MalScore
100/100
MalFamily
Malicious

bnv.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 32/68 Related 2012
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 332.00 KB (339968 bytes)
Compile time: 2018-06-03 09:35:40
MD5: 25b5bf2aa613befa0b7eaf916c151b1b
SHA1: d655450126678b055b74743e3357a4f7c13578b1
SHA256: ce1a0a95365dde293524ce9f448377a67c0e4c6a5942cf34122bb31c3d3b0c2a
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-11 14:00:03
Last submission: 2018-06-11 14:00:03
Filename detected: - bnv.exe (1)
URL file hosting
hXXp://gabsten.dedicated.co.za/sites/default/files/11/bnv.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-10 15:21:25 [32/68] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x36f4d 225280 d6850c6b86ccc38485224f7306eaa4eb 35d12062452f009f0e0073828f8adfb0a79398ce
.rsrc 0x3a000 0x19aa0 106496 136be8023c25dbc29c283edd0930479b 473c1973b8721f523cd637d3ab50dbd4f7ef0309
.reloc 0x54000 0xc 4096 81b70e488c347be5ac796a5007aedf1c a92379e510c8199acd8eac4687b442cc7d95be44
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4f360 16936 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x535c4 90 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x5365a 1094 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
System.Xml
FIle type: Library
KERNEL32.dll
ODBCBCP.dll
USER32.dll
GDI32.dll
mscoree.dll
IP Found
6.9.0.114
URL(s)
http://www.smartassembly.com/webservices/Reporting/L
http://www.smartassembly.com/webservices/UploadReportLogin/
http://www.smartassembly.com/webservices/Reporting/UploadReport2
http://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
http://sawebservice.red-gate.com/
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
String too long
<RSAKeyValue><Modulus>0bV1qZA+QL1yZh22yHehJLOzO0/4vUwm6LfL7VVn6Sso0kaOligyF9MvAC8ynG7N9Njfi8GI1/FGI6teSWvG7BgWXkQyC4nYg0Rlx+NWfracm7nOYUXG4TiJPoirh2vfMerfcxgbe7Skb4ftGEX9u6iIEMf1q1orI2K61tELzk8=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
tvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwww`
wwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwt
vwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwww'vw+wtvwtvxwwwwwwwwwwwwtvwtvxwwY
O#wtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwww
wwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwww
tvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwt
Please wait while %AppName% is sending the report to %CompanyName% through the Internet.
SmartStackFrames
-
Powered by SmartAssembly
appdata
StackTrace
connectingFeedback
sendAnonymously
IEnumerable
SmartAssembly
DateTime
AssemblyIDs
SmartAssembly.Attributes.PoweredByAttribute
Cannot connect to webservice
ERR 2006: This template was not properly processed by SmartAssembly
@1B2c3D4sfg5F6g7H8
UploadReportLogin.asmx
Email
We are sorry for the inconvenience.
InternalName
OSVersion
{logo}
K93oCu6gaxOwgopMMWs1ZicGYHIKRADt4j3TbNWeyp8=
Object
Failed to save the report.
StackFrame
I prefer to send this report &anonymously.
mscorlib
UnhandledExceptionReport
ExceptionStackTrace
fdssssssssssssssss
retrySending
Software\Wow6432Node\Red Gate\
Error reporting completed. Thank you.
Translation
More
Ignore this error and attempt to &continue.
LegalCopyright
%$&$'$*)+),).-/-0-HGIGJGMLNL
error16
Key
saencryptedreport
&Send Error Report
errorMessage
31bf3856ad364e35
Value
Length
True
Comments
Apowersoft Photo Viewer.exe
Debug
GetServerURL
Transferring report.
rosoft.NET\Framework\v2.0.50727\RegAsm.exe
continueSendReport
&Continue
</RSAKeyValue>"
ditto
Cet6Xe47iuuUqL/f4Go16Q==
preparingFeedback
continueButton
Apowersoft Photo Viewer
Rank
&Save Report
1.1.5.1219
default
v0.0.0.0 from 03/06/2018 07:35
.ico
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
dontSendReport
debug
Shutdown
fsdy]
TotalFramesCount
SmartAssembly Exception Report|*.saencryptedreport|All files|*.*
ERR 2006: {0} @ 0x{1:x4}
dsfs
VarFileInfo
If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.
Workstation
dsfsddfD
TypeNames
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
labelEmail
FileName
DoNotCaptureAttribute
\Microsoft\Windows\
Name
To help improve the software you use, %CompanyName% is interested in learning more about this error. We have created a report about the error for you to send to us.
ByRef
network
poweredBy1
Copyright
SmartAssembly.exe
Method
Preparing the error report.
{0} Fatal Error
UNICODE
SystemInformation
{data}
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
email
%AppName% attempted to perform an operation not allowed by the security policy. To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
6.9.0.114
SHA1
{0} cannot initialize itself because some permissions are not granted.
UnhandledException.Objects[{0}]
{5F909764-0875-46A1-8619-A184C636D6E6}
This
Assemblies
error
cancelSending
SOFTWARE\RedGate\SmartAssembly
RemovedFrames
CodeBase
"<RSAKeyValue>
SmartAssembly.SmartExceptionsCore
ReportID
2008-2017 Apowersoft Ltd. All rights reserved
&Email address:
ERR 2001:
FullName
UploadReport2
ERR 2003:
&Cancel
CustomProperty
ASCII
current
LegalTrademarks
ProductName
panelInformation
8$U
AnonymousID
Static
Powered by
Message
Null
Pointer
/AddExceptionReport "
transferingFeedback
d98c1dd4-008f-04b2-e980-0998ecf8427e
Save as &File
Could not deserialize the obect
UserID
X64
4axrt5biN/muKPbmlwY3+w==
pleaseTellTitle
You probably try to launch {0} in a partial-trust situation. It's usually the case when the application is hosted on a network share.
Reporting.asmx
%AppName% has encountered a problem.
ProductVersion
CGkmgzWpxZs9atUtI1mgyUcahF6FgQ6wtfTka4pJSGE=
__base
&Don't Send
PreviousException
Assembly
TypeName
DoNotCaptureFieldsAttribute
UnhandledException
OriginalFilename
&Retry
ExceptionReportingForm
System.Windows.Application
saveAsFile
Data
<RSAKeyValue><Modulus>0bV1qZA+QL1yZh22yHehJLOzO0/4vUwm6LfL7VVn6Sso0kaOligyF9MvAC8ynG7N9Njfi8GI1/FGI6teSWvG7BgWXkQyC4nYg0Rlx+NWfracm7nOYUXG4TiJPoirh2vfMerfcxgbe7Skb4ftGEX9u6iIEMf1q1orI2K61tELzk8=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
&OK
Count
headerControl1
headerControl2
headerControl3
To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
Connecting to server.
&Quit
AttachedFiles
ServerR2
N/A
8D7qilzN8+CSpLPqxEf66kxDdsJ3R9lyp2tAQtP2EEs=
ERR 2004:
SecurityExceptionForm
TtvSnOsbT5ucO/89V4OscA==
(0x
Path
Please send the Exception Report to {0} Support Team.
UnhandledException.ILOffset
Lqs9z8whpWlhgTohs/FEFA==
Software\Red Gate\
Assembly Version
PresentationFramework,
temp
CompanyName
FfpDaj2Qbx/USBKNveGrhZHVczKEHP+3vkZr7xReaoU=
Objects
#rundfdsl32 .exe#
ggggggggggggdfgdfh
panelSending
bmY0GvtxvNav7Y1b0myYXg==
ILOffset
ERR 2002:
*** Information not reported for security reasons ***
lqBGV/jkLhpfgF1ymGkEYKe913eXXk/TxV8+ERpGqG0=
TypeDefID
\Mic
ObjectDef
ERR
System.String
UnhandledException.MethodID
Exception
%AppName% attempted to perform an operation not allowed by the security policy.
Apowersoft
Current
Field
panelEmail
poweredBy
If you want to be contacted by %CompanyName% regarding this error, please provide your e-mail address. This information will not be used for any other purpose.
waitSendingReport
MethodID
continueCheckBox
Security Exception
windir
completedFeedback
ERR 2005: The 128-bit encryption is not available on this computer. You need to install the High Encryption Pack in order to use the reporting feature.
NameID
FileVersion
quitButton
VS_VERSION_INFO
Error
Do you want to be contacted by %CompanyName% regarding this problem?
http://sawebservice.red-gate.com/
CustomProperties
StringFileInfo
pleaseTellMessage
saveReport
label3
:!K1I
ServicePack
ExceptionStackDepth
Save an Exception Report
%AppName%
000004b0
(0x
gdfsdfdshshsgsdg
dsgfdg
FileDescription
warning16
UnhandledException.Objects.Length
data
%CompanyName%
Microsoft Sans Serif
UnhandledException.ExceptionStackDepth
.png
AssemblyID
Start Menu\Programs\Startup\
sendReport
OSPlatformID
AttachedFile
dfdfdsf
Please tell %CompanyName% about this problem.
You need to run {0} in full-trust, or at least grant it the UnmanagedCode security permission.
NETVersion
SmartAssembly.SmartExceptionsCore.Resources.
w1w#w'w+w
,H&&&
:SPu
evww
G`ww
wMwXwXwtv
ExceptionStackDepth
www v
@fp#?
|twt!
@ww"!
?$!
SystemPens
Int32
bwww\
vwt /
Nawt
vwt +
Rvtv
sL1s
ctv.!!
.$XE
nwwD
wtvwt)x'w
o[ys
www $
t(),
.(*-
3SW?'
_kwt
get_Height
| sD
DateTime
p>6O
,%&+
7"' D
/utv
Yww$$
*(),
,%&&
suvx!
Substring
wwwtv0t
wMwXwXwtvwt
_ 7w
tvx4w
~wwt
ptxw'
wwtvM[Yx
!.(!
w vYt
get_IsByRef
get_Controls
K 8]
Version
kstv
{Eq{'
Qtvw
05{c
mZtvD
#uww
CryptoStream
get_ModuleVersionId
.ZwwD
;SG'&
kwtv
wWwVvRt
K$6w"
|w ;
wEw+w
xsww
8 <0
PNG
&&*ou
Evww
w+w=v
3S'?
PtrToStructure
5vwT!/
WM^z}4
============================n
ControlStyles
Marshal
7x D
W 6w
Btu
3Sg %'
'swt%
\www
uvx!D
4)&,
wwwww?w#w v't;x
8R[%
v)N
wwwG
,SG'%
www:w
op_Explicit
RuntimeFieldHandle
wvww$
System.Security
%(
Kd6w
z|wwL
guwwNJ;
rww$!
),++
tVx3w
,3&&
px``
lfj}
GCHandleType
wwwtvRt
EndInvoke
w+wOw
3Sk" N
R6t&
*jr:'
'IDATx
WriteElementString
0R|!
$6t
wwwww$v8t&xDwWw"w
wTv:t
get_IsValueType
pvx%'
,/&&
#n6w
$6t!'
vtxw
Z{}y|5
x! y
EnableVisualStyles
wwtvW
7w !
wFwWwYv
c),(
_G?e
Abort
vwtvv
{z}
set_MinimizeBox
wYw v
(0V
wtv4t
hrxw
7? Y
I+Jf
get_ControlLightLight
wt$
OAJ;
Y* +
vwtSx$w.w$w#w2w:w0v%t?x!w2wRwww1w
g+$
w+w0w?w=v$t:x2w%w+w
&+/
Format
_www
vwt5
xwwRw
K]ww
+! D
z4Z
AppDomain
=v #
www !
GetMethod
w:W
www
2www
-,& o
get_CurrentDomain
ThreadExceptionEventArgs
swJwuww
xDwEwYw
0RsWvxw
vtv&
r@3M
G6ww
sdfgdsfg
Jtvw
{w
PADPADP
=k-
get_CanFocus
7.6w!
www'<FF(6
w+w:w
xww"
v+t8x2w#w0w6w#w2wTv#t
PaintEventArgs
ut3S3L
OpenSubKey
X |uUqze
,X3
Cvww
xwtv
{ uwww&
FromBase64String
o>
#%
&$$$$$$
www1w
ToByte
(/(*
wDw3w+w:w v1t"x'w+w
www 1
@b<9
{r pD
Path
set_Text
jvww
.nEpIK
YvwG
jtww
~=O({
&( '
UTF8Encoding
dww$
6n]C)
9wwww$w
#Blob
Control
-(&&
www
3ZwwD
guvx!
"!5v
get_Year
,c&&&
`z;O
@*IN~
add_Tick
vww'uv
www'
, &*(
uww.
uww!
GetILOffset
uww$
uww&
u<SgL
BindingFlags
}www
Sswwx
}wwx
IDictionary
H$!
Type
,S&r
wYw&w1w'wtvwt&x
uvwtvxwwww
wwwtv1t
IEnumerable
tvx'w
F 8;
Ev<#F
x+w:w
4xwwD
wGww!
7&6w'
xWw1w#w'w+w
}ww$
xWw9w
Dzww
Cursor
..U<
W1%8:W
[/7x
uwwt
uwww
www'v
$E DG/ A
NeutralResourcesLanguageAttribute
get_ExecutablePath
Char
d~wt%. D
w v+t
%'w
L;VA"9
1tvw
Yzz}Pvwtvxww
0R8%'
osww4
osww7
6tu-{D
w|~w
get_Name
GetValue
osww'
3S$>
X38$W
Y\8C
GetSystemMetrics
gsww
E3@r
0vxw
3Sg $'
-6w
-6w!
5vx1
www'
Sc g
3#Fh Y
uvo$wxwwwwwwwwwwwwtvwtvxww
wtvwtvxRw
Wtv.-
ToolTip
t\xww
kernel32.Dll
.uvwt
ZD(
Evwwx
yzvw
3S_"'
Gtww&
, &&
g0L
GetEnvironmentVariable
Dwpkm
gsww\
vstv*' $
tvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwww`
MethodID
ReferenceEquals
xUwwwRw
.text
List`1
v/{2
# 8T
GetString
`X'pu
set_Proxy
wTv't
Component
ExtractIconEx
GetObject
+-vGGN
nSTj
w+w wMv5t2x3wBwDwFwCwZwFvGt7xAwZwCw
w+w<w
bC'6w
w+w9v
tvxwwRw
vvw' /
Convert
wwwyh
G(/E
Button
System.Configuration
FlushFinalBlock
r=uwww
fstv
StreamingContext
:uvx.(D
;PN/&
)&k/w)
CD!>9/O=056
SmartAssembly.Attributes
6vww!
- &&&&&
rww%'
-+&&&&
PerformLayout
wTv9t
uwww.
&'#&
gw!#
-'&&&r (
n/w3
ywtv
lrxw
StackTrace
`ww'$
wRwDvEt.xwwww
vtvxwwwwwws
Tvww
v+t0x
$$!$
UwwD
$$!
wtvwt7x
*xww
wwwwwtvwtSx
,F,$
=:([
- &&*(
CipherMode
O'2tv
vtvxwwwwwwwwww7wt
F8`8
8 NV
ODBCBCP.dll
SmartStackFrame
5T?Em'
WriteEndDocument
GetFrame
serverUrl
qwww'
vtv!#
DwwD
w+w7v
System.Net
&www
<LMi
8R`()*
SetBounds
- &&*o
`.rsrc
3`tv
OnTextChanged
-Z}C
tvxww'w
CreateDecryptor
>w)*
get_Default
<www
}))/+
xww7
:itv
kernel32.dll
$! D
jX}
xww
xww!
gsww
xww$
gswt
css&%e
Enumerator
+(#*
N)~ V$
suww
get_CodeBase
8-<_2;&
Vvww
%tEXtdate:modify
&&&* +
'-7x
uww
_sww
]wwD
w v+t&x
Flush
wwww;
4Mvw"
Nwwt
Nwww
N SC
add_ThreadException
_ 5v
s@'$
4QX\
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
wWw$w
xwwV
Focus
wwwwwy|z~vxwwYw
tvxwwwwww$w
m#'6w
w8w$v
get_IsPointer
AGww
opvx7
nSww
PlatformID
GWF8.9888886x
xWw3w
v+t!x$w(w1w#w'wYw=v9t?xwwRw
PictureBoxSizeMode
>w'%
www+v1t
>w''
>w'
wwwww$w8w1w v t7x%w2w+w1w
x1w/w'w+w
S/ww
wwtvx
vvvv
vWt&x
xDwYw
WebRequest
7y%IQo
I IdH4
gww.
GetProcAddress
qnst
tvx"w
www'v8t0x#w w6w%w2w+w9v
XWWW
-@&r (
tvx$w
Bo'6w
guww
vwt8w
GetBytes
gJwrtv
twwtwx
d=Q
kvww
w+w2v#t&x5w
Process
gL1g
w+wRw
opvw
x+w;w
OnPaint
- &&*oT
SmartAssembly.SmartExceptionsCore.Resources.ok.png
wwtv"
xxww.!
Pwww
~stvw
&++++++++++(x
kernel32
Hqww
get_Top
Write
/ 6w
g$!
w#w v.t*x$w
jg6w
Mw#'
5www
www4w
get_Assembly
wn>Jj
AnchorStyles
System.Xml
ww>t0
UInt16
wwwtvTt
%-&%-%1- o
h0vx
w(v1t
| /
xEwwwww>w:w6w$vWt&x
GetArrayRank
MeasureString
MySettings
z(*-
3S_!&
xwwwwc
i]Wb
DrawText
wMwXwXwwwtvWtvx wYwMw4w%w2w0vMtXx wwwww w4w%w1v9t xwwww w4w%w3w6v tvxww'w
gsww)*
~ww!&
-:&&
Int16
get_ClientSize
c[$7x
wswt!
wwwtv$t
Invoke
Z(5v
SoapDocumentMethodAttribute
,()*
System.IO
WrapNonExceptionThrows
get_Now
rv1G
=+P9
AsymmetricAlgorithm
user32.dll
#$!
+] ,
:uww
Gvw#%+
?www
?wwt
dsww
6w.1L
w+w6v
w+w6w
nuvw
/uww
Cwtv.
$7x"
Bwww$ $
pvEwsww
E BI
DelegateAsyncResult
{>|S
prxw
%.$!
2v*Jz&6
/-6w
SxH[^
!!&'&
7w-/
2015-05-26T15:24:29-05:00oJ
.M3J
xvww$$
wvw#!
STAThreadAttribute
\rxww
K~8_{M
a}wt
wwwww2w
IHDR
tvx$w8w1w#w w6w&v2t*x:w
-*&&&&
:wtv
RDD/
wWwRw
wwwww'v8t0x#w w6w%w2w+w9v
EQ~M
w vYt
v+t&x
gsww\;S'%
vwtvx/VESA]N_$<
4%26
Cvxw
-g&+
swww-/*
wwwRw
'vww
wwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwt
System
EventArgs
? 6w
Application
,S[L
tVx9w
wEwZv
r{$z
^vwG
xwwwwz}~w
vEtvxww$w:w#w'wWw$v
gffffffdhs3434.My
;S+%&
Ssw
svww$
svww
w1w v'tXx
vwt%x
Awww
evwwx
Ngww'
,3~.
`(i(
O{utv
,)~.
w+w9w4w<vWt%x
vYt%x:w1wwwRw
v+t3x
svwwD
CreateInstance
cvww
0sg~
*vxw
w]wtvwtSx
tvrw
Ueww
c>RX
wxw?
,pc9!gz
MethodBase
#Strings
:yww
System.Collections
vwt%
Image
2ShvpwwL
AuvwdvxwOvwwswwwwwwtvwtvxwwWww

wWw#w
_~w$D
xwwww+w8w
J2ww$
.(),
wtv.!
doww
D)X )
ProjectData
uww#!
wwwtv$t9x1w#w w6w%w2w(v't
Environment
%'&!$
gwtv
wEwYw
w! '
3STr
OnFontChanged
Q^,!J
x+w8w
wtv't
auUXQq#
gstv
.+(#
Sswt(*/
;S_M:S4
.9&j
lJwrww r
wxwwww
|vww$'
Hwwwwtvw4vxwwww77
$*6w
get_Position
System.Diagnostics
dY3<
GetType
set_StartPosition
(vtv.
2015-05-26T15:24:29-05:00
vYt"x:w'wwwRw
>w$$
b|ww\;S'%&
7x$!
w+w w$w+v1t"x'w+w w$w(w1w v'tXx>w9w>wwwwwRw
OpenWrite
\z) V 0
HwwD
Activator
wAw+w
,v&&&&&
$'!$
$=p/
*) y
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
WDw3
gpvw#
{&6w!
Nvx2
.(,)
uvwtM
[www..
luww
wwwtvYtvxYw
set_Anchor
&u !
w(v"t
set_TopMost
DvwwV*k
wxww!
v+t;x
"*Ad
xwwwwwwww$w
pIDATx
pr]"
6"?
bG$7w)
9|ww
tvgtvhwwwwgwwgwwwwtvgtvxwwwwwwww
set_Location
Color
_swwvwww
gwx21f'
{0LJc
bo'6w
%$ .
t"{?
uvwt
+&6w
wwwtv't
set_BackColor
3P^-'
SetClip
Ssv{
~qtv
get_UTF8
wwwtvYt
w+wZv
get_Width
* 8p
t\',
. C H L ] p }
4vxw
w+w'w
w+w'v
r7+(#*
6<n,c-
licenseID
.>ry
user32
6w!
SystemColors
xww$w
x+wRw
`v eN2c
wwwww?w
5mBO
<`1o
wpvx!
.' !
t*x w
guww'
shell32
w7'
w(v4t
get_ManifestModule
)u 9
6wD
SmartAssembly.SmartExceptionsCore.Resources.data.png
oJwrwt r
7x{&
-3(3
xww$$
SaveFileDialog
BitConverter
UnhandledExceptionEventArgs
-= ^
bcp_colfmt
v+t2x
wDvx
swww
swwt
tvwtA
swwx
wDvw
-%&
Label
t*x8w
^Nww
uaww!
IHww
v ~K
v+t'x1w3w
&&&*
get_Second
-%&&
vww?
bK`7
Form
Iwww
S3w!
w(v9t2x$w
,O+*
vww-
vww.
{t!
lwtv
lwtu
=l%
GetAssemblies
vww&
ApartmentState
vww
vww!
w'<FF(4
CommonDialog
ftv.
&77
;S_%
hrwt
sZtvK
vwtvx
vwwN
w+w5w
Delegate
9w $
vwwD
AssemblyName
Ma6w
7t /'
3SsTwwt
3SsTwww
vwwt
vwww
get_Visible
vw"
D&sY
pvw1
Seek
kuwtOJ<
www$w
OnClosing
wMw[vXtvx
{ww'
M`tv
@j,k
QWFNNOZEGGNW
saww&
?vwwD
{sww
LastIndexOf
/Y/S:{;f
] /BMK~3
\pe5
Enum
6w(/
#.zf
(),)
Zww!
xZw1w#w'w+w
(),*
zz{
p_3Pn
"+!
get_Day
GetTypes
set_Name
rxww
}Vww..
tvw-/
'O-E_>
Z{]v2
www$!
www$"
wtv9t8x#w'wWw2w
+
(),D
get_Length
}xw%'
Zwww
ssww
drwt
*)6w
EndApp
DESCryptoServiceProvider
x+w$w
rvww!
0R4'
ILOffset
wwwwwwwwwQv
bg'6w
>f,/
-J2IH
@Yog#
GetSystemInfo
Contains
wtvx-
X)1> >
ResumeLayout
swJtfwt p
5v #
wtv+
IDATX
wtv/
trxw
e2ww'
ValueType
wtv
[Svx
wtv&
System.CodeDom.Compiler
set_TabStop
3Scvwww
}7PG
k`Kd
6uPgg|
wtvK
Jtswt
v}$$
ToLower
7uwtOJL
wtvA
?#6w
wtvY
wvww)/+
w(v t
get_Count
w1w#w'w+w9w
data
w ww
Trim
GetTempFileName
' 8l
$' +
ButtonBase
wtvx
Sdswtvx
lsww"$'
/6w!
x+w9w
Jwwvwx
Namespace3http://www.smartassembly.com/webservices/Reporting/L
KVkj
get_IsStatic
GetField
G(,D
SmartAssembly.SmartExceptionsCore.Resources.current.png
7 rL*{ sD
vwt%!#
FormBorderStyle
vwtvx!w
UInt32
ToInt32
+Sc g
SerializationInfo
t"x#w.w+w$w
WebClientProtocol
+Os
pwwL+Sk
wwwtvwt%x
get_Version
set_Dock
wwt%!
w1w#w$v+t0x
vrtv s^3So
ToString
wwwwz}wwYwwwYvwt TUw
-3rY
sFy2
set_Timeout
2o~-')
2g.-
wtwwwswww
-2&
;Sg
evwt/!
v/x2
GetWebRequest
6w/OJ
ZT <XD
Cursors
[sww
q46L
&&&*o
~ww?
e9{;:
ClearProjectError
vxXR
Split
#PF &
3S??
w+w4w
wEwtvwt&x8w'wDwWw'w
wwwww0w
tvxwwZw
TQDd
6w
CreateGraphics
;SO &
ICryptoTransform
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
GetObjectData
wTv"t$x;www?w#w#w'w9v
Usww! D
&&&*(
wWw3w
%tvw
:www
Ssww
Sswt
xNw0w
(www
www+vwt xww}www
svww'!
$$$$
ShowDialog
)#JSl
8 !
^#u#
&&$"!
!A*{
10.0.0.0
G Pp
^www
Swww
twt>
8$!#
cg$7x
8$!
3qvxwww
t/+(,)
set_FlatStyle
euww"
6w4Jwwwty
'fgg
System.Security.Cryptography
u5M2{
&%%%
3Sv>
MemberInfo
R-6w
3K {z}
t*x'w
SettingsBase
wt!+E(DEY
vwtvx'w8w'wDw$w
Start
Combine
wwwtv_t
swt&
wvww
6w $
sD4L
s.x5
wtvwt5
NwtE
x+w1w#w'wWw9w
C#6w
Prv{
IDATx^
oJ.-
o
o
o
$9w!
LinkedListNode`1
Mvww
{wt6
RegistryKey
1wNJC
]yww
swtv
9a&g
t0x/wwwRw
tuvx!
Int64
zvww
w(v]tvxww w
wDwEwYw
wwwww"w
LinkedList`1
4s'!
S*6w
`"6t
yNtv
Vuvw'
oP
XmlWriter
nstv
pHYs
.ctor
RCC
PUUQQTTLKKKL
V()*
wwwtv
0hpJ
w1w#w'www6w
MXXwwwwXwwwNvwtNHwwRw
1BO(
t*x9w
SGww
Aj uci
wtvwt
+H o
vwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwww'vw+wtvwtvxwwwwwwwwwwwwtvwtvxwwY
&* 8q
get_Text
"*? !
wtvwt
Qi^]TKGFF9F9x
www]wwwR
IK..
xxxxxxyxyxxx
nvx!
w+w9w2w#w0w5v#t3xWw#w
x+w>w
S3 D
DrawImage
Name
tXx&w1w&wwwRw
%6w
%6w!
)} I
6t!t
Gvww
www'w8w'wDwTv't
:99X
SelectObject
gpvw<
Module
\tvt
xwwww;
Array
,$&+
+"cd
w$!#
w$!
LoginServiceSoapT
@.reloc
Gsxw.
q}&'}
, &&
vwtO xy
Jwgww
CompareExchange
GenerateIV
Xq }
$'#!
{swwM
{swwL
cstv$$
www?w v#t&xWw'w
$&6w
S&6w
'-6w
u?)'
W 6w
Byte
get_Chars
tfwt!.
CryptoStreamMode
MoveNext
u''
get_MetadataToken
get_ExceptionObject
+SO_jSM
wwwww]w
z}7
t6w
?'
& ,w o
h 6w
?oww-
pUww-
Spvx)*,
wTvw'
vwtvx'w
0R|Twww
FromHandle
GetVersionEx
bg'6w!
dEq1
.()D
%tEXtdate:create
wwwww5v
wNwwD
wNvXtYxXwwwwwwwww$w
MessageBox
w+w%v
Swtv
kpvw
get_Location
w v5t
v #F
,2&&
!8;J
System.Web.Services
%twwN3SLy
%vww
Uwwt!
gffffffdhs3434.Resources.resources
<%!#
ww$!
set_Url
Lwww
vhwwZwgww
set_TabIndex
pxw6
www'w;v'tExWw$w
7Hww
7Nww
wWw2v#t&xWw2w
xv!
get_FullName
rww!
wtvwt0x
Gvww
~utv
niin~%
0R7&&
get_Item
"www
tww&
~zww
FileStream
4Dvw
ww2D
Zjz
RGE/
RuntimeCompatibilityAttribute
*vwwx
get_FieldType
\xwD
t*x6w
xww]w
wwwww%w
}G^J
wwwwwwwwwRw
w@v#t%x<w=w
Assembly
0)Q
vwtvxwwwwwwwwwwwwy|z~
.resources
DelegateAsyncState
wwtO*
w1wFw5wBv?t
, r
GraphicsUnit
nJw ww r
guwt
#Sp#!#E
3wt
Hvww
-Xmwxj
If6w!!
twww
twwt
,%&&*
wwwwFHG
Scwx
..633333333)x
-A&&r
;SK\;SsN
SuspendLayout
>wN*k
w+w3w
`f6w
#So%
_bY
kN2|
wMwXwXwww
wxw$
Dictionary`2
%,N?
`wt'
|z?>>N
GetHdc
RSA1
>wvwww
qWww
>wvwwt
NewGuid
,D&&
'ww
#So%$
& !
6qww
J]ww.D
vDtXx
\(fW
UN*
#TwwG
6xww$$
Objects
tvx$! D
\vww
jtD(;}
IContainer
Clear
!,()
|Xm1
DDDD
+ 8)
QFO,
1+ y
wvvw
-W&&
Prwt
;SK&
wtv=t
xwwwwww7wwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwww
tww!
GetCustomAttributes
+
%J,|
e5v
cpvx\
'mww.
wTv5t
$9w
ISerializable
wwwwwww$w8w2v#t!x6w%w2w+wOw
yvw-/
pwlA
x+w3w
FontStyle
vww$!
set_DefaultExt
\#6w
,?LR
wwwL+Sg
set_Height
>w#!
^\1K
_("bI
S7pvw%
g7(),
OO `
w1w#w'w(v
vwwwwwwwww
xwwwwwwwwRw
;ScL;S[x
|rxw
WDww$$
vxwwwwww'2ww;vpv
7Hww"
wYwRw
sww'!
sww'
be-BY
set_MaximizeBox
qGs@x
tvx9w9w#w'wWw'w
uww..
x+w&w
ResourceManager
Show
GetExecutingAssembly
wgww..
3SSL
PropertyInfo
XmlElementAttribute
wtvwt6xwwwwww$2;24#T
3SS\
W<6$
Z__??
\txwNJ3
ewww
\vww$
, &*oj
t'x%wwwww
IWin32Window
s)4L
w(v5t
32$#ww+
wtvRt
Pvx
5`L~
3Pbywww
Twww
'$!D
Xr7x
Y]wwD
cHRM
CreateProjectError
sEMq
ovvv+
1wwsww..
_stvw
get_IsPrimitive
k"!D
z%K {
~ww%'
Interlocked
'' '
'' $
()/+
t*xRw
'' /
ww.!
R|"!
+sww '
!tvww
vwt
tVx$w
1>3}d
, &&
-;`k9s
YB)kBQ
x@w2w3w
Pn|
vwtv
wwRw
LoadLibraryA
;www
w+w2w
Empty
))/+
cstv
Xwww
Xwwt
.www
uww
+Ez 0
&&&&&&
b B+
Ssuy
w vOt@xwwww$w8w1w#w#v6t$x2w+wOw
2o '
k}7N
vwt!
vwt
vwt/
wqvx
bO'5v
3Sg \
f&J4
xOwAw^wwwRw'w
vwt3
>aBSJB
4twr
x+w1w#w'w0w
% ,L
a:'5v
*6w!
bg'5vJ
xyww-6
v+tSx
IndexOf
www
w+w$w
3~XY
set_ForeColor
&&!
Buww
Xww
x8;26"#DEY
JdQwty
- &&&
Encrypt
Gvww$"!
wGwwwwwRw
&6t
"Powered by SmartAssembly 6.9.0.114
*|N c
utww
set_Enabled
orsu
aZ(6wNi
xww>w:w6w'wWw'v
!T\
Read
B$"!
/wwwwwwww
,{&&
w+w1w#w'w+w<v
`ww$
bvw%
;v'M
Kvww&
w?wwwRw
value__
=zDDDD
uwwr
X}ww
e2tv
C)($
|41N*g
3SO $
2{$!D
3SO '
set_Interval
xwwZw
*r[)
t: ^
Yxkv
vtuxw
r('
AddRange
qmwwD
get_Font
wwwwwwwQv
gAMA
G Pp\
x$w1w
EFww"
wWw'v
XM+h
t*x:w
..!
;Pn&
7(),
~Oww
tvw"!
W.6w$!
Ssvx
8+vc
s1twtv(
'9w
Ceiling
C,()*
get_Left
.cctor
AsyncCallback
gwx22g'
set_FormBorderStyle
6,ax
mscorlib
<N2{
u!!
ZkQZaSA
w+w>w
<8$1
MX[v
w1w v't*x
s^3So
3S3$'
^"%/
mtvD
Refresh
y^=o
wwt%
>w(),
){2:
ControlCollection
;P^-&
xywwD
v+t4x
RSACryptoServiceProvider
Guid
wwwwwQv
/ 8K
Pvww!
@ /
<5ww
ContainsKey
System.Reflection
|yyy
DrawLine
:NB
@Jpb
tvxww?w
d`2
~vx!
j0X`
www+w;v
tvx]wYw
&&* +
RuntimeTypeHandle
H!AJ
? I}
ww?3%:34DEY
<uxw
gsww\#S$'
1~J%
L;Sg
d wr
wWw9w2w#w2v
Vstv+! D
w(v1t"x'wWw9w
6{vwww*
set_ControlBox
UInt64
#SC%
ToInt64
*Gww
T*6t
Xww$!
w+w?vZt;x
o\
(R/O
t*x1w#w'w>w
Size
Append
get_FontHeight
<d-W
uvw%
uvw'
set_ShowInTaskbar
}ww.-
Rfc2898DeriveBytes
uvw-

op_Equality
zw{
'$ (
,K&&&&&
;uvw
vwwwww
'www
0R'<
''!'
ttv)
w+w#w
$78b
QwwD
w wwwww5v5t5x3w2w1w0w?w>w>v<t:x:w9w8w'w&w%w'v#t#x!w w/w.w-wwwtv
suvw$
www'w
O#wtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwww
TextBox
wwt7
bp&6t+
uvwg
w+wNw
2S`]
JNd<;b
bw'6w'
3wt%
AH D b
Q}ww
wTv3t
w+w1w v't%x
OnVisibleChanged
,9&+!
wwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwww
;D
261F
D5i7
u9Ew ww
- r
wwwww'w
G.6w"
|w~XZ
nxww
lrwt6
{+(#
7w$$
SKswt''
ywww
t*x4w
gs6w
/(*-
KeyCollection
ywwD
www(w
2@(0
w+w1w
Y*O*`y
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
{()*
get_Rank
n|ww
yww
{(),
%'+!
yvww#&
31sw
Kvww
get_Message
!This program cannot be run in DOS mode. $
* +
DelegateCallback
File
cvM#zw
xxx%
xXwww'w6w#w?wtvwtMxwwRw
$%.
2pww
* 8
9,wt
6t&'"
utv&
ArrangedElementCollection
XmlTextWriter
Dispose
SJw ww r
fq6w
FYGFWWZTV
kpvx
"%;[W
wwwwRw
WriteAttributeString
37t!
9_{P
,9w'
3SCw
?|.&
3SCt
Z?0/b<
h3ww
6w$!
ServicePoint
FromArgb
b''6w
Y% :U
7!7w
wNwOwYv6t4xDwGwZwOwDwEwAv6tOxBw@w@wFw2w2w vwtvx$w8w1w#w w6w&v2t*x<wZw:w
get_Window
vEtvxww9w9w#w'wWw$v
wwwtvwtvxRw
wwwww$w:w v'tVx"w
set_ClientSize
utvx
vww$!#
wWw>w
=o$
+;E
get_Key
wtv;t
PoweredByAttribute
3yvBv
v+tNx
+ ^L
86v77:
bvwww
t)x0w
"gO!
HHww
6ty2
www'v:t"x'wWw"w
SetProjectError
AddValue
ReportingService
Ewtv
S7sww%
dVgt
wEw+w'w
sL$
op_Inequality
Tsww
GetManifestResourceStream
7+ y
GetLength
+$!$
avx&
lo;\\
zMnE%
SeekOrigin
w wAwCwGvEtSxwwwwRw
o&6w
{ww
Strings
Delete
IntPtr
get_Right
..,
vWt0x
x-$8
wuww#!
v+t7x
w]wwwww2w
`txw
2{$%!
x%6t
v+tExEw5w
_pvwt!w
gdi32.dll
rwwww
Microsoft.Win32
+%7w"
_tww
FileDialog
www'w;v'tExWw'w
xrwt
gwxw
sD '
wTv2t
w(v;t
#S@$
-I(/
6,IC
XZwwD
{`wwD
-tvx
GNj+
a'WyE8
rutv+'
InvalidOperationException
"\72
;Sct
t*xFwBwYwGw+w8w
M '!
wwwwwwwww$w
cX'6w
vxxh
RijndaelManaged
get_FileName
&+nr
Kuvw%
ZH $
M,zv
&&*(
J(f&#Mc$
add_Click
PK
wwIw4
uwwww
nstvy
vxww9$$($
BlockCopy
ezww
GetProperty
-&ww!
%,22
DockStyle
rwww
y)u
tvxww>w
zpxw
hS+Z~
`sww
SizeOf
M<M
6 8Z
wt%/!
SecurityCriticalAttribute
`uww
wwwww4w
|yww
#SG %
set_Title
vtv+
vtv.
vtv/
tyvw
xww!!
:TJR
&+'~
w+wCwEw2wCw5v2t4xFwZw6wEwDwGwYvCtBx1wCwZw5wDwDw7vZt0xFwNwBw5w5wAwAvCtOxDwFwYw
SmartAssembly.SmartExceptionsCore.Resources.error.png
w+wGvEt4x
?x$$
set_Visible
wtvx'<FF(0
wWw7v
fwww
tuvw
vwt\xYw
&&&&*(
'uxw
7w%
,"&&
7(*-
wuvw
System.Windows.Forms.Layout
www9$$(=
z&%')&&%'
w+w"w
`135
Boolean
Ywww
_xww
Y8!8=<|
&]wwD
ww$27?#1;'1
\wvmlhfddYYNx
get_Checked
&&&&
UJ?j
~)1
MethodInfo
www>w:w5v'tVx"w
aww!!
wWw"w
get_Keys
;] !
CompilationRelaxationsAttribute
K)ZJ
xwwwwRw
3S#4?
hQc{
k~ww.D
w+w1w#w'w3v
t*x5w
MemoryStream
AddLast
tvxww$w8w1w#w w5v%t3x+w:w
wwwtv$t9x1w#w w6w%w2w(v
vJwgtv
w(v't
get_Graphics
vww$
;%.
get_ControlDark
HttpWebRequest
}vw9
pvxx
vww'
GetServerURL
r*&
yvwwx
#%. D
IDATx
6w1-
v+t%x
pw2E
>w D
gsvww
+(*/
w '
h)))
muvw$
Dvxw
vwww$
~ww.-
vwww'
H'&$
_swwwwtv
!!!&'%
IEND
s()*
~tv0
SetToolTip
BringToFront
Microsoft.VisualBasic
PF=
w+w$w v
u#!(
(R/ ~
utv=
ThreadStart
7+(#
svww $
1kSQ
Tpxw
u&#
--&&
P~6w
>w
%{!
wswwD
sS7Hww
w+w wNw6v3t2xBwDwFwCwZwEwDv6t@xZwCw
vwwwv
eM+{{4%{$!
SOw ww r
+m ,'
osww
oswt
csww
sww$!
Rectangle
aV'5v
get_White
v[tVx>w
pvww!
cwww
g 6w
2|%!#
|txw!
c.6w"
Concat
7$!
zvw-(K
w+wQv
StringBuilder
get_Data
xWw?w
www'<FF$3&)3
w7w_
w(v6t
DialogResult
&{ )
cww!
qvww
IWebProxy
www#w
tvwt
w+w0w
&&*ot
{A&$
CompilerGeneratedAttribute
wwwF
wwuu3
wwwD
get_Hand
- RCC
tvxww1w$w'w
<)eS \?
get_IsInitOnly
Tuww!!
w+w!w
wwwV
wwwU
v
_Ni"
3qw{_
|ww'
vwtvx9w9w#w'wWw"w
wwwNj|
www
wuww
suww&
SmartAssembly.SmartExceptionsCore.Resources.default.ico
www?w#w v'tVx$w
wwww
wwwt
Yvxw
7vxwwRw
Copy
Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/`
wwgw4
xEwwwwwRw
wwwx
get_IV
AssemblyFileVersionAttribute
Mvtv/
System.Text
GetName
5~vw
;P>0
S$6w!
System.Resources
zC2{
www&
www%
www$
www#
www"
www!
www
LOMS
w(v:t
vwt&x8w'wDwWw"w
Rwww
www6
1gww
_6w$$
www3
www1
www?
www;
www9
iwC2%0
*c!
w'91 !9%2+:
]& 6m
GetElementType
set_AutoScaleBaseSize
CuwwNJK
$$$$!$!!!
. 8j
Vww!
{L2k
S3sww
ptxwNJ7
vtv)
WriteStartElement
kww!!
bK'6w*
wwww-
wwww!
Vqww
wWw1w v'tVx;w
0RPL
wwww'
Icon
ltvw
=vzuww!ro
xWw4w
jwww
0v9!'
{' G
w+w9w
&6w'
SetValue
&6w!
&6w
wwwwC
;SGN9g
\wtv
?x
www]wZv
--&&&
sww '
s vvwt9
wwwww
vpww
hsww
#1V,
xv 0
,g _
uZw=B
FieldInfo
Font
sswtw
xwwDwAwGw5w
9mwwD
^.6w
p& H@
LocalMachine
b|ww^3Sc
w{tv@vww
String
ostv7
bw-/ E
ICollection
_CorExeMain
System.Xml.Serialization
Copooopooopopooopppppqpooopoo=
;vxw
6w"&
ostv'
kN3?#
&Hww
b_'6w
gpvx\3S'*,()
MA -R
v.w0
Timer
+o*7
UploadReportLoginService
vw8&vt:
2|/.
InitializeArray
^0R`
wtvwt\x
pR+p7xD
w:w6w9w
&Rwwww
wtvQ{Sx
(*-%
6wvwww
Microsoft.VisualBasic.CompilerServices
)$!D
$F:
get_Namespace
pro"
(*-*
xww$w8w1w#w w5v%t3x+w4w
ToArray
.(),D
Wuliicc``YZMx
>w{3:
EditorBrowsableAttribute
n(*-
,Ln)
rww
swJwvww
2gLO
5vww
wwwww'w8w'wGv't
tvxwwwwwwRw
+dW~
&&&&&
cpvx\#S'&
wIwwwKwwwVvwt
xww'w
CopyArray
Wutv
9uww
vtvx
--'D
0vww!
?YA!
|v#}
X:VK
./)K
(y5v
?rvw
5v jNJ
Attribute
n|ww7
n================ABA=========E
System.Drawing
"$ D
www.w
*www
3SOL
L9fx9
tVx6w
k48B`
wwwww+w2v
S$!
PrM"
gqww
>vww!
GetGetMethod
Giww-
BeginInvoke
cpvw
wDwYw
wwwQv
get_OSVersion
vwxwx
"gC!
>tOj,
6wwt
!tvw
w(v9t
Default
&&&8T
32$#wwT
tVxZw
'&'
-k
Reverse
get_IsEnum
>wvwww+%$
gvww
bk'6w
qvtv'
ostv
.eww!!
{$! D
add_TextChanged
RuntimeHelpers
2|t8
<Rz8
+|ug
owt!
{wtfw
=vww
xa5:
get_Platform
Ztww
6ww!
k! D
w$wtv8t
3ScwwwwM2S\
[uww! D
wwt
www$'
%5v
6ww!
Vvtv
lvww
qS6w
XGT*
FromXmlString
wwt!
wwt&
w1w#w'w+w2v#t&x6w
sNGsa6D
ywwww
ywwwv
www]wYw
Object
wwt/
wWw5w
65On
Registry
-? Q
8;-#vxwwww"wEw/w
wwt>
wGww
| Z}
w1w#w'w(v$t
t0x#w'wYw
a@J#
muww
w+w v
dvww
get_IsArray
ww!$
Dukc
, &&*o
pwtv
wwtv
get_IsAlive
drwt
FlatStyle
RWpv
wwty
vwtvxww$w
3So%'
UH6k
1v#&
T7x
EditorBrowsableState
GDww $
tvxx
Wpvww
=v.#
$'%+
v1t.x'www]w$w
/!ww
w+w9w1v#t1x6w#w2w+w5w
+uww
,]&+1
l8ww
rvww&
X@I1
u-{D
3Sg##'
vwwwwwwwww%
h_[[
T4N=
www$!
gww..
ScaleCore
get_Size
Stream
!4()
O"PT
wsww
vwt;x
SecurityException
6w!$
wtvwtSx
+SoN
&&&*(H
7()*
w(v>t
#vvw-
a*Rf<
:zww
>www
Exit
Free
&"!
get_Bottom
Hwtv
Jw ww
vWt5x
_`95
&&&*(m
7(DE
SmartAssembly.SmartExceptionsCore.Resources.warning16.png
-))G
tvx:
tvx$
w+wFwAwYwGw(v8t
<SGL3S_
3Ewrww r
tvx!
get_Minute
wwwwwwwwwwwwwx
)~!L
add_CheckedChanged
!#
>wwx
2+ y
b{'6wD
&0rK
v+t5x
wwwwMm
DataType base64BinaryE
jq2>r
tvxw
t*x9w4w?wWw$w
www$D
2{"E
sg7L
>w..
8Ae)
3S7%'
gvvx
|'!'
3Vfa
sJwsww
p:"|{

tvww!
&* +
8wtv.
'<sr
vxww
3_L
gpvx
gpvw
awt%+
fp6O
OperatingSystem
"6w!
HttpWebClientProtocol
Mwww
w+w1w v't*x?w
get_IsLiteral
(wwww
Awvx!
/FCKA#
pJt wt J
Svtv
FormStartPosition
Dvwt
>kww
Alloc
v/x3
Brtv
System.Threading
vxw!
PictureBox
tFxw
get_Month
S4:
Ww{32TE
MessageBoxIcon
swJw7ww
wtv.
{||yyyy
* Q
st@t
UnhandledExceptionEventHandler
System.Web.Services.Protocols
xww$w:w#w'wWw1v
Ewwt
zvwt/
gPww
>w(*E
3Scwwtv
/) !
{N2c
Wwww
`'(
dwww.-y
ww. $
.vtv.t
zww!
wtv$
wEwtvwt>x#w#w'w:w
svww
>jm
set_Filter
:vxw
RG$$
vxw$ D
Buffer
get_Current
hww
Z) *(@
%%.
pwww
,www
get_ApartmentState
Y vxwwwwwWwwww}wtVwtv
sdfgdsfg.exe
Dwww
*S,M
Wsww
w(v8t
vvwt
vvww
Btvw
>dxw
vxwV
Owww
}vw<
9w,!!'
&&! D
t*x>w9w$w
bstv+'
(%h4{H
OnResize
Lvww
GetInt32
3>*
hwww
hwwt
ReportingServiceSoapT
!"!!
?`ww!"
wtvwt%x
!NR*
EndsWith
\ww'$
puww
**********%x
,Z&+
puww$
ww%'
utv'"
hrwt~xww
m|6w
K&-1i
wwwwwRw
w+w2v
?wxw$
tvxww
SmartAssembly.SmartExceptionsCore.Resources.{logo}.png
get_StackTrace
rwtv
Q!Dh
VSVW
cg$7xJ
~ 5v
&&(?
X[fee
;wxw
vWt8x#w+w4w
get_Major
x))/
yvtv!$
w2v#t&x+w9w
wwwtv9t8x#w'wWw$w
SoapHttpClientProtocol
Tliicb]YWTTJx
{LO
Point
get_BaseType
#,..299
wwwtv2t
w"w%w;w
YX
v2.0.50727
+h
~?[I&
cu4&
svtv $
-P&&
=v WNj
set_Item
Atsssssssssssssssssssss s s s=
ToUpper
+-1
zAtv
I$bC
GCHandle
swwt&'
wtvV
!7'$
set_Expect100Continue
twww
wwwYw
get_HasElementType
Exception
wwt%
(`De
Gvtv.
r}vww'"
vwtvxwwww$w8w1w#w#v6t$x2w+w6w
.,(D
StackFrame
, &*o
w(vRt
Wrww%'
vwtvx4w
www>w:w5v'tVx'w
get_ASCII
&#%+
atvw!
tvxww#w
zxww
set_Size
G)6w
WriteByte
GetTypeFromHandle
IAsyncResult
www$ D
(*+,
RW"E
$JYYI
/`wt '
GetEnumerator
wwwL SKx
SymmetricAlgorithm
~twwJw ww }
0vw"
b7'6w*
wWw1w
GetDelegateForFunctionPointer
.(,G
MessageBoxButtons
wWw1v
()*,
SmartAssembly.SmartExceptionsCore.Resources.error16.png
R3 1
wsww!
HwwwwwwS7DGEGBMA@ON654321wwtv'?s~wwwwwwwwwwwwtvwtvxww
|xw..
Sg!D
tvxRw
Graphics
/www
xww%
tzww
wwwww$w:w#w$vWt%x
%%!G
uwt
ApplicationException
^vwwD
ToUInt64
xwwww$w
x+w1w
UnmanagedCode
System.Runtime.Serialization
`rxw
Hwww
uwt>
>w-E
vWt4x
vwwwwwwwwwwwtvwtv
{stvL
w]ww
\7sww%'
]v0#F(
wBw(v
set_Position
System.Collections.Generic
aww'
aww&
e!-G
xDwBwOw
t:x w
SmartAssembly.SmartExceptionsCore
wwwwwww$w8w2v#t!x6w%w2w+w:w
System.Runtime.InteropServices
4www
lrxw7
aww?
S|ww
Owtv
Math
c_{P
set_UseMnemonic
`sww7
6w''!
OwtE
tvx !
[vww
Spww
wWw6w
qtvw
>w$#!
ThreadAbortException
&...././/...x
~vwt
~vww
o*#
System.Runtime.CompilerServices
{6w
awww
xww$w:w#w'wWw$v
Xz}y|wtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxww
t:vw#
f|ww
SByte
;So6
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
oLD~
>w$ #
;So&
w+w$v
w'<FF(1
5Q `
, 8;
#SO %
)(,*
`tv+$!
XRv{
set_ExitCode
v\t]x+w
%!#E
w+w/w
vwtvxRw
w+w<wYv:t
1rguww
n;^
TransformFinalBlock
6w #%
uvxw
email
set_Font
b3$7wO
UIntPtr
-5v/
UploadReport2
;q6w
ZlwtE
MGiI
Close
get_IsTerminating
$& $
v+t0x#w'w>w
&&rq
IDisposable
% G
Exists
~C1{
5v'$
cpvx$%
rsuw
CreateSubKey
tvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwtvxwwwwwwwwwwwwtvwt
set_Mode
www=v
65;2
xWw:w
wWw9w
3#w:L
73vx
w+w6w;w1w v't*x2w$w#w
tvwtSx
7w!'
xww9w
A*,(
vWt?x
.6w!
DrawIcon
+S_L
<Module>
,`&&r
{$!#
WriteStartDocument
Xuww
mEl5b
www?w#w#w$vWt#x
t*x1w
(vwt/D
MulticastDelegate
ww=v
x+w.w
j/3a
CancelEventArgs
H&6w'
H&6w!
}vww$
}vww&
0>1A|
fP5*V
{pvw
Bitmap
SizeF
$&.'
mYww
get_FrameCount
!oHw
get_Hour
Avvx&
>t%+
6.0.0.0
www[www\vwt#6>&"2ww^www$&8
StartsWith
=$!
ttv$
=tvw
1 (X
2{
xwwww%w
Nuvwdvxw'vwww7wwgwwttwtsxvwwwwwrwvwwwtvwT|xwswwwwwwuww
FAtv
x+w6w
6#5v.
xaqc
wwwwwwwtv:55ERGE/RGE/RGE/=8$ 74;JRGO/RGO/
CreateEncryptor
(,6w
nW{H))
ThreadExceptionEventHandler
appFriendlyName
#GUID
Panel
(uuq
wwwN*
#wwt
]swt'
set_SizeMode
get_Exception
buildFriendlyNumber
3vww
"k%"
Synchronized
vww
3$!#
wtv$#
Qkkbal
$#!K
_b`}
{d6w
Uwtv
www!!
www!
3SOJwrwt ~
xWw1w#w'wWw2w v
ToHfont
!! !
k 6w
csww\
kwwt
M}vx
ApplicationSettingsBase
=vtv
++7w
SetStyle
vw_'vw@
set_Image
j|ww
$&/'
tvx1w
www+w1w
cswwt
cswww
cswwv
&* +
ZtvK
7&'
tvxS)
ZtvD
_swww
\svx
xwwww>w:w6w'wTv"t
~tv+
+S/ =
EventHandler
Thread
)c6w
iwww
,>&(X
Gtww
zww"
zww$
r7$
y{uww
LSQcB3?OE
<v&6$
=g()
+tt#
Encoding
wwwtvwtSx
vwtSx
csww?
-e&&&&&
qvw<
get_CurrentThread
v+t!x
GetFields
Utils
+S/ }
bKGD
CheckBox
W32%
-57%
get_Module
CryptographicException
kvwwO
, &&*oi
2` G
rstv
1fN1
WebServiceBindingAttribute
V:99 u/nE
;S_"&
1z$"
wZv9t3x#w+w&w
AddrOfPinnedObject
#$6w
wNwOwZw5v5tExGwZwOwDwEwBw5vNtCx@w@wFw2w2w w(v
[pvx
d;;Gz
3G{W$%
,'&&&&&&&&*(
www$w:w#w$vWt&x
ksww
v&+
kswt
4vxw'vww5wwwKvwtvwtvxwwwwww7ww7Y
wwtvRt
Qtwt
&/$D
81D1
Sos
-+&&&&&
gsww$
gsww$$
H &m
AP}
@yww
Replace
set_Icon
System.ComponentModel
v1t"x'www w]wYw
Spvw
ReleaseHdc
Spvx
&!" "
vwt5x
$6w"
$6w!
pvJt~xw
5vww$
xh7w
IEnumerator
Swwtv
w+w8w
mscoree.dll
add_UnhandledException
rw'#
8 8J
ek!w
wwwwHHwt#
w+w;w
w+w;v
w(v$t
wwwww$w
wwwtv;t
`-6t
vwwuwwt
8?[V
'vvw' /
$$$$$$$$$$
`wt/!
wwwww$w;v1t"x w6w%w2w+w:w
drxw
wwwww;w
pppppp
ivwt
*6 Q
1zZtvx
dEr0
m'&&
swJw
System.Windows.Forms
8' /
set_Cursor
uvttv
wWw:w
get_DesignMode
wAwCwtvRt
tvw5
BNww
qhtv.
~}wt
;SS\
get_ServicePoint
b7x'
a9w!
Cwww
Rcty
xwwww4w
, &&
tvww
tvwt
get_InnerException
"\g0
p0..9
GenerateKey
{pvxL
GeneratedCodeAttribute
wYw+w$w
WriteEndElement
5lwwD
swJwWwt
3:2rLT
tvw'
RHL
ToBoolean
* 8
www$"!
vWt%x
&&*o
cw.
wxwwwwwwww?
SmartAssembly.SmartExceptionsCore.Resources.network.png
N)bw
2{Zwww
wWw'w
7(S.
Ro&
N#PZ
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-06-11 13:57:55 2018-06-11 14:00:50 175

3 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-06-11 13:57:55 2018-06-11 14:00:50 175

8 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\bnv.exe.config
C:\Users\Seven01\AppData\Local\Temp\bnv.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\bnv.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Users\Seven01\AppData\Local\Temp\bnv.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Users\Seven01\AppData\Local\Temp\bnv.PDB
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\#rundfdsl32 .exe#
C:\Windows\Globalization\be-by.nlp
C:\Windows\assembly\GAC_32\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Windows\assembly\GAC_MSIL\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Windows\assembly\GAC\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources\sdfgdsfg.resources.exe
C:\Windows\assembly\GAC_32\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Windows\assembly\GAC_MSIL\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Windows\assembly\GAC\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\ODBCBCP.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2604.7263515
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2604.7263515
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2604.7263562

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\bnv.exe.config
C:\Users\Seven01\AppData\Local\Temp\bnv.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

Write Files

Nothing to display

Delete Files

C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2604.7263515
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2604.7263515
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2604.7263562

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bnv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\793196c2\66edea4f
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|bnv.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|bnv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|bnv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.0.0.sdfgdsfg.resources_it-IT_bdaccec94cc64df6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\12abbcda\2e1f39e2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.0.0.sdfgdsfg.resources_it_bdaccec94cc64df6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\12abbcda\6d7b1c31
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\bnv.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\13CAE0B4
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\13CAE0B4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
kernel32.dll.QueryActCtxW
ole32.dll.CoGetContextToken
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptExportKey
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
cryptsp.dll.CryptDestroyKey
mscorjit.dll.getJit
kernel32.dll.GetCurrentProcess
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
mscoree.dll.DllGetClassObject
mscoreei.dll.DllGetClassObject
diasymreader.dll.DllGetClassObjectInternal
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CloseHandle
odbcbcp.dll.bcp_colfmt
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
cryptsp.dll.CryptAcquireContextW
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.LoadLibraryA
kernel32.dll.GetProcAddress
kernel32.dll.ReadProcessMemory
kernel32.dll.CreateProcessA
kernel32.dll.WriteProcessMemory
kernel32.dll.GetThreadContext
ntdll.dll.ZwUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.SetThreadContext
kernel32.dll.ResumeThread
ole32.dll.CoWaitForMultipleHandles
cryptsp.dll.CryptReleaseContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister

Execute Commands

C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-11 14:00:07

Detected family: #Malicious

TheSystem Itself @ 2018-06-11 14:06:02