MalScore
100/100

lex.exe

Is DLL Packer Anti Debug Anti VM Signed XOR Related 2244
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 511.00 KB (523264 bytes)
Compile time: 2017-05-09 03:02:53
MD5: 5e204979a32a9f7dfcaa8462274a14cc
SHA1: afa355ead38d2328661a2d089da39c9fc5fe1030
SHA256: 2dc3f74c41d8a70a3982f41cca0fa387744764538703ecd934bc2f5e45a54cde
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 <KB] .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-02-16 18:39:21
Last submission: 2018-02-16 18:39:21
Filename detected: - lex.exe (1)
URL file hosting
hXXp://prosciuttiamo.it/ice/lex.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
No report available
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
<KB] 0x2000 0xd888 55808 5395f4b2ebc28877965ad085615ca00a ac24f41a0482215576fb874fa429ad0669b64d34
.text 0x10000 0x3dcd8 253440 f930ae2e835d73136212e7c728c0f7f8 81a7f503ec7fb28d125e1e7729935c7d783699cc
.rsrc 0x4e000 0x33a18 211968 26d39753739c3e870d4977056512edcd e468a7018ac1f96c749576297fd245a4dd4e5007
.reloc 0x82000 0xc 512 4e4a67c1ffad72c688ad19cfcdc4fd13 d14eeb3fb7574ba336983085b070684b350f4b1d
0x84000 0x10 512 da8c3884b98792b6bef8967fcff539d0 68e0303f596b209249acb6097527889af6738d8b
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4e130 209740 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x8147c 20 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x81490 920 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x81828 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Northeast Utilities System
Assembly Version: 0.0.0.0
InternalName: lex.exe
FileVersion: 14.2.22.1
CompanyName: Northeast Utilities System
Comments: idebuqos
ProductName: LightCycler\xae Master Mixes
ProductVersion: 14.2.22.1
FileDescription: LightCycler\xae Master Mixes
Translation: 0x0000 0x04b0
OriginalFilename: lex.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
14.2.22.1
URL(s)
No URL found
afed3fa8-adf0-1824
afed3fa8-adf0-1825
afed3fa8-adf0-1826
afed3fa8-adf0-1827
afed3fa8-adf0-1820
afed3fa8-adf0-1821
afed3fa8-adf0-1822
afed3fa8-adf0-1823
afed3fa8-adf0-1843
14.2.22.1
afed3fa8-adf0-1844
afed3fa8-adf0-1845
afed3fa8-adf0-1828
afed3fa8-adf0-1829
afed3fa8-adf0-1840
afed3fa8-adf0-1841
VS_VERSION_INFO
afed3fa8-adf0-1838
Northeast Utilities System
#"+*.-1043536373
FileVersion
InternalName
idebuqos
Assembly Version
afed3fa8-adf0-1816
afed3fa8-adf0-1839
Copyright
afed3fa8-adf0-1833
lex.exe
StringFileInfo
afed3fa8-adf0-1832
Translation
46a177d9-37c7-d2
VarFileInfo
Master Mixes
afed3fa8-adf0-1811
afed3fa8-adf0-1810
afed3fa8-adf0-1813
afed3fa8-adf0-1812
afed3fa8-adf0-1815
afed3fa8-adf0-1814
afed3fa8-adf0-1817
%q^
afed3fa8-adf0-1819
afed3fa8-adf0-1818
afed3fa8-adf0-1831
afed3fa8-adf0-1830
afed3fa8-adf0-1837
afed3fa8-adf0-1836
afed3fa8-adf0-1835
afed3fa8-adf0-1834
000004b0
LightCycler
Comments
FileDescription
0.0.0.0
OriginalFilename
LegalCopyright
CompanyName
afed3fa8-adf0-1842
ProductName
afed3fa8-adf0-181
afed3fa8-adf0-180
afed3fa8-adf0-183
afed3fa8-adf0-182
afed3fa8-adf0-185
afed3fa8-adf0-184
afed3fa8-adf0-187
afed3fa8-adf0-186
afed3fa8-adf0-189
afed3fa8-adf0-188
2018 Northeast Utilities System
ProductVersion
y&#+p
'nJJ!
;9s%}1
wKk"_ST
`<dPB
f>TKJ
Xu=i*
=";_
M~luI%HHoM3Bd'KoL\zX9]n'+
C|ym
x{-k
p09:N+8TW+%'7b"#y2?hb]X4-
Xo!7X;
CKOH
&7Ps,G91iFD-VRp%P}twbrq`$
^&mtRz{H%
Fge5
A8.nDcV6
Int32
JES`
L{Z2
N'+
2{Wx7
Z{_8(k
7bTi
ObjectHandle
XFFy.h{G*
E7iY
;FXE
KNH<
YzFC
$5cF
>X}!i
qN&{
dy<p/
Q+b9
+OBx
F'S/o@$DO:&(86q^;:SQMVHn'
*J\(wb
0MJY
ResolveEventHandler
{_%E
$uZQn
S<RYU`"AE++!C&si2PVW_1tI!
A*<">g&0_AfLdHVXv^@K"|pP"
uox.
6g^b
d.Y}3
(=Bt
|O?
X(m=
wI\w
EC"z
&[7G
g}sw
)7,h
<N4b
9 VZC%
ajgy07f
VooD
^|Zj=(2'EP=5Yf':1nr)DH,~)
Iz2egSQ2Jw!Ls>u^Py^InYi]!
.[s-
d6~h
LI}L#
uJ@bY
6m/aEO=fpkN~?)CF9!A=ZA*{#
~^BO
mwE,zM=w
[;/Zh5
S6d3yH\\KxfKsm`<M*FGJ0AQ/
kaTI
Version
$=o]p
T[|
7QP)5
@$Z&
._)]
[GC+W/$p&ewnC45 +5]-6"-B$
\rW
5=oC^1=uzU68]nt"1|[3f<zj#
Y|/~
X (+
Y)nu
[>Mn
8g"Bc
W6~]
h,tr
7D_et|
umC~
:&f6
5D *I
dPBI+6wrhx9FhaG&+=TjWWv=#
]By.
PNr81
t"?J7
J948
3#%e
a@Q9O3
hqfp
>XQe
+ )j
PNG
BO6K
\iLhs
A@o|
_FRA
a T
&;ln
b9x;
i7NO
AV&u,
bo+F
5r4S
ControlStyles
t!+>]4
Marshal
sq}qoqs
BExr
y : V
t9EN7
{JK50
Lo0^g
#Q]'
.r~eZ
~E76
k1Lm
3Ylg\
.yz>
&"tY]U
2y o
{m/n+^
*B{U
vW_=`|
_ z pY
}e8E
FCL|
g]t&
op_Explicit
RuntimeFieldHandle
PBM\
':?y
System.Security
p2-MP
}IDAThC
[Omb
2]'p
0k+l
9Ww>\
ArdXIV5E*!#H20,Y|@uAEcE #
_!M
y@ZP
Q]6Q
t6"GaC#h:[9*/o>UE>w /&wz"
WsW |j
RAO)
<; @
) ;Tp
#d.6^'o
ZXJX*V
zybA
ZXJX*J
EndInvoke
`,#wY
Wd\f
m Pk
id4
V8>r('>M[;ia~c"{:#+HA::-)
ezKY
;r\ 23
ws&/
%m:8
dJyi
L3| ,1G}
xP~I
%<@" d
"^?P
AopwV
I};
<+F
.d-,
6skS
:+o!^.9\
0GIH*/5/\L!"{Yi"ub|+vDG'
dNK)k
FZ0wJ"
|g#f
>R_PD
F\M~L:
]JL=
V>TQ
8Vszo
h^;=
&[cv
set_Alignment
u'y5
AssemblyCompanyAttribute
:'9&
xp5 .
<xKW
Ijrq4
E Y3
MD%<a
*8WU
y+cb
}QwcP
wy/`yl|jsiHyy=t6=$Ml*oyH"
@@w4
G\_?
|Bv`
[W$?
6{25
j`?0
[~*uWwa<k"P&^mL1`Kt2+7/N"
D7syi8N"S=K%XcWld$1VJI6%
#x6 Vm
Rn_!FY
:>D&I
] n
1 $2g-
kGJ
8(3u
cPg
8 l.
'j&vtU
%5`<
VUa!
k+!a
T>>V
Enumerable
UQg~
a[#u m
P6`kP?{u9Z12&`i!2*FqJdat!
;L ygjx
q 2
v _,
|6d'
rR``.
M@q\=
2#~v5Q
AppDomain
N r
z;vP
{=rR%
AZ%h1
%a59t]
`9t?HJk+\"Jbnfa:h7g{Tg7\
`X+)
}{({Gr)
$;S&f
\%tl
get_CurrentDomain
YyP" TI{&x,'UWDaN4:$&OhD"
get_Height
ZSUs}q2P`3Q9C1)8OU")mPjr"
Cx )
\YhU
6z=6
tTKS
R_f<
TlTY
3x-{b~i0ZW8
A%)-
_o)<
xiZu
a[7f-e&6M
CIxM>@
J_cf
b|</ a
/I@6
@I")
~8<m
W&\R
Ll9_z
7D;h:e4[
tF.Aer9!z
B* a2)
>T:vDx
9< q
2:?Kh
zS.Y
~q9U
\f5u
eK'+ w/IK92R%gh&\;<?-M4(
cix#
nmjD
M [4N
oOB=@4D[xub'}U@V/Z`]9 bD%
E(q
AssemblyTrademarkAttribute
)z"r"
gnP#
'74;
zP*kS
r y`
c`#2
7l UNE
H+7GL|X_IyzTY_QAYOi5{zS%"
l8skp^I1rMoGco{6i[69tqP%
n? =(
,o.Nn
W66u
JS6
l`W5
*-E3
/~:+
AU}:]K:(*1IQvV:_GEnm{[Q@$
"eilk
eHfv
T%1'
T9 ca(
YW%X
(=SA
Y~ u3
[V J
Q5:*
`0H8-/P'z]*y>w0fRYRV; SC!
T{:y4c
#Blob
Control
[s 5q
GetFunctionPointerForDelegate
^U\~h
vy ~
'zt9E=t>FV;5@hRUs$J,"O15%
PESP
Wh/N|k'
@Eu7z
*`Zr
pA9Xs g)Ar\G
'~j+:
wYb8
F`D
~:0bc
T" C
L"3a
B9\8A?
,1\G
yQV;
DI8c
}] &6
?SWG%
toTRNd
YR/
BindingFlags
G&f\
2p[i
m?gyc
Type
' ]|)(!
-|zvi$[\z"
o0iz
(7[4"
hb .
v1v:KX)5YiF+:V*vvmM>=_ag!
\C JZ
5BxN
ePUP
O0k]
17hx
<_U-Q~
M^Yg
|sbHQp*+V{F1GxwPE}f 8DdV
"SLE
6'+>P]6n`
6`Hy~(
h GP}
<*P'
}OQP
?>ow
,<YO9
U3[|
S:2r
^&jQ
Cursor
e,]+
HNg@]
{w;)
WgTK
.(pH
@ XL'&|ETZ#3:oo5*76ab#&/*
N^sT
2@P-
tEut
}3CJ
oqSU
tBoop
UR0>
5hfMFB:
;6
<8x|
lq)
Char
&{,p
k^oI+
@<,b.
P;nj!m
YdQ,
N@+F
Dtl;^
Z #~
[7*ur
1Y(&
NeXY
8D*J
k^mGE
&V5N
}BX.e2
}{>Ca^
8 cb
GetValue
(Ee#
qF~R
;T0
#5]c8
8N_v
e3NcxYUb=N"L%IKxkNKi -qp#
[q^"
aJ:Y
get_X
get_Y
:R7z
K)4)e|x
5TesJ
DuCV
C36T}
!4K@
/%XH`
IRLrP
0s^P
v;_y
3)VW?Wz)21t38t6x(#lR#' L!
1Z@@
b7pz
2<kDj"4]Jo/9OGp4A!-O?6PL/
p'9k
VirtualProtectEx
8pkS
R&&M0.
TTwAP;
get_FullyQualifiedName
= < < < < < < < < < < < < < < <
fS31
`3H
-\&-
4nlg
?,g46+*
s&QO
+.^m
%C_G
AtB"
Ud6]^
7q L
<(D]~c<_$4x?m<|te&O>ITK="
NO6jMn
O-}*q
O+M1$
<1v
Dsk*
8#d%
}[.L<
peQ_
)l+:
c|B73
$<['@
; +A
I6/& E
{MZ38=D<7Xc{xNg{+TU->rNE"
0mpQ7
7TjOi
GT""
FR6g
-R|E
-g34
QAX$
;3-uN
5!]<
Kl>b
x>;,
n,45_
^g?Aw.
.text
fno*
GetString
ef_/
) 3~
]xOE
w"e8
_i8X
8b&=$&
H)zmu
s>*-
^])ET&
ga<1xbG0vybFyyY$y0Ve7jpa!
PE!G
KkL-
J?pR
vxs}
!wu`
fM|ZaLm@6Crq5b<34Nk0]T`8
! @n
7 b
!_ ,
12WDH
4--8
NH5cC
8F K
[z"r-&7>ZpY0Go)FPqOW]YaF&
e"HB
EG~:
V~R-<dH##*nQ=wwUZkab73rJ"
ExoO&
j{q=B
&@p+5o
ut9y
aEhS:K"6@!t/Y~Hqt' h[Z0\!
GVl =
kx%v
`#-
Q>=5;
e8%AEhU7QVK"ddJ{cR#@!+/&!
@yBp
GIEi.
gD n@
FV/}
q:f1
G#c:
91 Op
N%Dr
xAB@Br
U;wY
VJ1@G-GuVK/qM'%K\gq!zZ*[!
8_hM
h]y
Ak^
| }2
72F4
` 2Y
R>Y9
m)0)
6h0&)%7)sTSuoXjP=vt225`J
.6 +
SV%t
J:/a
Z) {
;`t]
|-;f(
{#N|
chpmB{v
9lwq
[q k
set_EnabledCalc
uu
[;Yu
XHKnG
')6 U
6-x^9
"hY}sU*LSaY|1#J'#XY5MJLO"
/33=
{`Nh
}>hy
eyfM
P;k|
h*{]0I/cwDtV,AB8Z/u=50|U
Tx81
qF #l
WHnGz
07@ YA
ve_p~
Ez_w
` Ko
%@Tx
?TS|
C=q:
#;6T^
F%[5^$
mj2g
$/q IH5
=-T&g
ov\c
t%m!~Z[BT5
>$X
A8lT
q E)
I"3sp{?
!8jg
EsR#
KT*
s HU
/9Nh
dn$]S~
mp3h$hj
V@<
cf~Wn
| >hEE}rh=JG3}Lg?/KpV-#r,
T;*+J
;(-]
`.rsrc
HekB
gFD*IkZ
eGqb
3zOa Yx
h)E5l
CCld
@('RkBYM\
FhC
[bgE
z,eZ^Fo{S8/K3-O6X|OSLy:%#
=NI:"Z
u53ZM
>ya
[%&k
q<l%
9F{B?k`t7B9T[gU; Ll=XCNA#
A#U 8
get_Default
d>NtV
>!)n
B5oi
h#NI
0:> J
kernel32.dll
K'J#)*
result
_TQ
P/dx
K [I
? Qy
yM'g
l(|1
$B&h\w&M
w/@[
j]@
Ed<h
-D.24
u\P >E@x
?vyed
^xlF<
?=)*7_[:S'x"CJg\b"xYf(-2$
`O>37?l
K#lt
*0gM
Qshha(
igL}
<` S
Nl*[p9V)m2?piF S!,)2x(%[,
%WJAEa
m@_Lb$6
_<lR
"pM+/
/7)/
Bh*z
:[c
rttw
,InY
?E7lQ
_BM!z
$/HM
D^kIz6r
JB#S+
fpUZ
T8NS
R=8HX
=qL4%
:o/V
2gv3
6b_s
n v6
Hur?
n=}
J=+ C
\K#[E
fn_Pr
&{r`2
{RH@
I+=*
hI0F
3{.1
ExQ
;?GnN
KaW S
Orio
lot-
L$F}\
R):l+
`F2x
F77>t{
^+7(
bJa/o
l dDL
c" Ep
@>`h1_Pw
4t_w'.
3+}>7
l(;(
EfDz
?'K9|e7(neHVEk^4@wRwzJP{!
iP$<)
MouseEventArgs
~1se
M5*K
Gz*{Jj^h
)1Y<
m4h
s,B5G
V];0
[5,"
6I)V
, A}VKk
Ys/N
7#,Il
'g$/}t?
Y]]T+
e3y5
fnusq
,KnnD
n&2-w
-+/oL(
BwK/y
n9?6
Fkai(#
"j)d
q9@
-kr!
J6dX
Ks`HQ
`PKY
2An7<1t
x@oN
7W^
(
WvTtz.|&'h
gOXh
y7 5J
Y]ZJI
+)a+
=uUf
Px)
x\F0 y
?ijenQFj5ut`ZSGE~WWk&o3x$
#Ng0v
Cs @
FjHw#
_.!/7
yy7W
7~-[a
iKi)+D%
MA{s
N%]lbd]hg%X=?)83Y\WnLj*R
;GR
xP!diI
}JHF/,
EQ;A
8_OH
[Nq6
BeG;
ex6~+'
YilI
RODH
HgC3\
XJX*V
m;> i:
CP3x/pM__K+&h(=-be-~D"#/#
l?E63
3R?i7;+X^(mE#I?TQ()Ic/_H!
KzCrB
;{}a
} 2'
CL
Write
OnMouseMove
wUb9
DW[L
RN}7U6
?4'x
k |E
zAj
tQ#tc
8r !
sk/4
$"?oQ
^HS?s
X@k{
get_Assembly
Y/mChZF7cPD_OXP$S[s%tMRm'
W0=a}
PY-+^~D<=+UG)kdF_D#elAaV$
"^
u)94
Wsx<
9=,=W
]6;7 %
/F l8
%go~
mve7p
|X7iKVyd*,|o<vd=$KMU]YvU
P}X9
bX"#
v 4c
xH(1;
mnO^
N <|
J\ ZLIJPX[(XKq>ld3f7L[\o(
4%yt
Pi?=?%
6XE!Qg/V5]9AiK6`brT)>|*e
9oh d
C#eS
qlhBb
T oEG}
/>*gk
oR>8
b}V=ND
.7_&
?(q1
k-f)h
*|As
oup/
q{M~
a "
}B*
trm
System.IO
p6p.
WrapNonExceptionThrows
mBmLhIIsB`XO-u&_(a+ SoY%!
u;@q
-qG(
#L$v
!jja
ub,<
?n)bG7yG+_Q$d'jLMtK|-#cR
PKm3x]uB\'i
m] joM
(JGd
q6E9
Console
{tq{C
w8w,
AWi=I
W@V-y
~bgd
1z
=:W#
AF7;
%3H]G
-[~U
?a.v
I\}!
DN!)v
4;(t
M~X
a~p@]
,]c{}
`gi9sI
P9*1&/ww]/Lad5,4&0$,I)Ey"
Zy1BE
tXm8
!kZF%5p5<+:{q(\t% l3("n|#
,$kX
0,z8M
BD2L7/bH`>%3~3|hkbxE-T!m
0Y]4
UOyy
jos
E9P0
c&}y
z=EP9
IHDR
2< I
v5VH:.
7]G]
]@|z
w,*b/
p@@
,9FQZ
\!sl5;
8'6
2bW)C/U&Hwjku"d[qvC 3y<'$
3({b
+7,1
[3m5
7NE3
~4|q:
!86Y
<@?S?@cL
\u@
atk>5
IV+|J
_W^+
N3[E
~?9y&
t3Dj
j)'
&><
|zSR
]/DuL%
A%=)
'JIZ
U`&yZ
+:]A
:K #
F)wA
System
EventArgs
W:iw
*R~
caTs
Vh9$
f?o
+8$\%|
J?lp
/FD1
;/aZ
RV0h
l$J E
g}vm
N;KO 75igg`HK3CuxxSL^8BR
]G1a
'w55
Nh[x
mBU$
kPX5
:R~)
(*"L
-e*~
WS6o
-;o>,j(
: \y
8('
YPl*R
a"gi
g^x
z}>t
'*9,
_ Ta5
v)$j
3{dK
yT5#Id
CreateInstance
c4 D
#?M&
]s`p
|J @
_5B?
FieldInfo
NlCo
w'c\u[
EE6g
MethodBase
#Strings
@vQ}
SNCS
Hqd?
/|P
elr(;F-
|=i;
M<+@
xS/u
ck2
]Vmw
ec1z0
C>wcRV5
+<g!K
;SC~
L,:
TVqKs
1CC4i^c"sU7"=b~l7Coy]G"
Gath%u
,'XX
Environment
NL I
get_EnabledCalc
2TF*
w1K3P
VQ/(HH''<:o|>Zf?N;>~B#q%
=+-
.va
B]u
!K@O
1="o
Ze11
o\B0
D2Y>-Bs<N#dHrp H\3M\jx})
Z\^A
Q.e\5
M<q5SQf+av5<WR'n1L|x] 7b)
p0j
Iaz7
RRRB:D
r|<t
HF[p
5DY
!uGg{6
get_EntryPoint
q e9B
"6DQW&c}t'!,n`!KHYS(RJ6[$
>wQi[
[ _\
aoR'
N1! C.]>
v^r
SF8tRj
Y^: cE
zMLAx2@s3H" u\sE<`iBq(T2*
y(2W
VpTPhg6q
lS(i
|6-S
OBQG
f?P!z
!SEMn4
/y>m
E n,
' )}
CBCC
Qt }
i@a}D
_Ovx`wI0|MhB3_$"QAEPR0gH
7UM9
GetType
1K4\q1
m\8 Uq"
?aX {
>}c
}VH5
^^URMK
}e<)
|W{VPL"YCib!qe}FZ(bKmJd1
T`)K1^fZDu
HjR>
add_AssemblyResolve
Z~vex
{<@
(N.^
Sp3<O6~ldhR$t&yKJH#0+&Xx!
d +
C3W-
7~*e*>p|I@pT;25J->r%p$Dg
kKd,
UEtB
7}Az
kUr$
vHUs
xRf
NI7
set_OverIndex
}<Z|u
t8:^
N)*tK
([!F;"BSW5*U${{BpK_P9Z2`
}l~R
Lm!
<L]x~9
{n(;
$I.f
6.Vv
A/9T
;)FF
5k.;
5I2~
}#pK
R[7x
(_x./qo
)XzM)
7K 5
8XD`"
^}&8p
(gt,>YT
~:Ct
TabControl
76ik
n|:r
El!c
_>4M\sH
~/C1
ARZ"i!CzaZJ4f&t"p}yb8eHn
4wnin
7&ap
5uIu
:e5\ub9zi_)">F>m+%jCV)%s*
N7vi
t(rON
A9~g|.qg
my<ZB
# / : Z
]N&"
6)8-
s\X:
L
Color
aD<4
eS{D
Intern
*)QS[
V(<c
&BrT
"]CZ
~c:+
+/?R_
dN@M8
set_BackColor
y?:=
sV$
w! -
5 <P
6z3`*"h&<+=@_])\$D4[E1EV%
Ps%N
]x4?
>xM67"~ZMhzV5-je#Q>_hiAl#
get_UTF8
?f<O
I|?yN"
Ah+m
get_Width
j9w7e'7T =/VthSjW\o:YMjn'
qlEw
GTdkB
b Z 9
yb.-
m5{,P
<sRAZ
'|=R
x,"k
+j7UF
$GSwTi
ZX {`
8nDjL
0'N+
]IDm
X'Qd
'O/Y
FN0 S
/B+_
get_Revision
A` 6U
k@`V
XiJw
:JbUG
q1uv
UGX?UOL\g\:[5W8rM{7,"4+>#
.+W*!
`hF
q(|(
,<\ff
)N
;;5M0
(T |
rP#0?
mk~~
z4Kv|M
_6Tc
K *\
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
9W&l
pCAv`MhHuKkpn)$hL38tgo"(!
Ck{Jq
,pz@w
Y3PJ
/*<y
Hb#y:A
7Fe
mu+Y
V$ ^
>Sdt
835U
TgsS
KZpu
uKa`S
Bjx+-
44SR
B6_3f
r+SS
t%Mx&
Sy"\
uSi}+ m 4Nhnnlr(Y^q)wN=;%
1rt`+
;nvD
#/x0
,g&' t
UeVTaw/
!1Ja
:/[1ex
N4 "
z&uu)iE$E{R[EOHM8RmsJ?)1$
gGBb
]CnjJ
B'Vdj
3dpN
_-j1
1ni9J
8"s$
5D m6
S86B{
{ KF
OG)/
DUf"
6pE3
&A N^Aq3
/Dp
N(YQNFvk\UY~EW^'x0`q2:/$!
System.Core
=mCY
VSlRW
IXn3
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
stm|
Kx,j&w>^3nKmf7L_4pI-RX9)!
;%RGZdzo?:kH]$OYMCWyX^CJ#
altE
um1S
`^{
9^?u
q&lw\
b!S_-
Delegate
e@NGy
g ;-NWA?:(r/Q<6XHSF!_:T+
Q_3x
Yy[l
~@[a
p W.
E[L6
<jq5~
~ CKG
nD0&`d
9vxb
4@-:?@IZ1f)D[&a-bI38h,+(*
&1SX
+FK0
hC6!
ZB2,
diJQ-(s
*A//4O
b]t~
}Dt8IXY3^FIu,|DO~a_lS]/!
&Pn5
: >
X +4(+
Wf..
h6&g
+uiic
Q hs3]:
UDa/Y
UnJ'
1tj8hZ
QP8b||;CL{&a-G%n&dnN>`/_#
{cU.
*9o|*C
4:f+
Uaz0
/ SC
ModuleHandle
c DZ
> S56KC
.M C
0SAd
oH@
fQ:I*{]
p/<v
D00e
{IDAThC
o01GEh
w=d{
g+=8t
E /-<V um
=!/y
/wcy
=:m_{
$l2'
Whh)
mw
iW=G
` lrl
'$ &
D_x
K )Z
JaM-#
Mjhz
gTZy
'Yt_Cu
7NKB
set_DoubleBuffered
=^xQ
j49cZM]OiK0I217I`,/V)scB"
3g:"z
S;N<
get_Length
mhWh9
get_Chars
'y+ b&
B]\)#
PC{7(O?M
([o=
yfW8
7+kU
a*S_8
nEF7
-Gws+H
aOEp
fpyy>_HK
V8}av
a&q ~=}
[nVD4
1+:
U:45
GGN/
1Q+z4Z;
4Z[X
^19d
3K4MG(Z\Y+uE>NxzIE&Db#jJ(
Contains
5>*5M
B"$-T
-R]v
/hQi
q}q^^
cWB(6*5mpRl>\cAm7`>|_&O#%
p5Vw
mrUC
qb\eG
V=08
nFf_
lUxR
@\0vz#hs`a]Sw~"QhsI;JskE!
k7* F?c:T
QyU{`=B<q
ujy`H
*in2
oI:5('
|VP&!
ValueType
q<Jz
OH}<
it,5
5vtk
GuidAttribute
vjBp^[
kfL]
R@cbDlN{=]lRO84xfR ,ba_H$
^ 4
H8ER
l_d%
m-E6
Nz:^
3SW&
K5g0G
*w }
Sj Z
c*I
q^Z~vPG+Y`M5uas{Hw5N,,;?!
2R^;KS
LhLn
#^NV
t(*i
+: [T
tppElcbMWI2MlPd~]@u>87Vu!
^x,c
)^V7
get_Count
:7\ym
Jyx}V
S+gW
F gFc!O
lj6T
(&,`
rSWD_ZAm2
xO F
$Y,cjj1rEtY_ "<1!7O1KxUo'
=,nup
8Ar1
t|^<g
G@{?_
gB1
|j^}
T6+VTMAI11oJ;0"r#`n>?W/{#
|nA
1j"f
Qm*o
: E>|
ZA+k
bs#.
NgY<
wv,x
L)h,
{H0r6]
N<Q:
HLK_z2
Xm\W
@KPGbK
X66-
,LL7
>"?1
%vcl*
.(R
>J!9
jTW&
6,!r
!= 3 v
Du*]
F8C-
cGX`EL
ve[kAp
H6CKn
otQ}Y
yfml>
'Nfo
)@8BxVw
p7[;
p0(B|^A
7?rG
kS UfrA&R5>)#oJB:scq:NP-
8lYB
$Awc
G$9^&e,e=d
UInt32
ac8o
d uN
~53I;
JfUz
get_Version
Twus
=.Dy7eXN<8
EA2r7G7ol2C]?HR(VDyI]wHP!
@"+-
UdD4
{~O
KM%4
ToString
iEdK
3W?,
HXjc
U@@i
9LuKA
5te7
OSb!V
Bl9s
R$hM|$j:^kLuRE/1B9E%=n$`
1DmY
1jBq=
U|i)9
Y\nx
qEd\
SLTB
od|>
AH
LM#~MKmF)h*lpYD`S})X;LDg-
k*t/
X
Q~(<57]3Crl;/_#cYBXfN/9Q!
')BK#
5%t* I&[
'm[54
![- v*
W? h
% 7P
P iV
TqeRq
g*~$
\S]V;
MT4+o5L
,-?f
,G8G
VirtualProtect
Scv~
6:5p
}}Lp<
qJx
e4a^u
: $qW.
64G
`h)W
pV)W
@@O2
GetTabRect
o$R-FuJ
]WP*
KQ9c
%7bW
TIkfTl,8/dRBW@g}f|SSSZ# "
iAvD
2i{(Y
#U|/
!NIZ
SSO+ ~
j[PN
oZ7-
.N93q9
rn1M
N&[
JW&x
AssemblyTitleAttribute
s8H'
BM I
,r:t
&cdU
lDGG
BF~)
NtW7jY
1#\ h*{
5F\J
b=BJE%q;>2;NN%[J#pR6jwLb"
Hw Ur
6SBh
O/s`
3@3(
KMVm
?Z!P
cBG/)k3
ge3!
bzH}
hM)H
cFq_
&}pb
7|l"
zzLWfS!(XEzdX^j<g?rLp p^!
/bw_
+Nj&
cj"{
bi"mz
fn`7~i/+=n[hw728T`cH%3SM$
p;q?
O X}
Jdy,(
h 6 `
>Ti0
] 9M
(w |
&/)U
<qn^_o
,G*>
,prtk
B:PF
c%zH
<.x>
Oy^x
Hixj
L C@
~S6WA[
Ll07
_8 i}
<(3@
Istz{
qo,
xLHP
ibE]
% K[
l%r
^X=<
fcIp
kV32O
{>pL
Data
~gFw
{:p4
+K:-
} :i
p |
zGi8
Enabled
^`i3
2b x
A^JC
FCf6O
_(.^0
6KX{
P%I1
>oJgo$FeGcndVh%596JtYN|o"
x34\[}M"
lz!J
5gl)
v;96G
gn6
h ,WT
q($]
8>`Z*^r8ME mAD1^[QloQ^VE#
pHYs
.ctor
Bz75
:Cvm
/H1A
?~H;
get_SelectedIndex
4_\v`
8(pT
//:R"j
get_Message
Container
D$9x:FSfl)+2D)n7BHP4@|H:"
+"6^
6;"!C
2Nu_
:Bx<
%2gY
bq`%
U6*,3
U/$,
Se OI
gF2iG `d
[^M}
B!e.
Main
M$0G)2<+C6Ij_pK4Kk:m#xK+
E;.v
T TGp
xX/$
RCZh
a6?
Invoke
{R4"FP)\h8J"'wd%h+]k_$&+)
r)]8
5Uu/
n)"
ZXJX*
-Yh
EJbiy
fFkV
?f h
7:eX
0 [1
$hQ{?
Q18(,l!
CJ>~U
NyonB
1Zy'
1 .@
F7HK7
@BMh
D wA7+
f@>:S
=yD&
91uL
w@>o
yzDv
Ww4QcJ)[u= M1NKo3)'feJ$L(
"H-K
6J F
=b7<
\vd
@{_i
1I.M
y~U
MRCb
TEaw
Module
hH1xO4
M-MK
h4:)
puC8
f>?l
Array
eNYihxz'VhI2o5&o:SrFqh@d$
EC,
get_Location
?`|g'-
;u=T
k V:{
Ks7(
`" i(
j!:
4*t
@.reloc
~("@-
QTFM
"i 8
i,|Y
$8`A
bmp9
oj)
cjl7
K5Qz/
@Q]3N
s'?
kJ^-=C
?*ng
powU#
0jj&
yWiK7S4
eJC \%
:WA
TabSizeMode
vY-v}
p :>t
z]4:
Byte
~J v
|r{+o"Es2'!yp7i9|<w@d6Zn+
~~;`t
w]us
@K^;
4PJ+
16b%
[UF;
.q^A
rI1J
SUkX7
U xX
+%7^U9
5`]wY
l,^qW
*2 {wl
V#B:
R,U6PL
7!.Ww
%1o8
Y`_:
isL*
(g*
&5)*4
s"M]
]l&/
tMh`+
}2Mn
cY_
F"Gt
9moH
YkQ+
aE'F
`(
+[U;
;K (
F|Nvmd
"Q/R
25K+
no[9F7
+ggM
cP;aO=
TF`-
" [,b>
s2rs%'
Fc%y
y-v1
aA !R$O!Qw19TgP`N^lL;>j?
C 'JO
"zNY3ODS/A9C@_M?8_G[~FEI*
&E> 4-
Z7hR
;5W
KdZK
@]NT
~/2F
N#|mS'vwFs+iS{(b}h2Q])k]!
_E&d
p&>W
:O&*qJ/$[CNCLNHvEW@G>:QC'
_'i
.%i
+hd:
v'X_
|Vn}\
~{;JRxb
c~_1
IaeX
hfruc
Gv$`
P dp
ks]#
^(B"X
aRgQ
m@o!c
jCp5]G
--sn
ts*qF
95 '
Lww}
j] v
C~c$ i
o@'_
'h7k
Nue7
G`,>
<g%J!jxU
5w s
GwJ*
_n4
hL $ e
IDAThC
K0v
)=%
:Ul8
/%91
+Mmh
FreeHGlobal
7cZ|h"3FZez&$)N4rD^^\8$1$
Ud S
*xe"
v8hW
tww#
RuntimeCompatibilityAttribute
/T-|X
;d}"r
+R(+
cm?ORI)9~NTGU&d8QhOcPb^s$
x!zE
Assembly
EbS~
6gjM
hm'k
?Ki
;P&l|8N-'R&wzLq*;~ RjRJ("
(rD
_*Ik
yR:>
,~afP
/I $MU
t-9B
C@?R
bZ#Nts
6\kq
%'$>[
hkm A]
>_`<
p'!M
6KIT
]-fEx
V,5u
kU5T
n0{6
9 8kb
i3V4
Mk"&
+lXE
V1VM)H^t]sEX4{O7WxhxrW_(
OP==6;p1ThH?NU2+-fpiO=}V
{}_
Invalidate
z D
v9]D
l:Zu
J3z:pi
]HP>,!{~uD y8t7W8X9Fne"I&
r>**
g|+D
\sC;}
`zVjT
p*Jlh*
D~[
iMy+
Size
w3y5
sql;OJ
J$A]0
r'}I
+8|U(G
NewGuid
nJmA
S^edor
5m#E
X;,v
d$9<L9H'~zM(`G<Z|?Q$!~>^"
KQljO\,yB@>M#2j7:l0/5ZW_'
set_AutoScaleMode
dZ>g
e%h<
!Z*Z
(]k
Ytq(VN-gk<l0([T#[G7&B=%k*
P7O)
nc4"
*9}7A
$,r>
WuKR]'
pjv |
z.ev}
MXN(
"80L
V4Teg
0TG\
8Wov>
~3cP
~;eG
Ss/U
K<i:3
(?c99x
r<K\
IContainer
<6nI_
E@3^E
7m8)
=%# FRdEn`#o(jwbHtB(Hh:4!
`DAQ
Y}w2A
Sq/v
lFHJ
s\C*-H
/Js*
LeL,Z=9P1bkD"Wzf/M,p5lK=&
|=n{
I)=&
]{J4y
WyfzK
:[!U
.c8a
~=<Q
=r#9]
E&L}lEav
Qoc_
`&~7
opO
21+'
ISerializable
0 ?3
Ww,|
SJ@F
(dd%P
VsUZ
i+/ t
m,$nd<
sn31
:,O1h
$[F9
K$y1
Z(1
cx"Vp
xq0:(b+ZG@U4]&i&5uA>(#(]
<HhP)"G/fSJt*U{Z1lnMyoAL&
BSL}
L8]MS
kZ5,
fd_bF$
gPdAjr
`@(7
D`A'
~={\j
[C"ll`
5L`<
}53_3
} >RFXYg
J3fuqf
5W (
h8Q
"!"P
+`_O
# -u'
:-k*
get_OverIndex
ygOco
4$t
[z{
GwnHH#
}nE$`
ULsj
w]c4
Ybv
\.vT
+%V- @
msN=
"@E>
_zdL^
[OXd
pqI/@6m
qh-sQK.3
5J\J
ts>xG
&M8I*R9C]?~@?,)dJ%N9fF~!
b6OZ4w
w$PC_
s[h?3R?U\,r6<cM]nN?/ocT{#
qA1.
Ay;G
\"Y_
dzZW'
Zam%
NIB(8
w:qG
ContainerControl
H;KX
P|`a&k
TmZR
(}Mcz
`w0[Z
zIDAThC
>a 'q
8f$y
t`fo
/!QQTyw
E6hW
WU]"
4j6<Q
~D[B
57{+
isRs
N)w:n
O r<
fRTh
?'Qh
ReadByte
ge=r
D Bou
dq)BY
rY`dw
D!"k7 8
FC<v' RrmP]*f)cIAOX?4*Zv&
) 18
]sVi
?^;
in#V
Sb88
3F1764884A245F1B3FA91DEC2E25339F23787561
fG6H'jnnBMAx\1ZuL[3Gsp&h#
:nnG
4'az
hs-p
!sFt
qC~x,.3
Vyja-bB*
IComparable
kC` M
iXg6
B3+<
KCoG
{ 3$t
TYlH
7e70
hcT8)@wk1R&1:x3vP7JArXY7$
CG[(&
o`id
AllocHGlobal
P0!@
B x5
2X-D[
C{[
AssemblyCopyrightAttribute
\lpD
`h#L
Guj @
{ {Y>#
[@e~1
, 9#
kT\n
FS P"K
h ulKS
Lc_]
dN2s'
ehD:YS
.H/=C
,urr
W6V*H
T.'
xM(~
T6]P
B_>E
B0 G
Hr=4
ABsL
.ugV
Yw2NSVLPqT2Hi+,Z:L8VDbHt
\7R[<
4)(
L3)m
umac=455QGVBdcs}4X31QmP>'
YuCmg
$hU~
amBv\
`LP e
?qQ!
+M=^7C'1xmq,S/w7XAh30"IF"
D/0r
tKU[O
GetField
+{}[IOM>oy}V$0p><=j)#N2v%
YnTX6
PT?t
xD #
,rlSe
*:$p
1E Gvtu}hLo]?aOO}R4]#yP=
) TOF
6nQ
%fBac@
ui%E
]7l5
42O_
*kl$
NsOh3
3oWs
F} .,
_s1*
y&M z
ib<H>],;bc%)"msR_^;_h+z{!
R#u8}L
zpz
K9pvs
!b|T
^0pib
#N `o
k)yGa
=Boc
o25&
SM"cr
ControlEventArgs
U,-z
" dz
T+6 h
xrDNr
65c .
MuQd(b<j@Yt*-?4N'gJcO%Gi%
=.Z6
{EMs'g`
#\
$4KYZm
Duh[
3J\3
set_Enabled
6lyg
:yA`]
Fi9F
Q wt%
:axzZ&
?Bx
BAfy
f@P3
cZM q
Read
[J@p
et'
<!or&KY-
/BeU@n
rAud
[cBM
YX?Qz
*^`3
.ih~
A=36e>u
8ovV
J~#2H
3, GL|#?*&KS0xn-UOWj|xzk!
N !
VF|^)
2j@ y;
Q&@
get_Value
,^MC
X3k
AE6|
GOyt
B *5
f&pgT
QfcI
z Pp
d7b~ `
.=G>
v.z<
=Cjx(
##MX
x^3O59
EeCY
EMC <
MulticastDelegate
w~iC
}w~n
bw(>=
gAMA
N}5c
hy T
~I(n
Is a]
e]P(
aV7i
(Nx%bIN{-WZF*|^v=#YfEAMC!
Qx(]
l3Z:
BXo_
]E[vNDSB[b9>rvpT+/Z6Q:kn&
AutoScaleMode
gVA,
MarshalByRefObject
O, Q\
cC5|I
I q_z
tg7
VX '0
.cctor
AsyncCallback
>)q<
?^/:
mscorlib
yFKL#
izRR&
c7)^j
<-0N
' T
`}$gOd
iF9r
N7zv
[\L;z'NsB
.=c*o
iz-
)?p4
*1."o
osDI[
3C^|
\q[s/9'j
.L G
X?W\
2cAQ
?zkn
P#&-b
?rj/8
'1uy
9hlr
&|C%
0[;q ?
U"E.
YpBO
Q?G2
{eBMR2b
jv^ct
.i $
get_TabPages
EKNyL}
m vM7l
`=M5f
Rb51ZsS8vq~M_<rtai1'k494%
6=D>
HW=
>`ED
~E'%3
}k|E
,uhj
Guid
bU oA$)
xf -
8+0 b#
Ye9^
Wi2
}KQ
$@ek
otoE
#Nv\
cueE
1Kr3
t@JF
i8BPSK_oU"_1nWps}\z8;7"_$
Y| I$
get_ModuleHandle
'a3D;w>3E7pMDdky%bi<$$<z$
azUv`
Na5r
@Mm5
System.Reflection
:Hac#
YH '
uv[
RZkf(
C>@n)
Kh7cC
e=W}-
JyeG
t'[R4K"
[ ?F]
RuntimeTypeHandle
N2V&
XFk=OEp
n" P1(
C@E"
;(xc
:JzF
K:!,^z
ZlsM
j^^_
2018
31Ts/
T\ \
%+VR
A5|Ul^
&7piTkW@gaw^=8s\")Zv\R }
wN>x*
iGIc
)GHww
sender
~H0Q
)5eM]!Q+!m'{:EcEz9+xE^C]'
s:!$F
/VMb
z>zn
Gm/;z
EyC[
/NlV
Append
Es}
7 m3
VzcYe/=sP,:ZZ%#!H3NT$Yf2@
>;SB
It1U`
!>1q
yj? z
V\%k
d9X}_
System.ServiceProcess
op_Equality
NHv _J
[Q-YK
SzT~+
*8*e
)] v
j%g]bN|3lAL]O$`,`OrhK!PS&
0?^a
5!
D <n
Z {i
9>Lcy/];#c'QGW/[;'_&JqWx(
q &
HAb\
ch7|
{y*
oBkg
O*w-mJ
6\yf
^:lX]
EjEU
~"I(TJr
wAdi
{8CE
:wtC
NQDQ
D^xP
P"]6
AssemblyDescriptionAttribute
]HXA=
m]'
EW.1
E+i4W}
=jpn^r
S>lX
K74 D
19OZ
p[-7k}
+#Bx
^XS:Y<
1 N.
<W ?Z
JMfEW
cjB2
3Bs{
81W %%?eGL!;Q|z#5=}}Ladi0
pt-O16
j}!!
mhEov Jy>MlV,hlFB#(~whZc%
Z^0!
njaW
_j`(
J"6'
~/{T+
7g se
x2Tb
;6'v
F\SE
% 7/az
[i #y
x<Hl
DI:n
GmqgG 7
B_O?
{&~!
Si:p&Gqz5@7!@Y2JwArbmY8#$
:&Y|
-Cx&
mjx )
"gk|
|v:tD
jt!-6
ct7`
UoR#
A Ie
Kp5^"O+ETRU:0>`Q6"{a`b&Y!
!Iqk
~(INoCHT`BcGJYxs!6SAs4O%,
=)=>
`|TU
eFV
2/]ja~
<Fc?0
RQ+qR
)BMr
{e;y[
WGzl
g%v(
\rkJX
!%!-
[XO{
`D6n
+<CoJ
x;!]]
c?K6
s%u Sl
`.+i
dVrM
V Xf
LEtw
x 'V
v#m )
A]]+
D1-t
#NIp
|`b_
`i<z
:qL3
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
/w13H
>/4o
/:'r O
VA]'m~
F$PC
}Yy
" J!+
m*`g
0*C]O5`oHFk~YHmvwny0jQ$N"
qIEj
k*$F
)z +x$>H$aN)
\`.1
'[,cS
8:n4#e
}:tiQ
mscoree.dll
!This program cannot be run in DOS mode. $
]XeT
PoM1
callback
\]Aupw
jw>6}
^`=`:
BO0T o
l_Q2
b8I
WC l
f,.,<Ne
#-x%
]CW{
:`;[!3Z=1}xp3NrG3!+f26Vg'
_L>#
uxHr
ILIP 1w?/VGw`[<w( :ZMm]W"
hYLM
c\90
SFMU
Rzlp
DyC ye
dB U[
Dispose
d$d`
1q[a
Hix@*n
;aHRM{
.&j[
<xv+FR`^xqcZs<Zh@D>MUT7f$
|V9@
.cP_
#z,g
Tr!.6
GmQ?Xms(
Dr9o
4UI(
qC-Pw
}.$T&
4E2BE99140D24066CADC84F74FA899FEE5976B68
%KssiE
[o LA^}
Ge1K
RsKN/Mw$o\129Fg+%W-|D<Q,'
}+E*
_W}-
HYSL;#
$Tr8
74gK
WOwt
34iT#X
]I Yo\ U
?khu]
n*,}
cLFK+
Hs'-X
?~MJ
QE9aP
.ikD
0 u#
j3Fn
QF)*w]V;]
]?ZO/
BF C:
jsejU
^#;M
[+wW
? }}
5*:$
NTTvl
PTng
an&zO
&!Vk
b{fjU
aR<l
8)!D
.p|U
;_Ie
##q2
1XL-
#GUID
<Qmp
o_] pI
b~l*c
H]/ ,hI+%
X@VX
j@DI
z R
u_9T
9,s$cO
4syX
{EG$$=<\J=$L-iq>apdue+9;"
A2v)
dE@W
BmgVj
}'GWeZLyyHP*V~&cBTr>VtlH%
ii>
kypD
E* mJ
Y{JY
$W&h
'0pk
ub[S
]L+>
d-bM Q
BSJB
AN'(g
^#qi+
vt<dE
N/q=
b'XDmQ
UcH2
TA}9/r%>
TPT,a%c c|^O;BTza1<O2m:z!
s` }Ht
!(i;
$ZEjBI6Xa%h?t*UTK_Lscb/{#
qk}0
XDMk_
zI+,
+F74
v6<t
lX<&C'2
DG|
fx"Gh
\<{x
jx|8
eKG}
%DHB:
>g%h
RN3.
4U U -7wJ7uaV&#J(DbH:6PR$
FeWZ+
_c;2
wltI
z#tN:;4
K(ga5Da%]
i\vj(
XX[:q
q.+tc
kXeI
MDd= E
_dT
p*bk
,QkZ
g#h447f"xG60rHIx'5a|G>n'"
|3RJV;s>NX^rU57p<R|p/;;U!
5naC
b5 I
@#g}
~5^`x
'XK7
RV'I
p>Wxw:_
X7|F
XY!2i
IntPtr
h7<R
kk`y
TTJ{
8q\RU-z
z_%
6B^w
WCxXG
af`9D?
US7h
[Q^(
~ Ih
NV@
#|nMU
X3IttE-0
z7: Le W
7^!t
G%vJl
~!]$
]<7'
oJ6%
-$G`6
6mK8
{o,
IJWv
#+O1
}7FA
{Ku
ZtgF
%2@[
VH|y
fee{
vboo
l:Hdq
L H OC:.
0Y^IoX
System.Linq
JJgR
584IU
.t!JMB
Bo<a
C708234F139063BBE3CBE2208BB6ACFACBC50333
l^!QO
~|lZZ#
ZJMp
InvalidOperationException
/*41.
=*|{
G~ \
b}QD
t; 3
U]rs
@E|n
O-i5
Y10?
'og2
q6Q,
yF y.
e%o^h\
Q |mqY
sE[Eg
{r-4
W"w,
5<]U
**FH
ORs
mSL#4V=FE$zNMuQ=\I'[rcAT#
-nz 8
< <p
FJng
OEp5j
CaG/R1{
6*8
EJa
#K)3pqT
pAcF
S];r
uVWgr
7,=n
}EoP
&-/.E
Q8@'
BlockCopy
ARzt
>>X|
p_0[
j)OS
O[/)
$wwaex3Q~tGR0aj7Q^!bO{ua!
5+ IoI
rj7@
|t&x #
eG2L
Qj+3
|/sK_t;OmW>'mIg;C6~lg93-#
s$xp
pO*
dgVN
*>L5
BC R
k-@V
Lb}QT
GR~$
-RXL
Y[T
,'r}'
AR\.
;6UXe
~C8t
cYIe
MEK$,S
s!`q
4TkcR+
7}f@t
Dq g
4}Y0
v.R-[
t*X w
n|4QJ
MLMM
aI%Is
0~W,
%*:_
,Ua7
'V5@>
L\"f
^<d!yM*8P!:0&l+,JWA3~geV-
Ho:~ +^
i |!y
Alu=
U*&l
+S1-
w) )
S WUn
I"?\
WK!*
PkTV
\H3jkz
;I2o
mWd\
2R(Z
Gl3}n?
eF#|u
35%
8g|ZG\
!ypp
KZX^
Qc//
$Q\l
6/GQ@( y'+$<jot2yY93~<W_-
lO3;
LB_=
]~*u
Zz>&
NyLY
LISgC>
|PCA1
w Rxz
^%S?N
JNj Zc
se+O
VN1,
d"S7
MethodInfo
CDz7?
Z,IU
hF}I
/%s;
]m}"4
nx=qW"kCgh
I*+O
J o C
y*. A
Z`[^
Q65@
g{z1+
CompilationRelaxationsAttribute
r9F39D
twJww
~+P^
+`M
3Eb*&&32q~+=I6_gv668UFPT
jT|z
TabPageCollection
I]H@
_L//
=' r
X2?b5
w \9
MemoryStream
d Z>h@>>$w'R&w,9JZd)EI3F0
g]0\
C_ e
ResolveEventArgs
J!~4
"] 0
@*2/
Z u|s
5.Q]FEa6
<l3lL
5 "{
bms>ve:DK
0yuT
5k~D
"? ,R
L:6%|85j
OnControlAdded
+/&1
P3%?
%0:D
aL^
twLwL
_lPO C[p?\@9!FA8fy_BY"U$'
nE"1PapGm}BZURzg9h8lT`//%
z%N8`'Go
XXaN5=
o%f
hQTBQM
8e8Os
IS]S^
yUw`
na '
yaSs
Nd?s
MLsD8
; D/
)|Ks
i/
TZK{
MO[,d
'*'
%) HI
]mo'
|Xhb
d2r:
\E<'r
o+dm
Odg'PL
*6~D
FeZcH%J
BR_X
xU5u
qFK:&4fjq-T3=\^8{nomrU`!"
T19t 1
m,S
IEND
L#8~
8UZ=
}U~M
Q:;f
ZK8%
aN)
a,Ti
+@q$
$Q>HAr8y@{6$&Q&"X<=N=Z3c$
an{"BAA7\REc}-iP7XQhGlWw%
Zk)L
Z)Xt
wI #
GoS:Az
Z HYe
DDIe
h=aZ&
[l|j2
eSEN
36UP
wbp|!
=X0S
)y(,
w`*
E rt
=FGP
;[ts
t<d#
$tI[0
~d'C
766e804e-bfdb-1c.Resources.resources
n$=r^o
}7);|
T[;:ntYMBj
MLjy
X N{
( ;=
ig7HBGwP$1/BNA7Px"fi}kw\"
O*lm
$ Tq<
sqA[S
+#R_
! Zw
e7z[
y#hX
i7.N8
/X<

Mutation
e`e
)pKj
R;S /
o,f$
~dV>
\[|4q
~T 4
A B)
(x1&GZs\j^:A@%kBI:0JZao@!
get_White
&[ZO
eR_U
cIeT>
0m,;
uT5dQfo
Oo4$c
x+S;
O\pm:
2 HY/4! RM8#$;|$("I;(p6S"
rd&Q3
hax$}Q
W{f\55
{*V"Z
Concat
$499b1f36-571c-467d-a3c1-dd957a3a7e02
|dqF
Z)W
iEY+
,b rI
StringBuilder
6[< >?
z4_"b6e(2KR7(}^,YC*<=NK}#
VFW|tCGF :q1>fyU4$}/qV S&
0-98
dg2vkM
-ai39
~I{9
|Zr.
iUPT
n8ND@
HmHb
&)2QvcoF8Z|^{ZEp^P9aNA_6'
E88P6
+sf"4
}s'|[
;=!J{D0@HE%o@>(WW0}tab#O%
]9y1
[mC@iZ
L:5:
09G3\#O"'xC(4W/L)');9@es+
FTBJ
T>[wS
DCO
,`Lcp
sa^w:
03\[
`$c=Lw
get_Hand
e~6zT1
^Kat
i?mK
m CX
3PVo
oR74
pMG/5
6gCC
)W^R
|KI
r\&B
{p&
qO_<
Vw.Kwa
.;2|
<HtU
VQ@2
+:<}
UKn2
-Y5(
c7C2N1z{U^R9>+x)O?`/b)A4)
A =x^`C
~}2tm
l@k
Ku5h3
QR*/
UE KA
m>(\!n
1>$="\6\q,ip(KC14Lo4UH"+&
G?F
sRGB
q%fW
8DAw
VL}?
904T
Mysj-\
AssemblyFileVersionAttribute
`]okLm
mqv}
_'jN
]h]Id7N%R|T8202|:@RxE`-('
System.Text
(*j;2+4zv
E ,(
uf#J
0BN `
w; Z
b/xp
\gU>
pa /Qu
rx>>&
w0*X
)f8X
LaN5
!*/*
>1[2?
To13
2q]
N8h-
ruBp
|%NI
51.+XW3^
IEe;
EN\Z
I7YW
ZHle
t :%
GetElementType
~Wx.
gSp- /
C6bb7
TMz%O
BPg9
q0=
7Q<_a
}X-PC)3]aH-7&PCn a@n;;`h*
(+
Uty-
d;h 7U
}nT=
PS\2
nJ\CW1jc{4o+e&e\SY+!&aOb
/8CJ
UvKF
*yLwB
5wf+"
WuEMe
a-SUx6$q"O6SGptQ5=4nnJEK-
zXn\
;{B-
0vj
,P]za8
J(G
d$]O
)+Gd
=lo)Z){xy;X7P'iR7WBb79,c$
v?]]
!?0b
]N8'VL
a@}7
k8"O
7O/o@
)w Q
}HNN
CreateInstanceAndUnwrap
%oA!u
UoTUW
(F-X
t4UvL
<yQ;
usA+
=k$6
bayZd
Hfh1
`:Ma
}gn6
(tn3
d+K5
"JW>=
![5=
_O@
<J{T
FZgM
"6\bqC1|\/fL$qby54-,0a)g"
'5O^
.Yi
uDz[16|p,xzcg1U1jNx7U_My
e-bM\
Font
%d $Hw f
B v
?wn*
*@[f
4E~0
G6g7D
;>27s
_>PIh@
~=h
0
oRhf
}dAc
h0 p+
,mM3
YU!W
`a!z
E&!W
Q #1Mn
8:B(
_b]3]
String
?siJ31{3cgoud83^}csYctU!"
OfMg
@rnD
_CorExeMain
i.v.
iOp,GLc5iK(8<!ZE)cb]@LBy
Us]sy
)zD$
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
z*M}=k
GrxZ
OQ9vnP
Quz6
aeDF
WfK`
object
L[wl
yF#.
ZXM(!
Q#Xu
Yj&u
ql_l
sx|`G%6(|@#mI_=UO!|2IM&6!
{HMd
|%`n
rG&$@
868t
}.zn
hDW`;J<Qj1p`?L1*%sizD\UQ%
InitializeArray
3;)2
}E h
Z5YLc
-J Y
<8Wz
-Q)m
"@EG
3J`n2=
.F#K6 8
<ZwrTx
|_%?u
b<gN
%*8(
|^/l
KeyI0
w~S/
dgZN
t{pl-?)rht=GqW"/"M84kttj$
s gOHy
RZ c
aB]td5XJX&/!mwv+p=m@uFR#%
ToArray
OF`e
HMH7
V~ ~
)~w91
h(<]%~6+eV`A'\LJ-Hh[Y#%#'
OnCreateControl
J6@
* kV
U dm|
Bq'S
)nx-8
:v"<
OF`}
[t"*oB
XF:QN45@_hN"qZu(=4Z s#bW!
`"U`n
>m0WR9
A"6Z
v*IT
p/&1
Z# #
mrG],A2Ntz*Kmf\J2[BpV[-,%
G~*l
>!*_
cgPA
f%QT
b~=v
G &[
hKuo
D=!"
,a0aSB
@G9s
{_B)
:AK`
6[pb
get_Hovering
+l z2R
rQ% V|
+=m2
S>Ro
lV-77
;Ah.
V!0L
#Eh\K
?;rMIM
P|Z<?(
At u
0Z`G~
c:7c
;'k1
tYPI
4S^O
<Tfg
|v`6G)
CI6_
H0<1*
hkZW
VxP)
cKVK
Load
9Ez;&
d_&'*ptQ#w%(2@*>ar\Qjd`8
q6ht
+I#Xws
+F>m
k5V0
r31u
Byh~*
FL#+k
y{Rkn2
&=By
System.Drawing
Z\JC
x@V0Laf
jAsa$2g4EN!zHpvMt!MOpF*5'
get_FullName
(vZqX
X,N,
tezv
F n}
@Sg[
|pj=
\MdV<M
VgdGx
EUeg&
<-sa
BeginInvoke
a('i
h 2 .
w4h
2"Y@'nnx-Q1$'nCnJ">Zt4j#"
1+
ic;<
"yqc
;?
YW9E
n~9
G9>e<9
|[Mkkl
Xwqs W+
L NC0
I{>E
C(>`ng]
LZ+I
e-e _
Xw0&OOjSr@8Rr"h|a3{6B_k^
y90l8
~s^B
;p;'
)(v
j`Q~
s*14n_Hl>N/!OB\Xb;E?w,}p(
o zAW
wp*,
+6
GF>
8\ ".
y25a
RuntimeHelpers
UWK{
gy3{ 1
R< w@
6%[
E-Ao`
mLJ3|
UserControl
<<XtU8V
(U=}Em|3D-4l)TTG]L)"LR,r
get_Enabled
.fas'
6Ih}
Tz%b
4LST
2%Tk
9+"+
'2!R
~f}h
?&yp
-M'm
)2G_
h{t#
1Dv:9
r$[t
)J:%
=7a<
\Ky+
z9G6
]#}"wt"f
-OEr
u4aOm
`EZEm
{ENEES7"z'*J6TD!xvB>]SN=+
&+%f
Object
+[%(
;Nq
5vD$>
*J>wSPqC\Qqd,^@?-"M,p'tL"
sF"
q V
i@24
}0Q t
po-s;
-W@9>
$wjt
ComVisibleAttribute
9:ryVL,K
hx*~
}6N$
G?Wu
$8H!` y68Qy%cN7'#U2[RrPb!
0z5 4j-<
s:u,0\]c>s,wHvO]G/7$LlQ'"
Sl@i
D4c`%
%\}}
WI3GA+!p{Y9oI8O^cC#P?AF9!
C<]Z
{{bk
zC\w!"
$2B
aV+8
uds28
Wsxu3c
jhW^
o#ugl
xxPuR
=iL,
{/1n
v1~]1
Kx};;{=z&u%U<Fb:/EI$'9};)
Fnsa
_bY_>~E!KbUd5Is7>VTKl=2N!
GvHz]
WN7r
( TV
ZR;dD
1TV6
~> v
(&3A
nItdJ/Pzg2xc&&<lU6W6g:RB)
zXo"
.5)
nJ~">x
E{ 3
9&h
7`v@S
/en+
AssemblyConfigurationAttribute
SKJ8]LHO=(J4(@3!&n/lEfQa%
c]/O
xR v
rwkJ
5Q~4J
:q4g
;5"&q.q[i?
{u~ l
2@$X z
-t)4R]
U# k
h{f,
$)K`
OnMouseLeave
,b5{
iv)B
3W)
1.0.0.0
70;;
`YX\>
dvZk>KDmncO_eii!@!P!|W4D'
J&+7
fAd,
O0(E
m)u&&
)RiwF
m={iB
yVb}
(mu6T)
$l P!
LjVR
4i ]4
1 AA^b ~
M~o1
|r$x
^>QV
p3ru
LS8<@g
{whI
Jka|
#+b
Stream
%\ c
.j6Z$
s]B=k
9<!D
?<VHM
UKU1
:|tPz
{$#`
gFXQ?/
Anu&
=Ic1
;P|/
IB7G+
J^}g
\.8:
9Iv/nfx(-&~5G5DT|dV"ur^h!
?.P|AD
iR2gN
mRqn
RAbtT'lMAEI<3c!&?Ct_My[h!
4u$[
t]^ #
>1x&YZ
[|7S$
r!v1
O\&DRp%M)/IMl;3]$XD~+]'='
`T< *
?$>
os'[2
!1Qe
Q/at
dBn2
V[{
R!qa
j_2T@VLM_'*8CGGD8UgvYj:b%
K.}3i
Yj/i \tf:56,Fs8*Y_!9l%+X#
get_Control
9vxg
2( o
R@ y/
g+(d~J
eO(k
K_h'N
Confuser.Runtime
.CP4
&vH
" tY
pu4R!;
7dv
T]>Dt
z.X{
s `k(X6$q}Cl-e-53b@*/g&(&
*zL?2f
SLXM
u@lx}
5["K-T
($*C:
-H:!
B7#w
F<FMC>b 9W)+,H8Z^w-w<bXC#
.\WxCb
2Rc'\
l-Ub
set_ServiceName
eIDV
\>_NM0
:,]tU;1AWlO1<fu4b t3S9FC/
L610C
K;#z
x\:
0$yga
0w$J
Zvk O;&_
6Cc ?
eE;:X
PRC/
Wg{(T,
bi?8
"~Bq<_
pQ,n`
VHmP
+[\_
,5I\mF
IEvidenceFactory
>sA\a
6*Zn?
=C5 C
?}er
ZJ^(
s`fW
+D+7
@ ,}
T+\+
k+Fu
,Qf>
T0zt
h& A
#?x!D
4Uw2
K]Y[MGS
UyF
bmk@h(
> b}
37[G#
,v!wx&~l,{u?bB`6!Z*3Uv7^%
BC2[d[
"]4|"
epx*5
k.s~
S{I+
vueR
pfm
.G'HjX
9w?8 $-g
,Hk#
|`dWUR
sQqq
ym0r
j..$ptn?
ScfL
En3DL
j,1
t@dy$
X5@|>
pFaU,
sXf1db/-MT?K3bCE5R97fnaj
f3%uS6
,76/
Y LyJy
set_ItemSize
|(RT|
NiU>
TyVDX
zzHp
:5 8
' &;
*%/ i
9RGnM
bU#]
(zKZ
|-_2U
@K&n
R|[w
O?uY_
QR:1
s:xH
u_p hu
q}sS
LK+b 8
;?l:v
mLqy
dPKi
\ #=
b|j+
7CVwNB4
#> 5Y
kOfRp
,ad}
& 3S]f
K#ov
o}-i
GetHINSTANCE
CBaf
Buffer
<`|(
bDJ*
E:<fW`mri y\ i(9u)n8q`j'$
!^1K
3A|d
:{G*p
Q]x&
~7M|U0>EXan4EDA\&D-uFRAk!
"x>H
UO:
@ZM! wPUMY(x$Y6Hol6\#-/E!
3V?M
ii#:
@ p*
p-nw
:%p?E_m:(h^3_|~\DD*X%ii7$
w_?p
J>Rqx\B2EU 5A2unn(@^a$V8&
#qXNt
:9I>E
:>y8c
Q"0jHw
_n!8
#kgr
*kDL
-FSl
46Dp
XJ}z
]%od4
]Sjh
ig3A
vXCHTM
Iqc0
} 9YqC
\-5x
4 yS-w[
qG#.qW
"- 9
Yg9N
x.l)Sk
U /"A{
DtFJVs
V 0
d^3BYtA7A-N4AK`cm,xEE4^3!
pj'!
V(jG
T.B6{
Ir`u(
?^Us
|6Z(wC)DT:!{ucw)}V5g<0"2&
,h4N
]7q9
5 1
`H/ba
5 d@
DGxMC
?)c%8
~9kU
yQXH;&
{. $
UiE
04I)
E:`TVN^0(%*^}R(2NZAN4MFo-
Io1Y>
,$57?
Gh2Ei8
;uE(x
FSWI
%._R=
vp<]
Rbxd
RwYg
?]V&I'
juIrF
<2
1y;9
^Swv
`j{b
P)Wj
'1I0
g=X/fz
0|g"LFC
`a^HP,()\|P>\,W)eJ}pyzUJ#
Copyright
wt'p
yi I?'
ArgumentNullException
Jncu
U\T=
UX#!c
get_Major
4HKJI7Hw
Of]%
T'zmV
/?@u9
5>
#><
#:p$
[[9U
Point
,J(+
szj&
,%f3]
-5)hT
=L< "
z&D5
[;a'
v2.0.50727
iOw0,
{&?Q
l'6:f7,h!d qy2Mj]NX52(X>)
NI*2
C;6Z+
NxOd"j
dDlY)
`wl9
gk4I
a83V@
B@_!
T#.
Z"b_YD
/loc
-[B
K,DsT&
w\mA
VTL|dl
5z&[
Wa[z
LgzEM
R~cc
|"e-
R=ID
&\ TFv)
p3~4,TUsXY6[pdUzd#&yLEzC"
}I:l
6JUV<ub
Yy c
/lH4
NIq>
@Y?cf
=j#shQ
aKUv
t}~:B
g?v" =c<PHFpA)xFB)qAdCV
Exception
mqHa[
@Yj_bEDSI}2HZcK8][GFu3^g
Qdz>
=I[.
HFg:@
h(L>
Eu(n
+o:F
9y]
xL%I
k!iId
k!i.@
x}Zh=%
Ad8~
;ir 2
tWrn
zAm ,&
[X[g
CN w78
uA+1
_}Rz
r8D{{c%o
cG6"
J6%=^kf*iwX9d/o]rk~REA?)
z$S K
=UAY
,7F
+`ji
GetTypeFromHandle
IAsyncResult
\]Gge
m:Q
'i? u8
J&rJ
ED/F@
x\HY
,qF1h
#dy<{Y
a!'
u4|u
&,^O
_^QE
b u{
@BBD
KF`v
~yL/o%
System.Runtime.Remoting
KEdL
qjC-
9|"
nRE U
'VD|b
!&} sN'
p)S;nZ
GetDelegateForFunctionPointer
5ePp
4>|T
C,C_
hKuB_>L=
z?F
"wi<w
N1(Ef
`,}Qa
_q+mN
)#z\
} h=
I(Lx0s`o?
\}q*
p(}8
^7=X
PFKL
*#{q-
uf9bK9,\IK7_mSP;UAkcM#RI,
QDPQ
jo{
~?4b
! F
>7AI3
=W\x
TBQr
K~3nR
J ;a>
`~A(Cn
~&-$
~fM K
System.Runtime.Serialization
Y,Uq/41[QGwK^oac) y2TA:#&
<pM
V= {NS
,&6^v)
gF#O
`scZ
^|PGy
uj^c
,rlW
~LH*fFS0CP"i\8$D=mA>NI3f'
NHK
pHuL$P
d:i8
T3[ y
;?3<
q/m8
np T
~IDAThC
@p4v0
#b)}*\
mG2S
HN5"
l?;!
InEDX=(RxYtN 3An%2UI3#%L0
JxN8
XK(.
3NTl4v
System.Runtime.InteropServices
$I%
Z @
UX5`~G
Math
p*9c
ZO)^
(sV7d@=,Uei$@GkynP*6G!;c"
-*avdt[#wLddkP_1G?Y$j &|
7s#;
Y5UX
;7E|
*QN|
xP|M
F+n.?k
1Wpy
9~E6#
*Hl'
DUcy
>GNi
((7Y
&sJ%
z=P4
System.Runtime.CompilerServices
nC%0
Kc2['_/Y
!-Lf
[6Or
;NWAh-
SuppressIldasmAttribute

/l&:"&j
u1{t/
8UC=;o
Y-#Y
]rQ
2V5|
.qYU
]/*A7
]Qs
m9o'
7(u
5 o/-=z0
-,@1h
oC![
FKrP
[F;\~Cj(f&aC*Vs]!}NI({4f&
F[&L0
'~dhv
hE0Q_7
{2z$xZ-9GleE=TWKoiWC:ne'!
7Sf);<qW
R8{=
`AwU
qg9K_
~ 4o
WOEqe"pSSCE5"FR_metK_'>G$
GW`4
Mk8W
. h'
lH39w
xG+->
k+ha
vNq3
mK^
6b/qZ
iJ";
:f3J
DQ^&C
~#r(
jMK v*%m{=4/wxa=!T3csuW&#
rThw
yr:-
CUxJ
l"}GY0>9l_6UZU|'O$O+e^!t1
set_Font
3]:_
: RW
~ef3X2_%E^eK75o9G3Swq2gG$
VDv
Mi,Z(Zli
u3'\',0|j0q29VR(-dpv>Td %
$A;+lNP$%glJDE,-c5r6+2'L,
]JoqA
YQrb
A~D[`
LtdX
ZQFN
q,$O
nRt$cb
_7]@`
IDisposable
OB8{
r^Y
6\Pn>K
Q)/[D
Ix>*
j j1
B!7/
7prq
$2v2
bQMH
QWc9{ N
Z1.SeK4
b#GwiT
>@R3
/.+E
X; z
{ZMi
~bBy&5
u^AN
: c~s
?LPw
zJjI
A+ rG
B<x
1%WJa
.Z>9
)D*uE
:BAT
#L(0
nf Y^
AssemblyProductAttribute
P0a`Fn:KWOh\A<}n>8O<T!gA)
!zV!V6LX
xw=C
#/{f!x
u vq
7\Z_
XPxf
.!aW
U(*9P
,^%I$
<Module>
JZ}A,
qm 7
iq`Gn
F-J<&EimY"`Bi1esZm%<Lk@P"
~u$sx8
8HJiK
\ |D
ddN
iGv
%$~oU2PaUT@Fq4u4xROy\}EO#
ky/D
FT0
=5"p
/+\
v>OOP%g)CD'duaL2<SG~A&o{(
s pF:W
r!+M
QO~/M8
x "F
!m_pData
!!
s<+*4F
value
X\8'
~w8)
Foy\
!Pq\]=E3CK2qP d01,tuQ~3)&
~~GRsE/&E+D!nCM<,*ziCllA#
m^+R
cV`6=r(AeqG7jc]3AHT2wO"x!
O9` `
G 'p
*69X
NV:S
ezf9l
?te?
^)0}
0zX5
*5}"w{]
` Bvo
!:ye
M6o]
0}9njD`FW<:npc5Y>?dyz05-#
C8hz
+lwi5
zl|{
23WY;]
OnMouseUp
A.yM
@>_2
F}u6
w 52
X}Q?'
\oBE'<'0i4"6#K(:bx1J*WA^6
OD tH
np I
fOPn0
eOCKS;5#mkefe(FhL5,2zEoH%
&ne"
IJ'0
Hi?^=2
B#<(
):s
uh],
*r/
*K<^
?!hG
)&^4p
jzuU
i`@(
@RWS1<c8Zs"$`Z8vnofF$C*H#
<rSy
W_*h
<Hd&
Dc14
o 3x[L
^o=$
x `
==;Z9x
R)l2+B-of_vR! j=fx( PR5_"
b(tQ
set_SizeMode
]8Hxt
r.bT
I<t~
WeG~~
&/mq
8O c9
O(ED
&Hrs
<KB]
#pY)wN2
N\0T
n|bu2
PJ,{N
~a@]
hk04
%Yk2
Qc7~
rsR-
n59tU
KPEp&
e/I
[EyL{
'?-
9]!7
.ue>t?mFm
dAt5^u
`i5'=
?Zv
OcJf
3AN:h1
JbL;(}
1 x)
`Z>W
N$7m$
O @#J
&9s*
hEF--
0?a["@L\'KID-/r5\r<ue~VR%
X +U
4cDv
+WqE
h1^R
Mv 5N
Nullable`1
g"BIO
Cr$d
5,.A
d>q2
s r t
\=Gao
=U"o
+acJ
! _zV2b
G &
^Kf~Tl
eX)P
O;M2w *
r?eo3$zH|2"H+[}}ev*-R/_z#
%\'n<
n3:L
Uvo!pK`l;S(T6ZsQ1DTl&^T%%
get_HasValue
U8{0h
DQ|O
w-i\
7VmT
QKut1PJI
EvQbb!G]
@7sV
jO0|
Kef(
M{C$2
jO0x
z+dlT
;'!Q
w(VDZ
\b<4T
"-6"m
Jf~rWD5YQjQCC#0V7lMvkU&c%
N$Prq
rgs 5
Encoding
y%+.i
gvR+$
$|hb
&F|K
HB_>R
|lWk
Mr)3
SXj)
P~=kfM>bBB9$ar7QZOSq(X;r)
&*3P-0J:&<Z}nn;)*L\4Z"|Q
]o/
eLfU
^fc[c-
IEnumerable`1
hKIiJ
k\R&x
\dmt
B.?Z
V3\e
K:CJ 7
Z0"B
get_Module
xkk/SC
TabAlignment
r:7%
"cJ;A
f]C&KBs
G}lf
(jBMT
W~]$
#9PH]
s3SK)%k
2;\'
W 8=
y[}m
=Jh(
G'ZR
Rectangle
t|?n
MMoR/Z
Bo}
P 3Oi
v 6c
1FftHXfs,{~_D#z+t"M0dk6w
]OXv
YH$H
WOG
Cursors
+R \
B_))`
49H8
a>L^
*=Bd
get_Size
>4Or6a%2
[p zLy
CO= < < < < < < < < < < < < < < <
Ug>)
N~
3H/F
C,qW,=
0WK@
kP J
t< `
ct{ (N
@ie|
qC7j
`Fsl^OJ/kLAaWl(hF3>&{8{u"
Madg=;V9N,&6f5^!1}Iv%8I(5
qU@T
Vj#D
IW^T/<_]nWNVX8ZYGJZ5xg6+!
w~4L
=^LL
+uPpc]/j7G+OUThF97]@]xX;$
z YYu
)l_I!
System.ComponentModel
||EUw
Ark.exe
O?*&
~9n
d\Ef"~.R
KT?bA)qH!J)?cSjL'q,e+<hQ*
A_{t
<\}u
436534A617CD86B8557AEAA31D433ECFF38B112F
*@1k
Z!3}
x*6Q
.5 I
N-JJ
oJjF!
:XWC
DisplayNameAttribute
x'i/a0j[PU
r|j#
/oRe2
Ms 08
'.F_
cV!0
"6SvKf^<
7=4r
0]ve"
n'&B:
]_Xi
C648C0E55DD0A71600A3C979FEC05C180303B2F7
Th>-
lp%Vz
^J_{
ucj#`
a?gC
].8rR
uhu}
wPol
M_!n
zp}
%|o;
^K6:$
z1S0 AX
2"o;> k
Q-od
kV& "
_Bj: D
UL^Y
K*@6>L
|*^S @S
~q~U
xg7AR+Dx
N?`;y
2_fk
,.dru
*8I4x
QB*#ly
System.Collections.Generic
*)W[U
ruq<$3
eGh
QLgHr%P?&2j\#zI/gi(05|aC
$`3}3
dxO8
R?t><
3X?`
.B7v
yB%6 Q
lG&}
ServiceBase
AWO5
xR:00Q
c)5w
-U TG
|IDAThC
=*]v
System.Windows.Forms
set_Cursor
!6sY
"t?%
,`2%
zJk.
El'.
: @n
\^|e
-TjoO
[{E|
gIB;F>E#KXy0eY$)Pp|828h+%
J m& s
CV7)?- @
:-%I
# [a
x 3\N
RI)p5
WriteLine
Z?c-
bBTv
System.Drawing.Bitmap
9 *,
=w >U
2Y't$
?^p>
?"P<{S?\s}-7o$fPW}X;$_gg*
4;]sb
i=>h
g'(HZ
/FQ>
IDAThCc``
ah.I4`
SetStyle
UJGI
3zR
tm6Q
fJ*y
i4'&
v,{I
disposing
^K j
"*xW
C O]
wa8L~
^A_X
^ 67
K#yq
EF&(f=
b%0X
{~# )
nQ3?za3
m>%2@~!~@{tk>/0rhl=%vy:a
gS8"
<:DMbvrY~ 8
9M8 qs"]dx\2Dv8B6i*xjQ"g%
U{]9
[>l[z
p0cU
) |G
SO((l#zLesTCEP!9K5G=2/2/,
+=;{
Qc8<
%%C1
ho*l
86Fa<
<V /
@FNi5CaJ9.
V2~3
Sefz
Sr,Iy
,[^:
LFFn\8q
+,A9Y2CXFcbXzriditEDeF<X!
"7ko
~TK-
`t?C1oS>jPH/c]17?A~"OcxA"
tp76
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven03_64 Seven03_64 VirtualBox 2018-02-16 18:38:51 2018-02-16 18:41:42 171

9 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven03_64 Seven03_64 VirtualBox 2018-02-16 18:38:51 2018-02-16 18:41:42 171

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\lex.exe.config
C:\Users\Seven01\AppData\Local\Temp\lex.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\lex.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\lex.config
C:\Users\Seven01\AppData\Local\Temp\lex.INI
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\20008c75bb41e2febf84d4d4aea5b4e8\System.ServiceProcess.ni.dll
C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Users\Seven01\AppData\Local\Temp\d2fd2183-a127-467f-a3a1-aa0f63fc3750.dll
C:\Users\Seven01\AppData\Local\Temp\d2fd2183-a127-467f-a3a1-aa0f63fc3750\d2fd2183-a127-467f-a3a1-aa0f63fc3750.dll
C:\Users\Seven01\AppData\Local\Temp\d2fd2183-a127-467f-a3a1-aa0f63fc3750.exe
C:\Users\Seven01\AppData\Local\Temp\d2fd2183-a127-467f-a3a1-aa0f63fc3750\d2fd2183-a127-467f-a3a1-aa0f63fc3750.exe
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.INI
C:\Users\Seven01\AppData\Local\Temp\lex.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources\Ark.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\Temp\shell32.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe
\??\MountPointManager
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2344.27655828
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2344.27655828
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2344.27655875
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.Local\
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows
C:\Users\Seven01\AppData\Roaming\Microsoft
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.INI
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\8d68e509-75fc-43c2-9ab2-94f4a5794831.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\8d68e509-75fc-43c2-9ab2-94f4a5794831\8d68e509-75fc-43c2-9ab2-94f4a5794831.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\8d68e509-75fc-43c2-9ab2-94f4a5794831.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\8d68e509-75fc-43c2-9ab2-94f4a5794831\8d68e509-75fc-43c2-9ab2-94f4a5794831.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\shell32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2592.27660078
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2592.27660078
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2592.27660078

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\lex.exe.config
C:\Users\Seven01\AppData\Local\Temp\lex.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\20008c75bb41e2febf84d4d4aea5b4e8\System.ServiceProcess.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe

Write Files

C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe

Delete Files

C:\Users\Seven01\AppData\Local\Temp\lex.exe:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2344.27655828
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2344.27655828
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2344.27655875
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2592.27660078
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2592.27660078
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2592.27660078

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lex.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3035fc5a\375c7a1a
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.ServiceProcess__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.ServiceProcess,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|lex.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|lex.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|lex.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.3.5.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\337da671\3850e7bd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\337da671\1b71387b
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Namespaces
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msbuild.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.ServiceProcess,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
kernel32.dll.GetFullPathNameW
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.VirtualProtect
kernel32.dll.GlobalMemoryStatusEx
ole32.dll.CoCreateGuid
kernel32.dll.GetStdHandle
kernel32.dll.CloseHandle
kernel32.dll.DeleteFileW
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
kernel32.dll.FindAtomW
kernel32.dll.AddAtomW
mscoree.dll.LoadLibraryShim
gdiplus.dll.GdiplusStartup
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipLoadImageFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageType
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipGetImageEncodersSize
kernel32.dll.LocalAlloc
gdiplus.dll.GdipGetImageEncoders
kernel32.dll.RtlMoveMemory
kernel32.dll.LocalFree
gdiplus.dll.GdipSaveImageToStream
oleaut32.dll.#8
oleaut32.dll.#9
oleaut32.dll.#10
gdiplus.dll.GdipCreateBitmapFromStream
gdiplus.dll.GdipBitmapLockBits
gdiplus.dll.GdipBitmapUnlockBits
shfolder.dll.SHGetFolderPathW
kernel32.dll.CopyFileW
kernel32.dll.SwitchToThread
shell32.dll.ShellExecuteEx
shell32.dll.ShellExecuteExW
setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
setupapi.dll.CM_Get_Device_Interface_List_ExW
comctl32.dll.#386
ole32.dll.CoUninitialize
ole32.dll.CoRevokeInitializeSpy
comctl32.dll.#388
oleaut32.dll.#500
advapi32.dll.RegSetValueExW
kernel32.dll.DeleteAtom
comctl32.dll.#321
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister
kernel32.dll.GetProcAddress
kernel32.dll.CreateProcessW
ntdll.dll.NtAlertResumeThread
ntdll.dll.NtGetContextThread
ntdll.dll.NtReadVirtualMemory
ntdll.dll.NtSetContextThread
gdiplus.dll.GdipDisposeImage
ntdll.dll.NtWriteVirtualMemory
kernel32.dll.VirtualAllocEx
kernel32.dll.VirtualFreeEx
kernel32.dll.VirtualProtectEx
kernel32.dll.Wow64GetThreadContext
kernel32.dll.Wow64SetThreadContext
ntdll.dll.ZwUnmapViewOfSection

Execute Commands

C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe 
"C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe"

Started Services

Nothing to display

Created Services

Nothing to display