MalScore
100/100

ymc.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 34/66 Related 2688
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 511.00 KB (523264 bytes)
Compile time: 2017-05-09 03:18:12
MD5: 950e6c6deddd9cf4b3b6ff51720d5d9c
SHA1: cd1ca6c4f058b6721ab6157d2946d2fc955eab85
SHA256: b8d5d0917584512b0a7f8a289f0737f486086019dd84d91d00a3186ea1087c77
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 r|8%1k .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-02-16 18:41:43
Last submission: 2018-02-16 18:41:43
Filename detected: - ymc.exe (1)
URL file hosting
hXXp://prosciuttiamo.it/ice/ymc.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-02-16 10:41:01 [34/66] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
r|8%1k 0x2000 0xd884 55808 6e7d901f0829f871b636a6e0bcfde72d 87ebf5bf2e36204460940c3d1341641cb1fe9b1c
.text 0x10000 0x3dcd8 253440 932f79a32a77af498b1944c77d7bca51 e43186cd5b98ec6135910fe3f8cb130300aa7254
.rsrc 0x4e000 0x33a18 211968 b14603a6d4b8454b8b470b8b1885370d 0fddc4e75c2191c74523989e1d8b3fc23a042633
.reloc 0x82000 0xc 512 4e4a67c1ffad72c688ad19cfcdc4fd13 d14eeb3fb7574ba336983085b070684b350f4b1d
0x84000 0x10 512 da8c3884b98792b6bef8967fcff539d0 68e0303f596b209249acb6097527889af6738d8b
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4e130 209740 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x8147c 20 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x81490 920 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x81828 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Northeast Utilities System
Assembly Version: 0.0.0.0
InternalName: ymc.exe
FileVersion: 14.2.22.1
CompanyName: Northeast Utilities System
Comments: idebuqos
ProductName: LightCycler\xae Master Mixes
ProductVersion: 14.2.22.1
FileDescription: LightCycler\xae Master Mixes
Translation: 0x0000 0x04b0
OriginalFilename: ymc.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
14.2.22.1
URL(s)
No URL found
89623d1e-b4b3-4d6
89623d1e-b4b3-4d7
89623d1e-b4b3-4d4
89623d1e-b4b3-4d5
89623d1e-b4b3-4d2
89623d1e-b4b3-4d3
89623d1e-b4b3-4d0
89623d1e-b4b3-4d1
14.2.22.1
89623d1e-b4b3-4d42
89623d1e-b4b3-4d39
89623d1e-b4b3-4d8
89623d1e-b4b3-4d9
89623d1e-b4b3-4d43
Northeast Utilities System
89623d1e-b4b3-4d38
&%,+-+0/32425262
89623d1e-b4b3-4d36
89623d1e-b4b3-4d37
89623d1e-b4b3-4d34
89623d1e-b4b3-4d35
89623d1e-b4b3-4d32
89623d1e-b4b3-4d33
89623d1e-b4b3-4d30
89623d1e-b4b3-4d31
InternalName
89623d1e-b4b3-4d40
idebuqos
Assembly Version
FileVersion
Copyright
0.0.0.0
ymc.exe
89623d1e-b4b3-4d45
StringFileInfo
Translation
89623d1e-b4b3-4d44
VarFileInfo
Master Mixes
LegalCopyright
a00fb6b6-e450-ed
Comments
%q^
VS_VERSION_INFO
000004b0
LightCycler
89623d1e-b4b3-4d29
89623d1e-b4b3-4d28
FileDescription
89623d1e-b4b3-4d25
89623d1e-b4b3-4d24
89623d1e-b4b3-4d27
89623d1e-b4b3-4d26
89623d1e-b4b3-4d21
89623d1e-b4b3-4d20
89623d1e-b4b3-4d23
89623d1e-b4b3-4d22
89623d1e-b4b3-4d10
89623d1e-b4b3-4d11
89623d1e-b4b3-4d12
89623d1e-b4b3-4d13
89623d1e-b4b3-4d14
89623d1e-b4b3-4d15
89623d1e-b4b3-4d16
89623d1e-b4b3-4d17
89623d1e-b4b3-4d18
89623d1e-b4b3-4d19
CompanyName
ProductName
OriginalFilename
89623d1e-b4b3-4d41
2018 Northeast Utilities System
ProductVersion
1^vw
fKc=!YhX
v Q?E l{
* 0tC
Gk[
wG0%Pjmb`wXo~H]B_iY,b'7g!
]{['f
+j f0
l)Hx+
cc(s
X[qO
Zd*-
V 2~
bD'8m
</!N
BmTd
PNG
Q(V?
95=*
?)!u
Oh28tj
;`)"
BEcS
A[=p
n7@
i-Z!
o -B
4TQ:I
L')
- D5
Zp+9
Hu=9t
YSCS
7 ?X
0ge}
D:g;}GwJ`#B{'Gms)9!-N&,T*
yuZ` "
|{t\
Xn<B]
l^\G>OB
*O^%
3eCf
URB
ResolveEventHandler
%U g
get_Height
9v~G
<qJC3
g2Y{
X.,J
7\fB
vTWM
Z]=_
=7_;r
J.[j
3l/7
vE G
\a0 #
"a(
<Q N
^,hZ
6t: G
j9~)
wzS+Y`W={WD"tY;'9c{Eq3R}"
1Awzm\qGy"!RH$[7|ubjCUu`!
0Ib,
$XBBc;|'E=YM_)aaW|I=KBHW$
g,<W
er <-O
g"k6%
0$ML
+xG_*
8k 4
Kf+?
N?jsc
WrP#aTE
ZQ3J
R_0v 'QE
j_kc
1wa"V(#qDZe0`JqOC"c'i(As"
4;RKa
sP,l
.b`
cA#D
Version
W W
FvNx
H gB'
:'%b
IMb[ak
KFKwwwM
uNY&m
jfiF
b"!I
`zAo-o
X (+
/Yk0
4^Y1
EzX;
k/X_
set_EnabledCalc
5m#t
RC>\I
|-0$O\ClP3TN&D4}33+/?EM\#
e:<>
Vr5f
r~=<
"Rv{7
8+cE
iaa
EEH8
;00S2:BbuO~#]`r3ga/|wIe,"
=$RM
]"%]
{c^1
|h +
WPg^aa
ControlStyles
Marshal
iDF+
7L:,-
3~pk
W",SD$[o:G,:|-kimCwZ`sGx$
/A;|
Mt$u
#ebq
9'_RF
uluaA
[3"d
'4g:
+"rs
p="x/
n>4L
C$=he
0.V4
M13a
;.G2
dN6M
J'W
:o H M
h$di
9-T
FTW9r
I6FQ
}C;:,
&O"=
op_Explicit
RuntimeFieldHandle
H}rTUAr&0+{57h\(21j"i3V/'
--1@@
System.Security
_gZH
U!\N
AYg\%
(e/;
Tg"`
ObjectHandle
~D<
ViEU
A_v<
{4S]7e;
E:H!
"F#,
> 8p
Tv;b
v sw
N6FC
qvi3
r\,N\}
g/:*
ZXJX*V
nSgo
V 1 aN6
+Q "
ZXJX*J
>$bjp
esyw
#-8-
EndInvoke
u?2F
=:>YZ8
o()I
p9 k
'i}8rs
SaIN
k3yj:
;3 6D
nN\&8
X/:){7
'F~GHLP
-#I\
Kyh|
C[nw
wl#
@1^}
/mQw6
)*y
ri ,
$Op*
ok<?
IQpTT
9}-Ne
V==pzR
.>+]F
kvZz~
}\3 5
%4(BM
} R
z2|"<
CMp|I
T|KX
QOL0
set_Alignment
K-F"
n3`$
AssemblyCompanyAttribute
#HCVFXJ8BgE"\+7W/tHl0m>,
}UJG
?^5X
2>nL
eMZ(Z
G'UA#g<3l!7!aq2xhfRH`Nq1
M0e+
yo au.
1FiT
#,&je
=Ct=]
W7rs
rsoX
PWgR
;Vs|.
@y|M\!t'Y3f`(E~b<16;U[g%%
(2os
;KpX
[2!l
H`dH
M8d~w(F:b 2YLwI)h@^aQI_x+
a@l!.[
mG l
Ckc3
>fK`
^dBeu;`4K#;NM5r,;a)X'tTF'
Enumerable
J09
LML3y
C-cV
KC]u
50qvB
kr !K
ni -
!=ZB
91ur
Hvr$
FjaV
AppDomain
{;s!
pOaD[
k/XvU
nduA
VS[o
lhm+
NEj' ~
;l n
>j~x\v*]G"mR:s`<u"<yt)Y8%
vj|s
#`}i
ij9Pq-
get_CurrentDomain
Cd#
o8!X
_5Q.
f#.;
(BSY
fH5r
"i7I
~ MH:
K"EP
Di1v
m [b-
&VEHH
|D]x
j` (D)
vame
1AxOG>}tBi0!vHR%JC~[B+cU*
r_xR
E LZ
A\5>
^!">
NE]Tm=DruV+Z|(MGKW&Qtv9s#
uI|'S
xU?U
/Rj7>
wP9Pl,t+ })LU1q3;K9]K8XL+
G,R`
AJ(>?N
-=Lkz
n.Q"~
mKC)yZ
d; %
FHXf
AssemblyTrademarkAttribute
C K+
Xv>[(
zY]VWk
.&c]
&@7
Gg4
uMVK
UHP/
-KT~:
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
%f*t?$
@vAS
#Oti
E6C=
L@c+
D^O$
v#d"v
vIg0
{A:r
*D3_
d+08 1@l
^f$
L<k>
}u }~
YZnj
hhvO
t #}
#Blob
Control
9T`u
Al "
BCq\ `
q{qz
ik2d
*Fb.
GetFunctionPointerForDelegate
>E</+
2bB%+
^[zA
uUYk
pIXO
lF#8
cO)o
G,ba
T/|}
sHiT=Fho
$ j2
U" Hl
EIOo
SZNXxG{(w2,5uFA-DMVTq9&}'
=p)r
lcuG
v{jz
/8mqq
iIP^
=wf=
-60
o)x6
g+;J
or
BindingFlags
hxhi
w_ {
:T;
Type
wM[<
^%?9&
/OJ@
2SC"s
Dsm1c
z/jW
/ nH
Uv0n
2jm?
mK%Ij
aK!}
'.2]m
JXfn
9t!yk
9gQ#
fhFf
.gRJo
,sRK
.N9Ry^
|_c)
t)I(>
9xQ:
rG727
o|lN
4s/s
|>@ y
Cursor
./Ou
$4V!'
@[c=4
4E@F>{ <
lf\#\!
{mD
R.-J
(-ss|-"n9x=*#JgMr6o`dw<#&
pv;x
jRup
8O:%I
+.v<0
z_I$
Char
br e
i\qsq
RCQFQG}z=e9I4/5!buALP$,`+
ZzbI
4?ix<AA!3)8g&"t%d=7 Fb;h)
S0TOV/%7
8?s|%
rw"s_T
Jxm.!
kB9j
yxv2hxk-
OLg
UJ%/7e
zpb4
MH-z`
6b0#ON|VzS%-nEg _>qGz&b8/
TGHh
)DHa!L>J9K'oV0f] {Av#O=Y,
ItcC
GetValue
P7t]/
)Z!W
`^S)
@h k+
7 oqjy
jT(C
S=H`R48d
~yI'
get_X
get_Y
6S~N8
_XLcJ
&tj
|fLA
i}DK$&Y^8z6!n6oI?,:v95Gq)
=qtr1
]wgIB:5{+(\TJ':JVrPX[GM6#
.2|o*
c=N#h
t=bq
pw$(cwaIm
zxC
VirtualProtectEx
~IC
0sX7
get_FullyQualifiedName
H']@
\>C5
:-NT
Eefxo}I
8`pK
9Kch
]K%K,?
?5GN
aF":
)M{n0
ISynchronizeInvoke
p*(3
*8_g9
d iv^26;
Y]p.
8Q~Q
B$sep
N;bZ
_~F}
AW,g
VP@g v
Bu#
-&b?
qfM0j
tT~*Q2
+}BbQ
!cg(l
`%6/
h`G g
ghVI0
#]^l|*!FM#n`OG^x)U^=oN:C"
_E$Fs"Y \l%qT2A2@2<Pvcdw(
T16}
^'H)r
% %X
]Zk4;
K oS
+f\S
]ggb
fbaE83*%!&G5Y5|z;+wZ"E)_"
VSD4
F/tgV
dla=E
@oxa
O{y(
.text
$ Y*umJ(g:g>4~Al,-4cA4@v/
GetString
O06ti
jXQF
7F @Er
9(9y;D&
B,tt
,cCp90f`7e!j'QTePxs0R=#t%
9+H@Ne
mmx%
:)<J
Ky,AX
cMxb
/~Y i-
UweM
/,g7
YE /yM
(8T+/3
sdIf1&t
s/"M
?b*+
&-v&;
7=dXC2%}g=TWhW"y41';l:-{"
*Ajy
Q98&T9
2#0^
ad =g(
! R
L*uB
0(&s
cu+zN
rZ)Vx
fmVZ3$KB]p# [
Aj RA
lA7\{
5gCf
9%<e!
V$r4ZqBe&++tLqF_*(CmAZ*9$
X%9A
XX&\
Gr]VYO;.
Z mtp
VGqq
mztDzdN%Y~' vmLa11I)[!9>#
\)A[y!F5N2;y: !$`]CDJVBb2
u.W}
#663
: Q
-B;(iTN$~[{fED &Yuu)3EU1!
k Zfi+Qa
^>"}|
sUYzIVb<P9j[6BE7}~=NFRFV!
o*g
A-dO
6uJk
T9`s|
;NH_
;V\/|
hhwW
5v0b
S,MT!pRO>
/)u\E
hMed
Iku9
S]1=
2ElY/
A5O{yLvoHS'w,qNRP $oebD#!
C:Ce
NQ8E
+U ev
bB(/=L6sn]ZFNE7idC^#i~]f%
?1(Cq3Ki^QW(Y*b),wLTW-Tu!
+,PZ
*<fn
-rY>
S6nf
fu-dM
"1 2
X~&x
Jp%Lw
UV0*
MoX Q
+xU
wFdU
^Nuh
8p1W
KV p
u2oM`
P'^J
x&X,
x*sC&o
kIc
_=xK
*ZUQb
uVe'
*-3-
/VEQ<Wd
~ CFA:
115r
,@M'
%ULTr
R@u}O
_?948t
qqL^
}^Uk
n)h
p:'g
{}{p
3(8@N(QtO<:ncpq8_49p&G-E!
`.rsrc
B?6}
P^$3
dIxs
+ S0D
V]~Y
QP8zh
55e
H%1Xx4
BYnf
G$Js
Si_
31_:*
<i>|
get_Default
D)Kn
xT1C
w0\$
{O_!
*+u(p
Y$[wV
W Mo
hQC "
}; 4uOL
-f_Kh
kernel32.dll
:yf>
result
XD F&
{`I1*;
$SQv<
L&jdL?c=51xy}Ov<l0`X2`}=!
l |T
|*Y}
{k}L!
[HN/
bAG;e
x [0
@]kJRFN!^81w]-2EF1'<}1~}
X;n2j
EkP[
G9OK#XkY`:Rp*DcL&Kjt<E^S"
A$1'
6%uCeR
r^=i
#W$*V&IPwJq=`F!iLs5fEyr&%
p&L5
DDRf
={$4W8--29
FN@M
Xw!
'c U
[}e"
G{4_
xH+m
WsT/
d)>]
6t%mF
m` 4uB
s#?'
-rp7
=JIm
0 T[
?q/?s.`
JBqr
-*GB
El3E
AA-Y
R4QQ$
q5R:
%Y}
>9YG@
nseL
wDn?
iJoM UR1>[g![&(*!>5+-o"K#
Z>6:
F 99
_h*c
zWlb4E
i&'&
}ks=#
6}t
/KN/BWsCf
+NP
`#I~
k\K-
R'w@_
>73r07
H`N*M
~^ru
<^9Q;. O
l(aPuY
CBr4
F2Jq"
hv,Z
hgNr
@Tw4
vUZz
#,j>
MouseEventArgs
JQOu
Q~t%
})>h$'
Ln}T~G
Vq"%b
l21!
(cPt>
~Y<o[
M^)VW
wXD(S1w
U <.
LyV
rk4$k
!zzW!k
o~Fu
[r{\
g6mu
<SC~8Qg:N,;#\fgJx1|N;EBR
nBB>
oE7?
#$kj@O
R)`+)
|p&U/aYB{(Yc<IJ?%L%Rv}NW!
( v%c
%?/1.F
I14l,
V'Od
[ Rg
KIb-)R5iMX
j(BC
g2YC
/!dIr
0;6vq
q9}Y
dZm&
(
d#m\aJ
q/{}
f@l|
W;~>w
^wo1 Fx
lfcLam
q zK
3wxh
cYmm
zxK?
&%v<
4' Q
}<^]IY
9-MvQ
&AeY
)D3D%
COd^+
B5?-5
!i>K
r08FC
+@QC
;(-w2U26_\}@KH9D)HKgGrH6!
d]^Xbx;
5%0k
G}(C
Q9zP
&RrI
.Shg
X{T^
~TY`OV2kmgeBlF\I5D>7I)AC$
5EY
7}$A
-KYJW+WCYbh<T]N[5JypyG'y!
XJX*V
TF*
.zXi0'
JxLR
B0+$t
TC]j
\LG&
Write
}oO7> IJtP;8VTmm:"fG%OUN'
^2-(
OnMouseMove
)#1A
7&c,
at F
p">1s%H
=$JA
3%JQ
3h(^e-bo=-*-&!Dk<Sr))av|
Yhr[*Do>qy\KT"ZqS2Ic})w_+
Qvd
t@:h
get_Assembly
g+TF
^O6"C
,@`+
8lm
'!0
ys^3
0>^
H 2N
F%K"
|*Ge
^ Zd
a@ h1
]c o1$jKp<g!m#G&/@D<4/,D(
)k{
/[1zQ
>;A=
5\In
^XS=
alK>
t>+*
f (
3s6 V,~/.rxD
afqT)#
-&Y8Vj
+ 8 E b m |
2)
Ew5
\JR2
5SdhOf<H
"e{m
h<v
UW0~
Invoke
System.IO
WrapNonExceptionThrows
I~:K
Rli`f
H"4t
vVOE
+:F[
&] )
u!uV
I# h
^\&R,
Console
>1no
roTq
gtT!bC{hAX#Lx]qr<2$-i~ax$
U".i=}
QM3A)[A
+8'-
K:Y'SB
5KeBQ
1z
e 3n
W"ERr }-57$*O]B7TV##m=Gb#
D2:"4
ZXJX*
zu^5
jn o
W.{
goFL}680O lu
%j/@
a_G8
E]*F
j<3ri
Z$o[
6vno
Wg8.
14y7r
doZ
.<w?$4
^L|J
b]zz
0l@%
_vs,
g9S38
jeEz
=+3
! [s
|$`2;_5OdpP:P "DX__t, CH)
K9zU
~:{<
s9yC
)bBZ
~vP
IHDR
PK \pe
-.mwT
[*L
O/Iu
}8]I
D'jkHM:>n-#{C\>Q:Hm:`ayc
}k"B0i
B"=zhZ
NU]l@
trL4
EWyl
>UQ$LUQW]d)7a>/E=]%B{VG?$
}IDAThC
a)i0
dPS
Me\$
DMz.e
yK@\
*81y
3'%mo
'ONQ
x @
X @ v
Q]m$
P>rM
|CL:
]c@N6/0X2E!r[D0"zY?M;mc5,
%la}
yvf^
mElp
-73f
7(Ns
System
EventArgs
Cp|,
%~~2/`
/&/8
hby8
oa\.O-
(=C?X
K ijk08nq]8FZd?*@LcbRCJE#
aw+*
J;6~/Y!63HjiCs[/38,fv/$I+
q:yp
mND|U
P hl
f<9F
:g2e^u
dG#"
7G'6
BjId
+HLI
CreateInstance
[*vA
06&7
ID* w
]"F8
dbP!>
+-SV
| ~z)DfdT::aC]h=Fk59jr-W"
5AEC
91D}w
{C0j
MethodBase
#Strings
K"/Cw
X dOM
~0 kc{@
System.Collections
>v`b
ZXM(!
-FEWf
2uvt
yfZl12}HTD&%PtH^D|+iM,,c#
- sn
+/1f0
FrY~)
*oh`
DCw}*
\9Y;O
Zp^EPK
@~wX
c5|Z
fC2Y
i5Q
]L}>i2')0`T2l51fZ!_"V<^n%
oTvp
g+c*
7M3"
`[&
a]`u=
7:D"MWRe
fq%?#
QGzy
Environment
get_EnabledCalc
mOR
:~b;v
?AuHXudd
}Q ;
VirtualProtect
iW#]'
R7<V
PE &
NIncph7~0q?0HiNGq6JjkfS(
>;RV
_qkh
`H:?'#6
sBU-
hxV["O[N$4Y,:j6`,I6ZSU2+!
]0r6
9/'>
\a74qvo
3+GC
F iA[
P=YG
get_EntryPoint
ri}-|
U>/ SX
'ea6
==%w
*6[
ph~W
ctud
'|ZnE
XpKe
//*=w~
6*]A
Mm7
N IXb
-Y59
.7=4o
%`VvF
LhC&
;&\ O
Fr_
xC$] ~
VXA&
v3*S
KM2<%
UH~5
\~CR
[3!3
\,de}
%ex|
[|r=
zz"9
rX"t
E%f%%6o[J`:'_TOpC@4Wla2I'
GetType
{ "M
AF%y3MVl
t"gf
~7Rw
add_AssemblyResolve
s:~9
tg_w
W^bg
IDAThC
B:Fm
Q1uIw
$8o
_b+
e:ExA
/iiL
B` {
cux9hIp&
3~.,/L
1Pmf
UJL-
kD4Xkn
set_OverIndex
{8AXT
$Yrlg`
_Cd.
B'q*
5L0bj
BP{S6
Gv0S
Nc`
t7sL
HwI
xUc
/ s{ nL
>qR(
L~8A
*jZQ
&|}l
CSgdk
Ba#s
sda0
TabControl
;~**
gS R
L][a
uZG86PiJO[s6*tdRA5]g# p:%
lrH|
lC-&
/J?q
)- % 1
AOoh{
vTl
EA-1,T\
C%=ez
k&iI
X|}|
V s
Array
N"q"dU
z Tw
v$BT
3-U!
WA?~Wp
Color
wd,5
kdn]M/^
18^EcV
/ BY
Tw59w
Intern
R ?P
C qV
|KK@h
'NZ*>
m[%,
iVBs/
7Ti hj
MMI#
0{/9w
{w1|K&kL4}zRgOmY)c+284kl"
w&#kQu_q2fyHJll_N@A9g+0g
)+?o
\p<$
get_UTF8
7;U?
^wP&
@?It0dzQ<WG1bAr_'kmf5E-H%
ra1b
Q'NN
[L x"B
N`VsZ
zb30_
2n:R
bk]K
~C;
LOHAl
928ccaeQ{#z|rdGgo@m`$}Q<!
ZX {`
uX w
@Nhm
ibO@x
`rH
pt#!0ztI
?=\Ly
j!:
get_Revision
"r;h
m$B>
rb./
Ec!1!
DNG8
fiH;W
Y_o~
s[Gq
/BE5
=^VI
'AY}w/eQkkc/~
Dc9"
2C6J'
nSsa
dh4U'
+2uy
M@p/
3t(T
-h2Z1+
DE
}=!B
WvLH0^
3<aF
hx1x
V!a4
peTv
,&:Lz
yhKM_
T"88
^;5G
set_BackColor
$ )@@Z
p6\_
/)"z`1
XO"j
#55j
:M 8
bEy?y
EDn9
2j1t3
?U1
z r<
-yjn
eZAE
%/8
0rQuh[I\}XL,8<th|[`DkNbc"
FCUT
Lg-]z
J* #
/FU>
~6;p
~b}MebV~u[' Kp9LC!L`2PNG#
Vu" ~]$C
C[F
&RVn
zbz}
j&Px
vAht29F;'^2le:rqgQ{{K4F]"
Qc1lW/z!86%pf3tSN}{X8vPF"
System.Core
Dp'G
j8 <
gUZLi
odP
#IW`
O = q
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
59}}1
ndc4
9QCN
{S/}!*uHP`07oUEpcH)<F}0:"
d TO{o
Delegate
ytg}
73{N
h4cs
W:Lq
7v'T
ujc,d
BSM5
06mNP
(N R
`vOp
\hx^
MqR
'\Fa{te
m%P[
X +4(+
2"_@Ul
ksx~
#^\#
hPPm
'WQ.
caU3
C?nA/dViaeXT7]|Zy+:f$z<%
k*>
jL_J
ModuleHandle
5r 7
E4l*
ZAz
r?Lxsl v
fvG6o
v6ngl
i eC
Lgc.5
'i+*a
0 v_U
] )y
{bXA
T'8X
<6.T
cJy(
I"-G''a
)Y\F
}/J*\#
G7o"S@
{IDAThC
jH$
N{/$
syGD
4HI\t
wBL*=W.7
;uV1
S%"^
v _d
!?jc
\r(u0
1\b,
1"jR
{v+t
}1j7o
\ c"
o7ZU
{S#dO'E>
Y=re
J_`y
e Pm",5Ec
,GGW
i{CW
bw}]q9l8C{K^I@nSI2:4~3pk#
8(}o
cr<E]
get_Length
oX</
T+km
'pvK
F9\6
ZB{*
LDx%h
u5FA
p=L,mVqtV
WEp
;e4"]JK
38~JE/{
$*v4u
[n}~
:,#P
W 'OA
puVQ
[xyB
Pb$7G
r^Yk?
pEq-
N[OF
iYd3cBP~T$]dH(;Ta_yL%Z'Y#
x_
Contains
;2EZ3
%m,mN
^ ~;
M'G8a2q1W*!1AzIq\'/_6;x])
U'E$c~9v
_ `D
T3ju3~<
1Y$<
"?W8=0HxNGSbnL<Q3G&Y$vfb!
IEvidenceFactory
zNPluB18%"36,%dc\Vj3\^oG
_oA[
YEY(9
+WhZ
m"08
EwR[
F@;
ValueType
&)zr9m}
tLR+L
GuidAttribute
M2^wH
%,w
H{(t
_|(OI;
`ofhkj&e`kR%#[82ob4Z?KP~#
G1f"
9L>\
e+AA;Wo&-T\qQ8bly~_2Ig*-!
f7-h
x8"&
r<<C
OJZ
&9T]
$tJ#
|Af;
Uh]{J6
`n'o
tI])
]=HD
l?Sr
viQxl
]KCS
0"hgF
Ofk
K>" Eh
get_Count
hlT&
~!<Tc/k
emd~
BW8x
{>P,
|AH"P
\?SP
$p&1
A/K T
6 G}
\fm0o
"6x'7o@zNi$}9$IQA1$qotOY
oc#"
System.Runtime.Remoting
<<wNy?<$2]+b-cdN]mQ?HJ081
"x\f
NI^l 5
+:%Fy,2!
~\V'Rj
E8D^J
g/w{
j5 A
h,kD:
),- 0
} H1b
"Q9+*
IEquatable`1
3:{M
GetField
7{ow
y:kG
/G2/
-Qy
dT:c
7aox
r >'
LE
(2}oY@q*_?yj#@"B6XjU@`j%!
@JBn$vs3
#?gK8"w->&lovP+ c)lS'N#Y!
T' n25
Of4K9
Ho'W
- 23
q7$]?e{
F#
axFwjW
Sn|2
gOE%@
Ko p
%' Z
{ONCt
s*K;
.P`w
hs~e
UInt32
j^L
B64#
(Ajq
H!J
\Tio?
get_Version
L0uy
15eo0
n]$w
ToString
T_br
U4^#
%C6oa
E'^(
uF `
>7@P
l K$
m|H1x@
q~5*
/f#J
Z0pZ'.6
)n+S
CU}ES
{q[e
UU#-=
20nn
X
Z[|d
)l8 '%
;pN>Hlx4
956}
TuA4
\@opK
vy lRh
_"n>
Oqe'0
K aP!
%g {
Vo!|
! r=
A9v]+
I(%b
`u{[
`T#{tWgE
jc2}
R"]>(
%KCF>
3ow
OTw
Gaw;
h= /
}j4M
X*T 9
%K6n
GetTabRect
zISm#DE11i^A^Iv[]p4b8wTO'
~"w;Zl
@{qT[o+Hf[*[r GPq>3smW2-%
4ozs
L! 1
j\)S
W[zuA
Y+2GW
4>nUY7
K&QM
2b1D
U](f
~zo@
AssemblyTitleAttribute
-[7
%)dGz
X"GL
s<k*+C
H+ b
&zV6
ohv+
Kmm?R'}/
wEFL!
>tdq
kRHg9
0cbT
WJ[B
AGmB
3ihx
w@d%;`6]L*htR]%1 :@FwP7r
(F([
ohF*Q
`0k:
B"&i
}O=u@)
zbT-
r3At
d;:,"-G^L3OM&i5Y_8~(g&>+/
gP$d
5`r?
5}^NX.?
90Vul
<^-*0
0.c=i
0QH5
N?=aa
9kkx
hH $?G[7aP_b%nuo@L_+LX62
]A@OPN-4p5*qZ)4 9OO-5a+l:
)84%
_ZtR
L4%#
e&`f`2v[wUhbcg~-l?YU4"=1$
}kIFk
t qaYZq
T6 5CBy
r`@o<
1ecf50a5-3e7b-31.Resources.resources
|A^%{8
mpD@
-C;xEw
h3'U}
9RRA
YH"*
$??&
c9B&"J\>(g*GxE877LeP*S4~1
Sz)
*K6G
mcORYj
Data
&8Hx
IcQZ
tZ"f
"uGIfRI
XQp1
N~:T3
/]uj
Jr&+
w4#plrn
Enabled
L1]l
S0V%
OB =
-S+Y
x#>`k
[@[&
"3^h
ss<H[
Uj4:
Ctvy'}
j)zRdCQ4<7gD:4wbt?$UB=I7
\E!$Q
*Yl]$
{qM(84@
L4%R
3Ezi
|"Y9
x&.Z
Z$"{g
pHYs
.ctor
zl9*|
zM j!.V
c 61Y
KG+FX
get_SelectedIndex
0%Q$Q
5E/^
-~]&
oK*m
<j8`
G+iP}
Container
NqC%
?X~v
6kC[6yy)r
V(yMF
K^n0
tE`
" T@
xo B
bkv%
E3|1m
c`z=
Main
Pqz*
&u^G
_ 1WKJ
2K-O
HmL[
]g+4u&D5aR#l /`-pr31_o$!$
4v#;
\gky
^!83
6-e3
q?M/
b")]]B" wRxs#O\avaf,z`wB!
-=2.Zoi
)qhnKL|
T@)*
2Krk
hWW<Q
rFE5
=+w(
|F3x'g
Lm?c
*
F5GA
uv]
b[Nx
\jGt}n
8g.i
8e.DC
C$U1*
/=+Rh,
D@e`
{&fj'
Module
jd8xNqRTkvOY{Mpjbh&M/N[n
"=9
5Mr>{
m%O%y1:
N3JMX
DEut
w`/p,ASS[`Q4^,26K[V!!]9<$
= L[
(}29/
D&Hq}
Qz@It
dP@ 6
TO(uG]cX?Y[4r%Zn&DnUZ`[(!
@.reloc
Niu3
yuhd
(r k
aeJ q{>
cA*k
AYu(
%`R.]
K3UO
\S%7
G65u
5>fWj
e.X!}
J|Zh~0o0;k6LaxH:,uW4wb`Z%
fSot
_YPVm
#f$KC0
kP`|:
}(T-
TabSizeMode
% 5~v4o?
S)h4
2iRy@EV7IKu>ST#5ai<36}4t"
Byte
get_Chars
"z)zj#3bmy/L:`]]\o!\8NUl*
oP-T
qMPz}bJh5Lo9vL<voC]M1/@S
i_{|J%
nT|oQ
J4ua
F8 Mo0
:iK]bHH
Dispose
,Y|{Fu{e
3 9?jR B
.Yw)C
4S\e}H
w V&
R?I|
sa#~
-[1SNq}zT&s%3^[h)nEW_P,o"
$ZbF-&
K:@S7K(
/JD)$8
oxX*
"4:sd
=(7"4
6B~9;3A/#[[7HCju`[4'D>5h'
BZ9&
J].0a
fjL&
5~9;=I:
r Sy
Wlg4[
)@FW
N)k#=~y\D|S8RMS~;!:CX-|^
VgVb
h&83Qq
t%@_Y|#Gp;/~iVKqIUP)'Tx^
dVQy
,|Kpj%{9)UDE&wew0A!x{MYF&
U^U!"%Trmj pwC:O/$W*l<"c/
O !+
^,h]
U9k%
U'ZpPWglLE2<r*la$K[<hHoA!
*paSk4YcY>=|}y+rND|<z#-G!
nhxP
dRIR
SF$ T
x1.s
_J/h
G=Rn
gwLL
N<A=
vpg 7
U`ppp9!Xuj^b^Z<]h;Y`t{_K"
9d:[
)i,SM
$;4i)
64x
B?Wo0
bcud>
bFR#
,A$?
get_Location
Lbn"@
{P~U
|<}7?
BvB:
38+zI`.
.J~
GAM
NT'$
/ X
_8p.^o
~\ C
g_GvD0n
!/t/YMR`v]a`?lr12Do3dX'R$
.tZ/
fYt^p
<ZbCkR
:aD8
#=~
_o*z
o+
|{5&B
Av|=
nLgv r
?'PM
FreeHGlobal
tL3NMwsl
@H|~
~ lpq
;RH
91 i
5W}Fd
w9 W
f q[
$XQ_oy&5B=rKiAXjrRW Y898
df{J
%Ed<>DsF`EUBl((w"pu|,<}i!
-_R,
I#kj
#kK
77+9
Lqwp
1L(6
81Un
7ge>
jwr
UQ sJ
rOu*
[!=x
mLx9S
u,C>T8Clc^Ss69#>-KIm1c%R%
NII&
VD W
p/B=7B&s>YX%"SPm0Rrf'saq$
~%k.
Y Vg!
/~/v
RuntimeCompatibilityAttribute
g l
w.=>
6H0{
+( <F
L+&x#g
bC5%
+R(+
hdr{r
~wdl
}yLkUG
Assembly
`Spr&*qlLCX_+S5h,kMCLtCT%
9HGe@97
Fs->-Z
ulgv
J2_'
s_Y8S9q
oQ@?Vn
Co{
'p;$
9\vw
L,$N
GP]2
\.ydg
Y&9w`
zgt(
o!tE?
$=(\
3:aV
mbH|
7 Iz
JO8 C1(3>C-*T`mc<F6[7t(W$
%?af
vf00]
!f>*DjhSjA8WuLzmQE)3(=Xz
AK3\
bMP8
xpcM|
0ZzH
Invalidate
yND_j
8W'zC?
o?GQ
O8Pv%
5vI5
Wp"^
m6X
m&*7
!c?*
4/7:
]c0|
c@yw=rY
UiFM/
[Q`id
$rx]
]C&
Krrbc
gm y
Size
9e^X
BOEY
S%9o
NewGuid
28{' 9
@$m
V_9I>sxM-
yRz9
W)Fo
/*fm
^@2a
N" l# H
set_AutoScaleMode
IsoN$g
fC\J>pTOMpDjybTIr_#/4i_Y!
oEFD
!:O3
+WBluI
< |Z
)!ACJ
a}Kr?qy*,>)e&L,7DNrcF=>d!
2C0_n
5UWzlv7HV*'I#oS1&KqyKTL6#
yWZI
)u-=
2PK@
itgi
Er*
BwD6
:5_}
d O;
YCEn
@Kfo
n<F\
0(1,r
n4*7
9 $3
7xN;r2LOQ){q]j{WVz~qy1;0"
j3x_
i}7c
NIW?A
#B4x}
!Y~5
@;d_]
Jw C@i
\kr~
Wo!'3
AfeR=
r[2e
F@>a( d69s
,j;>i:t
ozVy
; ,p
)"H
M/ M?n
2Lv[3
CRH3!.
]5X
:p4v
j)kD=$
JSnN
ISerializable
cU^uhE+&5FY?%n)wby+$QKQH#
l*xCE
bG,)
Y^,<
J#MsU[! ih1GY)7FIFA&q]bU-
$~ w
[U~"
e^t
O4_y
Vr~%$
~a-:
B25}
vZB~J
iq+8`
k.V`
1yyE
. >XnH
QsO~%
N-8[
Z(1
!Tkt
@5*S0ErM7S}AFY#NA}ftLOJ*!
566Nb
Hh/d
:Qz<qx
FmO
Xb`<
a<(*
bx63|'O.p6
c+~
UWd81
>zKw
J!V {*"BB/7(J:22;v<7fE2s3
[=wj
p;`\
|7 ~
G\/%.
nW?
rtn_
LV*Oq
get_OverIndex
Mdh/
=Rl@
Yf$qe6wVKxS*,^qs4"2S;o>\
?VuK
&0gp
)qi;
i{)c
RFav
T;JW
0u\f
P6wO
rIDAThC
r)@[
a )h
u:x+
%%Yz
D5*R
Xg sU
+fgO
hcq| 8TwF7AOnb_pEU VnLK1
4rNz
V&gv
;6:?
?V<D
<i]g
IP uw
h(n^
EN{h
ContainerControl
xmn.
R>1t
lT%M4
2Pa?%
6ZJr
$ z^bG
oF':
zIDAThC
uf.]
4`<q)
,%`m9u
S(mE
n$Ke8D
6`;.
@-@.j
c %
%Y"
`0#]/
:X@>
]"aT
'e+~
"Ev
y~c #
:G=K
ReadByte
2J=
E_cH
0IN}
>Ebn
@4|\
P4Q*
,@h
|U?V,V5
1ov|
ufC}
T<h#D:
*Sh?
xj.#u
3F1764884A245F1B3FA91DEC2E25339F23787561
I-z@
+r&i
$zW*
zCH;
Vu'!
'La{c=_7iW~0&4r0P?/bHv;>$
IComparable
}U80fY
>uoe^CK{
l',;s
2f8{zC
{5+Q
aD`(a
8RO
SMpg
AllocHGlobal
5H,S
~Y!q
c$Vx
AssemblyCopyrightAttribute
=F x
o*Fe
2kaMQ
k8 X
0No`
|q q
mI-qT
J.N
"- E
TA2>V
9*j|
h PG
RNlE
"l(7
F]&7
Y0O@8
9pRT
!C{P
Y<s&
5xOu
N-w
H$\<l
L# S
%e[l3
do -
g]|9
(L\w
A=(?hg
FV?g
diLiz
(`\
QJJBF
Jl467
/b r|
i8Y
@m2~52
6Jj5
J"uS
'yw-6
S1 ]7
8~P!
NGkK/W
cuQaW
) 2o
\K~u
gDj
1.~y
<v_JZ>mMl$S"] {o`dC{u((x&
8rH>
_vwO
nc:|K,X4
1y>/
Ay2U;
+]GjZ!L}2L@sFj7)J[qqB&[^$
o: =
vI (
I !ORd~
^'{V
MS[n
4n y
W(@jE
ControlEventArgs
1ib
:[d:
AmF>]
q-U5*
1|!
fxSh
4cN1q
?%3x
&wN*
[qkt
Lw1H
set_Enabled
G&g^rbc
8SN%
$3vX
S3N?
]{&F
C/X*eNPp
A/}
Read
juZo
;EF
J9th
c[$B
0Eui
-s?:
/4wiY
&{NB
azv
M!Z)
8Ci|
w?w9S
^XX$X
6br
%5 w+
iFx.
Bu>8
D4 -
get_Value
* f1f}Y
5AO5
caFN
IUuH
sa|j
aFF$
Oj1+
C(8
+eg\*
j+~qJ
IIV65N@huHCL7QoEH_!uP|a4%
V).V
Sq7W
Q5['E"5
" zC
/</T
HO*9O.%M
;ecR& *
2 N2
%K @ ?R
9|/1
?2!gc
% XSFpd
8uR:
W6r
gAMA
|pB uG
"L(|
$9=y
$phN
Rj:1
SV^7-
U+c_
GX6~
?!4~s(]N/;/Y2Hp)eH%+i}<<!
AutoScaleMode
\s~k
Yb'
D7jTZ
v$#qV
kL%hD/\
7m92
[ [6
MarshalByRefObject
DKc<
1ku'>;
4xRgYfCa
ZP5s"
i35ur
>-B(P
#ei@
-v :
.cctor
);k;
AsyncCallback
1^X~
$_HD;.
39G_
(Y$Q&
mscorlib
.{[n
:U.*
Ev[]
[MC;
=PE10J2LhgquFxtUC_)r0 Ud"
)+hL
aG(
T2H!
@B xs
"+Ycs6k=p8aA0<pD]n_?_RA0(
am5P
n:b
G4? :
?la|
]INh
KGy|
B2ib,
Sq?Ae
get_TabPages
@`'w
Za/I.
O`r\
>(eU
IUL
L"*Aba)")t"H2<KT-vF<T=i?&
hYMHsl
F+18
-~\ltz0
Guid
$FIg<[Gw5?,& gwF2T4ziqxv#
\wW5q,
x|H'
6%<~
W;ox
m^:(
0hd&
;fs^p
Da(8R
IDAThCc``
) `
9>
S {f
@euR*Cv_~Kv0'Df*_y/rt6Vj#
V5 ,
get_Width
$p3b
61Nw
:Fb
f2[;#
mZQ
`jpl-
93wV
;Bx$
4V $
@q!}Om2
o_q!
5&-
|Z$aZ>
System.Reflection
cE/c
:g_o
cE{
f9m6
~zy<GDxl:\-/I-)v A!GLub''
i.#~
`Sq!
P' l
qz)Vq$%WeHZ5'V!4G$;}-8@c'
}H#
~t|0
RuntimeTypeHandle
w Su
NQks
s|zA
v}_y
+:Tl
u!*qd3
=/apPL>o|,q@\3>2FSP,tZ(((
f_M{
/6xW
2018
9fI,
0m'N1
Ac7L
)N)u
[XoM
4PM39gn-wWX$-u=QOa"HbNGE"
t[4sb
EOJAnpy v
LI@J&X
cg]|
!gXf
m+w6(
%+X(
*sf%
^zp
I /FF
sender
}&N|
%J$x
L +C?Z
Bz Q
1d!8
C#Py
7.#x
Append
iTf:
p9o8
`I]v
"V8~
< "4
/:6,>
h3!A
af`e|
9fC*_
System.ServiceProcess
op_Equality
W5$'%
\j,!8
E(}J
XD{
) VA
`/m@d
PD@2
u 1y
aa?Y
ADP#
'_;PHCt;fZ4,a:BE\d"4Wbyz
DkG~
&2 T'
^,x>
u|HM
(ors=+({#P<<3!)q:aw}i/Ab#
\gC(sQ^J< g
+L\r
uR_X
I-(W,tN
f!_)
Y '7
AssemblyDescriptionAttribute
-8-p
3wGB
$}dH
x97C
e.]!e
+G7I
* -1
-y*
6bS/
QTw
}"j,
2:e .<n
YB1a
06\R
N=lb
!=0Z
e_-c
wR<4
jey@ A
q3{r
^woygC
y -I
x F
a-^w
a3^~
Cle;kK t
gFYq
$5#D
'd!K
@k\H
b5!w
!WC!
[N&?9
-39a'
$~L(
AH.}
[+jf
p)~-
DrNC
qq+~
G~ mq
* ri2
Np/S!t
$glA
6md<
9K0}!qPy@S6+^d1k "V]uxb"(
| s'
bl}
?0/1
)SBD
+CoV&!h%u^gYSi!iEELl\$+0'
y*[ 9
9%aS
Qg2'
>R "
4KTNHG
,\J
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
#gN/
H+aL!
h$r0
$jym>C~
uiXa
[R6t
IF3g
0_T~
[ ?sWU:22k_%<~}xH";61kp9$
m5A 8
=j30
89Jn
HxM
I{/iahV
w4B[Z1c13S-q\C<Wbtsb26Ww!
t(e`w%
j+v;
[HR(
U=;Je
mscoree.dll
!This program cannot be run in DOS mode. $
callback
gtfY
R&7B
w)8JS()o0:abtiMOTKP't(3s0
fp=K
vGt#
RI{a
M)LN
;&e0
MMsJx
8( f>
{1{K
J>q!VlWQ
U~2*
170a
sf|?t'u
U8>S{
PvL2
({$T
qkQTQ)=d w]Vre ,^{CZiq8~"
t6f)
6[9
#6%+d[=,|Y,>+|;mg\yT#(C3&
\z)3Z,/o
Ms,I
@J(0
crj,
f@?@n
8rL=
WP)c54J~{
4iov
Y:
$9g*
4E2BE99140D24066CADC84F74FA899FEE5976B68
2}7
L %"
ICloneable
pr
|9ze
A`Ma
Bq1>
|Zy'
z]F
av;t
?G BW
}[u)T
#0k/
P5mf
MwP!
pf}nGzJr/-EZr(os2?"`>][##
)S/H
A`iN
i~,
-\ys
yVN
hJ+wcGk^C_HEu}-g/e!r4o]P&
2c-
MyRv
j&Fv
a4.
\DTN?
EEM5[
w\ dl
qI+K
< ~=
)8[~ 919*i#]
/'@4
2hNM
5w5K
Ih)}
/e6|`1(
"&u j
qC"WD9Xw?E?+K9kO"0~$D6!j#
uA(/
"xB<
:Q)N
tN$E
5;41
2s_PH`
3NPB&
BB1s
>kAiz
Onx\>2E&0DB Y@c9]R61>in_+
=2GZ
>tV:
_?HY
+{vD8x\=)$
|b/,BB
=UL1&
oKa<{
-y<ac oE
zTRB1
)WxW_;{+(twhLUT_kNsW&yn;
EtyN_
BSJB
{93^
B =T
lx(,(
Y'v2
PukI
@|KI-H~B}iixN5MZ>D* oGd/%
s)&8_$nTPo{YYg7D7eN$z;D-$
1'=3K\
\AoX
_.K77;E
vw:$
vAl;
IContainer
p4+c
48T`X%
+f<k
9hQv
OG$&+D
F {
7 9x
{5mS7:*
1=[5
P~P)
9cb.
get_ModuleHandle
*)"%@j-nN?%@eI[8?GLn-kkx!
X'Q'
h J(uru|
M "U}
@~%H?V
#:/W
Q3' m
[ptb
No92
}8s i
%'Wp
c|pz
\g m
IntPtr
g}j Y!
[^NN
./v+
N P4]
*2.4\
?x3,e
~$m'j
B[BQ
&Bep
awiW
%M:ab#
@, F
G R?
JRdq
"gqv]
U2>6
G0*N<
LYiu6
T1e=
m@rp
2YiK
}uZU
`WK
p.- pf
9<.<^
&Q&b
|h3Lc
!<5Q
am)h\*
=}V6e1'>$K/8)|zQ4VGsl:<)*
5z@mP:Yy)'I|{fS8>0!x4_w_!
Gz Z
+@.!
*88b2
'- 7O
EJaf
System.Linq
K p0
| Ja+,7"
mj[";>!x@2L@WmJw*N11b"l!-
8B?GV
C708234F139063BBE3CBE2208BB6ACFACBC50333
InvalidOperationException
"cvQ
^~ I
\6 z
t7L|d8xS6a_K8<)\/CE+^!#c#
v^?n
~#uP|
^mu<
*)c/
ja"u
y-M~$,
309O
sIpU
[ER4:[W`~0%vF|F)J?BSi3_P!
q x8
| 5<
?A{vN_?svw@Rg]A1&7[_M^P-!
yIDAThC
#kj`
Ie15
N(gQ0
AvvH
-1|8
;@+-g
O/w~
L}+=62G>
oU|?
5.Wd c
3{T}
8D]A##"!vV#Efqa%8S~'& U{G
j0Tj4
Rm^M(MG:1h/\bnFR1rF;rC4d*
1&3Es
p2DY
eYDK
Q b /
]HgA A
BlockCopy
Y2t
1{Z
Jo ?c
^fZ* GZ
%~:-n
jj]-
Z5qH
)i_*e
t[tx9
WX-3
C8e&
;Z#g
t|,A
!=R>
AD E
rHau6@bZ@RSe>QBILvVKi=e5"
`Aua
) :(
'^7
;f ]
t.9D1
}m5C /
Z8JO
;DLH
1iv
P!"i0D
H34}c:t"E@),LUu+[`M2?,h7#
;+ N
8S[DT
NQ6IQ
GgC:
Pn_Q
7T=
m9\p
/-_q
Q(T[yQcUeSK<;R^t:bV20hNt
b>c2
|iE>
+.3s
H+ l
Uz!
i)gMh
#j g
Rp K
/]v
@^G|Z
EAg<
n/#,?
(LBu8?
(4%`
tuvK
64K#
1fp#
[?"W
~6b
$@#B
:c!pO=YZm-W)vy!H\Il;7q'%(
"^+>
QY`OO"
H^R8
)2qNME@l| >]+j* *;f#0fWH
>~xUR|
Hcb}
@zTp,d
sbqwb
^ph-
`>Q`
a;-,
Kxgge
44Y!I&
Qho0
9 j4
N;6fQ)
3;Y+
^lop
((8n?
MethodInfo
-,_Nh
7(Z(
+ `3d
&I\YH-
+KPKurqjb0`r&@=xBB7P?}CH
1.0.0.0
eyif
))u
\Rtoxl%{!6U;xV5H)d9(}A?/$
$.wf
uamuL
. 8/
R=j@~Bh;4<'dd7EDc%|_]"s7%
CompilationRelaxationsAttribute
tH1R
%1ecil
b5V}
6T~w
qIf~p:w)Z"cRV(xzf ZI>!dO
TabPageCollection
{Rb;T
ME`_7IQ
-WLN
"mwY!)
+ J-
MemoryStream
bl.B
_%<Ll
`'m!
= :>
$T#0g
gn*'
h.Pa
V =b
2G BT^
z{ 0
Si:XlN
:D\x
U"F8
]D<W
N#ZQ.
Gb1f
;k*H
5TKj
%"&e
xlwV
\e4OE#
yUDZ
K]u3?
q{i\
ATHv
"V(MGBCL_FnYA'g`g48z"6)f$
OnControlAdded
9>T;D
( LUe
bm3:
.Sm
Bq/Jy}
kBpG
LXWb
QUY1cf}o?UP Q`UV&uWH0/$g$
[|bo^xXeiPO?-|=<~%tUWrqu
%V$q|kxs/-%[f*$rL3?'fJ+4%
O$KTR
'fI?t
q,5B6
U wE
/@n\
*\S\
pEv&:
l4u"
SR,I
TqKo)?C=(aSBz\+m=I#g?>LA%
Y+Ef
Emn uV
*B|VX_
Giv&+^Ex
m^ V
^iD;R
\E6R
z_c
T|+_
42&-uw
Ck^q
] y8
cPTf
8V:d
V]>O
Y+J`<
UN?%
VK (
>?DO
ZOGQ
t-I=:4)
RHG2e
yp,O%@4;
O1Bw
Tk>A
i"kQ
=3-DN
`#%
l1y#tK45UkBFDmqvXAz ['xJ%
m`}&
IEND
Hh[d@
j+.w
l k _g
>:Xc=-,]<b0Z6qeD]}yq,[4-,
e#Ab
P@5~
F22y
V>%U
r8 u
KU6o
U_C y
P |
w@:d
|e o2
d{#S+dMlFJnYqFRyNRYpry^h!
tX[F
$*8]
TTK4
4AG94
,g(
z@ i
5uDD
,#^~
Q-I
,dL1
,} U
Bm_+
;LKc
A/r2
k So)l
SxU}
z8{G?
im8+_
=iyfG9aE$Vr8)K1V6FB^ZY^7#
V2VR
W^ue{!
O\SM

)4H:
]1k[
Mutation
u{CC(V
_6YD8
[Nxq
n(F9
Rectangle
get_Message
L/?Dh0
;$sP
*IXU
get_White
v%[
eP_N
qK{3
u -G
a/.l
8fA5h@UBHR^(Xqme9I]6,2A*+
{(ET
Concat
oKTYlBLXmGl!T9+~<F>bT= P!
8qz:;
]+*Y
StringBuilder
JBDf
X-EUe~
I3ApA
)" H:B)
gmtj
Bus|X
Mu"$
s.)=
2@Myq^3
LRf)
khyE8
lgkU
v31c SU
<9|W
LBW~Ki19
S7j0<
5rv9
uia"
`WIdROBJ/pBjLG5BnaNbO4&!!
P>&
FfIk
FHLu
?8k
P%}B
!'{,xuc9sj:(+8>]vM5N8bDy"
get_Hand
h8h
0GH:i-'zak2i68*!TY-Zo!L=+
X{3r
.6nFT
*VX!
|UkX
gn:lN
<]{i
:T]M
[NJP
jx:.
5`[e
GK=%
(5t(
OQ/kv
*xJ1r
A:Rr
p sQ
#!;
clHs
hvC$
# l/dK<}eA50jn4(x/'T+wL+6
))=]|b@H33,+\RAJlSTG7Qs_
R+e"h
VG,UX
n/t
y[E 0
)G4k
=q "
1gq$4
f ({
gSwU
}eP@
KcN$
5YL=
J Mi
caIc
M`)p
JFFo
AssemblyFileVersionAttribute
IFM2Ql
0W7;3ag
$J19]
System.Text
Nn)g
= Zo~([~
aBuk+
?y7-
7Hr|u
W9{2
tasU
6-(U
C_EZ 5)DkF4xWkaV"oUwcGq)!
>4A@g
RvD
bg y
bmvaZk:_,
uj Mfwe
8cq
6C T
|gyt
bq5E)
Rwwn
y{7!a
<}BL~D8Qb; |6*D3]wNOjdq`"
EiaF
^irx
* +{
((E^d3
gJt\
VP2M
l]W<
GetElementType
r/X=>
$xQyq
|s@V
=,hf\_Ee Ra-?uMhs ezMH9'
Ss%[
*hm]
ExBd
+f "
ErY}
#U#YH
oGf6
(+
E2Mw
EO*O
F(o4v>g9C4aS*fK1(;5d[,)\,
y(pL
p s
gJrX
+D8
Se}Q
&_lu
UyoB
xLl7
MIf%hrX6t$-;:\R`]|!DA>\o!
oCKKihd&A+ZBgX"Jt=6$+7N-%
AQu=!I::^
-- a
Gu+P
HI8e
zF"K
Bc$<D
;N6`
SxpZ
nlzV
}>`>
JUj*
poeVPYR/jk99e!FO~(*E){3j
MYnb~i3n
z xj1
#bvt$w
xv='
p@hK,N
xGYHBf
VD$8
drDA
v8y1
KGXX
@bZ#]YP=:@R)Z_tnB6}IX{ZC$
%,g'$
Ut{ ^d
(u ,[
r`Q&
OHJ)p
Wpsl
5Anu
9\p
}<C){`}GrW[[!pSJr;Qrvt/*(
tM DKf
#c%/+
[];l
v{1R
FieldInfo
Font
&\&PXq
}d\5a
s#Xs
_o G}
aM9_
#6qD
0
#lK0Ma
7X:y
sTD(
yLYp
NF?a
C&(OUL
`Mc>
DEhJ
<aLX:
-MJ'-:d6s7)5/y:{[<\VSG]{(
V&UW<C
bFBfv?
NIaB
:K9&
[#e|
UD0e
jb h
String
3a:GiO
ICollection
_CorExeMain
+y*/
7PIY\
IM=.
p(XyzVWC
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
R1;G
9 "
$bCF
WzDU
^QoC
U/LM
X`NX
"%R
s"k
f \~,
object
j 0;
! PU
4HI3
:1S@
yc/k
qm3T
1nfa"
>fp
8osd
}'YKF
Rv`V)
^R'@
w $rD
`<!B
InitializeArray
A!?m
8<_W!m
]&bI
Rk0Q
j_!#
RHT*
\T ?
~,Gi,y
>mKbhX7
:U-w
.U?@[
\ig1N}y
#P<)
}aeIC
5uux{
2g :
+i%$
e5W%7
56$
%47
_e,u
bRjY
ToArray
9m?@
7WFq
^gt
OnCreateControl
N*jt
2Q0$
Jl$5=
Ar1a
UI%FB1Tw=7#\2H8=)KV"E?8d/
R,M:x!S#VFIEgoM"U@cqb=L@'
$|7H
h4\w
T O0_
Vz\}x
&] ~=V
({dc
w iP
5r4"'2]t
VZHa
y@`^H*xH+9
@rD
F[Xq
fEur<->~:J?)?l[} ZNMwf#o!
rQ],
9+,H
##"cw
D;7
get_Hovering
h%!-KEIc?$5SwZ0[_23<SD<?%
oTxJ
L@ kU
0,HN
#!Ia!v
%78n`,D,7$FvF"{n6lG-HRf;"
ViC[P
sxPiKrR|Gc(?U83O7!&st,)C"
&/g
+5JF@
HxbH
pj %
>9.>
PJ(F
/K H]
..~u^
<3m5j,B/PQQTH"Bv|WVoL[!(
sb?x
G$7\[
HBZa
,[jENj]#`*mc$%`"Qjst]iMT
>4eO
B%Fhu
Load
Ee?&
$m\{
q9c(C
2xbgAt
QV5m
Rr .
Z$/[
%6NuAR\JrPc*Or9d#\'$*Z1y
fZ?
System.Drawing
^$Y{
b#u9
6'A
T]3A
@P]t
~ #,!
e<>*8mB'-!:8(6IEr3zy,;E=
get_FullName
_&;
hN*IM4-e n(r
DeF0
kG/IgFe6xJ B1"P-=#e})PQY0
Acu0Bcu1Bcu2Bcu3Bcu4Bcu5Bcu6Bcu7Bcu>Bcu?Bcuj
B6fZ
K 2-
^d[(
30r
BeginInvoke
.6<
_)y3
TqN C2:&
fBe OD
f?/inY~eFQbjf>-)F"<jc=4Z#
LScCn!zv{1JMC:=9Csjht9*R%
TQ=Ym
bgl:AK
b[cZ
Ut/5
UUS$
@ G
Xn`[
"MAO?F6{y-g})n(#0U}[icJ:%
4rv"Is61k
unrJl[*
_+w_m:N
iKW'
.Bsr
D<Jq
rz[b
[l@\
q7 9l
Xu,U
Cu"G
Q/;K
))ltwlt
JBc6w*
<,*bY
"[J8
At&f)/Zy%kj&E[d>6(A/yDpo"
Cs >
e}U<
}o9=
[X2uv
x<9W
#@ l
%<F&
rD P
RuntimeHelpers
%jSpV
(JpU
*xu8}**hpq(~)/QDDDMYfMpx$
^Ib3
#d*
7yRbn1bh}a+G|6ss$0gUUX?T%
/^Vc=
4 zh0
^KR
Hb
^.'-\*
,4n
UserControl
Q$@s
p[>p ^
MLC>
get_Enabled
}xS+
REZ4
< 6I
P+-
QRF)
?b~u
18~6
jJzd
r_<
@"N*
Mqgr
C!E*
t3\,
bY.K,4
#y_T
s2"s
R <
set_DoubleBuffered
l-H[
E Sq
5-np
Object
i (v
;VF/
:\fI
:Xvq
>@&n
jBbOa'
rrlM,Q
K@jg
@B}
Ki<hm-Y|-l%z_2K_hoPbnU^3!
RQN
ComVisibleAttribute
EVA^
zEJ#
o'V;
K r
bC`#
{8;9=NtrWV]cfn>`\;E|f"&<)
hQ%#
!z )
3W1E
G6>bAK
+Td|P
#3i[k=|:T'({18Lc\s>R<%<L(
%97B
wC6V{L
A!n
cTl,
={P@
O9R_0fkl@
>B4r
f Pk
PPnK
H?w%B;Hf`*}*\'H3oI#TrDWE$
js1| 9Y mY\e_S3%F2WDCt8?
B*<
'=95
Dk'\
y~'>
a)k(
_Assembly
-pr{
bQ&6
CPd;U
W}hKN:}'$0n:y+hzCdMZx<{n$
QE*Z}JO8Oka=`6&3aSf)-$gi"
|_"l
7qW~:
VH;G
_V=
It=6[
nZ|
akI:
AssemblyConfigurationAttribute
n8;@
W$G+lS?93bFe!;$}hmmzgen$!
dDG
wlnZO3#s(46)lR6;c8gu8CiS#
Yi=K
"2! qsJ
vGoGM:t
OnMouseLeave
>"u{f
yS4n$t
(6rh
b?\o
"t@D
}CEc+C:(RsoGGFYjWmm!E[N5!
69GN
5:oy&
$1+pOZ{9
-}Sqc
-UNY
?r1<$%IdO
3s#'StKrc**I){DIe5)8e!x*"
Z?B)R(
VzZ9v
qs6y
kLB%9
V7f-
b<wsu
!}KH5t0 @
4+5U
X2Cgm
Jp(+
8+CP
`|1N(
\U &
yB{|
"M$9
"II]
-cJ/
<h[1%z
sytV$
R.ILI
Bjba_
OGMy
U'2+,
Stream
9OFoTT
f%zQ
eS=#
v/'b
{;Z$
D*t
bzR&
i}*]
S(mZ
sRGB
Gk-yQ
DRnKMu*n^_SA%4`NYPL-+!]F%
qhLJ
(TXk
L?&OE
[t_
/V=+
-oHTL
/<l8
}SjQ
gW55
Y/RU
&]z6
zl~`
bG8d
CreateInstanceAndUnwrap
]X(Vc
5|1\
vu'm<
_q--
p&K,
c;f$CV"N(r4fq##!KNnCaji-
mkRb()#$@ZB|IRx]$75pn0gb+
WtN
KC}w
*%Q JFvCz
$&>
77Z*9t
get_Control
*I)s/
)ulWZo
mU*:<
}c0T
klsm
Confuser.Runtime
/VvQ_5y
KX=}
J2fxa
l 3u
!*v-y
gDA!\SJQ9uY6:+lMJnUWSpG`"
Iy.*
~rb-
u"XF,
(Rpd
CBhux
, Kc)
d;E|`
o1U^
-Pr{
t}EE
# kH
Z~BA}
pH`#
GU [~
^Nxn
8}:Z
Bk:[
5{0{
}L@q
8Kx?eFZ
KC@Y
c+(fp
7Ks\
}A54
A,[
`${V
#k \
,<uiz
9syW
1{j3
)Iq3
P%'WQ l
n^Dg
-k9,D
yE";e9SQ2a}(dohvKTRD!vOC$
set_ServiceName
Z_D)O
DdSN~i
QY7!s
^>c4r
g>K8
',) t
|!!}
F7_1
9awY
J"HLG
L_|H
3O02Nw4ExV"I`!N;(,aG`OVM
KeyI0
Jk
*o/"
$kU1
Q2T7
_ldV
Jrk0
?dv
}@
%a2FSP
s ^`F
38qH#(-:Au9zb)FO+,EV]6ry*
Yee
O\n6F+
p?A&
:)m!P!
m w>3
m(xvBb
W%h
Yx{8zq
r$|
H E W\
f'\q
p{FGhB
s(AF9"
/6DK
h%}'l
!eC-|
;E`.
;O{`
0 'N
set_ItemSize
x;DDN
YxbmK7oz9e%S(Pfnbn-E/TBG$
-+1Ze
2NP
2G|[
ResolveEventArgs
A9:k.
KS2_
f[I>
)_&c
^n,U5
d"r&
W .
v|.Y
ZEsq
i@5M
_r+h
]y7y
qfHJ
xfmyM
?tI?
S;n{r9
ok,s
M *(
ui.r
-3 c
%3gI
-e(_n<<N
\:o|
cZK0 5X
`cAE
}|Fk
D| ;
_~%<
PVUMs
G?~<.
GetHINSTANCE
`N_c
a!%WrK-[MJv=WX_3[9V3981o&
e~nrN
AKH2
V4[a}
Buffer
$wmY
"g>e
~r9~;i
Vnz
}P/$
R(L)
B |jvM
U(_9
Zoa7
XcSD
G9n
k_sG
p3C@
e.0-8&A3}
zTyT
A4M x
WlwMQz
jf ,
U:*#+
o <C
Wa -
/?hu
E9I{@DiB,*(^eXJ+hHk%SJD8#
#f%R
6-K{
LY:![&
?M,N `m
^q1A
n*z\
-Q{DUKEHW8%MF`R7v/>+y]&H
-z7
}{KU
li6L
m$)|-
G }a
u*]]
IHXzh0~Wj~z<F!}`i3jU?#^+#
8e(
LPi'!8
Sf3FF
@7/1 J}
< ~(v
fon+hK-`0F%aZl$\n}rO*O'<%
u2]$
Jj'H
'3-
;B?9K
6.H2
KC\y
d4_u
ql~6
tw #
<I)
!OQ9=
*( L
nzi.
H=cy
lTgE
>b~c
iscU.
X6vl
QMgW(
vqoV
+T.&
^IZ.
GhYI!iU?-:
gFde
DisplayNameAttribute
xh5C
E{
AkF?~ 2y
5]Xh
R)OJ
ZZ6ov
>+ kh
6y\E
$ 3Q
07bGHE
iv /
9.-%
}e?~`G
DL&*fze
IwwwHw
F'J
_3Ve
`xV)
II
+yu
wO J8
gG<1
vg`5n
wf&/
Copyright
zq
SnPS= f1Eu]No^uSU O(t)#'!
ArgumentNullException
O(7c*
nh5x JJ3||U:8Ma'6jFlgSWn
L%rfH
get_Major
~4ft
^H %
)Obk
EnJF
/lZv
Ji*s
NGnE
c~:u8
Y:~c
[MY`3
CR[A<
,\Tv
Point
,J(+
R $AA
zYJ'
GAa!=Z`
`<#c
{P5/
40Zf
v2.0.50727
z.pn
1:T6
! ]RI
'j^Ac
|_pi~
0G~u
9lj f
Pwk:
ulR
Ii&S
KfR"k
alhG
}Hd_
{y$b
G}zI-U
R}$K
Zx8`Z%;q%0U13(XLrwtH(2!Q#
-*;*
c?L8hs
Ext2
qv ]f
\\S3!j2.-F
0d9a
g wi}
bS l%
@9lM
wAw
}B=W
f/EJ
V=K8p
'CE
|39@
q/&s
Exception
}1XQ
c-q7
U/ Y
/K|H~'
O b#a
F=4GM
0L0
W/ &B
A]MZk
\!n7x
Z HR$
2Tps
njny
LY>Vz
lH$^
l'l
_U[
E@]
4_i{
yD#n
$xHB&NW
&}01
{v~>
XbL5
^r2$tKUQ?,zC=DB-{sGf!UFr!
$Ju8
x=YQ
C Y@~%@9!wtR@gb")`0{QNKh'
!d]2
^ZWvs
S k-7$
) y
GetTypeFromHandle
IAsyncResult
Qjg
>1>$
RN O>
$;{+
n<0`<7YFx~Ht?FEas39*ms,X
Y:&Z
4~tuc)x)ad4}2"mCK|7NAJot
c49PgCoZC+:LOeS-4KBG~HL'%
a,4
h<Oa
Ubt@
c~3Tk
(UO3
JHi(
iD=qC&
""Kbx
tlT
]aG<*h
VLVgEj
-$}!
bh1(A
GetDelegateForFunctionPointer
LCeHm^YqV Y$ (~N/i8~Vf2T
#-v/
@H<L
|?xg
$8177fa77-baa0-4a81-a64d-ca96754eb938
|Sq
FtZQ
xe--
bEI|yp
Aunhr
k'9V
y`d97wB[Px:d'ZTY[y,+N`M#!
cDX,
_ksT
g+ N
V/e@k0
5+Mk
f ~F
EkT-
cf9f
]u2;
"zz " G
^9!F
B1'z
jN^!
*cfD
System.Runtime.Serialization
Z];Z
m)2Z
mK#2g+$;R%vD`Khd)'A7e+k<"
1QyT#
q-ic
n.h RpbV
;[ [1
F(wC:Q^\zLwUx>#/HQ/1hy@s&
]6kz
04F%;
g C T
1*;G
CV5I
4a1T
.7%[
tmLLN
_<qV\
~IDAThC
P: !*M
J/J2
D'G(
(u-Z
BT;H
S7+)>
+Wady^
XK(.
W-@f
ToGi
O-uG-H)Ok(
System.Runtime.InteropServices
U,$%xGE>
?:.g
8u${TG_sO'mLM W=1d_e 'fZ!
`RCU
(ps.^
8m&f
Math
Y`to
VcpQR%;K2b4B[p6}G-dQa]Hn-
PYqVa6
>\s v7
fJ7I=O/bmj2?LGf9qK4a {gt/
a#%2L<
HA1du
sr|NpW v,~f@@xZog{!O]e{g
^7P2
I+ ?8
n4sDltJ
ED-o
-D7L
QYsa
U'2oM
*5 uc
sDgnI
J9;)
xN^\J
_)[HZ
->t^NE
5Ypi
System.Runtime.CompilerServices
< 0U
(G_Z
c;Hj
j{LT
SuppressIldasmAttribute
9S(1

4)iy
5-$7
JpVx
9,:u
cpP8
C0my
/{O~,<
0P=!/
cP_k
r-Kc
$@%^U
uawX<EcJ<jnEu\epCZ`!~5UA
49,M
DHF_
}NM4r''ZcjM`>+VD-y!N@c%t
ca m
B{=XM\
L@Zq/y|
X;Ri
=uG
8*}]+0+H/?8Hc);>^: &jJI 1
Hk4-j
UhUO
~VLH
N:0`q
PL.wx
pXE L
}So~e
bo6
!AO^
o;#d
9Dy=
9X1%#
c?Pg
{0TT
UG1$O
$Bl
hI-@01
_o}U )8
$; Z
]*i*
/vR6-
.`a`
T!df
b<8,
i!iO
set_Font
<UL
O,H.
)h)u<23o7nX,sy/tkA2"C4wa"
,V3M
wqGltN
m%Y1
Rh}x
}H)O
LjZ_$
(fML
?L]K(
ReCe
b ZP
|=Ya
6y2p7=?~{2>djNbZ&V%>ahK(!
L_hiv
pjD 7
wcdy
IDisposable
<7n>QL&n<[(2@u=!$LF"-fNzE
Y sD
Rgvz9
QY<
w7KU
IX X
/LWP
4F>`<
s6Id
`'N{
A@ G{N){CZ*NuG2Q]+{d?<A#'
yFpN=<]s#b*:$e6*^E_Vl3*!+
frFd
_?vU
,JP@#^]
Uu=~^k^
`JN,
$,.(
)%EY.xb
?/3w
laC(
6F1m
6^c?'e!-B
e 3V3
_%.W
Crtz5'
4?!0
"{>@5PE
QgGr
ts8^rm%Wftw,[s_bU^\+F+\;%
WYC
9zrL
?O+=W
\yT0
<elW
p&[}
T|=`
s/f]
e8S{
R,7u
z Ida
E13^
_n2'
AssemblyProductAttribute
LLwM
njoL
1u6n
Mj$j
x"boEKx%\!K5ob|@UFAKPGUx"
5R)G
-`0#j
p X7fqe
BI~M
rBa[
1sar
$eCu
<Module>
S=KN
iV&Z
izuEO
($L1e
-QS 3
o{ O
<a*#
-vkP'
<]<+4-@2Lzb*("i~([As&kW*%
;+)a
MulticastDelegate
t'Yo
!T"]2,T5o:;_YW>@6wo<{VMr#
=DwY
j-m`
[E)~u}
Mx0s
'kGQ//
2!/8
iV1W9
4'>L
!m_pData
vVO|:0
.K5[!u
value
[:(?z
;oKp
4=G\
fMrm\EuN6Jr2lfE v+&Pc2,B#
k2x+p
) UI@
19 "c
CL<vH5
_wy,
J N,
PwdV
M$+
hXlS
Zu K>q
D$f
0h|$J
} Q.8d
u/vng&Fb }x53Vu2@;3?s4{G%
dabTa_=
IJ/^
z_g+0+
tOXd
LcT]J
OnMouseUp
@LXi
B xAa
uT,L <
)h*8
>*]
"?imR{
~t-w
+OMY
.\x@
(xcA
iRq$F
:Pz5
Qzc_
0%Q<.:D
?. "
#GUID
jN'T
M\$9
~W9
`H1*J
#{]b[
C0*rJa-
[+ &
set_SizeMode
B#H
l,w}
*Z-R
N/Y_
8Z <
-6sxP
mF@g~]YKP5XKOq4v!4q4 rVl%
c<J]#
?-QF
e?m
kL7S
zE+1eu
_:(?
&f4q
"Jv<
<C`v
z A
^xV`3xqf
ankR
!pq(!5=jU*Q#="T/B2@g:qkE"
W/XjY
_fXC
S- s
y-F+
Wztt0Q6
h_EZ^
@AU^6#4ZjU*CjB=$'lYKwJ)H/
X,l
I03^
aMw>
<b@L
rLiZ''ftJd;Br6mPf'=v3W73"
Wdr+M[._*
-SvN
/vMkG]
X +U
3g:'fsxWzJd=e2($T3!j}*<n!
fV6Q
Nullable`1
CP0(
Z?lg
zF \T
LB8pE;&D\86)'KgI[\3]"Y1)'
|R^[
VVk'
\%fo
n{1v3R~
!.uv>$4
>~!)
~ilV
Ek*K
p<n ]CQ
WTs3
E6sv
S^/7
k |
waB-hG(
get_HasValue
uv_A9N
5kWP
}]$
`&E
} E
;jdc=
T*8e
$I6^
/_Y]
:Gn.
pvK8
fRmq
rm;yh*T
@D4?\
F#_=+
k/gc
$E( 4
AsV8_G
Al%0>
3>[k
~Xbn
Encoding
A9c<F$6~p9)Rc?j96Jha0;,z+
K-HrZdD
K]FdQ
R%FnS
e^vz
KQY+
B]l
Kakt@l
=FNhER%rVK"DlQ[Gcr]uh)^s*
;qEY}
3lu
UpF1OE1
Y({'B7>
xP}:
IEnumerable`1
W?V:
d+mdi
&Z;a
RZ2,
"{pz
|3O`
Fo|P
hUR*j
get_Module
_7Az
TabAlignment
dO^t
h_84
AnX$A
@:;:
'OWr
l =_
}W.k
_iu`x3jT|,U4"q\(r95(FHzd#
v7-(
08V-
Kz-
>P|j
9$z]
2$)#
S~f0
"Xi/fD
R7=5G
m9vp
\CF.C
{6 +
vyW`
k%[V
Gr;VL87U;Td^@J0|5Z=jX>"a!
!y5L
~ _Z!
|N_*
Tn y
(u^.
^r'X
=bKZ
0Ve"
Cursors
: TT
J>p7u# \
A9'h[
cefl7
o#yW
1M~$
&Zlu
get_Size
*/Z.
Bo&0
|tg%
A1bJB_sJlC/LQ)0y?S1bkbV['
LX+`
9|3?J
GmU2Z`
yH/
6h9&cc
aDtRo
0aPl
DLQT
^8i
](9n
4f|U
pwq"
|%#
eQEk9
fINI
x7z@
System.ComponentModel
Ark.exe
#y!]d{
/etn#
"12.es
s;x#
436534A617CD86B8557AEAA31D433ECFF38B112F
b5 ?[
L1)E
HpX;P
ca5%%
Zx{3HdX}"7LRtq{2(mHhiP6v#
5KX"
q*:h}<O|iihK\Q2s($#Dt4<M$
"zsyn
dF994o%ZBQ1bP"W|"i$yw]:#'
( 2f^
oa5?
jM&z
`6!C
P?f`a$]O
~z+2C G:
gc 0
LF0
g93]
t95in
#]"_
u@]Nge"
Cg?>
354r
~w~&
n^l^
Sc3[&
C648C0E55DD0A71600A3C979FEC05C180303B2F7
TU1G
Ikaf
Ie8/<kO
,@]0$
Rz37
=kA5l
g7t>loI^vSxAzl+OM*%"a!sw#
{ek
86#%
x_K1
_mUqeHdQv! G=h+8y`VgD!UY$
TVR
D (ceCc
wv)s
d97KK
01r{
Vi(A
=K%8>T
-Q?g
System.Collections.Generic
q1pBC0`G{($-k*N*':QE|EC[3
BsZ/
~L?H
S]y//KN
g~WU/C
.I8`=
8YgCz
ServiceBase
_OZue
bX6X]
|IDAThC
bl?t
<tu\6
System.Windows.Forms
set_Cursor
\D\z
k^U#
_k]E
9l[yQ1H-hm<EbFgV6yRe?SUC+
B_0TPF
f70c
lA$
.(cI
z|}&
V72(
#2wS'
$Hca
ILx
SBFZ@:
a@
8="_
Y ^F
l$3o
dc='
WriteLine
Q[t&/pcQioPY?)a0a#6%g9uL!
T>19
System.Drawing.Bitmap
;zD7
VQj#
YF "kpL
].-h
_h
&*|}
%Hi)],#kkZj&czv{&@C)</QS+
{9
N<&@
z4\1[A*s
?QgG
%/h{
SetStyle
<bo0
%~"4&
|2q
u WO3
+9xit
0^1?P
>+Z3c^7
acph[xAf"3^vo7dfbslgU*BR
disposing
we{
R*AmkO/
~`w-
UA9N
j/]zrg7:*]dUefFU12`v,56Y!
/#@$m
>uvfbfQ1
\%v={
[I5^7
PVJg
Ft,]i>
iBI/
b$TPmI
xIDAThC
XA%~o
tI+i
W(I4
{~$wa$`F0TF-fIr&7'Im!UMx
}g;{V
jV?
)+Bw
\<Lsh
h 2o
wVq^
e^g{
='<$!
3iG{Y
)"!+
E2 #
-BTPvr
ko,Z
/5le
\uey
jgdQ#
9-,
>j${=H
C'wK
ub Pr
! IU@
!ggFLr
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02b_64 Seven02b_64 VirtualBox 2018-02-16 18:40:41 2018-02-16 18:43:33 172

9 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02b_64 Seven02b_64 VirtualBox 2018-02-16 18:40:41 2018-02-16 18:43:33 172

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\ymc.exe.config
C:\Users\Seven01\AppData\Local\Temp\ymc.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\ymc.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\ymc.config
C:\Users\Seven01\AppData\Local\Temp\ymc.INI
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\20008c75bb41e2febf84d4d4aea5b4e8\System.ServiceProcess.ni.dll
C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.INI
C:\Users\Seven01\AppData\Local\Temp\e9844f1c-f1f8-49e6-8bcb-dd10ec578438.dll
C:\Users\Seven01\AppData\Local\Temp\e9844f1c-f1f8-49e6-8bcb-dd10ec578438\e9844f1c-f1f8-49e6-8bcb-dd10ec578438.dll
C:\Users\Seven01\AppData\Local\Temp\e9844f1c-f1f8-49e6-8bcb-dd10ec578438.exe
C:\Users\Seven01\AppData\Local\Temp\e9844f1c-f1f8-49e6-8bcb-dd10ec578438\e9844f1c-f1f8-49e6-8bcb-dd10ec578438.exe
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.INI
C:\Users\Seven01\AppData\Local\Temp\ymc.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\Ark.resources\Ark.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\Temp\shell32.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe
\??\MountPointManager
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2456.15650234
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2456.15650234
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2456.15650281
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.Local\
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows
C:\Users\Seven01\AppData\Roaming\Microsoft
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.INI
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\1453c4c2-8362-429a-92f1-3f7033fa3117.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\1453c4c2-8362-429a-92f1-3f7033fa3117\1453c4c2-8362-429a-92f1-3f7033fa3117.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\1453c4c2-8362-429a-92f1-3f7033fa3117.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\1453c4c2-8362-429a-92f1-3f7033fa3117\1453c4c2-8362-429a-92f1-3f7033fa3117.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it-IT\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources\Ark.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\it\Ark.resources\Ark.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\shell32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2724.15655546
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2724.15655546
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2724.15655546

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\ymc.exe.config
C:\Users\Seven01\AppData\Local\Temp\ymc.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\pubpol23.dat
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\20008c75bb41e2febf84d4d4aea5b4e8\System.ServiceProcess.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe

Write Files

C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe

Delete Files

C:\Users\Seven01\AppData\Local\Temp\ymc.exe:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2456.15650234
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2456.15650234
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2456.15650281
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2724.15655546
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2724.15655546
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2724.15655546

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ymc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3035fc5a\375c7a1a
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ymc.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ymc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ymc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.ServiceProcess__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.ServiceProcess,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.3.5.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\337da671\3850e7bd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\337da671\1b71387b
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Namespaces
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msbuild.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Templates|msbuild.exe

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5fcea75a\3c9c8d7b\67\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3c9c8d7b\46b95040\6c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.ServiceProcess,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msbuild

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
kernel32.dll.GetFullPathNameW
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.VirtualProtect
kernel32.dll.GlobalMemoryStatusEx
ole32.dll.CoCreateGuid
kernel32.dll.GetStdHandle
kernel32.dll.CloseHandle
kernel32.dll.DeleteFileW
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
kernel32.dll.FindAtomW
kernel32.dll.AddAtomW
mscoree.dll.LoadLibraryShim
gdiplus.dll.GdiplusStartup
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipLoadImageFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageType
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipGetImageEncodersSize
kernel32.dll.LocalAlloc
gdiplus.dll.GdipGetImageEncoders
kernel32.dll.RtlMoveMemory
kernel32.dll.LocalFree
gdiplus.dll.GdipSaveImageToStream
oleaut32.dll.#8
oleaut32.dll.#9
oleaut32.dll.#10
gdiplus.dll.GdipCreateBitmapFromStream
gdiplus.dll.GdipBitmapLockBits
gdiplus.dll.GdipBitmapUnlockBits
shfolder.dll.SHGetFolderPathW
kernel32.dll.CopyFileW
kernel32.dll.SwitchToThread
shell32.dll.ShellExecuteEx
shell32.dll.ShellExecuteExW
setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
setupapi.dll.CM_Get_Device_Interface_List_ExW
comctl32.dll.#386
ole32.dll.CoUninitialize
ole32.dll.CoRevokeInitializeSpy
comctl32.dll.#388
oleaut32.dll.#500
advapi32.dll.RegSetValueExW
kernel32.dll.DeleteAtom
comctl32.dll.#321
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister
kernel32.dll.GetProcAddress
kernel32.dll.CreateProcessW
ntdll.dll.NtAlertResumeThread
ntdll.dll.NtGetContextThread
ntdll.dll.NtReadVirtualMemory
ntdll.dll.NtSetContextThread
ntdll.dll.NtWriteVirtualMemory
gdiplus.dll.GdipDisposeImage
kernel32.dll.VirtualAllocEx
kernel32.dll.VirtualFreeEx
kernel32.dll.VirtualProtectEx
kernel32.dll.Wow64GetThreadContext
kernel32.dll.Wow64SetThreadContext
ntdll.dll.ZwUnmapViewOfSection

Execute Commands

C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe 
"C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Templates\msbuild.exe"

Started Services

Nothing to display

Created Services

Nothing to display