
E:}C
HttpWebClientProtocol
Z. d
$O&O
$O&N
OOGO
get_IsLiteral
9 m
1wO:S
1Ko<V
NOOO%K
/FCKA#
+NOw
ANJO)
FormStartPosition
4MO:T
2[O'oO
DJQOXR
OO%N%
^^^9G
Alloc
NOOO;g
}s)&
s):?
IDATX
+MOO
System.Threading
}Y }g
PictureBox
kMs9a
B]OO
get_Month
&$V\
)OO'
{O;H
MessageBoxIcon
0PNO
NOOO;F
* Q
-O=O
EOOO
UnhandledExceptionEventHandler
System.Web.Services.Protocols
~yCr
%L&_O@O
9n%Q
..633333333)x
NOOO;T
;G&z
OEOLN;^
YC@O
fbZ
[[OO
MOOUOLN
1/O:_
Jt'X)
3~OO
#O*O
O5f%M
/) !
h!OO
X |uUqze
OLN)
<OOL(
GrKNOO;HrOMNO9X
0=:T{
9O*O
;R$@%O
G~O)
Tz(`V
>jm
set_Filter
BEBE
_:Dv
'{S4
O(O
,/NO
\v '
Buffer
(O_OO
7NOO@
NO$N
[Q
:G%O%f
IG5z
W@NO
[vG:Rv
$k%O
Ku~5\v?K:Av?G:Fv<B@
ONOO
ONOL
VNO
&O%L
get_ApartmentState
ap5 @
lW{ZR
sdfgdsfg.exe
CNOO
~J|
oFN@
FOOO;G
?KOO
dM@O
PoOOO:
GOLO@OO
T^^^:]
<O;O
NOC
v.OO%O%Y
H/.9
OOGO9K
apl$
LN@%p
DOO
q^9e
bsa.3o,2
YD%|2
N@'KNOO
7COO
W%L$O
LN(VMMO
kEOOOOOO)
OnResize
r*&
moOw `za
0_O;g
xMQ
GetInt32
zj x
}OOO
ReportingServiceSoapT
W1u>
dMN@
NOO%O
NOO%L
OCOL
HLN@O
|1OO
|z?>>N
NOO
VC M>j
EndsWith
HMLN
<uTX
K9UF,*b<e
&.`A
,Z&+
NFKOOO
GRNO
:q%M
h^|M
$NKLN
tCqOO
OL$N&
(L+O
TOG
<[-U
J5Av
jpOX
SmartAssembly.SmartExceptionsCore.Resources.{logo}.png
WFNO
get_StackTrace
@n5N
Q!Dh
VSVW
_MN@
LOO%O%O

XIOL
&&(?
8754
sxU)C.
*O>N
!@ O
9.5%
:+OO%L
get_Major
BxOO
MLN
NOOs
NOO|
wlNOLN@O
d-2X
O}Z
SoapHttpClientProtocol
Tliicb]YWTTJx
'KOO
MOOOOOLNOL>
@%YC
Point
get_BaseType
soOONOOL
NOOO
OOO)
MOOL
MOOO
/sMN
-Z}C
J%L$E
H4OL
DOL:b
v2.0.50727
+h
%E%8%
TvG:Vv
2\N5
cu4&
BNOOv:
L:n%t%i
vLNO
{'KNp
-P&&
4J~}
d=K
6OOL
5N@L
set_Item
6OOO
BEN\
G:@v
ToUpper
+-1
]_Q^:A
N^fs
qO:a%p
^M]R
%z%O
_ <;P
_'TMMO
GCHandle
1IKo
ZAOOO
oALN
set_Expect100Continue
f\]5
d%41
ek!w
O$ I
z4Z
KqN_LNO
*O/N
&j/D
get_HasElementType
Exception
N+lJ
(`De
N@%O%Z
6L=O
s#P5
lLOL
, &*o
APC
T7Rn
%O?O
s}O:
&L<@)
get_ASCII
z"!U
Wzc;
6F,e
G(OO
oMOO%O%K
sq :
[$_E
ANEL
]NO9u
Cw?KLN
Btfg&g
8NzO
set_Size
G%K%g
WriteByte
GetTypeFromHandle
IAsyncResult
+/wOV
CoOO
.O(O
*O=O
L t8S=
$JYYI
]NOM
GetEnumerator
)jw@
SymmetricAlgorithm
5mBO
7}O;B
cWu9
E@}d!
@O%O
\z) V 0
O :6
GetDelegateForFunctionPointer
"NO|
MessageBoxButtons
%|%O
?M)O
HN@%\
Int16
SmartAssembly.SmartExceptionsCore.Resources.error16.png
nq,O
,B_Yb$
O#O
{ C=
'_\OO
0CL;[
w@%i
2OaO
Graphics
^%O%O%O
97\b
lKyy
F3L7-
Mtb*p
nejG
*+'y"4
ApplicationException
ToUInt64
)*CZ
HOLN
mkNO
UnmanagedCode
System.Runtime.Serialization
GOOO)
9)<3
.}\
}&Lf-
_%O%O
PMOO
@O%8
o{^L
k_OO:R
I LN@
@\RD
E@OL
LNsR'
a*Rf<
'JL@O
YCMN
OOOO9_
G%O%O
+OLN
set_Position
i]NO
UK7/
P9mrOMOO<T
[~@c
get_CodeBase
&c>|
AOO
'ONOO
SmartAssembly.SmartExceptionsCore
hNOO
WANO
System.Runtime.InteropServices
lR4uX
DNLN
O9O
]NOHOOO
UxN >
sNO
Math
ApartmentState
n%O%L
#DOOO;A%O&J
set_UseMnemonic
@OO
gOOO
'LNOL
'LNOO
PDOL
NO%L$\
2C%O%O$_NLN
_uOO
rF>x.
COL$O
BXLN
`O%O
>EN+
C:Au
C:Av
p)I}
a+ "
ThreadAbortException
gMOO
GNO&N
t q9
OBD]
!O@L
rONL
:C%M
o*#
System.Runtime.CompilerServices
/OOO
fc+)^
lh v6!
9/y
(ross
6QvS
NLN9m
.ucFvAV
6aNO
j~h#
%S%O
SByte
:W%K
OO'dLOL
:W%G
&NHN@
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
COO
KO;e
;DLNNLN@
\|H!
xA |S
xzGn
%c&N
iNOO
HD@O%O
'IMLN
>O#O
OLNC
2C%K
POO9J
OLN@
uLG@
.-{uQd
&kJT
, 8;
OLNO
rI
IHDR
3:n%D
+YX&
(vH;
set_ExitCode
6OBO
CWOOO
G*wH8G
_i<Ft
NO&J*R
GMOOu0gC
2O(O
oOO
v"OL
g^NO
n;^
TransformFinalBlock
Z^^];C
\oOL
BOO'ONOO
_q6NLN7
lN L
4vB)i
~KOO
]2M@
email
WO@O%O%O
set_Font
)~u!
F:Ew
G@OO:E
lDNO
UIntPtr
OO:
nZRz
<3 O
=OaO
i: M
LOO
=//<
MGiI
;p%O
get_IsTerminating
fNpi~
x}OO
WGOLN
IDisposable
?VNO
Exists
OO9H
OHNO
OLN)
@O'~1
8DOL
{LN@
FromHandle
get_Current
O+O
j@OOO
R v{
ONNO
TNOO
CreateSubKey
%c$@
set_Mode
xYb^
a$v\Q
BMLN
F:Yw
JV+L
1{O8
TNOL
u4)*
[NO}
2G%N%A
tC|}
(LNOO
JELN
cq22
)D;zm8s
s * ;
zDNO
z%K {
R "<
@:O
Iub[
W/h-
o306
DrawIcon
2HNL
<Module>
,`&&r
X:VK
WriteStartDocument
H"@O
+3GK
J}7NOO@
mEl5b
otIC
t 4_
_@OL
wDOL
3VO8R
N@\z
wDOO
MulticastDelegate
>+O:|
2\E4$
G%O
1OOL
CancelEventArgs
MLNk
4QX\
_OOO
v~9`
7WO;H
1OO|
fP5*V
q3 #
Bitmap
ASNO
SizeF
get_FrameCount
_MOO
'*c
get_Hour
xVAO
[FNO
[JOOL
'ONNO
HL C%H
6.0.0.0
@GOO
StartsWith
mOoO
sA;Q
1^O9X*O%Z
1 (X
k%O
HOOO
Lbh~^
xaqc
HOO@
\&@MOO
;H)vM;]
(OKOO
?OOO)
7^C2C%O
~dUhh
noLN
$K&Y
oOO@
HOO|
K# D
os9s[q
CreateEncryptor
OOL
HOOt
?+LN%L$D
BOO%>
&O O
ThreadExceptionEventHandler
#GUID
Panel
rk_LN:i$@
WNOO
'z{D
'!NO%O
Y7|=
K9Zy
>:)
9Al7sH@
set_SizeMode
Qnw6
get_Exception
%O%L$O
dxa;Y
[jgb
( ,=X
W+= 6
eN@
Synchronized
'H=9&%O&N
()))
cMOOv1S@
NZ7eE?
<o+
,,NO
Qkkbal
uJaK
zoOL
(+NO
Y%O%K
'MOOILNO
Z[_V
HOO)
Y%O%O
M;Ct
MN*O%M
WlNO
'@#O
+O8N
:\v?K:Av?D;Fu>L@
0QO;'
=O+L
~zx!
^'XJ
L;J w
!1D
7DOO%M
:;-(VO
ToHfont
LLN@)
OO%O
:=&J
ApplicationSettingsBase
Gd7W
||||8G
=e$O&N
TMOL
Z"C /
set_Image
nNoL
l}OL
.3NO&L
BOL&
L @)
<@*O
JvOO
KO8b
J8fp
HNOOO
u{(;
vvga
2Ch^OL;V
r]JOL;j
nzR{
ULzV
6cMR
RNOL
:`OOO@
EventHandler
aO*O
Thread
.FTE[
7O?O
KM @$B
x!OO
KM @$D
,>&(X
oEOO
)vI;G
['OOO
r7$
vO4E
ZZgq
HNOO'
LSQcB3?OE
v(/J
0HOO
;NL$@
SetValue
B5Ev
+tt#
Encoding
SCOO
NOOv1c@
CwI;H
*DLN
OO%_
-e&&&&&
NCI#
E@OO@
aL*V Y
get_CurrentThread
GetFields
<2~;
bxaI
;COO
K:Au
K:Av
CheckBox
_sj9
"*OO'
F:Fw
$^SOO
NE E
MOO'
;/i
LNO
get_Module
WriteEndElement
(%h4{H
CryptographicException
&N*F
h(chI:a
Jfmy#j
)eLLUW
IOOOO|
$OO)
gKa.z
&KMN@
WebServiceBindingAttribute
&O?O)
_:Fv
D:Wv
"N&L(
oOONOOO
&O#L
dO13
2lI+
,DOONOOO
nrY,
AddrOfPinnedObject
M%?|-
OO&@
OO;K|
g @O
* %O
%NOL
,'&&&&&&&&*(
get_Size
5Q `
O8O
&z%
<DOO
!O&O)
OnVisibleChanged
OO&^
81D1
#AO|
*>tF
T0A@
v+}*9&7/@
3>*
?dV o
:g$_
WEOO
}2:|
IOL}
|OHE
zTNO
gOLN
%C%5%=
Replace
set_Icon
System.ComponentModel
LocalMachine
OO&q
PZOO'
ReleaseHdc
C:@v
^%[x
xZOM
1gO8
1gO;
GN@O;j
^%L$[
#N7O
;[%L$O
wKLN
NOO'
2CO@
fg0|
IEnumerator
\;rv
1cO@
2N@
1^@:W%O%Z
mscoree.dll
CoOOOOLN
3G&S
['[K
add_UnhandledException
p'Z%j
LN;H}
!7!O
wN8E
}_[Y
2VO8
FOLN)
8 8J
:\v?K:Av?G9Gv<BO
?DLN;F
jOO'
N`NL
PD]
TB#
KEOOL
FOLN&
3G&O
;O#O
@+Oe
8WSO
6<(m>@
>cO@
MOOOv
<D6x
4>`c
h~7S
JJOO
System.Collections.Generic
`w|9
`JOO
jOOL
B'yE^
MOOOd
HL G%H
8c(;
(uuq
G9Zy
px``
*6 Q
qE@]Kf
2VO8U
{SNO
{zyx
System.Windows.Forms
set_Cursor
:1&O*O
get_DesignMode
1gO@
LP F
Y&NO%O
KOIJ'
WNNO
O L(
zkNO
get_ServicePoint
;]K"
OOOd
2V@;z
?@wp:\v?K:Av?G:Fu>CC
3NOO
CUOL
7gN@
D%O%L
, &&
%o%O
f U4(
#NO%O
get_InnerException
SetStyle
d8b/
mb[F
8n@OOOOO
COO%L$O
|S:Q
GenerateKey
>oB!zVb&B/
GeneratedCodeAttribute
1oO@
BMOO
NOO_OOO
;j%O&_
(GOO
V+"E
|\+v
'KNOO)
-\RNY2
# (&)
oNONOOO
4KOO
OO)vH:B
ToBoolean
OO%N&F
* 8
],FE_
NDMO
'VNLO
$$$$$$$$$$
&OOO
PNG
- #[
&&*o
K$NPOO
SmartAssembly.SmartExceptionsCore.Resources.network.png
zXT4
GFNO
\Rr6%B
.O&L
%A%O
Ls~@
:~w0G:Fv?C@
ank|w

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-01 13:53:15 2018-06-01 13:56:06 171

5 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-01 13:53:15 2018-06-01 13:56:06 171

8 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\bokf.exe.config
C:\Users\Seven01\AppData\Local\Temp\bokf.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\bokf.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Users\Seven01\AppData\Local\Temp\bokf.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Users\Seven01\AppData\Local\Temp\bokf.PDB
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\#rundfdsl32 .exe#
C:\Windows\Globalization\be-by.nlp
C:\Windows\assembly\GAC_32\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Windows\assembly\GAC_MSIL\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Windows\assembly\GAC\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources\sdfgdsfg.resources.exe
C:\Windows\assembly\GAC_32\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Windows\assembly\GAC_MSIL\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Windows\assembly\GAC\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\ODBCBCP.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2368.9675390
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2368.9675390
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2368.9675437

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\bokf.exe.config
C:\Users\Seven01\AppData\Local\Temp\bokf.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

Write Files

Nothing to display

Delete Files

C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2368.9675390
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2368.9675390
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2368.9675437

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bokf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\793196c2\66edea4f
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|bokf.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|bokf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|bokf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.0.0.sdfgdsfg.resources_it-IT_bdaccec94cc64df6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\12abbcda\2e1f39e2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.0.0.sdfgdsfg.resources_it_bdaccec94cc64df6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\12abbcda\6d7b1c31
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\bokf.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F7CFAB2E
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F7CFAB2E
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
kernel32.dll.QueryActCtxW
ole32.dll.CoGetContextToken
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptExportKey
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
cryptsp.dll.CryptDestroyKey
mscorjit.dll.getJit
kernel32.dll.GetCurrentProcess
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
mscoree.dll.DllGetClassObject
mscoreei.dll.DllGetClassObject
diasymreader.dll.DllGetClassObjectInternal
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CloseHandle
odbcbcp.dll.bcp_colfmt
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
cryptsp.dll.CryptAcquireContextW
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.LoadLibraryA
kernel32.dll.GetProcAddress
kernel32.dll.ReadProcessMemory
kernel32.dll.CreateProcessA
kernel32.dll.WriteProcessMemory
kernel32.dll.GetThreadContext
ntdll.dll.ZwUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.SetThreadContext
kernel32.dll.ResumeThread
ole32.dll.CoWaitForMultipleHandles
cryptsp.dll.CryptReleaseContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister

Execute Commands

C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-01 13:57:07

Detected family: #Ursu

TheSystem Itself @ 2018-06-01 14:12:01