MalScore
100/100
MalFamily
Razy

coast.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 32/67 Related 2061
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 296.00 KB (303104 bytes)
Compile time: 2018-05-31 08:56:07
MD5: 5534621d1818b6d246e7ce52a311bf9f
SHA1: 4f8cb9f2dfa7f69ae058ca9ee22e23860f4037d1
SHA256: cd0df0e1af9a0876a2e58f461f23b10fd2d45580ed5290c378e097a3ea43f8c3
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-03 19:30:03
Last submission: 2018-06-03 19:30:03
Filename detected: - coast.exe (1)
URL file hosting
hXXp://gabsten.dedicated.co.za/sites/default/files/2/coast.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-03 16:38:54 [32/67] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x46d4d 290816 2b8185ade97637bafba86e08be161e44 6c5f4d3eac92c94cb99cd4400ea36526b7eb38b6
.rsrc 0x4a000 0x49a 4096 eb02d56c180c21034bfe22c87777e31f eaf99e9f7266586340c9718170d53406d53f4b6e
.reloc 0x4c000 0xc 4096 49e573d75c33826f8b6aff9a22a98f63 f03e36fddb4fe96b7c0cda2acd66222dc64671a7
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x4a054 1094 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2008-2017 Apowersoft Ltd. All rights reserved
Assembly Version: 1.1.5.1219
InternalName: Apowersoft Photo Viewer.exe
FileVersion: 1.1.5.1219
CompanyName: Apowersoft
LegalTrademarks: Apowersoft
Comments: Apowersoft Photo Viewer
ProductName: Apowersoft Photo Viewer
ProductVersion: 1.1.5.1219
FileDescription: Apowersoft Photo Viewer
Translation: 0x0000 0x04b0
OriginalFilename: Apowersoft Photo Viewer.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
System.Xml
FIle type: Library
USER32.dll
KERNEL32.dll
ODBCBCP.dll
GDI32.dll
mscoree.dll
IP Found
6.9.0.114
URL(s)
http://www.smartassembly.com/webservices/Reporting/L
http://www.smartassembly.com/webservices/UploadReportLogin/
http://www.smartassembly.com/webservices/Reporting/UploadReport2
http://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
http://sawebservice.red-gate.com/
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
String too long
<RSAKeyValue><Modulus>0bV1qZA+QL1yZh22yHehJLOzO0/4vUwm6LfL7VVn6Sso0kaOligyF9MvAC8ynG7N9Njfi8GI1/FGI6teSWvG7BgWXkQyC4nYg0Rlx+NWfracm7nOYUXG4TiJPoirh2vfMerfcxgbe7Skb4ftGEX9u6iIEMf1q1orI2K61tELzk8=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
6DDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGS
DDTDDTDDDDTDGUDGEKDDTDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDj0!<3EDGU
FDDTGEDGEKDDDDDDDDdDD$GEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDD
Please wait while %AppName% is sending the report to %CompanyName% through the Internet.
SmartStackFrames
-
Powered by SmartAssembly
appdata
StackTrace
connectingFeedback
sendAnonymously
IEnumerable
SmartAssembly
DateTime
AssemblyIDs
SmartAssembly.Attributes.PoweredByAttribute
Cannot connect to webservice
ERR 2006: This template was not properly processed by SmartAssembly
@1B2c3D4sfg5F6g7H8
UploadReportLogin.asmx
We are sorry for the inconvenience.
InternalName
OSVersion
{logo}
K93oCu6gaxOwgopMMWs1ZicGYHIKRADt4j3TbNWeyp8=
Object
Failed to save the report.
StackFrame
I prefer to send this report &anonymously.
mscorlib
UnhandledExceptionReport
ExceptionStackTrace
fdssssssssssssssss
retrySending
Software\Wow6432Node\Red Gate\
Error reporting completed. Thank you.
Translation
More
Ignore this error and attempt to &continue.
LegalCopyright
%$&$'$*)+),).-/-0-HGIGJGMLNL
error16
Key
v0.0.0.0 from 31/05/2018 06:56
&Send Error Report
errorMessage
31bf3856ad364e35
Value
Length
True
Comments
Apowersoft Photo Viewer.exe
Debug
GetServerURL
Transferring report.
rosoft.NET\Framework\v2.0.50727\RegAsm.exe
continueSendReport
&Continue
</RSAKeyValue>"
ditto
Cet6Xe47iuuUqL/f4Go16Q==
preparingFeedback
continueButton
Apowersoft Photo Viewer
Rank
&Save Report
1.1.5.1219
default
.ico
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
dontSendReport
debug
Shutdown
fsdy]
TotalFramesCount
SmartAssembly Exception Report|*.saencryptedreport|All files|*.*
ERR 2006: {0} @ 0x{1:x4}
dsfs
VarFileInfo
If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.
Workstation
dsfsddfD
TypeNames
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
labelEmail
FileName
Email
\Microsoft\Windows\
{B92CD7C8-FBAE-4260-8BCC-B4C7477120F2}
To help improve the software you use, %CompanyName% is interested in learning more about this error. We have created a report about the error for you to send to us.
ByRef
network
poweredBy1
Copyright
SmartAssembly.exe
Method
Preparing the error report.
{0} Fatal Error
UNICODE
SystemInformation
{data}
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
email
%AppName% attempted to perform an operation not allowed by the security policy. To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
6.9.0.114
SHA1
{0} cannot initialize itself because some permissions are not granted.
UnhandledException.Objects[{0}]
DoNotCaptureAttribute
This
Assemblies
error
cancelSending
SOFTWARE\RedGate\SmartAssembly
RemovedFrames
CodeBase
"<RSAKeyValue>
SmartAssembly.SmartExceptionsCore
ReportID
2008-2017 Apowersoft Ltd. All rights reserved
&Email address:
ERR 2001:
FullName
UploadReport2
ERR 2003:
&Cancel
CustomProperty
ASCII
current
LegalTrademarks
ProductName
panelInformation
8$U
AnonymousID
Static
Powered by
Message
Null
Pointer
/AddExceptionReport "
transferingFeedback
d98c1dd4-008f-04b2-e980-0998ecf8427e
Save as &File
Could not deserialize the obect
UserID
X64
4axrt5biN/muKPbmlwY3+w==
pleaseTellTitle
You probably try to launch {0} in a partial-trust situation. It's usually the case when the application is hosted on a network share.
Name
Reporting.asmx
%AppName% has encountered a problem.
ProductVersion
CGkmgzWpxZs9atUtI1mgyUcahF6FgQ6wtfTka4pJSGE=
__base
&Don't Send
PreviousException
Assembly
TypeName
DoNotCaptureFieldsAttribute
UnhandledException
OriginalFilename
&Retry
ExceptionReportingForm
System.Windows.Application
saveAsFile
Data
<RSAKeyValue><Modulus>0bV1qZA+QL1yZh22yHehJLOzO0/4vUwm6LfL7VVn6Sso0kaOligyF9MvAC8ynG7N9Njfi8GI1/FGI6teSWvG7BgWXkQyC4nYg0Rlx+NWfracm7nOYUXG4TiJPoirh2vfMerfcxgbe7Skb4ftGEX9u6iIEMf1q1orI2K61tELzk8=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
&OK
Count
headerControl1
headerControl2
headerControl3
To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
Connecting to server.
&Quit
AttachedFiles
ServerR2
N/A
8D7qilzN8+CSpLPqxEf66kxDdsJ3R9lyp2tAQtP2EEs=
ERR 2004:
SecurityExceptionForm
TtvSnOsbT5ucO/89V4OscA==
(0x
Path
Please send the Exception Report to {0} Support Team.
UnhandledException.ILOffset
Lqs9z8whpWlhgTohs/FEFA==
Software\Red Gate\
Assembly Version
PresentationFramework,
temp
CompanyName
FfpDaj2Qbx/USBKNveGrhZHVczKEHP+3vkZr7xReaoU=
Objects
#rundfdsl32 .exe#
ggggggggggggdfgdfh
panelSending
bmY0GvtxvNav7Y1b0myYXg==
ILOffset
ERR 2002:
*** Information not reported for security reasons ***
lqBGV/jkLhpfgF1ymGkEYKe913eXXk/TxV8+ERpGqG0=
TypeDefID
\Mic
ObjectDef
ERR
System.String
UnhandledException.MethodID
Exception
%AppName% attempted to perform an operation not allowed by the security policy.
Apowersoft
Current
Field
panelEmail
poweredBy
If you want to be contacted by %CompanyName% regarding this error, please provide your e-mail address. This information will not be used for any other purpose.
waitSendingReport
MethodID
continueCheckBox
Security Exception
windir
completedFeedback
ERR 2005: The 128-bit encryption is not available on this computer. You need to install the High Encryption Pack in order to use the reporting feature.
NameID
FileVersion
saencryptedreport
quitButton
VS_VERSION_INFO
Error
Do you want to be contacted by %CompanyName% regarding this problem?
http://sawebservice.red-gate.com/
CustomProperties
StringFileInfo
pleaseTellMessage
saveReport
label3
:!K1I
ServicePack
ExceptionStackDepth
Save an Exception Report
%AppName%
000004b0
(0x
gdfsdfdshshsgsdg
dsgfdg
FileDescription
warning16
UnhandledException.Objects.Length
data
%CompanyName%
Microsoft Sans Serif
UnhandledException.ExceptionStackDepth
.png
AssemblyID
Start Menu\Programs\Startup\
sendReport
OSPlatformID
AttachedFile
dfdfdsf
Please tell %CompanyName% about this problem.
You need to run {0} in full-trust, or at least grant it the UnmanagedCode security permission.
NETVersion
SmartAssembly.SmartExceptionsCore.Resources.
cEDD
L}T1W~
,H&&&
nw">
uO/ 0
KDDD
| KM
KDDK
ExceptionStackDepth
G_[[
DD,]FFD
"}B0L
{"Bv
FCrK
1ED-K
OAZDSY
0P.G/D
DNDDD0y
mFEK
$D2D
.h-E
Int32
goEG
Q]wLin
%ED.D.F
wQPGE
tDDD"
h;oZ
GWF8.9888886x
DG/E-
4@DD
-m.G
DGEDH
.$XE
VED2~
%M_NP
5T?Em'
) DD
:`D0
,DFDG
EDWEKDFDDADEDDDDDBEEGEKDDD
R+DK
o[ys
2]X#
get_Height
W32%
IDND!
0ODD}
<\q~S
;SD0_
ReVk.
EY_MAyim
DateTime
0v,DTDD
:UD2S!D.Q
dJGE
-;!D.D
,%&+
-A.R
E"gS
,E@DD
aKDDD
sKc+uB
*D G
*D D
9[iD
,%&&
x\D1
Substring
wG3h
KDD1
KSDG
1!Oy
x~3Ox
QDDD0H
QDDD0J
o@KD
8{Zh
U^rE
CDD.D.Q
get_IsByRef
get_Controls
GicuU
C5DD
}]?^!
Rast
Version
V=4
9gB
Z}@n3
HGEK0x.E.D
05{c
GQRD
CryptoStream
get_ModuleVersionId
rNO
1L,]FFG
DNDDEDDG
-DDD
x}D1
RH-&^
SystemPens
Z@?_x
<hD1u
9CEG
.^.D
]v0#F(
+\:y
5`
FDGv
Ww -
,HDD
laxg
=7#f5K
x~3@{
T-E!D
G"EP\
}dGEK0{
S DG
Xu&;
/D-D
(+#-"
\AHY@U
PtrToStructure
n1GE
!D)E
8y"qxS8
DD"}
ControlStyles
DDW
Marshal
HBDD
tXE:
:U10D
'D+D
} ,.
t10&#]D
*GE!D.C
4F"D
`DDGE
HDDA2U
JDD.F
$DDD
keDG
x}2@{
user32.dll
ON\#n'
'# "
;-DGEKDD
.@.P
JXED
op_Explicit
RuntimeFieldHandle
.@.]
%!DD
U.G/P
Z@AG
System.Security
.@.[
C!T)R
)EKD
,@EGE
pFED
H B P
Ke>E
DG/t
)DwD
&++++++++++(x
`TDD1Y
DIDD
?Y,Xn
ODD3K
DG/K
DKD,D1DD
.d-E
j9DD
DG/D
,3&&
@DD
DG/A
GCHandleType
8^FN1r
8rq
<D7E
DG/[
EndInvoke
+4-%
g@rr
PNDD
dY3<
*jr:'
|rDD
<)eS \?
WriteElementString
Tliicb]YWTTJx
6D+G
:TD3
`M%(
pIDATx
get_IsValueType
sNxVz
FDDTDDD
kYv+
B<e3
,/&&
''ED
.Z.D
DD.O/G!
3bED
;XGJ
7B~z
vV9=S
oFEK
EnableVisualStyles
+%~hM}J]
PHN?C
K~3C7
,@EDD"
oVI<
|F1@
Abort
FED1d
{z}
set_MinimizeBox
QMDD
o.?:
(0V
0D)E
Av<EDDK
MDGE1S
CgG2Q
^*GE
$-a'
L\FH
7? Y
.d.D
get_ControlLightLight
nl%e o5
i}ED
'ITRi/
0ODD7&
Y* +
9HD0x
Ia5O
eGGE"~}D
F:I
DFAD
JENG
/z.D
&+/
QDDD
HzDD,DEED
Format
bwnz
GExY,
5jzl
orsu
L4r%H
`!+IpHW
8LEK
f[ >
7GDGyrK
.C.D
IDG/Y
1L-U
QPED
333j1A
7d{z5g]
EDDD0_
8-<_2;&
AppDomain
Jz5]O.
6>:6
XcFE
GetMethod
w:W
HEDD
EDDD0M
a.D.D
-,& o
get_CurrentDomain
1H-Q
ThreadExceptionEventArgs
I)T^6
Ol^m
CDDD0O.D
sdfgdsfg
Z{]v2
PADPADP
.`.D
get_CanFocus
owY 9r/
T.D
Kr|}
K(w
EDDD0l
T.E.Z
PaintEventArgs
-q.G
OpenSubKey
SODG
,X3
-Q:S
5NE
kGDG
PUUU1J
`DD,
7DD,]FFD
FromBase64String
o>
ODDD0M
, GE
~b<
DGEH
T+70[
vtur"
Q@GE
|5B"
ToByte
7DGE"
Ko^re
DGED
FcuX
:M!A.\
;XD0R
@b<9
"d"6
%eI! _
Path
set_Text
.t.D
9H.D.d
U.D.D.D
C$ED
CDGE
OLnJy
DGE"
EGE2f
bx21
UTF8Encoding
CEK.W
|B V[
:VL0G
lED
r\DD
@NDDt
R.D.D
ml;w
#Blob
Control
DNDDEDDD
-(&&
N"TMu V4
MQwj
@NDDG
:TG0X
R,#)
.V.D
rtbMi
get_Year
(=ETr`@_m
9i\x
/ DD
v I(
,c&&&
}EDD
`z;O
2zTN
add_Tick
$EDDD
,XGFG
dPp*Iw
@DDDD
1Q}8]L1K
, &*(
H^DG
!%("
GetILOffset
1*.@
yDEDD8
Qf-9
GGEK"
GKS
hBJ{
BindingFlags
M1M|
!D(D
OGEK0!
IDictionary
Type
2Z!@.R
DNDDG0@
,S&r
>EKG
0V@)
"D*D
]_tf
cdn.
'DKDD.E
Pudn
IEnumerable
s"7x
F 8;
FDDD}
1_xy1
rX|G<
-A:5k
2U!D
$bV
`GEDG
T H
IDDD
ztRIU
|dDDEDDG
x30^-A
jD-G
KtED
]H:}
.v.D
}EBD"
Cursor
CGEKD
0Xxi0\xt6
+KDD
9eK0
DDD}1
]1F
$E DG/ A
NeutralResourcesLanguageAttribute
get_ExecutablePath
} y,
+)k !
QUUV0H
Char
}}lj
OED,@EDD
xFDG
hdGE
L;VA"9
-@FEK
-D6D
7O=s
9]K0q
0@x01
D%D
TDDD
TDDG
&ED,
mIED
get_Name
GetValue
S6DD.D.S
3eKDDDDD
AH D b
0G 1
,AGDG
})DG
(EDD,GEDD
<d-W
Y\8C
GetSystemMetrics
!D<D
2@x%6
)K(D
-D*D
fdD|
^Gq]
aBp{
U@GE
/iHI !
;[ED
_H0X^J(
(ODDD0M
0DDD"
FDD,
E gA
L!|C3L
"=l<jG
-y/9
}%DD.D.R
^@<$
WEKD
,{}
.\-E
XFDD
d$3r
0L-L#LFDD
j4<o
FDDG
FDDD
:`D0~
x/1
40j:
4DGv
+d)T
EM@DDD
G1h/H
0IEK
DD,@EDD
B)h
DDLD
Y).D.D
XEDD/
ToolTip
kernel32.Dll
[D.D
qY5p
~eo+
<JDD
F.4w&
^tTcX
, &&
(D!D
xKGDDK
+DDD"
%kDDD0M
w:DD
lDDD
8HDD
DialogResult
.A]`
.B/3
+ODD
2W"~O?L
*G,D!
ReferenceEquals
4gED
.text
List`1
%*DG
# 8T
dDDD0
GetString
`X'pu
set_Proxy
O&v(
Component
eQYq
ExtractIconEx
GetObject
xs^"H%
CNDD
4E"D
P@DD
c-D!
|D0[
wt4|?
!D4E
$dDGE1
wi}K
%D-G
'4k5
Button
`38L
"DD,
System.Configuration
@4GE
FlushFinalBlock
-J2IH
+nEDG
(+E
StreamingContext
p[DD
SBDG
)&k/w)
0c.D
]DEDD
HQC9M}
Q0 &
ewFkgE
SmartAssembly.Attributes
i*DG
- &&&&&
H|B0C
zD1J.D.G
GhD!
B DDD
1KD
uo^cc
PerformLayout
HLDD
$|L+*
0C"}F0V
y ity(Y
aFED
|EKw
j74Y@E
.psG
-'&&&r (
z4Z
2"78
1L "
StackTrace
16-A
#p}
xtD2
DFW1u`
DD"}L2I
7x@:.t
hugG_
|@GE
.G/D
$@DG
UH6k
~EDG
~?[I&
*D0D
4 KD
*K+D
2Cy%5l
,F,$
-BEEK
- &&*(
CipherMode
JEDD.@
T|B0C
T~DD
F8`8
8 NV
ININ
xJ0Z
xK1K
EGU 1
j0X`
ODBCBCP.dll
SmartStackFrame
9L.D.E
La{)
gGDG
d]ae
*GE!y
Elun
0O"
9S&n
3?-yh
-i$O
.PhwN
4H}t2P}7A>T}4L1O}4H1B
GetFrame
}M0S
serverUrl
L,`TDG
\=KD.h
System.Net
ED|
%o5E
. 8j
SetBounds
PEDv
- &&*o
:|D1X
~a_D
`.rsrc
tDtD
3D-D
A Olj
oD:8
KEDH
;D
OnTextChanged
-Z}C
]DGE
9# 7O
}k<b
FM/m
LDDGE
CreateDecryptor
sRiU
get_Default
H.F
xYKD
LIDD
W-KFDD
ONDDG
StackFrame
=={%
kernel32.dll
9iK0
qaDD.{
, L1
jX}
EEKDo
/\FEE
:%0[#
css&%e
-+*j
"O0qf3x
,BFDD
get_CodeBase
ED.E
ED.D
+[<KO
{2}(
0%yD
-@DD
].F/K
^>DK
QGEK1J
<@WEGE1A
<EDD
.>ry
Flush
~?"!
DD"g
0_/R
,E*G
yM5s%
># ^
add_ThreadException
H1Aw
"E6G
D6D
I#07DD
DTDD
4QX\
eAGE
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
*KDi
Focus
?5kh
+D<D"
twGE
D|Xt1V|
6DDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGS
YEDG
'IKD
Y+)%
P}L1Y}
get_IsPointer
sNDG
DDD"}XJ
$6N
5H~u>K}4@1N}4L1A}7I0
CHDD
nk&.a
PlatformID
WriteStartElement
"E*G
============================n
zD1j.{
\EDD,lEDD
( DD
L2L}
KDgED
pXED
GxuK
:@d7]
L2Lr
PictureBoxSizeMode
.N.3.+
$YtH[
DGEK0i
<hDD
S;DD
G<t^
=WDD
@1N}
zEDOE=L
Txa2
d<rp
WebRequest
.rNc
nh#=
\ ig
k; Z
GetProcAddress
_9ED
WY4<m
@NDD
EKD"
<XD0T
6`KD,v d .D.D
M1R|
KG H.@
go['%
KG H.E
9HcUDG0]
edl-
-@&r (
urHy
,GAKD
/D*D
=;4W
93 Z,{
EKDK
EKDD
LdDDDK
DD0@w
GetBytes
-Z.G
KED/
T2wr
d=Q
3h#0
D]UUU
"D+D
Process
.M3J
EKDw
K 8]
#GO%
Q^,!J
[n8{
,LDD,D@DD
OnPaint
- &&*oT
SmartAssembly.SmartExceptionsCore.Resources.ok.png
/K.D,DDDL.E.D.G
2Jw
/D-E!D
0LED5
DIDD.D
qAN/
Aj uci
!D7D
kernel32
HI!{
'IDATx
@6tJ
get_Top
Write
9H.@
3W 1
h6:v
CFE
~/7~
ODD, L1
i($3
W@DD
0 .
EDD
get_Assembly
,QKD
wn>Jj
AnchorStyles
$xFE
System.Xml
K.RH
UInt16
3#Fh Y
%-&%-%1- o
0COQ
/Y/S:{;f
4 GE.G/O
#@DD
MeasureString
MySettings
uE2Is
1[-S
i]Wb
DrawText
wX1Z
uFE.G
>X.L
-:&&
EOFD
7YED
ixj%8d'9
get_ClientSize
UUU1N
4%46"
:dD1X
6K0D
|4GE.F/[
"u~*
get_Text
WED.
IHDR
SoapDocumentMethodAttribute
,GEGE
System.IO
hGDD
WrapNonExceptionThrows
get_Now
=+P9
AsymmetricAlgorithm
[dDDD1t
xC0o
L.: I
Km>
+] ,
C)KD
DD.D.P
DD.D.Q
DD.D.V
Lq3f
\`DK
KDD,[FFD
{JVx
S@ED
=aED}
EDD}:|K
j,>0
=`:h
DD.D.@
ODDD0Y
/\`i
DD.D.G
#= G
8L-E!G
3:2rLT
O"}E0Q
MGED
DD.D.L
&&&* +
E BI
4Tg^
tXUV
9QK0
{>|S
3p,$
1l/T
[QDD,
EDD}:hK
get_IsStatic
@9"*
0DGE
{bED
9T|G3N
op>i
DCED
XGT*
]cDD-E!F
1{gz!:
3uD1W
j{>
\A~
STAThreadAttribute
UA*Gm
LHDD
lUED
_<Ye
Z) *(@
>L.1
;DDG
K7D"
vMZ8
<'GE`
-*&&&&
DDTDDTDDDDTDGUDGEKDDTDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDj0!<3EDGU
Cg}n
;TD0l
H|4@GE
0 ED.{
0UDD
OAJ;
EQ~M
"%DD
|D1M
U\bD7"
/E@GE
^EX%
ODGE0]
L#DD
~YfMR
OEGE
-g&+
J,p[>
UL7
,[FFD
t3TDG
Me*j
,[FFG
8L@
pdED
C DD
System
EventArgs
A3m{
Application
nFy@
A(}FU
r{$z
w*.D.D
&D+D
9x;4
!D5E
gffffffdhs3434.My
[2fyDFDD7_
1^EG
ANGE!D
jG!]
^MJD
PGEDG
uA2L
9L.@-m
DGGE
user32
=EyjE
#DDD
+V g
5{z$C
,3~.
j{g/
1H}v0J
`(i(
,)~.
WHKD
DD"}L1H
,]EGD
+G+K"
CreateInstance
!DDD"
Q-sn
U~kIS
xI3a
nn0H
c>RX
E ED
$E$D
MethodBase
#Strings
=X14%
Roj(
/UDD
iwC2%0
System.Collections
Image
Yy`TDD1Z
xVED
A2G,VZN
= "p
D?E
P}L1Z} @1]~ L2Qr H1K} T1N} P2@w
^aLA#{
+-EGv
luED
K0B
^ypWG
|K.b
]R@~
D*D
D)X )
a#oD
CGEG
Environment
sqLe
EDDx
H\DDD
EDD}
[%<
DEED
EDDw
o^D,N
EDDt
bE/w
^#u#
RS-
:TDK
DDD-M.B#
"D(D
EDDG
OnFontChanged
EDDD
GE.G/^
8'z0
GE.G/X
W^t\
.L.D
/`.D
x9/l
$:\#
.L.E
dpUG
EDD.
EDD,
<MDD
.DDG
{CD2
r.DK
& 6d6
eM\g
$UDD
IGOK"
qO'j
LKDD0x"
0EG/K
;JED
R./l
3E$D
@MED-E
41KD
get_Position
System.Diagnostics
GetEnvironmentVariable
,KGGD
GetType
set_StartPosition
lODD
Xh357J
G1e.
W0agW4
vTPR :
o@!j4f
@GEA
Jropc
bi z
.A.'.*
,*ED.D
$$$$!$!!!
niin~%
2M!T
OpenWrite
o@F`
/@-R
;PD0f
KGDD
@liMK
\z) V 0
je`w|
Activator
j/}WZ
v,>O
!*ED
\NDD
,v&&&&&
<kD1[
$=p/
R.D.@
*) y
wK~0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
0'm/J
hFDD~;\H
QPT]
8ODD.v
+2"F
>Y} @1\} L1W}
?5KK
H#4r
IDNG
4ODDDDDD
1z.F
H}T1W}
&u !
tdDDEDDD
bEGE
set_TopMost
LED-E
J.B/S
"*Ad
)D"E
P7{
VEKK
W H=
pr]"
#S"eP
dDDK
utDD
ProjectData
#DDw
dFDD.D.@
AbI;
U>A} P0%
\.D.P
set_Location
Color
:QG U
cODGE>^.D.R
5E*D
4FEK
h"^p
\.D.D
!D$E
vEDD
w9N
N1vH
DED
'EDD
GEK
DGfVM
set_BackColor
DD-D.
SetClip
cyGEDD1T
G7.T
1L.T
`.DD
JfFE
FDDTGEDGEKDDDDDDDDdDD$GEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDDDDGEDGEKDDDDDDDDDD
_$Y_
En5*r
(E,D
get_UTF8
n /9
@MEDG1
1L.H
1L.K
eHGE
get_Width
hQc{
* 8p
}3[3{
uL$X
. C H L ] p }
W-/Z
81EK
o{`3
_IDD
1H.P
UDKG
licenseID
:xD1X
\GEK
!WH(
giRY
|]ED
SystemColors
5 D1w
hji$
1H.F
1t.T
pVDD
|[u>V|
|LED
!D6D
2@(0
9 v1
<`1o
PIDD
Ze|=
@dDDGJ
shell32
get_ManifestModule
,@EDD
)u 9
HGEDGJ
EFDDDK
SmartAssembly.SmartExceptionsCore.Resources.data.png
X2B"
Dukc
:DGJ
@}T1W}
Kj:Kn0P
EED
-3(3
v)ED
1L.0
1L.2
NvDD
oiog
SaveFileDialog
ai%ku
EDD0~
BitConverter
UnhandledExceptionEventArgs
,LDD
CGE0T//
<tE1@
rRa~
bcp_colfmt
9iD2Y
7K!D
JYE_+;f
+6 L
,LDG
H-E!D
-%&
^n#7
Label
EUmx
y[:,
aMmQ%6ND
p1P2
\ED.x
K.D.D.G
<ADK
&&&*
get_Second
-%&&
ODG1i
gvDG
Form
ODDEDDD,GUDG
&&&&
L\Y9
g+ED
,O+*
KD,07DD
1Wxi0\xt6
w(>w
GetAssemblies
0#"}z0&
6,IC
6D G
MKDD
k4v
CommonDialog
fKFE
&77
G(!N)
-a$O
a;DDG
(uuq
=GAi
_TZU1M
Delegate
1QF=
AssemblyName
-g'M
G'[t
%D6D
'ld)
(ODDD1
Kw3Up
tHED
get_Visible
+o*7
3D+D
D&sY
FDD^DGE
@<JD
Seek
>@Mu
xXED
C WA
3%2QUQ
1L.E-{
kD"E
DDLD2@
OnClosing
J`WSs
S.E.D
JG H.@
8 DDEDDD
isjB
f$IqtAs
.U.D
@j,k
[IDDD0
uEGE
p\ED
LastIndexOf
1]~ @2Qr L1K} H1N} T2@}
YFED
U)C|Q
\pe5
Enum
.L.*.(
)ts0
#.zf
(DdD
lQ^/
3~bs
CopyArray
t4DD
b@GE
T3\.E
KDD"
C-P
0]-!
get_Day
gOED
GetTypes
@NDD.GF
set_Name
;XD0u.D
-D.G
Default
ytK.D.D
G\DDD
LNDD
0OGEEGEK
]F+VK
!G7D
+
!0gVx
K;;-
KNDD
HED
RHKD
a-I-
get_Length
L.D,DDDL
q_ED
W]DD
^*h$t:
+D6G
HDD.G/D
HOJD
<vD0I
DESCryptoServiceProvider
thr>
:@E1c
#DTDD
DDD,>
JH H.@
_FDG
P.D.D.D-E
}2U=
>f,/
Wi7Y
EDG3
{||yyyy
@Yog#
GetSystemInfo
Contains
eU/K
X)1> >
ResumeLayout
|HDD
.N.<.4
<SDD
EDG#
!DG-c
lMED

^ DD
D>m.F
)E-G#
j li
_ zY
D3E
ValueType
PPDD
System.CodeDom.Compiler
set_TabStop
,GGDG
pdGEEGEK
k`Kd
}FGE
it ^o
}3@K
g:\ =am
EDGv
;LD0p
tE1H|
ToLower
iE-G
wF?A
8EDD
EDDG
HRDD
H {
Q _a
!NR*
get_Count
I$bC
uG3@
data
DEDD
0D E
Trim
GetTempFileName
*/DD
)DGE"
' 8l
.nEpIK
=LIG
6n/D-E
c?) 1{
ButtonBase
EDGE
_UUU1V
+E+G
@.ED/AJDD
\.G
WwC*
H"~C0@
Namespace3http://www.smartassembly.com/webservices/Reporting/L
mh "U
Kh;f
L1A}
(JDw
@2 RT
GetField
t)a];
d.D.E
<F1n
~d1]
@BDA
SmartAssembly.SmartExceptionsCore.Resources.current.png
ODG
}#$A
ODD
.D.D-E
G0L@
yP+Q
BDD
aVR|<
?/b
JxF2
+* !C
FormBorderStyle
:DDG
:DDD
`HDD
ED-A!Y
F1zK
GVi2:
reGP
2e.Z
0C,G
UInt32
ToInt32
SerializationInfo
n13A
WebClientProtocol
+Os
;EDD
get_Version
kADD
:hD01
set_Dock
;F@d
N(?u
,K6D
kD.D
ToString
<Fp1Z
-3rY
set_Timeout
irWrA
> V533
DD0L
q}&'}
-2&
dDDEGED
"34
Utils
_-Bf
"0DD
]}Gr{
GetWebRequest
VEDF
VEDD
Cursors
Tw^$3
b{F7vV
DEEK
_.D.D
lfj}
)]R]
*<*D
&&&*o
'fgg
\:~5
/sJD
ClearProjectError
KWYO
ddDD
Split
OGE#
OGE,
3j{ee
QX&XC
3\XD
fGeK
H &m
@FDD"}
xOD1
KEKADDD
EK.E.
I&L.
ZqU5
CreateGraphics
]AmT
#ydxx
dMED
JhED
ICryptoTransform
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
GetObjectData
dMEK
p3> w
#!*0
CDD1M
&&&*(
YEDADDD
0sED
O0B}
DG/U.D.D
8 <0
xtG0
.A/(..
DG JED!
fDdD
lDGE
ShowDialog
1b8
(E+G
!G7K
10.0.0.0
PuKh
*=9v
\DSI
1BDD
UfF
\LDGE
q3jp
9vSo
I+Jf
<0AM
set_FlatStyle
< vp1
$;lK=s
QMg](
9PB1C
?FD2z
oEED
System.Security.Cryptography
%FGE[DDD
1Z-E!D
k Wyqy
{F1B|
MemberInfo
auc(
~gYk?
3K {z}
KdDD0L}
SettingsBase
,6^R
K7oG(
Start
Combine
$D%E
1L-M
}e|'
pNDD
U*vyL
R`ED
hfED
ezq0
tGtK
GDGy
P+%4
O8@@t
,DTDD
.O/K
IDATx^
o
u(T
o
o
Amfr(a
k>eCyt
]DD,
;GD0\.R
LinkedListNode`1
#,G/
RegistryKey
#DiE
MethodID
JD.D.E
f-`@f
9a&g
{HDD
ODD
-+&&&&
WUUU1H
Int64
.G/K
,D3E
~ S6
LinkedList`1
PxFE
kDD1i
{uvw
|z?>>N
Exists
U.D.G
0}x_
!JoQ
oP
XmlWriter
p.D
pHYs
.ctor
@^DD,
:OE>k.{
\GDD
RCC
?D7/
]9DD
PUUQQTTLKKKL
QDGE0M
\zDKD
+D#D
MDGE-
0hpJ
/ufn5mT
@NDG
MDGE"
e=5~
x9-R
@HEK
1T.D.G
gIDG
EDD0N
:LD0P
+H o
z 1A|
6X@1T
@TGE
L1W} H1J} T1N| SJ
&* 8q
NHu;
1D'D
C?DG
yfDG
4H}t2V}7A>J}4L1M}4HK
"*? !
uFDD
Qi^]TKGFF9F9x
A$i?
:lD3
:lD0
>:@w
xxxxxxyxyxxx
JEW2h
/DD"
,CEK
H.@,DwED/E
DDUa
.w.D
DrawImage
Name
:lDK
;OE1l
)lTEi
DDD.{
Io.D-E
!_DG
D+D
)} I
IEDD
svDD
@dDDD.O
DDD.J
A1_|
}G^J
%D#D
Ia-j
4`DD
SelectObject
qA!,
Module
DDD.D
,BFGE
VIu
ODGDDGE
eDGE>
-/ED
mo#18qT
Array
{EG/D
1g|;L1M}4HK
,$&+
+"cd
DDD.T
DGE
|R >?
ElT 1
ViVE
xP1Y
/ODD
wwww3L
uDGMD
LoginServiceSoapT
DD"~D1K
2DDD
D!D
@.reloc
v #F
UUU2L
8OGE
:XD0Q
As_z
DDDD2T
, &&
x,2h
msOD2
h=FE
n^3u
EFDD
GenerateIV
Xq }
0 DD,+
eD7D
5I_0
Q&6
ISGE
xHDD
-G7K"
.@p
OqS7
bB O[v
*yDD
8GD1N
EDGy H
KIDG
Byte
get_Chars
,@DD,
Mw#'
CryptoStreamMode
yHe`
7DG-RFFD
MoveNext
;HG0P
W0y}
6,ax
mDD,`TDD
get_MetadataToken
6K'D
2%>.
get_ExceptionObject
@MED-C
0dDDEDDD
{,Q.a
@MED-A
R8k!
z}7
IDND"
e/K.D
LNDG
tEDG
email
J.D-E
& ,w o
ADDD
Dictionary`2
c2DD
TFDD
wFDG
lFDD
"l3z
GetVersionEx
K!DD
#BFDD
;] !
?FD1_
lLEK
.p/D
C1M}
"E7G
8[DK
IE<m
HHDD
EGEK0u
s/{o
MessageBox
mEDD
L.E.^
ZP$G
+UDD
!DBH
get_Location
+G#D
%G7D
,2&&
9HDK
!r%@*PV
9HD0
System.Web.Services
5iEG
CDD0y
dGED!
~FDD}:TK
#EDD
] )N
%]DD
IKDDK
xED
Sb6XF
P[ED
dJDD
@z;5
F}K[
gffffffdhs3434.Resources.resources
IKDK
set_Url
EDD~;PH
H}T1K~
~Aj@
set_TabIndex
,DEED
.D.D.D
<D!D"
,D]g
fED.D
"EdD
LEDD
sMDG
O+_q
9aKK
6D"E
#EDw
XlJF/
z~U%,
ODD.E
h.F/V
T4N=
D D"
get_Item
1L.D.m
k48B`
1 DD.G
7K'D
FileStream
.E.D
B~iP
Zjz
NDG-
XN c
RuntimeCompatibilityAttribute
EGDD
_ODG
UB]5
(LEK
mBS
9AK1k.{
n@O
$m>I
.D.D.D.D.D.D-E
0)Q
cGDG
FEKD
.resources
DelegateAsyncState
0R/K.D.D
\KED
3GKD
4H}t1W}7A1I|;L1M}4HK
?K9pVo
U!D.P
, r
GraphicsUnit
INEW
JG I!E
~CNq*
EK}As
-D)D
3FDD
HFED
IEND
DD.D-P
~M B@
A0},DDTD,DdDD
zEGE
,%&&*
aTGE>U
,DdDD
!LDG
-A&&r
SuspendLayout
0+ED
t@Td
7 DD
_bY
n&GED
YUAs
EDT 2
T.D.D
:B@d
@2:-
%,N?
3EqD
!TZAiD
09.
GFDD
4D!D
GetHdc
RSA1
"nGG^\
1lxA1^.C
/^.D
.K.D
NewGuid
L,DTDD
WYy=.I
,D&&
FL>9
}M(D
|k0P
!9jq
(EDD
wG[V}
ED2a
(2#-
{!DG
DDD1
DDD2
\(fW
_Cd3w
YeDD
5D(D
-E.G
uf xI
1K/A
DDD"
Objects
*DdD
ImsUv
CTDD
DDD,
DDD-
KD.D.D.D
(E6G
IEDD}1
EDDG1V
GazW
IContainer
}3X1
Clear
;wDK
|Xm1
SEDD
DDDA
EDDTDDD
DDDD
DDDE
+ 8)
._(#c
4BDD
1+ y
+.DW
>DDD
4K|{1W}4@1J}4L1M~5HH
/gIDD
SEDw
DDDu
DDDw
DDDx
DDDy
_.D.D.D
DDD}
+
%J,|
HDD
Py@DD
yDEDG6S
HDGEK
/F.D
-U.G
ISerializable
,Cx}
GE.K
9XE2K,
GED-E!E
C*ED
aDD,
}g]2
jDa u
pwlA
HdDD
xH1o
FontStyle
-E!D
20;1
|XAq&
set_DefaultExt
HEED
ddDD.B
9L.5
.E.D.D.D-E
@EDG
<OGE
set_Height
HZDD
||Km(
DD0M
FDDQDDD
.S.D
KG L.E
26.6"
.tGE
ADGE
SO 9
MDD
_~}
[FDD
"=FE
/1]x
KLDD
1Y} C0\~ C1W} H1J} T1M~ PH
9L.D
0E8D"
fEG
be-BY
set_MaximizeBox
kEDD
9L.L
,DtDD
ah4xK0C
JG K/@
TDGDKDD
#lDD
?YA!
\$c&
ResourceManager
Show
GetExecutingAssembly
_DDD
7ODD
Dv7Jv
I,rNU
?E!G#
\L Xt
set_Anchor
PropertyInfo
XmlElementAttribute
get_FieldType
v-Gm&
FrQ a
@yDPDD2N
GIDDD0,
bEDD
L'JD.L.A
LGEK
7I}w0D}4@1N}4L1A}4K1
,-7d45*#5$&d'%**+0d&!d62+d.+k
:\D1_
, &*oj
4Qbi
%D0D
DDD.C
[ODG
IWin32Window
3vDD
\L><
Reverse
,DEDD
#ODD
DDDG
5`L~
MFGE
$MFE
<mE0z
0]E H
,lDD
;CDD
LGEw
,AGKD
cHRM
CreateProjectError
[AD@AD,fFDD
EDD
1W-O!D.D
FE!D.F
DqV"#L
$ODD
"!W)c
+D2D
>U!Qv
TFEK
KEDD"K
R DD
:XD1X
EYED
pcEK
Assembly
PDGB>@w
9H0Q
Interlocked
xaqc
1I|;L1M}4HK
=M'n
5&N
%} W
LDDEDDD
7D-D
FXP\rW1
pcdeK]l
vSGE
BDGv
-D!O
33331U
-D!D
a-Y$
FDD.D,
O}T1W}
SbED
cGDD
oFKD
>/vA4
d_f8
1>3}d
lo;\\
, &&
|[Hw
YB)kBQ
|D0r.D
#,-.
.a.D
ODG|
EDDGl
LEDDD
mNGE#
LoadLibraryA
VytT%
7012
%DY-
Empty
:pD1[
c?oG
`FDD
@DTDD
7^Y )lf
YX
NDDD
L1M~
ZDEK%
L1M}
_sa`T
H_DD
M8G<&
NKDG
\i-i
8uDD
&&&&&&
9P1fK
{}@U
c3YY|
xZD1
DD.G
@JDD
@,EK
@NDD.A
*%)!
@NDD.D
f&J4
.D6D
,EDD
e!-G
\| i`
iEEDt
get_Keys
% ,L
^y(uZq
2M .eXb
wyK8
Y* -
_EDD
P}L1Y} @1\~ L2Vr H1J} T1M} PH
FDD
d=Qs
IndexOf
I!A
KD,@EDD
J{ ,.
K1P.D.G
4]ED
set_ForeColor
qDD
NEKD0K"
RVTU2I
fBsf
OLDG
V'MNT
Close
#GEDD
9oV
N7@@t
gY.M
ED.D-F
- &&&
Encrypt
8dFE
!Q:H
<EDDK
"Powered by SmartAssembly 6.9.0.114
ODD.D0B
9LGJ
`\I@H[
~VED
Ac$^g
4.G/D
DDEE
xxx%
set_Enabled
1Y,}
:tG0X
1 ED.D.W
appFriendlyName
ANGE!B
'9ED
6MDD,`TDD
!T\
ED!|D1
Read
|;L1M}4HK
P@DGE
EGE!
,{&&
+D3D
LNDD@DDD
9H.D.D/TEGE
XDD3I.D
9L.E.J
XGDD
z8+(
eqYp
xXEDt
value__
-Xmwxj
UGEJDDD
{&y5
6DjD
r~>iG
7P&^
._-E
CompareExchange
s]JD
7w>PQ>;
n7 -(f
EGED
`dDD
set_Interval
D]TZU
*r[)
,FDDBGED
VYXp
'$ED
EGEw
r('
+K-D"
0y.V
AddRange
HDDA1H
=Z}X
!<{E
get_Font
oiA46
k|w2
CFED
5`D1_
9 (QJ
% *7
,pX?
cDK.E.D
GE#]FFD
PHDD
PDGE?H
DD.G/L
KDD"
?}I"b
,07DD
Lo<\
..633333333)x
E\h%
DD.G/U
*DD.
~GEK
9WN?/
# ED
7!ED
e9{;:
$7x"
Ceiling
/D-E
get_Left
.cctor
v DD
GEKD
AsyncCallback
set_FormBorderStyle
"4FJGi
mscorlib
qDMD"
GetArrayRank
ZkQZaSA
FKD}B0M
b&?
aDKD
fiPM
W &@
FEDG
PHDDD
MDD/aTGE
QKDD
HDDG0Ct
,DDD
xLD1
Refresh
y^=o
(ODDD0J.D-A
EJDD8
lLDD
twKD
s*DD
rVf`+
cu<X
hT#VKA
0\-A
DG/E-
L.D.D
%8ED-G
EKWq
\EDD
*]S{
AisK
ControlCollection
2tn;
JGDD
D1P.D.D
9O<H\
GE"~ |E1`
|j0N
RSACryptoServiceProvider
0>1A|
FED~
Guid
wm0GE
*DDD
}MEG
+EG/,
\-D!D
BDDD
MDDD
/ 8K
DD-z
GE,GuKD
5:5=N
+GKDiDDD
IZED
'"DD
;ZD0,
kDDK
n1Zw6m
-&t
EDD~;xH
_2Vt
ContainsKey
$|D]
System.Reflection
|yyy
DrawLine
?EKD
DD,GEDD
@Jpb
^Om\
t\',
6K+D
8^*n
uEDD-E.C
&&* +
RuntimeTypeHandle
GE0Cv
U,SA
DDDo
K/F
,|@DD
FDDDo @
AIDD
j]EK
b)uI
tFED
V<[*
dx2xPz
eJi
wW }
;dD0T
DPDD7T
pMDD
gKdD
T7Q
)D7D
set_ControlBox
UInt64
6\]a
FDND
ToInt64
jq2>r
_}L1]} @1P} L2J}
J.D._
=ADD
PADDG
J.D.G
o\
v91w
Size
xMn{
gDGE
Append
EKw
DNDDEGED
get_FontHeight
.H.>.6
d`2
set_ShowInTaskbar
Di $
Rfc2898DeriveBytes
0Xxi0\xt5
}_ \07

op_Equality
%ZDD
L.F
KRDG
:oE>X
,K&&&&&
I1I|
9EC_q
,(60
,BFDD!
"}}0L
,HDDL
^\1K
?_)Q+:
1ej
enaL
$78b
dP.+F.
D[DD.@
TextBox
BGEKD
~GLK
L.@.l
YCGE
iJDD
,|n
EKD}1
<G5K
LKDD1N
FDD
(;4
dCrU
-gFDD
\DDD
+s<@
\DDG
nRoq}
YfKA
E!EK
jXED
5dI*q]i-I$
ETGE9
!|.D
,9&+!
J13P
xvD1
_FDDD
261F
LNDGmDGE
xdGEDGEK
,BFDDw
#,..299
xCD1
c#hcB1j
- r
ED/E
[)EG
2D!D
oQ66s
EDD.G
`TDD1i.D
ml-l
e6U W
+,F\O
7Ut)(|
EDD.D
DD.
&zI8
*DG/z
:tDK
EndApp
X@DD
hAS`
6MeWp Yf
D$E
d)+ !jIINcEDGEKDD
D K
K@M:R,p
KeyCollection
|w~XZ
iG4C
rI/-Y
#"""
Cp|l$+
DD
kN3?#
pKEK
-Q:i8!Y_DG
})Q,
*mcs
CFDD
-I:A
dEDEDDD
~qLUU
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
1K/P
get_Rank
DD.L
6D6D
UDDK2N
P1Tk
D4D
QpSY
z'KD.D
LEDGJ
Y' 4
2,5Z
ddGE
ODDD0
,7CDD
D@DD
D@DG
tG0A
f >)l
BvDDD
:tD0
get_Message
!This program cannot be run in DOS mode. $
* +
'ED.D-Y
DelegateCallback
File
<ODD,
5L<r
VJOVC
@2Or
* 8
mNGE
%&p~Zo
EK,@EDD
ta\n
m:?
DDGEK
ArrangedElementCollection
XmlTextWriter
{NDGJ
Dispose
GDD,
c DK
"}E0L
KEK.D
! ,r)?
OEDFEKD
vtuu#
_vLt
@DDD
1D6D
WriteAttributeString
\JED
yDDD
sQJDw
|Xt1V|
NHA
LNGE@GEK
3K_x
;61_p
3e(}
i0DD
7I}w0X}4@1J}4L1M}4KJ
KD.3
ServicePoint
FromArgb
px``
IKD`E
p8T{
jD.G
Y% :U
*D-D"
{o\$&*
_q#k]
KD.D
1W}4@1J}4L2L}7ID
hUDK
HGEKK
get_Window
E<DD
gC)m&.3
GE.O
EE3Q
set_ClientSize
GKDK
!DhE
tDTGE
GE.F
GE.G
QJDDD
DDFE
TKDG
GDDD
get_Key
fp6O
OXDD
5FDD
+zS
PoweredByAttribute
H,+*
.M.D
2c9 K
9PD,dD
A!ED
get_IsPrimitive
`/DD
keIH(
" DD
KG K/@
1L.1
mB)|
}DDD
4dGE
jVAv
"E#G#
1W}4@1J~5L2Lr4HK
O-KTDD
SetProjectError
AddValue
BSJB
,DDDG
: G1At
ReportingService
Ko#o
+D.E
xdDDEDDG
5%
xdDDEDDD
-D1E
:ilT
+41-
%&k8
>L.E.L
&>(Q
fDDD
kFDD
IsDD
DU Y
?Z35%
-OEDD
.wc 3
op_Inequality
~t$d
%D&D
GetManifestResourceStream
7+ y
Q.D.D
0R.y
Q.D.G
ez'D
GetLength
MOED
+D D
!`G#
|ODDD
iE!D
NEKD
SeekOrigin
?@DD
^FDD~;dH
Strings
Delete
wqb W
IntPtr
get_Right
|ODDw
!D7G#
xUD1
mE{bu
-A$I
d8;=
DWEK3v
0Z.E.F
pED-E!E
L.D.O
0D!G
IVDD
0C "
wa1^.B
,DDD"
OHDD
rOPdx
nW{H))
H1T} T1O} P1A
KD0T
!r.D
'^ED
gdi32.dll
<DJE
\[ <
eJD
Microsoft.Win32
x]b]
0D!D
FileDialog
? .D.D
nSTj
\U]Z[
XllqI
6DDD
MDG-
\ GE
R62
gMKD
];nP
:$D1T
-I(/
@DD,b p
DD,)
[ze[
0CED
!rH*"
uED.D
6D!D
InvalidOperationException
x"14
DdDD0L}
{jDD
DD,X
-W&&
P,P@
LdzH{
>tDD
@dGEDGEK
NAED
;\GJ
RijndaelManaged
aDDG
R<w6 7
U1N|
DGEKDDDDDDDDDDDD
get_FileName
&+nr
.D.G
;oED
GEDG
y@ @
,]FFD
M,zv
&&*(
T.@.D.E
:~enj
ZH $
add_Click
PK
E3O
_RDD
R1ip
BlockCopy
G' 7
GetProperty
%,22
/]U !Q-
DockStyle
KEKA1J
tF1A}
:hDK
0a.D-T
GetCustomAttributes
-ECEK
y)u
vI N
(D(E
nFih
7D4E
SizeOf
6 8Z
inevy*
HGE,
t1m'6
9TDK
6PD02
-JED
UMh[
rFDD
SecurityCriticalAttribute
i
.,M*
<Tju
set_Title
1O.\
^Uzv
.EDG
:TJR
<.D.G
/DdD
&+'~
fuEK
ZfNu
:CA>t
SmartAssembly.SmartExceptionsCore.Resources.error.png
MDGE
pqrs
i3x+
7D!D
set_Visible
.C/S
6H,D@DD
8/EKDK
^-h@
B[EDG
l.D.G
&&&&*(
F-E!D.D
&&&&&
8L8D0
,"&&
9TD0
6p Fd
/h.D
System.Windows.Forms.Layout
+D*D"
gI}x
]<Hw
}D0C
~Yx]
3 *
0D3D
&Iqt
IFGE
LEED
Boolean
FK<<hs
C+A l2
^EDt
.E9D
<ODD.F
X.L.G
Kx [DD2A
\wvmlhfddYYNx
get_Checked
ZT <XD
1o.@
;DD
HXDD
UJ?j
BKD"
~)1
1YED
]VTZ1A
-V.G
)VJW
.D-E,
+EDD
MethodInfo
<EA1e
DDGE
xCjd
IDD.5
,OGDG
H]DD
OGEK0
-B;I\
AADD,D@DD
GDKD
HGEF3y!D.D
M>M}
KyHv
CompilationRelaxationsAttribute
DDGv
Z[ `
tYa9T
Dwpkm
1[} @1^}
WdDG
zFED
zFEK
:DD
JEAD"
UGED3T
H`mIj
9EKG
AXvp
DD.E-M
d [}
MemoryStream
AddLast
6L,VADD
*DD.x
$X`llM
aZ3C
get_Graphics
_yO|
Lw!_
get_ControlDark
HttpWebRequest
,@DD
.C/P
,@DG
EGGE
Q#ED
EyBt
DDua
,OEK
GetServerURL
r*&
xOl%
JY,C
A] G
h3DD
K=DD
$ DD
Invoke
-K@DD
UADD
}'q|
8ID3k
IDATx
CFGE
kYFm
=3j %:
|8EK
W7F?
eEdG
7c}d
%10,"
&'G@o
HDG/D
WEDD
FDDx
y*8Ix>;Mhd
D D
_YFUx
/UXDD
ny-y-?K
ED!|C1
Y;(r
GAKD
)!DD,
XEDD
SmartAssembly.SmartExceptionsCore
<jE1l
:tDH
;/D1
0Txk0H
qOED
EDD~;pH
]yy!
+HZz
C$%2
o&9S
];DD
R'q(
SetToolTip
BringToFront
Microsoft.VisualBasic
@EDD
!@DDZ2^}
+Z
DGMK
ui4l!J
UycUKD1M
#%!y/
REDG
-N.M
REDK
<dDD
DFDD7J
ThreadStart
DFDD
`NDDDDDD"
@dDDG0_
1kSQ
CDED
@MEK.D
--&&
5hDK
DIOV
h l$
SGJl
GE!E
GE!D
DY|W*
&[FE
&* +
$D+E
buildFriendlyNumber
(}{c
@ DG
:$G0
`DD-z
:\D0
NN|c
@zETGED
jDAL
EjDD
;\FK
ouIAQ
BkGDG
\.E.G
DD-K
}N3B
; 65
+m ,'
O.D.G
-X.G
xGDD
Rectangle
!EDG
1:-D!D
get_White
[EDD
**GE
+)~M
mxcEDD1o
DNDGE0U
<D"E"
*cED
Yd0S
Da~6
-/]W
Concat
:PD1[
8q}-
"EDG
JMc|
HzDD
OOKD
StringBuilder
get_Data
~fFc
P%DD-D
P}L2X}
DD-
?VDD
&{ )
bVED
G+D
;\F8V
-DgEK
IWebProxy
[DD.D-D
1PKuw
'ODDEDDD
r_ED,DTDD
I}W0D}
PFDD
ZDD.Q
&&*ot
&&*ou
WQwU^
:\DK
A}DD
S/9
CompilerGeneratedAttribute
3DGv
get_Hand
GEKD1I
- RCC
HGDD
get_IsInitOnly
=fOia
@NDD-E
|E?W
3qw{_
+D"G
yDEG
YzM},
,CDKD
EDGEE9
x=D2
F~L=
O6.6
IDDDo @
H,@EDG
"vDD
JE0
SmartAssembly.SmartExceptionsCore.Resources.default.ico
,gt>
YED
BtFE
SIDDD0
a{DS
aEGE
~p#0 Y
3A 1
Copy
Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/`
get_IV
Wnla
AssemblyFileVersionAttribute
vDDD
5nDD
System.Text
GetName
4ODD
/fED
bEK,
\DKD.D.D
P}L1Y} C0\~ C1W} H1J} T1M~ PH
RO.w9
,D@GE
"!]
@2^M'!i7n
}DGE
o?6swV
System.Resources
PDDDD
F%#v
11nxg2
(ED.D
qS_?
K)ZJ
LOMS
Y^ED
-E!E
-E!D
heED
IDDw
NXED
odED
-E!M
6D&E
+NKDD0J.D.U
6D&G
`ydI
K|T2Vr
}:HK
L DD..
PMED
A.G/N
.n.D
]& 6m
GetElementType
1O/>
set_AutoScaleBaseSize
EEDD
HDD.P
1(DDD
.m.D
DD"}C1I
(KED
y,EDw
>(DD
BNED
C-EG/K
Z x2E
Y8!8=<|
YHDD
.D.G/D
LSQcB3?OE
%PEG
,ODG
;$ED
,ODD
EDDDw
*K#D
RHFE
a0EG
9ODD
) flK
<\D0C
EEDt
Icon
h\~2
\cED
HdDDDDGE
U,FETD
BDDDD
-DGEJ.T.D.D.K
AP}
PgEKFDDD.@
dGDD
<HDD
6D4E
a*Rf<
dD D
h DD
DelegateAsyncResult
gN zl
1O/T
H(ED.E.J
5(EG
A|]d-
}OGEx
y }y
;H}t1W}4@1J}4O0M~5GK
--&&&
"nJ(u
d;;Gz
#gUUU,
RUVT>H
yI%EI
1O/G
@dDDEDDGv
O0M~
,i.AF
uZw=B
FieldInfo
Font
;DKD
BDDEDDD
.c.D
kUMW
UFVY
XNDD
8L-D
NP-I
N+ED.D
-Y;{D
lNGE
`ecW
Convert
CGE?]
:UK1\.D.Q
R-ED.D
DDD"
VEDADDD
5(>:p?z$
F[i4t
Ypp_
y8;[
CDDw
y`TGE1b/K
a6kb
IDD,DEDD
8L-X
String
CDDK
PdDD
CDDD
ICollection
ZGDD%
System.Xml.Serialization
[D K
_:y&^
uBE{
9O/E
0KEK
IDh G
dED1V
}D?N
EKD,BFDD
xG H
eGEK
P}L1Z| C0S} L1W} H1J} W0M~ _K
shED
^EDD
-R;
MA -R
*KFE
#1-
ApHz
Timer
CDD"
G}T1W}
=DDG
UploadReportLoginService
UFE.G/^
=DDD
w}DD
InitializeArray
CoDD,
8]D3Y
DDxD
ANGE
D@DDK
gBDD
1L.E-H
ZFDD}:`K
4OGE0M
KDD,o
Q{ J
5mBO
l@j%q
Microsoft.VisualBasic.CompilerServices
get_Namespace
,GFED
zMnE%
pro"
,D*E
ToArray
(<n`
VEDCDDD
{zvJm
Wuliicc``YZMx
T2`yDPDD7Y
2H9B0
EditorBrowsableAttribute
N GE
!t 9
!gDGJ
eyR'
b69PD=nz
ODDD0]-E
cFDG
4H}t1W}4@1I|4O0B}4HK
.D4D
=uDG
4<+r
L'xL
E DG
vOJD
q)*^
:\ O
4K|t2Vr4@1J}4L1M}4HH
QGGEK
hoI=
p+M@
=G6D
lOGE
U.Ps
BDDDDw
LFDD~;lH
=G6K
6n]C)
"DDD"
Z__??
vwy$Z
AADD
DDK
#}C0
HDD3{
wyq
HdDDw
,D@DD
NqD$D
Hagt
@~u>W}4@1J}4L1M}7IK
6]DK
DD,oGDG
X:VK
.q.D
@D0n
]`DG
&@W;
81e.O
c8DG
Attribute
yVADG0a
,TWDD
,p[>
.Mw|
System.Drawing
@ /
] ED
wwwwwwwwwwwwwx
get_FullName
,C62-.D-E
.X.D
:dDK
|QeX
by
7DDt
_le
PrM"
-E.G-GDDL.D.D.D.D
ZO]H
H}T1P}
GetGetMethod
6$$7
W/K.D
S.E.
BeginInvoke
zgGE
9OE?Y.
:pGJ
Is;QX:v
DD.:
#7DD
DD.8
get_OSVersion
CEDG
\DGE
rqmota
DD0T
DD.
DD.
CEDDD
{Zuv
7DDG#
>;DDG
`J g][f
&&&8T
7DDD
'O-E_>
-;`k9s
-E.F
8D-D
>\Zpkc
-E.C
-k
voZ3
CEDD,
get_IsEnum
v.>@
.}.G
lEGE
yDKDx1K
EK"}R1
CDKD
u7r^c};
1O/E-L
"Q8
add_TextChanged
DD.{
l=KD
RuntimeHelpers
DD.D
<Rz8
DD.@
IDG-
N )}
/()*
DD.L
BEDD
DD.J
HSDD
3oD0s
DD.T
43<#a
SdEG
get_Platform
6DGE"
EkDD
%g,&
W 9B
.E;D
0GDD
x([>
pODD
^+cF
,K(D
"]DK
P/TN
dGGE
trDx
H\DD
XHDD
tPOg
i@DD
FromXmlString
<wE0^
uWE:
Object
EK,DFDD
-J;U6
BvDGE
mgS/
HNy
Registry
-? Q
gY?~S
FGE`
1:DD
R'aL
V:99 u/nE
ftKD.J
rEDDxLK
vttd
s9DE}
TCED
|9GE
/{(JQ
,lDG
hLEK
a@J#
P,DDD
t8Y#
q`ED
gAMA
K#EW
dED
get_IsArray
EQkX
DDDDDDGE
[VTZ1I
}oED
0D(D
KGKD
, &&*o
eWv#
]DxJ0v
M.C/c
get_IsAlive
FlatStyle
@HC/
x-$8
CODG
^ldz;
p:Ww
a'WyE8
Uh{a
jJDG
.D.D
.D.E
EditorBrowsableState
HDDDK
#NDD
.D.]
^Qam
.D.Q
.D.R
Q3{y
uEDD
tc1DG
uBA]
-ED.@/EtGE#D
iY$
LDGDKDD
}Y#_
CDDD0
7EDG
,]&+1
[AJT#P
DFEDH
p,@E{
~N{G
n;Lc
3.KD,DTDD
+749
n~K_k
UDKF.F
ILOffset
'D~D
lGEi
8Ae)
}p)hS^
EEEE
}pn\9
UXEG
uDDD"
[2ew
K"AD
YNGE
,oFKD
ZFur#(
a5v"
ScaleCore
-DGE-
Fb8)V
0 g9
\MEK
Stream
:{YEG
\MED
O"PT
1L1l
YI}H
Pali
GRDD
SecurityException
wFtYW/p
6DDD"
&&&*(H
%TXy
J.D.@
6DK.B
.J.D
G#J2
T-M.D
IdGEKDDD
`GDD
Exit
Free
al4Y
Tz=EGE<
get_Bottom
:SEK
NEDD
0L-q
D"E
hODD
1kDDDK
*!`-.
&&&*(m
SmartAssembly.SmartExceptionsCore.Resources.warning16.png
%OEG
T 8L
}.D.D
\qh0
CT1LK
ojn#
tODD
|DDD
get_Minute
UDGEDGE
)Twie
&DDw
,D+G
add_CheckedChanged
uqs*
,FDD
sE1l
,DDEDDD
2+ y
sE1`
lNDG
lNDD
=TLK0l
t`.D.D
TGE.G
(ODDD09
J};l
C0J~
pGEK
DataType base64BinaryE
Qi['
KFEK
EQX"
PIDDG1
uq0 ~
K.H
{L4Gs
D!D
ODD-E.E
n================ABA=========E
cUwF
p\LW
LDED
=DID
d`r
0uRk#
dED0V
dED0U
AADD.D
WriteEndDocument
AADD.B
.H.A
lMEK
}AM"
,[ u H
p:"|{

!OGE
&* +
COKD.D
+HyD1DZ
CEKD
A>J}
J/YK
l=H.m.G
3_L
BL>q
tE1K}
Yt2Ws
7KD,]FFD
`ED
u.OL
OperatingSystem
z]C+/
.P.D
H!AJ
HttpWebClientProtocol
qtzU2n
bjd
=jEW
" ED.D.^
LNDD.G
LEKD0a
get_IsLiteral
EJDD7XG
t, DD
.R.D
rfDK
(wbk!
/FCKA#
q/EG/K.X
C|T2Vr
FormStartPosition
VUUU1H
\.G/D
Alloc
7ODD}
IDATX
System.Threading
|)'
PictureBox
T1M} PK
get_Month
} v!2-<$K
"R
MessageBoxIcon
:|D.E0P.J
* Q
Uiss
UnhandledExceptionEventHandler
System.Web.Services.Protocols
3@.C
.j.D
+D+D
}+h]
/K.A
/K.D
/K.E
jD-N
DD,DEDG
LNGE
DaFE
bMEK
*{=V
/) !
0L-E!@
8hht
V5)JT
X |uUqze
I(DD
7D&E
DHDG
EoU
h?FnZ
>jm
set_Filter
}2DG/D-P
T(/'x
Buffer
get_Current
=XM/
|gEDGEKD
ekK>
}u2k
3[!D.D
%D)D
IFDD
X!Xak%
<gld
@DD.D-Y
V~:[
get_ApartmentState
({[p
sdfgdsfg.exe
=jED
(E<D
aWQj
:EDG
PEDw
s6DG-RFFD
:EDD
EkEG
\gED
:pDK
2<Wi
7D0D
[^uv
JDDD
EjaY|
P}L1Y} @1\} O0W~ G1J} T1M} PK
ODD~
dNDD
pHDG
`NDG
`NDD
PzE[DD2Bw
VEDBEDG
(%h4{H
OnResize
1L.F
@1K}
DDD.D.E
PdDGEDGE
9\A0d
PeT{
GetInt32
3>*
ReportingServiceSoapT
1Z| C0S} L1W} H1J} W0M~ _K
0Z.D.E
wDCN
v1D
l[%+
CDD.|
X>PX
"D0D
WY!
NKD.E
EndsWith
9]D3^
**********%x
,Z&+
MDDEDDD
w$lQ
@NGE
EdGEKK
a4>)
jD-D
*DG
SmartAssembly.SmartExceptionsCore.Resources.{logo}.png
xQ1Z
get_StackTrace
CS&5
aB$i
KdDDD0`
Q!Dh
EHB(
VSVW
j +)
$Gq+
p& H@
5UK,
tF1B|
yZ;:
&&(?
X[fee
wNDG
(mDD
a [+
9T`TDD1Q
]ADD
get_Major
@HDD
79u0
oaOw
(D+D
SoapHttpClientProtocol
1P.T
@2Kr
Point
get_BaseType
|E3N
E8eo
<D4D
@2K}
bSrs
9 c1
7* M
v2.0.50727
+h
0a.D._
y_:K
.f.D
xdDDD0 w
,BEED
cu4&
9D!D
T6SyDPDD4U.F
O DD
-P&&
- 2t
/1?4
set_Item
Atsssssssssssssssssssss s s s=
YJDD
ToUpper
+-1
+;E
jYQu
Oy_v
H.D
NldD%
-MFDD
<LJE
+-7
GCHandle
1D(D
MED,@FED
8 8J
1u|;L1M}4HK
9uED
DGEK
set_Expect100Continue
DEDG
+D3D"
VQV=
=zDDDD
T,[FFD
0.ED.L.A
ODDD
ODDG
}GED
GLKD
get_HasElementType
Exception
[OV+
(`De
MDDD0L
THDG
.L.<.)
#NKDZ2^}
, &*o
B3V/J
ODD,
LYED
;@t8[
zNKV@m
3~XY
GE-}E1H
get_ASCII
HDDED
ED.G/W
s<Q.9K
CDdDD
;eEG
EDD}:tK
UceQ)
c*DD
XK^W
zDDD
Rf@ =
hS+Z~
2P-J
set_Size
WriteByte
GetTypeFromHandle
IAsyncResult
+6lrj
EG/[
@/E[DD
hHDD
i-[V
o7DD
OpI
/qED,DDDG
$JYYI
,GFEDt
GetEnumerator
PKD
KTDD0G
SymmetricAlgorithm
xRD1
=hFY
Wx`WEK1M
d<|q
1;|
.h/K
^ ED
MIh)
HDD,
f`ED
GetDelegateForFunctionPointer
NKDDK
MessageBoxButtons
-DCEK
%99S
Int16
SmartAssembly.SmartExceptionsCore.Resources.error16.png
`Fx2j
(}0O{
oYED
#GED
+D*D
.D.D,
$vew
Nn[,n
FDD
Graphics
>gDD
L.G/K
)4EG
LuD"
J(f&#Mc$
I>N} T1A} P0
EvlY
ApplicationException
KD,u:
2>"F
ToUInt64
@NDD.G
7~_S
, DD
[KD.@
UnmanagedCode
System.Runtime.Serialization
Enumerator
D2Bw
0@DD
jG!D
yz53
LDDD
wG>B|
N)DK
-E!D.D.D
_;JK
V/D-E
K7.-
Q oi
HDDD
`h,
HDDG
#G D
Rl(~RY@
~y'7
set_Position
*ckd
!-h%9
i0l"
DD2~
/CIDD
ie[\
*DKG
-D'D
GEZq
.G-TDKD
2XED
System.Runtime.InteropServices
?FDK
7b.D.D
g7`
+4!*
sQDF
iGEK
_CorExeMain
0[-\7
Math
ApartmentState
JDED
set_UseMnemonic
<YED
Htvx"-
?Z.D.D
+ ^L
u@DD
iDDD
DD2V
|z_CL#
osj0R
@1J~
@1J}
DKDD
DD.E.
tF0H
-%kJ
DD2C
@eFE
H,@EGE
ThreadAbortException
6_ab
aNGE
9 Q/
}pT6
NGED
4DDD"
mWV>
o*#
System.Runtime.CompilerServices
4DD.
%DDD
1V.D.D
UkDDDDDD
WDKDD
19Tl$
@NDD.n
77DG
LNNVE:
M1N|
mHnC>
S5}qJ
$KDD"
SByte
OODG
`&ED.
"}E0O
NKvo*
_EDG
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
a~0%E
6G"K
S|yA[Z:HF
mnED
7D7D
K1D
/}-u
0S-KEDD
6S\[f
5Q `
&4DD.
dAED
, 8;
2\r @1P} L1K} H2O}
0Y/K.D
uB6Cw
<&DD
@HED
set_ExitCode
,J@DD
|ODG
K{DG
0HDD
|ODD
PGGE
zv1_.E-V
gZDD
?Auv
n;^
V9FK
TransformFinalBlock
xA1h
:DDw
y?^:$/
9O/O,DTDD,DDED.D
FDDFDDDDGEFG
@jN.
TGDD
vtt|"
AEGE
System.Windows.Forms
set_Font
4mED
0ODD
~DMD"
6D%D
VED
UIntPtr
Lwqk
DD^y
'LJV:
Rp:2
UploadReport2
GE-}JK
IKD.D"
Tb7M
MGiI
Ga*1
get_IsTerminating
T.T
BUZv
^UUV0M
2Jg<xCK
&&rq
IDisposable
H}T2V}
q]a4
N?l &
QDDCDDD
FromHandle
gGDD V`
"a|K
Gr0D
6G<D
4D6D
VTZU1J
A>\} L1W} H1J}
xy]
CreateSubKey
o3i$
gAKD
set_Mode
v,zc
=|ED
nJDD
uv1W
;tG10
:pD3
KD,BFDD
5*DD
UDGE0I/K.W
=!F^
-h5w
_d
~55l
-aP@
jEGE
z%K {
A1I|
4D*D
\ EK
*0~d
DrawIcon
yEFDD0Cy@EED2V
DgEDl
DFGE9L
opY{`i
dDDG
^L_M81c3 D
<Module>
,`&&r
DDDDH
WriteStartDocument
;]J.
iCtQ
KDD"g
DDDJ[
:XD3
mEl5b
`\&NL
TEED
EDDD.@
.f/K
"E9D
wYDD
3jD0a
MulticastDelegate
l KD
DDDD!
DDDD"
DDDD,
CancelEventArgs
UDDG
^X k
`zED
,DtDDG
HDDG1
{D1g
fP5*V
lGGE
RED.{
@Y b
Bitmap
<lEK
SizeF
gt:<
get_FrameCount
K Dn
get_Hour
EQ<nN4
C,;R
CDKD}1
#LDD
R#zULB
6.0.0.0
9]D3
S.D.D
StartsWith
t: ^
1 (X
@D3i
S.D.P
@MEK
Copooopooopopooopppppqpooopoo=
:_Ak
~gE
GGJOENDD
pD0C
4 (P
Ly@EDD0CyDFED2S
1\.L
YPE=
T.@.Q
x[D1
4kDD
;@D0~
,qpO
DDG/t
*D.E"
<UH9H.D
CreateEncryptor
#D@DD
U.G
;GDDz
!d.D
edGE
ThreadExceptionEventHandler
m-Q-xQ
LDDDD
Tk2-6
-]EGK
#GUID
Panel
&...././/...x
EG~
xEI1B|
(x} G
rH ,6
T,_FFD
(D0D
H.@ADDED,DTDG
b_DD
set_SizeMode
<8y C
get_Exception
<GED
|FED
GhD
|]0C
oI}
T2B'
?eS}
LDDD"
Synchronized
HDD.U
ek!w
xcG8
HDD.D-E
7ND#
E9{&
Qkkbal
jD!D
_b`}
{_$=
}D0J
|FHh
yDDEDH
GE!H
dED2T
]D .
,DFGE
xDDD
hz99
\EEDt
-`A_
4Gyt
ToHfont
"!HQ
P.G
!D.D
`hza
ApplicationSettingsBase
,K6D"
GGED
cbEG
set_Image
qdDG
GEK.{
FDDDDDGEDG5
"EJK
)h_:X
@ DD
GGEw
M5T[5
ED-
9D#D
;Nkt
DD,BFDD
`DDDD
Lv&w
>L.D.Q
-D4D"
EventHandler
DDDG1_
Thread
rbDK
~NTmmX
\.E.D
-GFEK
,>&(X
W.DD
16()
DD-U
/G,D
r7$
<mD1
ED-z
C&7Xv!
U1C#
$7B"
ED-@
ei, p
`TPB
SetValue
ED-E
+tt#
Encoding
>M`c
e.D.G
`ED/
!D.@
BeIDD
boQ
-e&&&&&
8dpI
GEDGEKDDDDDDDDDDDDGEDGEKDDDDDD
LEEDt
0Z.D.D
6GED
get_CurrentThread
GetFields
:99X
TZ+j
:LG1P
'"*
97/
CheckBox
MI//A
"`ED
6D*D
T.D.P
.@DD
get_Module
qVNaXx-[
BEDw
oIKD
CryptographicException
(D(D"
[XEG
_/D
, &&*oi
-wa
-D(G
,GEDD
,GEDG
BXE:
BEDG
oOKD
WebServiceBindingAttribute
p+ED
BDG1[.v
G~@J1T
!G#D
4FDG
4FDD
*%L?K
1U.D.D
(FDG
4,DD
AddrOfPinnedObject
3"T:'#
aDD
"}F0Q
FDD.C-DwEK
H.D.W
!D7D"
I#%e%g
)EDw
,'&&&&&&&&*(
6qx>3ux
iE>G
get_Size
3ODG
&DdD
H.D.D
5K!D
!G1K
OnVisibleChanged
""n3
81D1
0,EK
-+&&&&&
O 'f
@LDD
JQZ2N[K
ET#X*8
c :B
qFDD}
@NDD3d
@y2EDD3$
9'W0
Replace
set_Icon
IDND
System.ComponentModel
LocalMachine
@1I|
DDDoC
ReleaseHdc
d.D.D
0N K
hFDD}:XK
u|o7
GDD.D.D
ACR{
TEDD
TEDG
;>'6;-{
EGEK
!DDD
EKD2
IEnumerator
_("bI
0ODD1N
?'DD
mscoree.dll
QQlz
+51"
Wryr
LED3L
add_UnhandledException
)D!D
Co03
9WE>
zDVJ9a
T6SyGQDG6[.D
EKDD"
OEDD
`BDD
/CFGE
1L-D.J
l:DDD
=GDD
.b-E
05D0
UDD1N
!w)V
8?[V
)a2l
1\.@
EK.D.Q
:FCe
_0Lw
System.Collections.Generic
PT6\
gE D
zEDD
u:FG
LNDD-E
1^.A
GEK
,DLDD
_`95
PGDD
pppppp
8U@wK
~0D"
*6 Q
ODD0I
xqDD
OAI
YB9R
<\DEDG0
DDtP
9DjD
PNGE
set_Cursor
Ada'
\Zul
get_DesignMode
L,ED@
g\pQY
{FED-E
3<>?
bN1V
get_ServicePoint
n_ED,DTDD
0Y~ O1\} L1W} H1J~ T2Lr PK
1Y~ @2]r L1W} H1J} T2L}
$E'D
lEDD
lEDG
;DD.@
<fED
Z8Kb
, &&
>\VE<YA
1.D.D
LFDG
LFDD
/ZIFD
get_InnerException
SetStyle
EED
}3V;vuY
rEDD
GenerateKey
LMED
,[FEE
GeneratedCodeAttribute
@FDD
WriteEndElement
.D-U
.`" *
&$bh
$EDw
(R"dg).
0{.D
,Eo5
.D-E
ToBoolean
Ev<#F
6X@K
* 8
KDD0I
J~EK
cODG
$$$$$$$$$$
&WYER9
PNG
@DBA,
&&*o
HDDGJ
lGDD
SmartAssembly.SmartExceptionsCore.Resources.network.png
Qh GZ
!L.7./
FlGE
TQDd
@NGE.G
&D6D
$EDD
+RD
-mJ6mWX
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-06-03 19:28:01 2018-06-03 19:30:54 173

5 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-06-03 19:28:01 2018-06-03 19:30:54 173

8 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\coast.exe.config
C:\Users\Seven01\AppData\Local\Temp\coast.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\coast.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Users\Seven01\AppData\Local\Temp\coast.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Users\Seven01\AppData\Local\Temp\coast.PDB
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\#rundfdsl32 .exe#
C:\Windows\Globalization\be-by.nlp
C:\Windows\assembly\GAC_32\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Windows\assembly\GAC_MSIL\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Windows\assembly\GAC\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources\sdfgdsfg.resources.exe
C:\Windows\assembly\GAC_32\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Windows\assembly\GAC_MSIL\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Windows\assembly\GAC\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\ODBCBCP.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2468.7241796
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2468.7241796
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2468.7241828

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\coast.exe.config
C:\Users\Seven01\AppData\Local\Temp\coast.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

Write Files

Nothing to display

Delete Files

C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2468.7241796
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2468.7241796
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2468.7241828

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\coast.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\793196c2\66edea4f
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|coast.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|coast.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|coast.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.0.0.sdfgdsfg.resources_it-IT_bdaccec94cc64df6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\12abbcda\2e1f39e2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.0.0.sdfgdsfg.resources_it_bdaccec94cc64df6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\12abbcda\6d7b1c31
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\coast.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\AF5331D4
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\AF5331D4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
kernel32.dll.QueryActCtxW
ole32.dll.CoGetContextToken
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptExportKey
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
cryptsp.dll.CryptDestroyKey
mscorjit.dll.getJit
kernel32.dll.GetCurrentProcess
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
mscoree.dll.DllGetClassObject
mscoreei.dll.DllGetClassObject
diasymreader.dll.DllGetClassObjectInternal
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CloseHandle
odbcbcp.dll.bcp_colfmt
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
cryptsp.dll.CryptAcquireContextW
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.LoadLibraryA
kernel32.dll.GetProcAddress
kernel32.dll.ReadProcessMemory
kernel32.dll.CreateProcessA
kernel32.dll.WriteProcessMemory
kernel32.dll.GetThreadContext
ntdll.dll.ZwUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.SetThreadContext
kernel32.dll.ResumeThread
ole32.dll.CoWaitForMultipleHandles
cryptsp.dll.CryptReleaseContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister

Execute Commands

C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-03 19:30:20

Detected family: #Razy

TheSystem Itself @ 2018-06-03 19:34:02