MalScore
100/100

oler.exe

Is DLL Packer Anti Debug Anti VM Signed XOR Related 2060
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 510.50 KB (522752 bytes)
Compile time: 2017-05-09 03:09:32
MD5: 32024c6919d4995fa51cfaf4a1d98ac1
SHA1: f5d332446e6d9894f4ebbc3fd9bd4d08dbf1752e
SHA256: b1ee25cb08c7fe4cc7e909730df5bbde8f9b88ab7fb1226494c24b44df7b4e4d
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 oH P_@lr .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-02-16 18:40:34
Last submission: 2018-02-16 18:40:34
Filename detected: - oler.exe (1)
URL file hosting
hXXp://prosciuttiamo.it/ice/oler.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
No report available
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
oH P_@lr 0x2000 0xd660 55296 429a659eedbc9befb02693ab40a1e011 0432fa3395de747bb647d131191f07427c3892ac
.text 0x10000 0x3dce0 253440 b2984f16fb23a3631bd96b2e5c307823 3523e166983c123877ecdd6e2f606435e6bfa4bb
.rsrc 0x4e000 0x33a20 211968 8c1d78ee5cc0d9f22e02b7cb2d3f53d2 7759f6f0437dcb2a759dfb1a56573119a0d882fa
.reloc 0x82000 0xc 512 4e4a67c1ffad72c688ad19cfcdc4fd13 d14eeb3fb7574ba336983085b070684b350f4b1d
0x84000 0x10 512 da8c3884b98792b6bef8967fcff539d0 68e0303f596b209249acb6097527889af6738d8b
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4e130 209740 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x8147c 20 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x81490 928 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x81830 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Northeast Utilities System
Assembly Version: 0.0.0.0
InternalName: oler.exe
FileVersion: 14.2.22.1
CompanyName: Northeast Utilities System
Comments: idebuqos
ProductName: LightCycler\xae Master Mixes
ProductVersion: 14.2.22.1
FileDescription: LightCycler\xae Master Mixes
Translation: 0x0000 0x04b0
OriginalFilename: oler.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
14.2.22.1
URL(s)
No URL found
e3e87461-ca27-d028
e3e87461-ca27-d029
Northeast Utilities System
idebuqos
Assembly Version
e3e87461-ca27-d020
e3e87461-ca27-d021
e3e87461-ca27-d022
e3e87461-ca27-d023
e3e87461-ca27-d024
e3e87461-ca27-d025
e3e87461-ca27-d026
e3e87461-ca27-d027
14.2.22.1
e3e87461-ca27-d09
e3e87461-ca27-d08
e3e87461-ca27-d05
e3e87461-ca27-d04
e3e87461-ca27-d07
e3e87461-ca27-d06
e3e87461-ca27-d01
e3e87461-ca27-d00
e3e87461-ca27-d03
e3e87461-ca27-d02
InternalName
e3e87461-ca27-d039
FileVersion
e3e87461-ca27-d012
Copyright
0.0.0.0
VS_VERSION_INFO
StringFileInfo
e3e87461-ca27-d036
e3e87461-ca27-d042
e3e87461-ca27-d043
e3e87461-ca27-d040
e3e87461-ca27-d041
$#('+*/.2154647484
e3e87461-ca27-d038
e3e87461-ca27-d045
e3e87461-ca27-d015
e3e87461-ca27-d014
e3e87461-ca27-d017
e3e87461-ca27-d016
e3e87461-ca27-d011
e3e87461-ca27-d010
e3e87461-ca27-d013
%q^
e3e87461-ca27-d037
e3e87461-ca27-d033
e3e87461-ca27-d035
e3e87461-ca27-d034
e3e87461-ca27-d019
e3e87461-ca27-d018
e3e87461-ca27-d031
e3e87461-ca27-d030
000004b0
LightCycler
Comments
FileDescription
oler.exe
Translation
OriginalFilename
LegalCopyright
VarFileInfo
CompanyName
Master Mixes
ProductName
e3e87461-ca27-d032
26d98a19-86fe-b2
e3e87461-ca27-d044
2018 Northeast Utilities System
ProductVersion
sE'j
>FB^
K%o\Y
Yk& . l
P`Jm
`)hT
.H] [
Ha"O
5Mibt
^ | ;&
?4x+?,6zk`<Ize##7J'?F7yo%
ptM
mI}Wc
(?-GP
U8IE
O6>HS
@m&}
@g+E
5<%|
Q?N'
PNG
4Dpu1
eXS$e:16V^S(j/f`?MpdT7#0'
}LYnW
;f A
|Q.63
!-7vJ
dJn_
ObjectHandle
ECb/aO2-J`\#7+>t`AzEGuP!!
Z'$*
>bFg
65z3
};Zc1
4Ev3
5TX,
x~+4o
ResolveEventHandler
>RKQ
AutoScaleMode
get_Height
IU`N
\S,a
f7@0
qB>L94
sZzF
{)i R
3TIQ
b{4
4ZsF
c"%3
3gma
_7?-)
<osOT
ZIa7
xDKF
e_U{
A2x4
50mV
+;E^::
_Ixz
G n`
)G|X8S
yr3<u
0c=k+
]tTN
#mIo
)7k)
E#F(
?)=Wz
4kq>$o]
$44132f42-a8af-4c0c-afc6-06c31f299639
acBL
m$:r
h/^D
>bHV
Version
+jBT
_rG
}lk6
WdH77k&
T_|%
Uw>)
S vF
CEV0
X (+
-P[8
%[Pi0
D<"N
8Xv }I
set_EnabledCalc
J;1"
}V!Qt
r.eY
3 ZP
n}<s
,n@?
C<K{
`[U^
_U@-m
ox!~
AssemblyTitleAttribute
px^<
#H})
sq("=)
{*.(
r ;e
;Nt
d)2rD
ControlStyles
-6j
Marshal
LcB$
0 _H
!~[Q~
[FL\v
7?K*'O
mZ[C<O
j@] #
x*~4;
.CMj
y cU<
L4Dv
vcqb
+(@inP'G'9E]M(9R8/AagK]D%
v24;
Z|L|[V
,*YN7I
duVn
Uu? 9
,;2%%hbk
hzf3<
8w~(
op_Explicit
RuntimeFieldHandle
>]d
e}J^H&
_bj,
}IDAThC
I; C
4Lox}
~wM#J
O9$jg
=Je)
': 8
OXmO
9tT/
fI>L
N'iI
_ F=
GQ,#
nT*3 B
ZXJX*V
ZXJX*J
z*0D
EndInvoke
m*Yup
!eC^RVF;~HEm+_L'D1Af*\#=#
;\7a
V8_#im
\u0]
P'7#sTX7>86G{YWao"#{ 5cG$
qS>@b
1m17M
*y4,
L"/2C^Zt1CT-c[Q}aqq]@4]n
)nLR
9W`(
M5nCZ
13$;2
m9-R
9\ME
Sm}FD
rV!q
*><(
[4TU0
.CQc4R
fIC
,Rg4
"[U*
GOY
?)=e
9WrC^$
6NH*wW"yn'LI|aSxd="RDlZ>!
v:6Y
O\:S
#<Sm
Q^aIzH
7V79
ITqh
WK&4
,PO'
77u6
:8[2#"
set_Alignment
,zx}o$Rw$AW#p1wR-{@$jvk>#
]<2_
8)4"
^X.:
-*vb
%~=2D
Xa^<
`pCQ
B_B%1
&sVxE-eM=JxMwSt#>Mw678#*"
&6iCR
Mb$P
9u#iEf]
pnM<p-{>; ELg)2Do\>bsY4?
I8H|
J(!0r
xo
qM:z
`c5c5I
0A_`
gOQJ:UmcU 8DsY_%S|Apj;h#!
r^Z`
y8G_**
ZD}%kG$<WR,@M2i3Adxt4}mW*
ol;6
C2H\RAEML_VcV3x%`gWv6uWD#
?|7r
$'O
h)j#
~4kj
"&]'9X1s`2m|[F]v#Nlt<e"^%
uxjmH
IFz;l=!9<wT068&gC_TN_$my$
h}b0
'p |
1;[Y
ao~${
l<{F
3F&;#GupOD4fO6dGY#zk~*2P$
\)05[B
>'/C&T:'+IEplgb3m8VS*GbH#
v= 4
mg&T
]R(Db
s<Vj
l@PBA
Ayo
~ ?C
AppDomain
d1wi
xZE?
lg:2
JoKo
7_*\
hVaW3@
8(1R.W
\ y '
Vyq
>BE'{
8l*i
SQG?:#v5c|A39dGLQXh#}zYk
Swsj
kRU9
% #_
W%uB\
ImR3
pX<
rOy#
U+VXD
]<t
Be*:
jC:D63Y
6}>!"
K3vHD
rDC
%r9!dA!x!w(kbks{2ELSy71n&
|{;l
b\ca
|y~$
+j&u
= 4
C3%>_
M5)
EE8=
>S.6
75.(-Z
? [Xp
tCH(
-':d
hg[
yO =
NesnG6tKd]r^*))7e3cwEUWF
Vr]L
jUR"
rF/h:
AssemblyTrademarkAttribute
ouX
M$MT)
d6f w;
Dk4E?
}pO
Z(SpJ4
z>PK
twwM?
,99/2
<(|s]
b++ 4
Bdr6
.XXL
)8sl
SvTi
I^_3
9$-LN";,WnN`i,e22B:q"y!2&
a_[)
>-mq
4%"Q
o 99<
H5{>c'"
3?u*?Dm'UZkCG4dsN8uQ|6 A'
get_TabPages
x/A#
_MV%g}
kN!~
#Blob
Control
AJjt
w8U&
)F7,f(/QR```zgTKJ~|\wVt?"
kuT]:D<s[%5DN#/-XWo0sdKq)
U,s [
;`(<
th]61
r{KM
b]\gT
qE:_
#q<}p&/
u-CM
X[DB*vJm7B@$w|3Z'f6W M$)%
]Y Z1
_Z$j'S,{2M>$nLs/*UC>5!=C*
*uj > g
Z%.9
m,Tn
[?|&
PW:`n~)
VJ{/
yjUAg
]X@F
F|A"
%U(^
bMsr)8uM$nuS6)"]YYqh2po2!
ey(6
/fYC
0zkkk
S%vq
BindingFlags
7;%`
Ak(bk
) yrD
%[/r
NSB-d@_mJ~k'`a-f_HJkm`Zj$
9L] 1'
Tf/q,
A/Sa
_U%C#'>n=C|i&0mj9'j2sG&R%
|%y1
p-J=^Z
bF@-cT=&}vq?of@mAp;J5~`'
}:8p
*GVH?
IEnumerable
j Nc0
#+Qq
L96jFb
?$M'
.LA[!Z
wEW = m
tj =
>g.o
g>qC
AycXkH&Ui5%D@:L&PAY6*CPQ+
B;~[
~Z *
jaf1
;& c
~SSK
8)|4
Cursor
_]\t
s?P6
*fL_
jq2/7
W p|AB
,IyK duETIp]"VVOC=<gpCnf!
<Ai7
7$B;
0FMF
Char
*)'S
T, \
HG6k| 'oO:EaWx9 VTp^4lZX$
:7|}u
nnRG
SH-F
eHq7
cx)w
O`O30bl){ex0V4h>\dArcmUS!
vLxS
k{<w
JAm]
KsM~
Hb;#+dL#sYeeot{-gt*(~_7"$
GetValue
$eb`s#<C6^&sURF {rC9eDLw$
]}kj
0x|Z
|9A5D
?kGCW[o
tu J$o
/>&,
j|=o
xa2gq
P- .
5U#P
get_X
get_Y
LSjN
+NBZ*
t17
#*2%
\b`D39Ciefr9IsMAvD-Apbyo!
En?6T
V#+$
0E%s
`FabKr
DuC@
VirtualProtectEx
^PEww
get_FullyQualifiedName
m.9D
[=tC
8D]G
q.x
WgRQh
Tx<#
]_p(^yo
H,VT
|+`!
?"4CD!
j gC
zT #
57N)
-7@
H#=PM4K
~\M+dJ5
_cS$
_vV{
|j%2{x[KL{CBi1)e$>-kt|0a"
Ze"{r
}kTl
&0HK
HeIX
:R5`
0Ui^
*CTD
OPl>
C5(
dnT(
hJjE
.Tb(3
s5>R
z{;3
SJ8~%,
R&=I
b!'sU
$0HP
ZzH:
{%,~l
XVu
/q*[
H43)
J Uf]
Kbb|\\PQya>@BQ11dT&3^!cs!
#T>xU+$Ax>0Yg!K&b~>*nw_T&
{ k_
x4vO
A@B0
P&L9+
UK#"
.text
}'9r0LCGG+49V38-0?ep00SA&
gxzE
d<DSI
bj Y
KCG9h_e5
mzJAB
GetString
v?2L
p0$
>{B2}
MCMo
|C!e
/&0^>G5'z"SRQ/yaOw/]hS*'$
RwBA
dC$FZ
B*U Y
Xow,
d%w4
$W6np=
,3ME
%9CX
C3ui
8qYt
I8Yj
l#4^L
bD['
o 7t
iz}}
gm *z
}T'&
Enabled
1urN
object
j=*#
@uM}
mKC`
QVHc
+tz2a7
V776Qp"iL (S]9%s!Ysg*wBm'
.5\p
r`]a
g'EV1
^{%Jp^
&L6~
t\Q;
D@9#x
[]OhZG
SXklhq
%3}S
_ SE
zB<o
~y+'6
rq!8',\{95Vy?C5\DR[<zbQS#
uMDA
aFMW
f*Z2Ke
2*13
N&R_
D,=%
OSTp
B$D>a60i2<u9Sf-H3X$74Q-3#
`I**.)
G'2i
w+'a
Wk-
%KC_
Po{]
}7 3
Q-d\>]=[|q{TuX\?48KpY#r-'
0 :Tt
> )s|m
D;!:
%Kebj:Cg
v[ K*
kX>Ab
U* M
)Q&KM")C:mK7*Yr<=0Gp54D !
yojh
wO+~
*EXt;d
%u}-
%*O_
%K;%
,sDX
d3wf
1eui+
i["!^
ij4>
9:#$
NfMnE:+K/h3a@IP#aFaA'|/ )
+yC1
I|Q]
s?&A3'<@N=M`,`\N-G)A"u$3&
XFn4
gyqfs
:~}m\2ANw83Vg2=pHEah/,GM+
~Mzajqy
EBC4I>|3hI#L,K#cHDKT1C9n$
F|36
?:mg
%'kY
V>qL
Z`
B&l4,kQ
@17"
BIZ|B
PSj=$
q)4+Fo
Fp2.
`62*gho]tf3-1t%W$ool|3Oe
r fd
WfF#V
`Ze?
{ ZGD#B
} -S
|6S$
VU.
Crs&
k_Hc
FHN8
\@XHMZJy,
`.rsrc
dmngn
j\*Q
_m `
_ITK
uC]f
Yp 3x
e+$9:
8*)]
J=Y,3
get_Default
PX`K
kz,[h
4F G
I@m
EPGG
#_.vDB+
kernel32.dll
result
vDL'
|)9V
U01tl>3dC
1tqR
,:?P
ljw"O7(
Mg&(
Ohyy
yH K
t!2b%cqY}u
/q}s
:Y^X
#0t7_o&\Sx9,Z4:N0J,]dgbL!
9b8D
KA kP
2 yo
Gdd
>;o.
Ay1v
2NiPdA
AE=8c&R|(b6z&^gs-Z1>]$'B0
+V" i2
>%R<E
xBoC
x1|@
f|9]OBp
_/5r
5b;
po)E
lP@)
X ?
2)dL
+!',k
unf:
\MM Y
N h(
8V=_
h{C
C_L?
A&BQ
FWj}
H>Kqy
2vg}
1GAe
\D!IJ]
\(hN
K|'q
hpGy
jr} $
9Vk5
yFx_
CD!q
31rznIX$a4zjI!~]9^1`>Z)a&
Y9-.GL
I{ i
e_Kk wu?
<PrP&
l!+7E
(/%P
("Z]S
s p<C\
qtPp
X#Kf
Z@74
<[z0
6/Vj
:x^~
H+!
*Q'3
^V~6A1Q:_6>i=-v^7_0dG>E%%
@>v-
bb< _
_*,-?.>
W<|R
C LM5n
-b5_
MouseEventArgs
0( ;
z*j5t
{%SFz
KL6J
(>S"37tBF`
Ib!/4:qOji+,j0VadhLzRfef$
Y%iZ'
k3@%
7$g,
O@ =?
}}?O
ev{}
c2&\*o
q{.@
v}G@@
V|U&5
MBMV
GTY;l
7{S4?
:!f\
y33/uk~T8VJfLJim|9fI_5~^"
rL)^"R
Ni p
g\$Q;#FtDhS*0FG@*x9z-KG)
<"|W(N
k_=w
7Z'M
Y:1
W)r]s
69C>
LMLL
p+(|S4
(
ps#5l*%<
#R~z
*r j
7ita
*y*c
`EAR
0 %I
JjN U$)^
s+;(l
"19!_
Fl_@.
SS[z
U+fb
9@%l~^5SBuk=F)Jpb3df<NV]'
&3<(f*
t&<y
"Ws
oBER
[J2B
g E>
yO`EW
2k2%I
!KQ
Foh`F
h~iK
O4E A
eA;
P&A6n_!&=A1"#_=0>L|"5<l,C
PeL7
;9<#i
2dLG+dB1EIosJ*qPR`{1Q2d@"
XJX*V
">w=
rlZ^
B &E
AQ$~
N09k
3n
5K} 5
)ft'
Write
MuIk
OnMouseMove
u=r
`7'o>s
=kN&&
yrlir7T
n$``
\zWY8
If] E
u4S +
get_Assembly
2Ll-tn\
*uc+
( l{TpX99R\->UWe4H(w'zZR!
u/"?
y/7Q8k,6Yr7#=wc8S6*3wA/s!
Z `^hw
/,fz
n`}~
^Pn'S)P
@6C= Z8
H$y-a
ZI{n
z?#
0\#*jC
u=$
Br {
( h?
Pu)v
uF Mx'
pRg*
UwEymFF
j*q^%}
G NV
H!6;um*0>R|*9BznDX(-V2'\"
T}}a
F=6CC
HM%>v
7do[
System.IO
*"Dd
[@"N&*ra{
WrapNonExceptionThrows
-=Tbj
;o4>
k4"M
R;:k
Ea~b
cYq
Ni+V
3 ;u
{ t
g}/+fu5
Console
N,ip
:+=@
/gq7
gl
/QZX
twJH
UR&}G
<Pz&~
}c4#!
"z)4#
vf~J
d$&$
ZXJX*
||FDE
rMko
BKx
G0cB
]P*b
i 21%
=Ag,
#wfX
v)!(
mVO]
<O|
<Mt
>x&II
~'q0{
[\)U
QE:2
Suw8
"}E1
Y5Y!3TGJ&jy}P2G\g=}o~=)+$
IHDR
2x7a
SOdu
`!w)':
Q& P4
9z 5t(a
DRMZ
3@il
=~t
I=r<
e*u
&UJ491
jikg
el^k
0/$r
7! }`@
I%z:hf
4 `zJ_X
-1ha
7#"9,>
"$jJ"^
"@v*v
+#~g
/O>\]
G|K{Mt
e{i*i0DwrpnSMRPI7W6VuPGP%
:s+9M
System
EventArgs
#U9,
>{a.
|g/(j
>!Af
bYKCk%#
M<A
o9 .
Y~ES
I?yh
\axvQ
}KIm
lz1E
d45~<
TBH[*
Usrb
(:~j
Gf|e=
68Ca
n@o?
[RIxF
IH#f
4da
m o
*A4/
n m1
otC
g\YW(D
Y[rw
W37r
8V,>
,,ut
<)1<
V~wERu<
X)n*]
dPzY\
vD[z
CreateInstance
V D.6
A0>ajU
=rr'
{W9B
= [!)
@TAJ
?\Zu
* E&
MethodBase
#Strings
n V'
eo.l
`nXvuV4RL*_-J/S2r63shOUY$
RVWg
System.Collections
(pr;
ZXM(!
J! v
Lz;ex
sNiz%)
= #$&^
<*@<
SSAA
m1 V
;Ot
a y-q
"r V
QmO\
8yIl
~x)N
If3@
`'_
5!a =
Environment
get_EnabledCalc
"AnF
*>AC+
0'vk
Y*Z{e'X
VirtualProtect
\0y5B
o@ u
0 !9
N%\ o`?YA
p #q
B.<M
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
0Ki~6
hF y K
CG.dY
rPOa
X^\1
Z6E
:Hh9
1z n!
']n>
* ++H
get_EntryPoint
")aF
$9@i3qtI^V_1Fw@t)D|01VxP
{$CXu
vZLh
~g+P
~BmI
d9#n`
/!UcT
SDnICc
+^%`
C4?va
;(v=
%hko/
-o|_
}g .
<p"A
m<Rr
htbv
cMON
x~L8y
EC#V4(?
Q!{E
Z$}\
"YI$
@ Z_
GetType
[/y
0nc'o
Q] 9
0{9*k
#sb4
?o[Ho"
add_AssemblyResolve
1{`6
IDAThC
;OU!]99,0Pv_oX1`^Y<P'5Ef
YKS}
y48)
Dw%J
&[`Q
E.Id1F
91K
9g=Ef
xV&rV`
b92>8g
vK)<
b%Hs\:
set_OverIndex
CUGhB|q 1
)c3BW8
gJ;7<)
/A}Z
b?3fv
K =/
p&gP
MW /7
z)^:
L GZY>`
[yd
IS[k
cQKW${
Q=<quhDEK'2";MjM4[I<Y7Y`"
j[=O)
a5\0
1E \
4]0h
^pLd
o_Sb
Ps3R
Y5h--
TabControl
EpXP
KW ~
q\
2oGc &r
Z+ xz
A$, 5J4
aug;u
22o*
; &~A
G'HL
Ff!da
<dbg
qQd4
JZ(.Tg
\3N*>zG3|bO@W30vLe=`0M67%
9,P/
pUr(
7/}>
k3(I1~
Ga^'
dR,x
WadL
@)E\
PxVc:
Y9 gV?
pzkMt
Color
r #Y
IS\lRZ=/Zq*/5nB'HDMy1K(%"
'\`x
|nO)
RBLr[y
Intern
/Vddg
FyFdAF!
Ic$|V&
wp
Aac
set_BackColor
149e
JIyx
S.D
p?%w
EY! g
"wq
FXs[I
get_UTF8
YDddm
O< dyO#rxgxCYRz(*[YsFQ<m#
je{qr
RuSQ
|4ys
ezV"
z]Rg?4?
0xY!@Kh
5ZQ
`1H\
ZX {`
^*H?L
[_9P
FN{f
/ )O
c2 G'+
^pNh
nWMUa
d{(5
XK(.
get_Revision
D'!#6
ziXX
DDnY
-nmF
:1c>~Q
o o-'&[
$'5/:
y5
)iX
bt,GG[
/Ls
q6l{
$0hWc
DjrT
3a\K4Y'BEH% emWt|{3Ut8*3$
9h.'!
dsPO
$ `kH
/p=4#+gqMTAL7pNa'iOAb9Mm'
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
0r~n
GLwst
5}81"
ov/8
iy_%
c~]c
%f8]
zc'#[M'
!v `
)~^D
.'UF
OOi@
ZxrN
R0>;
zupJC
>Q4[
(]aj
2Rz
/-i,h
}w6
R&1ZD
5bo=
?Lo<
smr"p
V8c0
,Y'@
# )?
j
SB:^`
{F4m
<]l6A
V6B[
dt HO
[^^i'2c
|7KQ"
_r+4A
NWD{mB
.U[&
Xz6
&F> l
4.Be
JL3K
ZU 5%i
wm6{
5;z;5+
System.Core
H/x;G?x2P $=e%m]Pb{#G{/!
CHKg
+3-NP5Z'eeL=DTjW~SI58i='#
Q5++
vLr7'5
aHwl
_IVq
y?_!
E6,_
Yxtnn
@i!!Z
Delegate
I&uT/$ORkXdfZ(-emGgLRm[;
kP$Iq"63Rya3aqcQu$<GR'5N$
m w9.E
y7 )
?]l~
$%q6gU{|iB-%y}?44ebEPPbw$
!>`A
Sa4,6
7pt*@
qH#\|
3,w@
K-&h
(Fw>e
crmz$*fW
$Pl}
GuidAttribute
|77F
\x`PK
t%:kvn`Xc+T8_|IUy(!eO5@i"
Yu<;tu%
X +4(+
AG9<S
[K""M;
JrD-#
Evf!
L ,$
i" r
+jZ^~%x }-]<!jM?Rd`:i&5h
S v4
T"mVr*
7bP[
AssemblyCompanyAttribute
fm:Ww
g;AP
ModuleHandle
Ma-cJ2
n.]
:pjM
pg*52%c;;$ju9?O9 $Yc60tw+
_I`1
;75]_
.sj\
!1Xj
]^O>
Cr
/2k!
zo4c;MBOAk1n%yP/K3O8_X(g#
!5e {c
"Dn2
{IDAThC
hp.V
LL P
SsuvS
_Zq[,C
OZ`<
k 4;
W2=p
YOk1
H|mv
+\(=
ControlEventArgs
o[4/$
qd40
x)ti
lkf
*<
@.#\-Y?
H}D
-wj'
A6J5
%J\
?3/E}wO
d5Xn
ctfC
Fi#$
!`E7
g@)?
set_DoubleBuffered
a'?'
psVg
get_Length
G$1A
);9=W?Jb<tWu\9zxDc8-+G8K!
_*d;
owx I
0go=
G_W1
r(w
(;.k`|>`
JuF9
HNWr
R ;SR
8<|b:,):N#nl@5?%32/D<b-^'
7Yxt
0[1N
*.my
OU0x>~&X
uo,
j2*)M
6ah
\aO5
GEN6
50fV
Contains
YmlR
;RnQjhWG`
e-3H-
hE2S
6 [^*d
v6Qf
Gl _PTq3Y[dgx)r#Yp,a3*d'
Ki w
fU~
H">i
eB:-
( Bs
;t;{
I,RG
y;Ej
Pu+0y
ED"d
ValueType
cWa'
$.7'
v,6!
Wz7Mb
lPRw
Y=x?
]u|:UZx
m| l
~kS'
'm,.
T h]
2,Z=v=N
KeyI0
yAl<
|HY@_
z|L;
)NU?@|
Lr#yDy'
]d~g
e W=
r{-/.
get_Count
5WL'
wa (~W
9d(l
kT>`
System.Runtime.Remoting
'4Q&
x 4_@R)&[
'Ib
3cC5Ydh
~>q}l.
<wi1Yv AO9
d*=6
C6nF
9/'V
^%F K
%V e
GetField
ML})~
c|.Kg
BZ+L
Q{b;
~DeK
aV;D>
%7 $]
smI4t7@9t*TyLa2~:dX\GQO%
HX#;t
{?"E
wy>m!~T1@t`?+o,rHP~dkD ^
/BZz
a44*s
9`3d/_Z
^lQ~
G~#(tJ0=Z 5A"nw,#6U>l&(D(
"H'\2
vNL<
<HME
W?pr
{o]KPu
7w5
.m*5]4
L W:
R^7+)
J/&o
YS"U%n$[I,l93shl TO*'+E;,
h` B
[=<W
UInt32
o`ae~
*SFx
v#@fg6QWe
Zp^~co5
ipN.
@cN5
#b ls-NZE=|u%w<j$$0~6<V:$
F~<e
get_Version
bYM.4
u;L)
[F&c
[wRq-S
$McyV
:|zY
ToString
;?_
}]Xn
> [|
RgP> x
wH /
U1El
3f-i}t
![8SZ4F>i] RK%EKxDl{F5a:*
,X~CuB
Enumerable
` S
a^v+
yI'Lz
9V>I
`;uZ
42py
kS ;\
Ob=
Cursors
~PexDtv\6*$(+^+$!&^W?fKj&
!?tx1
5e+nxB
)%vO$
`Tv:
[OYKI$9E6U
g=nHLyN
},"v^
41mq
$Lx+`
U 'BO
u9[R
_ 0T
ServiceBase
G{aW
%c"E
U^.?Y
"9@bt
D:&
D@5 t
(qiU$S
^ui3
wF^mm"e
P{XN
x|{5
GetTabRect
DiA9+
O)%N/+
SbU"
[dx=6
n%[Q#
pP lp
1rYv
Mf$gO>:7#%zZ_SO?9$&]->@ )
/~yT
nNMO
M,_#{
L9U5
e 3"
R:[D
!75 J
vUqx
P='E
{ Z
0*/?j
]fBXeN1=Ogd2uVt$[M^E;#H10
T >W[
vA@{N
vXuB0
TWpJ
? F_I[a7<[qZ,Q+)(6JkgKEZ!
6(=fh
Kw1CeA48:1{iqb\m"e$-V8;3
R&;z1t
vh]mgnL=
y<Y^a$5
E|>k
Htg~O
r9 7
T"e'+
)RV C
J9Y%
1s \
L%pz
#f8\
+#uQ
ir+9
i~G P
44Dw|
,tv(y
`] &o>
umb=O4#
Eb@d
5L;:
93aF
s]=g"
(C
ruCGQ
$F0
8 74
T\n*
VbTjq
('3Gd
_c}Q)Gv
7 3;
U %h
S e!
LtS<5
WnDX
;=aC2
zZQ7
-[l]
5 26O
_!F
L hI
FmhDp57XvM'LB?QbcLG7'mLR'
4-6M
P.sU
92[d
ExkWL[
u jU
B$$2
22t}
N"y#6
FXtC&Ba
U@fz2
Wyg
WP"k
%3'$
get_CurrentDomain
Data
|(R
U 1=
U'BY
;6ebA
V7ES
?r_T
8zZ
deS.\tZ
ye <]J?7@"f%X0v28qrIgu/}'
AQT,
Ur*_b
}?O?
i;f g8
?@VAMS
DLKt7K
+2}r-|-B^)qXUPeXu#yaP*}T"
m<IrjMm^pPvb5fH~/<J#+=4%(
%e`f
lbK5
0} ;J
V'Pd
S+^Ob ~,
~:_"
x(J~
gXvk
{/Y_
pHYs
.ctor
c%S"b
&1p18B6ef']]&([}Q;I>ASk)$
F]@6
F553
h~Yn_k
get_SelectedIndex
%Q u
5ko.b
get_Message
Container
JEuF<_2Q?h_
l9 $F
[8VK
lRV1
TkeU
TnC
0Swn
? h
\AY{f8E1fW C[u(+6S;h! HU1
I&Qe
`N%e'
Main
<9!?e=
yC_S
Od73J;IpiE_%&B1ZDV|Qh"@v!
n;b0
Invoke
?8e?b
A%Gr
S'zN
Guxk
!9z4H
g:]
6'iG
anC.KU
DcR/
W&sVumpnrgdGRsCE4N5<qe?-%
r3sJh
*:>:, ~gT(vyXye2T u*1\Z[
*V f
66~*
6Qlby
jOm:
VK4sw
(J*P`
?Lrl
]qHtd;Q}1ct+0/-b gDdX!:0#
Xs6s
-URf
xp)/.
^[-0dhRnsd}[@Qckb_ @="l@
N$h@L++j'iIJMV*80$:`T:S|
I5d9|">[x'v7(M)d'H uB|sY!
nSz/kx
JYl
1J93>5js6 ~N(<<%Un,U1g{i#
P&.a
ob*S
)YJzfK%$F`jUN{^V2rr)|;1~%
$+j\
PC2o
mzD:
+?Q
#jWs
Module
bmv2
UVpUa
Array
}E .
:E;]I
~5q^[
l!_GB
M)$iZ
QnLAr
j!:
!g^>
|ZL[
@.reloc
U$[#=
@K3*
mE#}
)#v?]
=>0_
CakS
;&e%&C!NYQ3b)Wq|JKxb@1>V*
i6ZlCC'z
9_F`g_
fk1u
q! 5
fQ#
ImQ~
~hFlE0
!t~yJ\Q
4)p`
z5 &
9kRu
n3<-
"q/W
[4Dt
TabSizeMode
p3)q
`5t@
Byte
get_Chars
Ve^y
6lufT
v4}(5
t/W$
#CW3
>9l&
h^3%g
X3A+j
/l2b@
94>5
!n8}
x(b m$[sC%
@.aT$
Q]pu
i8e
8iZP
J u
")Ev
b^-f
L$7L
> /aHCN
,#N:^aF]@gWMZ7!o@i>,M/Z}!
7_ Z
Y:=|
!a^?
a.Jv
GE4!
o'Oqw
hT$_
S"Tv
~9x
VU*.H)
1ls,
bQJ
"M @b1
nRbs5
]Tpg
z^1.
gX P!
,Ks~Eb8QTs)7NczgBcfRRde-
y~Ii
1wT{K@
={na
:vb(
0aO~
f9yD8
@]N<
=&+t(
u8nu
{vI~go
B!<:
x; DU
m*tu
get_Location
FxJq)
tp69d
bV`4j?f6T\R<|!FkWm\^W-6$(
Rq0^
aB,_
|-*qz
vho/
U-EgC
87#!>$U<
|x 8+G
tM`<
~l%3
DT/LoI
Q[g/
l_lI2! )
qR nX
=tR\
/h=y
+Z,[~s
9XYfz
4Hw7
q3Py
FreeHGlobal
r#6i
JhT<
Qwu4
Q`Dn
Y"Yi6
.)npTVP
B%Gv".`
HIsa
mB<+[&
x<Nu
S ]K
w}Bz
4_KZ
xDN}C
(P?`
9r<Icd1&};|6+tTSj0{[8;-'"
@zeby
>-dN
)cN{F
M;"">
Z}\w
]>oE
=H"
4\T_%
Mw`e*|
)g8l _
5!$/[
FM+/
=8)_
S&w|
RuntimeCompatibilityAttribute
Wb/<K
C"@h
+R(+
$A>2
d8%-
a60H
4aU\I
?~lp
Assembly
r be
*j ~
m$"Vg
/L!
Xd0i
O el
x`*lw9
,bwIb
#AJ_i
l/IT y
^o&r7
[8m:r 5
4 #H
{,$}
\uT[}
8!f|
/V3'
mXXU
gYZU$
[VdF S
7;9{=
kn&
AnHBclKcj03X_v?e1v CZ(**!
1qdP
;=J]
>7n
W fp
%+`
?MM
_sC N
oGx)
Invalidate
o<O3
r-o{
y(|=
T|D/
6^s6
5W,iv
dlu6
lwg:j
8%4b
RzIqKQ'EEle/L:JGK9S?<&9Y"
110>
qx)|s
t<klZJ
BV :SCgcy
Size
*5eH
s~M-
m,Nj
[q?\
Tz}{<U!$
y2o!
NewGuid
Fj c
[p _q
N wjF
'9D4
gi"/
set_AutoScaleMode
=qKZ
g '?j
|aTK?a
fw`f
^>+9TqvcL U*ppM</IW?6'_^#
A`:
6zQO
zoFi
45E]
! 3 B \
CCs '
Tq t
*"*{/
I[$/f
x=,V
tG;@M
C(oIs
%Gpo
l<b/
[ >@
x&CA!
(- Gvx
\I{
i 3M:
F))5:$
)RF5
IContainer
MQ3d
xGo.
kI0q
4VEE
T2;C-
dB1v76
OhG%
-9 +t
\,1@
]azQ
hCu7k
Ong|@JM(
~vSE
]Ns8S
D?~r99I
x<3mL
tk#Q0
XL'ge)
Muv#
sGi _
QJr=fd
*k&
m\X@g
bbj
z7 @2;
,x(i
6!^~
6\V(}
ISerializable
&C7}
#|]
WfkD
czbb
1C<KV4'T_V$NgQc:C]8Y G)w)
%-AaP
9, S
OL)2O
}d_&
T5Wq
8_yTv'
F] e
0=czL;
Z(1
oYVqr
Yx. _/
H4Ye
B2c[
n'QU'i`k|!a ?|]FU7VagE8:!
+Q4@G
[McksDcLD*7FO}F#e\w@|_%C
g ]
' 9'Bx
Jeta
RN#N
>vLN
Dq%Nsy
`/1?U~N2Y`8wBAEh<"<BNNjt
? M"
]d;J
> 7
60Q,{
"&E}
;+Wx
owJQ
[ ,X
o*Y
2}5\"M%kAKqWRp#9W7,Hqv1~%
$#w4
9KxFK'@(NG>[jX!]\_y(e@aR$
?Ws!
7%7d
#CF*
'_{L
z,!|ZeC(-Q$u;J/vYN^'b5%^!
(ZGl
5u9s
d U(
iJw'
WMV
_',|
`H}R
[2(}#
>lK%
/MuY9X
a,EX
P^,NZ]
QJ F
HM|&
~Zc!
#<qjx
>:Aw
GetFunctionPointerForDelegate
{cJC
T?$5e^
a%Z"
>$HD
iJak
D?93F
F c.V
!S$7z
<7 H
yYve
68aK
TfW]m _|Uk
^nc5d+xB-p
R 4%ec H6ll
sO{)
#tY@s8FjgLR" B~lb{?5CoAK%
ContainerControl
C#\ZSN+d\kq/36%7g%]"]uAp!
- E#
d)r~
H\^}
[3w'
d|<x
RB; ;@
'w_%
c-Az
cLF
HUv2
t# 1
W'XUS
xM1J9%;
IY$
wH#t
9>BPKYD
c2ao?Sg,
zB\9
v $yE
ReadByte
bHCt;
fGUk
uG~_
q13eiFy<h5#]nz%*``@G*bE:+
'U 9
=N 1-V
5Q,c
x(H}{
~~C
(Xk'
c/ x$<g
dKQ-
tN 3
G 1f{G
3F1764884A245F1B3FA91DEC2E25339F23787561
uG~/
eUSP:
Rv.y
GvG@lOz?/7&7@kO;1<gJ&E5y8
0 BA,@
,.`~8
5fhKR;z1P{Q"(<r mMQkX7[&
i?Yl
@J-
LBK7
Kh2/8Ea/gP %5P%xv=mT|UB"(
23r
C-@u
PNp`c
S>O0
Bi98Jj
fYnV
l5 {
s"Ykgy
b?0
)a]qn
AllocHGlobal
;ST:h
u`ki
AssemblyCopyrightAttribute
T(4)
6:VL
lnzq
zg''/\26\F%MEJI^SZz${TS%
]*"7gV:
`g.c1
6'/'
uvvioi
's+)
.#(z
Gh9&
HFm!SeiyULUnJy%x8PdyjBmP"
v{.|7
Ss0;o
4d279x"*Bv#\,J]TJ+>-R;QW"
Uhf?
hY)N
dxpy
z7~C
H}_0<
v1+Ze?
-8^z
tOw3
rAKk
S$Ps)769Mw /#@A3q\E94+O*5
z)U^z
xHcZ[
`3v'oyQ
I"bv
JMn,es<{[(DJI^k&RKhi)mOj
Be>*
A(Oa
m_,G
AR9*
mJM2)
H3+O
mWzbI
hUWN
w;X]
ul2 Z
9pX~
]8 Z
-KBV
X:2+
n!G7
oo?[=
xpD!~iM!S0nmsi)<d9X6U?=9%
&> S
`GwV
>rZ.+
i;7\C
33.l
9A_~
/$Cp
bG~)
u_q
wI~O
jH .8'g
UnE;/
k0Z=
"9Zu
tQC&=
U`:PB
,hJm
~{`[8
q>~~
{k<rD
Qku]
Q=n Ob
s|ic
JwVy><
8 zc
dB1""1S^bhsCe]Axj*d=La(e"
A< U
kF;c
>h&YGQ`Ig7
iO~<%E
VDB$
- mE
*qH=
BSJB
set_Enabled
F[f-Zbt$Axv%:#?<2xXyol&k$
EN_
9@m/Z
bB1:[
< 8|z
1JQI
S p-
?I9n"
eLZ;
u lcY
Read
Type
irZm
wc%
U^B(%nQ
QIHG
xF*D
^MVK
H)!G\ /
I>Cw
IConvertible
faH,
xL(u
*2P&
##;]
dx)
l=\
get_Value
hix^u
jLB\
K=7?
6Z )
?q P
^7Cr&
;3y%
!HTk
eP78
S"i9Ie2nK-N]-EWIZ%s?hG|\!
oC>
|0DE5
]h K
LqmP\
!AsW
Zn i
P bNy
vfJ~
.\;V
@ bNi
gAMA
6kAs
Xh@v|
0DoIEd6 j@_GMD5\fQ2hmh+ #
4A!6]4\'L+G,z)[z5 Uno-]{!
'bYQ
`jeR.
J 3\;
?'ru
Vw_"$
Po? l8gG&( ~'99JK"ES!"G),
[}\]
mXCR
x=H,
E=$VK
sba+>uFu!Lk7IHe0R)(UM^<r
)GqZ
djd%
MarshalByRefObject
NHiFRyLv<m+cbD_9)l1O%=1[#
'm=@
25H
M9RZb
~bqx@GwNa;&*Z[fzP?FcWap\+
JiK-
.cctor
i3d h,/
AsyncCallback
oW8<&
.4Jx
. Sy3
ueeNg
L[d?
mscorlib
c`:TS
%[K5
6(+n
>j3;
Ql4G
_8a}%s[
ZTWs
t_k]
TWrD
#=R
eiK
JEXV
K@]t
ft VS
"A?U
H2f^
AS@S_
q#Om`~?P[%]{|$<7w4"o/R8@$
.`C=
6m[=sbO C[LRsmb&k7v!,GI6%
Q oat
IMz5
z,!
* _?
5JXc6~
z"Vw
e&S;
kqD49M
YxN=
+"B
_QSM
{Blv
7|ZX
['\h
S?Z<X+
'.%j
jT^7
4m 8
9~W
?QXg
E0NtT3,=J=WEvkJ`E~n'K\D "
vww|Bcx{
Guid
J"kc@
|B!YT
mC;a
{GDt
W8=vus~
*bcf
{t Vy
Ur.R
vqp2
rU/&
get_Width
RC4F
u =,T
O\BoU
V(`D
Ktkc
B Jq
pxWDnF
System.Reflection
Q %%
blzD
TZ"i
'[Tj
:fH( 0[_{
RuntimeTypeHandle
x.(V
bFO4
ScL|
wd#ia
\j4{4
?EK)
B(*c
l#j H
&BOH0
(/v|zN,JaI3bUD1(WQ9+"+vBL
U,S7
tT9h
$<}gU
~;~0}H (#,{#YIw3H]#'0$#},
X;{7
^@YY
}&8r
EjIR
F`.#&H
0LJ
Lp Td
JE<#
aE-
WS
en}]
sender
kWF.
Lf3
56^B
-=h1
*9[x:qT
Ic4Q5G b{o=c1x+g)r*lCLfO!
>y,V@
j]"k
Ba/;
96t$ k
!=y^
Yw&fQ?'
VJ(Jnu7Os9ndSa'%$}-Le&57
Mp(t
5C6[
1{Z`4cCMBc(x&;"S!=itP?VS!
Append
IQNa
6#;YS
Ma
Al/f
?R2o
b>Shs
k<L}
h=?><o
]? W
System.ServiceProcess
op_Equality
C#
Px8zkfM&&bhf$J7+48+i[ps%%
`T*e
8V|
3;9Qet^},$s/E>(8BdxK<}q)$
}FG`
L9%20
*7:=
HxJd
bV)WQ
'ucgcm
&NB%2
!f{}
f]E{
2:Sk
np,,
KF"p
5wl
9yj-]
\SY*Y
:|/P#
bTMH#G8\&&'|w0dp'}aHgPb@*
;s-y
1i:a:
v|*k
Q lF
AssemblyDescriptionAttribute
ch?^
'Bm^
$(@A
n' JNl"%
< &i
bBo:
5JQK\9
m'<^
"d10j
/W@ Rz%d
j1(X
QV2]
+r[P$"
2fXDF
J)&O
T=phL
Y31>qIwYwzk(rIcI=G>&xMwz"
`hD ~Eo
T`'09e
}.G%f
2 wbk"
i 9l
URyjN'C|~XL7D@)n~;*p)V,J#
DuK
slP_)R
}]e9
oOzOY
5:LC
x:~*|
Q%2%
p0r1"Q,UOuKtg|-GZoJ:z(&J
t]OU
~DXT
TqK\u
[^Eh
y%eF:Hf6E,a{Z@mig@U|N0nc"
3UI>#a
Rmy(
ibTX
actZ
9S<<
Phk*
IDGKB
&6ud
C8hm
Z@9
5I/1--XiTZ4`:LV=6p(`g$bk!
KRV<
) }*6
?lpu)
DrNA
r[w(
~M[CP;02D}:V<-iiR1I>XPx~,
9|'A
t|uws
op( T
!7L
tlU
^)rh
Y cH
b:{x
;?vc
].2WH*
k9N
VuWz<
v){5
$!Y?
A( #
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
zFK|
WD %
Ev!P
EDg8L
b/-Da'L&"0x?+nv`CzhF' Y*'
JhHt
#7PK
0,Vsdam6ReEUd[-n}"PgDTGF
i+a<~
( .
YcWm
t7Z5Z]$&xxT&x53D^$1u*qZh!
]l<z(
];4
1MZ!
};'X
%H|T8
r':Z
5 u#X
mscoree.dll
!This program cannot be run in DOS mode. $
Lk.K.
STY;
[ &q<
callback
;:n[
?jce
&[xy!
oUczTH 8dPGGrf,'K{*r--St"
sA1vm
g}4|
J]T00
|PYJ*@@EH09[W4xAe=fTD=rK!
MnrtBfA
Dispose
<'YQu{
{ $1
yIef:
-=6j5
.`nc
*hSn
-*N )
wFlP
$Gw|
t 6D8
)7AH
,*]d
7 %;
4E2BE99140D24066CADC84F74FA899FEE5976B68
1K?
zUG-G
Q{2X;m
[-1s
tmY)
&$cY+C
K*<b1>2`* ujtve>(X]~7JO0
01\$~#b3
GlywHEB_s) _[nr]A!spmYMW*
_p8;*
68MmW
uYU21
vdp B
/R;4/<7NH,O(^$TxN>=z^%o!*
pya"7
^!+B
7rc}
{91~W*QPr&19Vo{1=NFh=w Y
& ?G[2{
%5WA
o]xS
qehJ
7h+1
'eB@
>FnZ,zBl>%svEvP&3f+[>DoJ
x y
)-Mg
R?_Tt
) -:{
9}3l
vKk4(,3TGWWrNd+B$=t$C6T+
7N4d MCQ
8dWH)
X!]r,jU3k9
8qYP
&]J2
BDY>
G;NW{mjY
C}1sI2W7Al"8rklXKUqFOLH9/
Vah*
zIDAThC
mec6
dHf!H
RMuy
lI&9l4
x748z
LpXj
t %GW?
~5'%
0I"LkF
W /N
Q2W<
\H,_(
=/,{
pN *
2KMD
x]$&K]s
oS9yOi
X!<(0
7D" {
CJv
xp,xb
4ak?TaB
cULi +5
&=h{
/EG{F
Q.~J*Xc'
<"Jm
v<VI
U179
`e[d
R9@q
8ped$
FN\#VQ-jE>PirqB{+>\`4E&#
n4Y^
5p2'
J9NC
B#v8
z7*^
,&8i'
5rc,
)Yq/
yo)U
0,N+
&_ :
get_ModuleHandle
8\7C
cmCn
Yq)[8"
hWQg
voD9y
&t]A
_H[:I
sq}D
OHV>
u^'/@AdpW8~`Q!,Y;{=f5?X2#
dX Y
J^8y
eu8|
9-U:P
C`Cu
w<LJ
E PS
lN6o
3Hcj
IntPtr
1M+jr/
\y#
Z [H
p68$csNVNU~TeF?u=-$t+o@A%
P [%
%85y
8oCh
+H[k
@; 8X
RCL/e19
6ur3
: /k
D^],
zYP@
h29J
\8VX
39z
|}zS,K'=9{mPv>4>N9`f>2}z"
?C~K
0XX:!
k|b
u`t6z|
YlXYg<8!5|{u%\ 7<Ai7]Z}d!
08Q/
;1?(
~ 9ie
:{s9
Z$\=A
n}6%
}%3LP
Q?lB
O1B`
+``7P){P4gw;K9pVV3!*"|V['
eC+h
jD@-
~f7hI;79/N,~,\K!=RLP:5z&7
$o _mu
q\\1
XW 2
@d H
s ^SGF
System.Linq
O"?H0.
T}-Q9
D)DNu`
XxtG
T^ 2
=03D
oH P_@lr`
C708234F139063BBE3CBE2208BB6ACFACBC50333
l^ }
7%H*
xB\\)
InvalidOperationException
\j ,
ntv]
:~&
0$A
)a+n
qLDnLf
KO\#a&,'
QI|e
aY9
S8S
@wlehEEK'{#t\DrQ[}T8EM@c$
5bN:
?[ iO
9O=n
|AU@
4U($i
0GVD*k
J FJA{
AssemblyConfigurationAttribute
-(fg
$R_ Z<<U=
@1_Q?
up>5
w3~y3yQsvm>#n3m"nwMU\w(C%
arYEP)AdJMN*R7JL,Fag?)!7#
f3+_$Y
)2mK
O'UJ
bu!>
FCpb-
am.p
z.{
T_z4-%'|&QF'K7BHmNCMZvC6
&y1*p
<vx&nRKVDp F@<RN$]{K*;Mi'
$ la
BlockCopy
]y0)
FRO-
:)W:'
{QW&
3]3L S
GxE5v
v;^q
N rJ&
}d`D 5q(a)=mlX0)%Mks;=Rb%
YF69
i@BO
.W0+do
o] ~
[*~<
oT0"
%ev
`n_A
9(lu
~v@[
;:qT
~Rb
: +}
Y`J$3H:C)r2bC?c%8c3c@]ZD-
ZpN'Q
U I
6g2
"Gu)
< < < < < < < < < < < < < < < <
]8iK'[s
:lw~
D!n-9n,
)ZNt
+6^
$z.{
&NZr
:h-}x
1@]V
h*F!
s} q
2".S
,e
Tx76
:\Z_|e
43y'gzx>
>7D
xx/CV
,ews
N@L_
s8 :
z.s,
Gt!
QN5b
5JA\T
yZu I
N I)`"
l W
:@.F
,'cr!F
}-[
'<~x
7n{?
x'MS
vo&{
5,`P
.^^b
/U~<^
8#Vc
m<g~|_>_
xW7]
O|PD
Ok>K
qO4k
p=|\3$[z6Feu$53Mtaf$Q'{r!
zs$O
tLzSC
)#;D
MethodInfo
"(%2
*K$*
~Eb:24E
<;W|Q
l _>
bKVS
[aY<
6 T@
_`Zi
QX!@
%C{U
CompilationRelaxationsAttribute
(?<;5
]YHiy*!HPa
4M|pthZ
D Si
Ad?b
TabPageCollection
d\7I7q
hHO"
r<+E
tMpx
iw]o
l|y
MemoryStream
#,Rr
*'rgi
{Q&_
+6LB`P
Hb,N M
-*b9sd['Q{!dav6vu(bZu2Aj+
c\N}a
O''`a
<Q d
ResolveEventArgs
2^xw:
rJm1
WhnD~
M")U
`aAc^5:*$(z9%L}#[uBzn[<}#
vYe"9
-e^K
&= Y
OHj?9
OnControlAdded
>v s
8-jC
7 S}h9n J
+JFd
,/ '?
W,+DdL!M?t#LmHtc8^dKJL:i$
Uw`=^\
XMM9
5%++^a
_9M
EI*ys
} !5
u$eWh
c}[a
p7xd.
BbxP0cn~
DNH;
;kDY
cm\`
Ot,xV<
]uHOAzN@=Pz[&f^>5l&5TgVA&
Y$^O n^
pk)yS
>1=0
pI4[
j&bqM
5C[O
)!73
& SIc
j4D3
m) Ss
&A:=M
8Age
B$ St
hyTx
|X Ah
kNvi
Qs0l6dk
k.@%|
Z1sI5
<1J"
-|W3
c.+4@~
@*L{5
[FD%
Q"b>m
q Tg
L>&'
fG}t
"*x)
#IEf -
'vP5
>;94
^bU`%
,g&I;c
2g0eS:;
E\cVi
vO+f
|U?7
L rD(
Q$eO
oVVT=aGR
-U#)
G6MF1(Hp7UYk1>u$<qkNk?>k%
zs|x
S[B!lK-zuX#a]b]HaA=<kXX@'
Kk'~
T ~*
+b3c
r@ ]
N]Eu"X</:Q<o]"vHQ#9Jr`pr!
"l"W
?#~(
[mBWQ
q6- I
- =U7
]qa|
.j,.
s<-3J
Sn.]
g`1|
%2UA
HR({
Mutation
#Wol
]kT;
ByuI-
pD>U
f%)}t
Rectangle
!8 L(
Nrm
get_White
uIu>m8
&Pcb
l0i\
&|"
_0d3p[aT2dg|~O8by|v/ngMN
WAIaI'Yd
JuF'd
&Bc)
o(F:1\E{E
tc,IGgSFM]g3{3'3lMWz25B3!
Concat
h@Z-
UA3jH
WdD@o7R`a/FIruY1M02|o7mG&
n`=
VDo6
(D$U
StringBuilder
Y 6G4
NI'4q6?voy#&a:RXkloiZO0f
~vt&
v2=p
R"*R
bD.I
xgC?
-87}juk
;+RI
pqiU
,_(MW
5LwL
~+tu
Y |
X =l
fpM
UD+KDDF
Gc'
!8I|
Y\V(Af&
r7ee
NX6!,=
c46111c9-91f3-16.Resources.resources
)VkYnm@!L.
,;Ie
N2_`T
i8o_ +0M-~$le h,=ykoS^R8"
n\ku~:
E/14
get_Hand
! bJ
3]s@s
d?Mjo
,B&S
=Flw
uV.K
'\}IF
{T"0
%b(}
2[U
0*]
4_sp
BBri
=>*afH
3-oy3v
get_OverIndex
V,4[]3%"(XFY09mKOmD-uVB:!
o]D?
5 #Db+
]t}M+G
m:JET
Dzv[
J )n
-(][
=*In
M>z#
K3oz
fDiS
4.MW6R
KQq
AssemblyFileVersionAttribute
^dHY
^=Pd;Bs\ `tuf%> p<, XP^@#
#!p1lFm%?bB*o/Z[@D:ZZ-@j)
System.Text
qbt*
i20oV^
UTYHQ2;YnB!-CeK4":aG9X[]7
oYOI
'{joX
o6ag
%PeB
bMa7K
CeX6{
X2l[tJGJ:Vwyy+hYY]^T9$F7$
nv q a
C%pGI
zyD
-G-#
)]{z
JWd(
2><rC
|k )a
b=k^#4
_ >3
[X&C
}!|O
MY_X
x@?>2
{igth6$oRJ
A~xR
ig s
?T>K
"m52
S2Hiw
=XMc2Q
GMT^\
W*\$]]wN8ADbA=,{6*@s#9qF'
GetElementType
2d](i
N \ Sm
m6iugNN
u~L
[3Aa
Hf:Ib
Z?ZP
j2ta
k}^c
(+
+%J1u-
L+VM$==VMLY([z4mA=vlbkgc"
.<pS
F2 6|
c[vV6^
{/KF
#VH<
IfuqH
'&VeKt
/LJm
2oZ9
~N F
k:Di
OnJ X
.^qe8yn4=
>}
tB 6\
1aH
`' b
91xZ
,~ZdHk 7
}xu9
^E<&
`-X>
:lH?F45]45z8Tk{P}3DI':P+!
j<?!O]>iu~}/J{##>8RX;;cv#
rwnfFNf
8QJ&D
n 'B
#%zM
o?QD
^iWW
}/7a
^#pO
K)q"
qTYXI8z2,+j}>vnGgNlpP}RM"
1/BIG
IZI o
` LeI
/agQ
Ch-
MI?;,+
2> (
_)iFI3
C1s-
FieldInfo
RAPnH
Font
,JOGA
a {u
%jn/a
,% _(
N-?qk
l\i#
3PqIC6
vzF&z^jwA
.3=Vq
^Pq@
0
%Z,P
!Ddy
!Pce
eKWe
J2"$
(YpT5)'@A&0yQ_A HU!`PVqy2
U4VTA
}1r<
\ mo
V7#S
DN_
5jw`
r#,_
Mj'$
E'n@"
M` ;
String
;#"m0sTW
_CorExeMain
@VD:
hXpY
Qt3X
yV~.
VIFC
,E#P
I)9|
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
i1exi
`wKZ
MI +
u E
tI<(X-auH? HO`d6#KCF'g,q/
5h2>ZE
kAI
L{FtwK
Oqk|
>k\vZC0f8W1Yu67EF&<tM'Nw)
L 7u
PVT?
}`)
v[?q)
Dq8e
YA$ m
t9c_@d@ETC$h5'&QEV]DpcO=(
C~m
x%lr
F 8'
?yX^:
InitializeArray
vgqe
SEA6"
4**kB
c:6L
VyV#g
3hb5
IO~f
l~0;
<<*f2
Ghe{
} F7,b
t2 /
EAjh
+*3y+z5s@7r;xlFXcj$4|#0b"
aWA.
_fsr(
eR<J&A
*)0e O"GeLnQ%{EB[H}%d1f8)
@4Fq
"1p'
,LE*
7Cq3
\At!z
ZZe
ToArray
LqV9
OnCreateControl
_-or
@et#_
G}C8
-?@r
get_Control
f+l8
j1)K
.W_
twQ#
ef%f
39B!T
|#)d`
/#99
FzXA
S=6
|7o
~6q%
[G\q
z,*1(
C$"(5U
N=##A
get_Hovering
rK ]
agL{
lo@D`\b`=vYRF&|AOtUctoK/
* ZW
{ L3 t
7X|\1
m*%d
2["
R)L)l-,
(hX5P:GXR-R5kgTgq[~$-jH;
V|7M6
G94G
g4lV
M19c
m> W2
f461
+K`_w
?P F8
N!9iy
Load
y:F
x2,M!
zEqQn
Rd(7
F_{;
<5g"(C
OJ6c
System.Drawing
UAY_
G\5x
iy!I
Ju2z
get_FullName
W`5
hcl3
g UN
>7$t1^UR
=<VM
f3`|6
FD|.bdr
V`f'Eau#b
BeginInvoke
B.lr
pZO
CZ rV
C&\m
`b=C<
MEz
i=~d _
># G
Osv`
z(~9S
j|O.
LILm
5Wvd;JEb(_H_hbS>)vDf4u/($
l]nE
Vz:C
@ "<}
hx8_
P!nd
<cW
LgC
dCaU ZQ
C]5uMm
e ?!j\A
,%\ Hs*
o s O
B,2b
Bev=L
-_0y:6JPMS!w*nEzNDJhg6Db(
~I o<y
_9"h
; k.
p$1`
n^U,
(^;f
C[O?:'@^3NS=o %8+%xvI /,&
J;,W
7}WE
ehtz
Y=^da`)=y**vvhwD+faLS1&W$
RuntimeHelpers
4dKK
Jgx
JfOuvW[MRxRVE9O|fg71E|,b#
w#K /
yt6i
8 L[
KW{fl
%3D%
88a X
z-Wj
UserControl
^VXSEciFw}]5qX\]yd)vH5XA#
piP
get_Enabled
EtsZQFHGPs77C ,(_pq\((P=+
4gL3
laUk
F@b{
r<4Ags^3j/A6(]r(U;5e6/ET$
tFW
'9:Y
aQ<UM
\{+S,
FBJev@6V=nR@FAHuarxn2>6~!
+c5m{
!4>{
!5g]~
^=%kD
]gp]1*%Z(H1ntGh;Uvpmh:?["
u=6-
~wq\
- H.
[s *
O)])
pD+#
k^I
FQWx
frn9{
LqU&
V^s]W
Object
\kGX
c#>Nf-
WR{ W
$ !v
FaIve
~7'{qu
'my"
ZUKS%
zPE*<Q
b-s~`
4y%o
ComVisibleAttribute
Vn^QCtF
'.0z
s*d6
M"\;
@l+y)8
MRs TV
SO+iu
WfEv_
{oeh
dFE@u
=G}W
YqrrC/e
1)lq
J')bM
CO`H
,Can(Ia$hzdZF=["5y^o"m3,%
tutt
*S
aRq-
1lx#
{{b[
W[(>
f. fD
}Kb{
V X
]<'e
Yl )s
_Assembly
{K _
RB~Z
>59q|F5Ahc"+<C4*Rq)&<S-T+
fmXm$o
eeFf
Y^iS
E\=C(
{ U{M
8 7 a
5/
Y)<B
+a;wEj
}b@.
bDQ7>
Fv;O
hK/P\
S6 w
Ho@,zM
Fs_c
^A?Z
9[|h
#h{z
Fq8n
] Za
hn4<
# [ ]
W4<,z
XYF?
Bwh3
n oL
ak[|
OnMouseLeave
$[xR
zIYl
&-6s
1.0.0.0
tO}:
Wy;>8p
,5fm
Xc4l
f5
7O%l
Qj2{O
NRQ0
dL.d
{e~B
lXT+
C 'J
SeV~g
3>#K
,M O
'q^b
IARD'
^G?j
LKYD5
yy::
VK|
&Cg07!
w3*h`
E 5r^
~O"}9
u-{`
K4zz>
Stream
vr B
R./\^
\1fNK
6;=^cq
y-LJ`E
sRGB
!C*l
p;hcW Y$\@lA|boaS#`oO1{A$
xk FX
ns#([Q
'/v[c
]: d
SvRKo
/^ayf
mMFQ/=
$3|*
CreateInstanceAndUnwrap
x#eX
4r!J|
* bH9vr
p1#N\
d@ ~
H:7n
ynJ;
T8,:
;{w
2u8V
KuzL'P
4["G
}t]U
G4gx
DE:9
qTF
Confuser.Runtime
o({!
(l.vz
%>hT
x+4}
GQ<_
H8*WZ
80x`c
gECz
^F=R4
8R %
Q2yf
}uC Z
</(<
J s<
v8g)
p{Nw
j{_,
va P
G*^q
p *c
{<2H)UJ
B;(=J^y7VzFQbG83@c:t$kDn!
^s`wW
Kx+{
thix
7PAO
jfpW&
`K;R
Hev-
q'5T
vO8U
\Vq
* 0`e.
SgLw
mmL!
gBQ; P_
&J[#
)]00Q
~>Wb
99M
11+`*
r~&b
}nvs
GURi
>ZZi
Fu]EL1
+KfP%
>2gv3
N,B-2?;Zt
4nxZO;=qZ2LzB1LN|W^,vbZ/"
;<Nn
set_ServiceName
??7T
42iPz
Ms,c
n.bv
84Eq*m
5k&6
-~Id?7oO]<%45uGRD-/-z13T,
!Zf=
0;4^
n6sT
D!+;Y
'K=5
6"Wi
X^Hs
Dz-#f/F32b_V3N{IZZ:v6Da6%
<|ar
rHQP
]Dv_
SCq.
NKb?
y6qqx
[H)|q
nj*V&
._IZ
V{tH`8`[Z|$y5"%M-:ng%(0Z'
maN5
,;U?
h_jQ|
s>-j-P
bx% W|
dX]@
[HRp&
b u9PO
*Q]`
8%hC}s|R l
\`M"I
*=Zd
r52YG
_9WI _~
&Q :
O,.l^S
m[-
7'?h|
set_ItemSize
Slxv
o4_s
{ib.g
buo
fj7ZE
pA`
|(dYT&
g,n2 3
yo$@
O~^j2/e`:s 69<Xk3lE1QdT3$
Dx 8
rN:R
,V^A
Ak^
Ap1W
pi15Un
q>:!"o
QrqT
Lym=
b=tDlH
Z"I{l9
s-ye
,Pq%
0G%'
QM2IQwtwLA[ O/'"&0T~"+~C
'}Mc
s1F
m#*M
.V]E
GetHINSTANCE
;mx^
h t8z
!y7I
WJPT
Buffer
:+kA
,yt|
[QaI
~B#GZH
z68
<9NP.
H )w
M!jU#9#ZV~K9JLw\}q!n:I6J$
rRpE
z?NSu+?@P45_zt76,^`Q7pC'&
ryI>
yEE]yO3\biG<9+c'#28N#(-E0
h}w!
+b6I7
jR $
Y1F,
Lm72
CVg=
r>nP
\=@
x4LT
|Zqb
:&]+f
vBMh
udh/
(!S\
J<7WA;ywW,ih,QjA,4{T!@3$
x\C<
;b=pV
F$&$
\|&f#
A6|VV
WZX{
Z {
5d34
W;3@
-Fjm~
R{Xfn
Tu5$'V
)6xg
s.eD
Zn%H
~GFS
NDY:
]F|2Q
I2wj
-(IC
thGe
o.A.
O?HP9U
-_=
4O
cbdpb
V7Ks
Ipbw
X2eMzWU7y>,3XK_ ^Phx>n7&'
trE6
49g|L
Br"7MG2N1;&!byR2&}h|%jI^)
\dY*1
:>Q{
|^Gn #
6Y3IYEc:eWWK1_V"%iKV#b,2$
"5#=.L
3fj0
!wyx
R~ I
~bo5z$d8,rxWhrFW-'a?IJ>]"
hKZ;
t?@
XA"V
vz]A
^Es\
c668
-,QK
j'_5
gX^tb`P
Ob '
Udc{D
Copyright
R%vOi
._s+
ArgumentNullException
.X_
sRTK
9 D
MT7jw
get_Major
4@`CL
DM**
HZ(c\h5x
"|tS
4 P
/W.Z$
^ f5
5#]a
je^6
$06?o
A[
&tc>O
3u!M
Point
,J(+
WBUt
s(<kD
&3=~
!> &
ux0
v2.0.50727
J: b:
j*%g>
50l3
qU7:v7
. k4%
V /K
Ujh]N
[_~}
K6m,>
3,$}
G'9r#8~J
]2 J'
?bgf
2ee'](s18%#r`%`fSw)J0U6X+
()9B
Fw}q
x-q6
}a(o
*# C
7 / ^%
^@9mFI04*g_EY[5*Qa7CcaJ%$
nLg$
to(+Z_a#
W:6>x
$!GH
s9;q
q{~p
+=C?!
<4]p+o
I |G
CkjAC!@GM9,%?brfLl6gJ`-]"
+2o{f0T
d#3CJip
RQn[X5L?(E=4$Sd%-9%2~1}S!
A<)9
Exception
clnhg
B Ec
>JTO
O/o9
U=i@
GPWF
lO w,
8 >^
&i`@
|,F6
D+4Cf-
7L<7y
pl`\>
i;gn
u}\
c..]]/
Tc uhK
;+gVUV
59`;Vt
s*s^Y
*c ;
*LFI
K?8R
tv.
(je`s
zN{-m$
U; b
-<XA
|v3-
GetTypeFromHandle
IAsyncResult
<c{G
(\_`c7;LLL2Z5ae<u6Z ?hX*
{w+K5-r,/}lRN1#'a{;^c!Z;*
_6Wv
Ne6_yA
vVO- 55
Y\3'
>/Z(
P Wk
%oMuql
{;^X_0wxM*Pq_$Pmcd6M"}W^
Bg1-U
73_x)\O|
Q7v
;Z:9
0EXR/F
6r)]
*UI0ur
.n/Y
"4jG
! On|
68/m~p2#ZKiXf)s4cx`)cikc!
GetDelegateForFunctionPointer
E;Vg
{Oi[
M_il
vO5~
SfA}
/} &
VlV-[b
i;yH
E`~%
&<26
2] @l
Z:a:_
NZEH|rxBuJ_D/@'{C?j|+Ae1!
dAwV
9gRF
'$Sn/
5_;Pl
.=n)
IZg
(S<}
^}Th
k3D"
hAwA
XN}Bx,
S@{l ;_8G
2 **
Mlv:tK
System.Runtime.Serialization
[8eS
QLB`
rd* p
A|a"G
Fq/w
CqaM$
bt&9TO
S3Y#6NL 'hH@`MAV2Aj}yE[Z&
tXL"
dy <
fsHiOk
=\1]
?6?5e
l0R@
F!['
3ks=`38;&D;?[{2-Oh<{+/;X6
ylcIRG
cX= g
~IDAThC
^1y%y!
<'u"
R1ZpQ
UW_u
7GZ7E
| +x'|
,!h4-
System.Runtime.InteropServices
8&UD
Z&.^I
otHH 19
.vOf
LSna
:4`h9
qgD+
Math
Eig>
**,U[wg
Fb T
T|to;=kob$Zi>yLjR%^Kcx]E
8zOi
];1De
/.owg""/i,O
2_a_f
C@jm
Y!_9
85D`aN
Z(w`A
qMWac
*k<7
X Q
V9J:|
i+d}
/{u
m?sqT
/[ m
A~<QniTQ+Ju@rh)j]2:pkz'[$
System.Runtime.CompilerServices
YM-6
JE5:
,/mV
ON*T
SuppressIldasmAttribute

/J8U7!#Y&xI6]znE%g{2K7L>"
Nk`O
b!oI
E[gq
&gf)R
$jB`\
cGIKeB_(y
U&7M
g6mQ_
U=Ce
T6{D
eKMV
cz&}
efp}"
z:$z
=0Clv;pv
: c&
0GT
pzhS
NX v
- kY
zfDc
G:/,
=EMR
5W"F
D=LS
VeV:
(pydA
ok o
"c`]
w3&~"NXFc
=w%|%
Q^CP
+Zk*P
(L_4A>
}S1
4!u"
<1g^
ptRO>
&=4I
Whwbt
?b_k
uuV@<UtzCD0u3b>(h(x6"C_:
VumUT;[
sOa_
l?_2^
fom*
&cl"
uWIK
I%&m
&l(m
YH [F
set_Font
u^w}m
J X5
;u{A S
_ gi8
)&xC
]f_W
Oxj"4pBQ7`~;n+i\ipbm%!"(#
(HF#v
l.G
Um#/`
o A)
' }B
wV9<
^7F$fUb!GjD69/-}+&EElod@$
9AYm
]vH
IDisposable
xC,a
Aihz
D&XS
|EG$j 3!PU1^Npr/P4n bHlq+
f<b)*
[=6;
$Ic4k|p2>Xfmh-bBe7Q7+`hO!
X;7"
VMEK
ZjGk
?5N[W9n|VDaAT/1j=(c&nKKk"
5P Z
/
P5n\
-fTV
7yse
Y_8JU2B[&5#L$ ^!o3( 'a%J/
yq5>GG
b&L
ofVB
RwO\
hF]g
LLwn
JV_P !8
3>?V
Z6X[
w/S
59H|
ybB/
~n-:to=
vlu5jM'/egKHF1+%@96ivjNr"
Hn@>IS'=6QYCi{nk9j#<KKYd!
AssemblyProductAttribute
1 g?:
e-_1~
6>LsS
dw<3.
D-)]
'S#[
uSS;1
[O2a
"9}U
s;gu
MXNQoV
l&H
<Module>
BQ* ?d
*<
=( F
k[>q=<iZtG }mH X}fH_p;0x!
L>96p,nMLtT,Vh%sGi+Jp,cO%
mBZ}
4m&*S
gs;t
spB#
2qz$
WN]~
@#E sGw
``=c
0U(tdK
MulticastDelegate
yBr
woIpO
wV~&
Tv4oN+
ngCS
`3N2:g
exv"
!m_pData
M`}
uU>M
YvS|_
pOPH
kN5!
value
kGw[
Hw H#
}_3 R
e%`#?/,qHrWlQ!u!f$3Age`S
Mk)U
2018
HtC%m
ex:wC7xedY0O@'+fgP{x$!W"$
VwB(
ruyC
@dXe
jQK-j<
&U ?
09LwwM;
>91k
^5mj
-$q!
o:r%
T5Qb nA
TA_v:
OnMouseUp
|J$I
$Ya&
L]ZJ
@S2:
/Q}kU
+nI)
:wQh
hE3'9M
X9=@_!
SW+A
Y{@h
ND( %
3M n
+_$O
%W Q
]liy
pb0)Y`wOUtBMPzfQQ?uxuw$~!
M_!1+:x6hZ<^-*Yitz>hPi-B"
9| 2
gG!7XpR<58lnHgX Z&M8C+C?
W\%4
l Xu
#GUID
% xE
<i#g
d _Io
bqhg
xg0@
0+n]
&x83
T7MyOUwJb5`U^FT@*T8?hr!1#
Un"?
FC`4
~ 0TKSy
nT*
#WmL
set_SizeMode
#ew/
4n6K
H(nk
n,++
[k&S
)>qe"
=[HY"F
9-W Q
QZ*T
Idej
Ih(`BF
TXJ5Mr
-\|i
vb 4
_(><-k
f8=G&=6kl3&S/+yn2JtZ07`G-
_{w9
Y &W
S*5H>s#4[{?=@xebV=t)bT-C$
S6tqF-1On@@G'aWiR29$%gN>#
GzQiH
[p?/
IDAThCc``
',];
A~i
3d^'}
I|pA
7.6<mOy9.<]b#
"ALy+
>+Wz
X +U
W~d"
d9Nx
Nullable`1
p!"
MKJ;T
O+HQ
4UaO
o&@\
K6@j
]' [M
[dTT
Jci@Tz
kgsY%8y]y-96$d,'8Vc+WlDG"
)mKik
V2H5
\f{VH
get_HasValue
Iw1Z
J SIu
ZiK_
a=X
0r=_
;Cq:
j'n&
Y(A2
h@0V~EzU!fY1%su(o'gf^~1V$
Ow:I
lpf>
5~ p
2(F(
5'd{
\Y\i
kL{i$E
f1 !

>Ufg
_kd5
v "X
I-Of
Encoding
f(>x3F??
4+T=
~x-(
*!<xIJMz%
h/.@6
u%1k
^7<F
{x>_
/m):S
~il
RDN|5@
5I#UW
v%hl+
IEnumerable`1
ao@,
%H||5
@eY`
z:~m
+5pn]7jyB)?7IZ^bcRHCLEm2"
Y"&X
]Rt{
0mQ9
get_Module
TabAlignment
"%m-4`y[{I0Hy_<zN&K0*sGi!
ZX?
a<ZI
TF/^
?w3c
O8}8
W.O&~
u};V]:
g2\2
)o{L
gzl
k>4)
0>Y2")[j_BT1vLQ\?C~ST2pw,
zCi{/
Oh T
f8:@o;
mRe%{
kl ,7
0n^qRVyU
X
GaNN+
D|ih
o:E,
_t[FT}
y_*-
get_Size
gF_G
CO= < < < < < < < < < < < < < < <
h@nR-:
) '
8tAe
zIMxU
` [4
]#YC6Q#]T]9=f^!qp}kL+3dG"
edz3
JUW&X
dji
,%XSI
FRlg
jc CaP
System.ComponentModel
OS@^
Ark.exe
K3k%
-C)\
H/>l
)I#d
436534A617CD86B8557AEAA31D433ECFF38B112F
*:#
2g+-
r^W+
`7XW
'?(G3fi#
wNi!1')H!B5u':6yBLKz<TJj'
r5FN
L#E }
Na "\
{U0]>!A"d:OS'!`Np^Ld{uzM#
`B-3|
U3f`c
}C0 5
DisplayNameAttribute
DsH~
J][Ns
VW96
jOa(tM,I&~\_{VdF8,!p[0no&
! N0
`fE&
& vX
7CgQ
_*:2
C648C0E55DD0A71600A3C979FEC05C180303B2F7
\%uY
K H6u69
,f1
-g t,
zzm>
7nl<[,
#]-Hj(
(3ad5p
D&:6
W9}j:?RU$
t315NLw
^q h
6IyT h
T?@W
Ldya
6jg}j6By`{n5j":we?--0g9g#
D<i=
r(d(
System.Collections.Generic
M`10
doQgl
Rm."
|h'|_
0#tXPD
z 4w
!;H@|=OB?]Jn[=$}~/$/@[5/"
sStn\
r$n l
k ~t
rE-~m
|IDAThC
"u+S
_Nn_}|?mv@Ph2x?`#'BAbSv=
Y^O`
System.Windows.Forms
set_Cursor
~.IN
s[^(JT
(&hxp
_Kd>c
Un?h@
p@
EnCc
XzMuNg-iOl1H@/m5l$'\<ZMv!
*5ml
5{Qgn
*z{.
kfXNO
_Xmq
|w2!
0Yv5Rd;P 1+OE"}im,kS39{L
WriteLine
YX|U,M)e&|/I|GJ "xS~g~kT#
$2K-
System.Drawing.Bitmap
5BZA<0
IEND
j<_j82utrNx$~9a>g_5ly<{D!
I&JS
m:IRK"??^!B/&1jTwj~?IU}-$
WJ3\k S
_W89?
evE)(
89ov
_x!ZPt {
6K8n
iN=:{
!d%S
$fTB}
SetStyle
"dwwfh
~ @a
<"f5L G?
v$e
q\e7e
F8cW
e&p?
O4&
q"/N
disposing
u9yt
Z`5hDF=wSg7"Evp$<RSGd!*U%
'PW
U}cg
z\s&T
`LW]s
$/Ds
yPbl
S\a
X]o"
z ^B&68
Jh@z
4k(:
]P^;
mk2~L]]
$-8&
W8'U
I&\[)
[jf3L<k4')u13TdM@/b[}ZbY"
HU&B
qN co
R )$
.T{
,5kB
22`U!`
QCG#$
N0ExMNh$d{"i(ZRE#Q\V^SPP+
w)vXz
~UY*
<|2
3bfx
JN>T
fJ*>
<hY^
)kJvr
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven07_64 Seven07_64 VirtualBox 2018-02-16 18:40:05 2018-02-16 18:43:00 175

8 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven07_64 Seven07_64 VirtualBox 2018-02-16 18:40:05 2018-02-16 18:43:00 175

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\oler.exe.config
C:\Users\Seven01\AppData\Local\Temp\oler.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\oler.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\oler.config
C:\Users\Seven01\AppData\Local\Temp\oler.INI
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Users\Seven01\AppData\Local\Temp\c62411bd-0884-4219-bcb4-63c8958659db.dll
C:\Users\Seven01\AppData\Local\Temp\c62411bd-0884-4219-bcb4-63c8958659db\c62411bd-0884-4219-bcb4-63c8958659db.dll
C:\Users\Seven01\AppData\Local\Temp\c62411bd-0884-4219-bcb4-63c8958659db.exe
C:\Users\Seven01\AppData\Local\Temp\c62411bd-0884-4219-bcb4-63c8958659db\c62411bd-0884-4219-bcb4-63c8958659db.exe
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\20008c75bb41e2febf84d4d4aea5b4e8\System.ServiceProcess.ni.dll
C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.INI
C:\Users\Seven01\AppData\Local\Temp\oler.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources\Ark.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\Temp\shell32.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe
\??\MountPointManager
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2456.32444359
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2456.32444359
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2456.32444390
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.Local\
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows
C:\Users\Seven01\AppData\Roaming\Microsoft
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.INI
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\dc64598c-4dc0-4756-bbb4-d84573e42144.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\dc64598c-4dc0-4756-bbb4-d84573e42144\dc64598c-4dc0-4756-bbb4-d84573e42144.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\dc64598c-4dc0-4756-bbb4-d84573e42144.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\dc64598c-4dc0-4756-bbb4-d84573e42144\dc64598c-4dc0-4756-bbb4-d84573e42144.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\shell32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2612.32451546
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2612.32451546
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2612.32451546

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\oler.exe.config
C:\Users\Seven01\AppData\Local\Temp\oler.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\pubpol21.dat
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\20008c75bb41e2febf84d4d4aea5b4e8\System.ServiceProcess.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe

Write Files

C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe

Delete Files

C:\Users\Seven01\AppData\Local\Temp\oler.exe:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2456.32444359
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2456.32444359
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2456.32444390
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2612.32451546
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2612.32451546
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2612.32451546

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oler.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3035fc5a\375c7a1a
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|oler.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|oler.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|oler.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.ServiceProcess__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.ServiceProcess,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.3.5.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\337da671\3850e7bd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\337da671\1b71387b
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Namespaces
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msbuild.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.ServiceProcess,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
kernel32.dll.GetFullPathNameW
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.VirtualProtect
kernel32.dll.GlobalMemoryStatusEx
ole32.dll.CoCreateGuid
kernel32.dll.GetStdHandle
kernel32.dll.CloseHandle
kernel32.dll.DeleteFileW
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
kernel32.dll.FindAtomW
kernel32.dll.AddAtomW
mscoree.dll.LoadLibraryShim
gdiplus.dll.GdiplusStartup
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipLoadImageFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageType
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipGetImageEncodersSize
kernel32.dll.LocalAlloc
gdiplus.dll.GdipGetImageEncoders
kernel32.dll.RtlMoveMemory
kernel32.dll.LocalFree
gdiplus.dll.GdipSaveImageToStream
oleaut32.dll.#8
oleaut32.dll.#9
oleaut32.dll.#10
gdiplus.dll.GdipCreateBitmapFromStream
gdiplus.dll.GdipBitmapLockBits
gdiplus.dll.GdipBitmapUnlockBits
shfolder.dll.SHGetFolderPathW
kernel32.dll.CopyFileW
kernel32.dll.SwitchToThread
shell32.dll.ShellExecuteEx
shell32.dll.ShellExecuteExW
setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
setupapi.dll.CM_Get_Device_Interface_List_ExW
comctl32.dll.#386
ole32.dll.CoUninitialize
ole32.dll.CoRevokeInitializeSpy
comctl32.dll.#388
oleaut32.dll.#500
advapi32.dll.RegSetValueExW
kernel32.dll.DeleteAtom
comctl32.dll.#321
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister
kernel32.dll.GetProcAddress
kernel32.dll.CreateProcessW
ntdll.dll.NtAlertResumeThread
ntdll.dll.NtGetContextThread
ntdll.dll.NtReadVirtualMemory
ntdll.dll.NtSetContextThread
ntdll.dll.NtWriteVirtualMemory
gdiplus.dll.GdipDisposeImage
kernel32.dll.VirtualAllocEx
kernel32.dll.VirtualFreeEx
kernel32.dll.VirtualProtectEx
kernel32.dll.Wow64GetThreadContext
kernel32.dll.Wow64SetThreadContext
ntdll.dll.ZwUnmapViewOfSection

Execute Commands

C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe 
"C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe"

Started Services

Nothing to display

Created Services

Nothing to display