MalScore
100/100
MalFamily
Malicious

Quotation Sheet-RFQ180730,doc.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 15/69 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 1311.50 KB (1342976 bytes)
Compile time: 2018-07-29 09:09:15
MD5: a11d66acadcf6a9647921f90a3b22991
SHA1: eb7fa85456b4e648c30f6ccb0509cfd0c705e08b
SHA256: bf254564f2dd170c379b7e4985c53e0e6d8d208ed53dcd7eeb524f5c4f775cd7
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5  \"Vp .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-07-30 12:14:01
Last submission: 2018-07-30 12:14:01
Filename detected: - Quotation Sheet-RFQ180730,doc.exe (1)
URL file hosting
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-07-30 09:33:42 [15/69] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
 \"Vp 0x2000 0x1c44 7680 449fba073a628d59d9ca40f45529b1bc 7e90a372bfd475179bcaef705ecb6d9d0e27ce88
.text 0x4000 0x145200 1331712 7c505e3317bee4e6fcf332299f88c61e b53e647659b7400ce2908168b6638eecaa3d5567
.rsrc 0x14a000 0x5f8 1536 b136ddff61d15ab77d2bfe95d851992a d7ce6002febbc1ad019e02bca3a1f76e4e4b3938
.reloc 0x14c000 0xc 512 1782f2aabace236b30bf960fc56e7d44 291021db82428015464f783835f1b33856cecf13
0x14e000 0x10 512 6d88d72f5e07006e2414309934bda840 2d34ef192ae09d8fed98b8cd64a34bcc49722968
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x14a0a0 876 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x14a40c 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Engie Global LNG
Assembly Version: 0.0.0.0
InternalName: stan crrr.exe
FileVersion: 12.3.11.4
CompanyName: Engie Global LNG
Comments: ebigaciqoguqad
ProductName: FastCGI handler
ProductVersion: 12.3.11.4
FileDescription: FastCGI handler
Translation: 0x0000 0x04b0
OriginalFilename: stan crrr.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
Ii.dll
\vgjn22.dll
mscoree.dll
KERNEL32.dll
mjcnm32.dll
IP Found
12.3.11.4
URL(s)
No URL found
String too long
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.Properties.Resources.resources
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.Resources.Ii.dll.mb
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.fm.resources
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.exe
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.Properties
6f460c1a-755d-d8454
InternalName
! " #
6f460c1a-755d-d8455
6f460c1a-755d-d8456
6f460c1a-755d-d8457
.0.0
6f460c1a-755d-d8450
6f460c1a-755d-d8451
6f460c1a-755d-d8452
6f460c1a-755d-d8453
6f460c1a-755d-d8248
LegalCopyright
6f460c1a-755d-d899
6f460c1a-755d-d898
6f460c1a-755d-d895
6f460c1a-755d-d894
6f460c1a-755d-d897
6f460c1a-755d-d896
6f460c1a-755d-d891
6f460c1a-755d-d890
6f460c1a-755d-d893
6f460c1a-755d-d892
6f460c1a-755d-d8267
6f460c1a-755d-d8266
6f460c1a-755d-d8265
6f460c1a-755d-d8264
6f460c1a-755d-d8263
6f460c1a-755d-d8262
6f460c1a-755d-d8261
6f460c1a-755d-d8189
6f460c1a-755d-d8186
6f460c1a-755d-d8187
6f460c1a-755d-d8184
6f460c1a-755d-d8185
6f460c1a-755d-d8182
6f460c1a-755d-d8183
6f460c1a-755d-d8180
6f460c1a-755d-d8181
ProductVer
Copyright
1.0.0.0
6f460c1a-755d-d8349
Ii.dll
6f460c1a-755d-d8340
6f460c1a-755d-d8341
6f460c1a-755d-d8342
6f460c1a-755d-d8343
6f460c1a-755d-d8344
6f460c1a-755d-d8345
6f460c1a-755d-d8346
6f460c1a-755d-d8347
OriginalFi
lTrademarks
6f460c1a-755d-d8469
6f460c1a-755d-d8468
6f460c1a-755d-d8461
6f460c1a-755d-d8460
6f460c1a-755d-d8463
6f460c1a-755d-d8462
6f460c1a-755d-d8465
6f460c1a-755d-d8464
FileDescript
6f460c1a-755d-d8466
6f460c1a-755d-d8483
6f460c1a-755d-d8482
6f460c1a-755d-d8481
6f460c1a-755d-d8480
6f460c1a-755d-d8487
6f460c1a-755d-d8486
6f460c1a-755d-d8485
6f460c1a-755d-d8484
6f460c1a-755d-d8489
6f460c1a-755d-d8488
6f460c1a-755d-d8160
6f460c1a-755d-d8161
6f460c1a-755d-d8162
6f460c1a-755d-d8163
6f460c1a-755d-d8164
6f460c1a-755d-d8165
6f460c1a-755d-d8166
6f460c1a-755d-d8167
6f460c1a-755d-d8168
6f460c1a-755d-d8169
6f460c1a-755d-d859
6f460c1a-755d-d858
6f460c1a-755d-d851
6f460c1a-755d-d850
6f460c1a-755d-d853
6f460c1a-755d-d852
6f460c1a-755d-d855
6f460c1a-755d-d854
6f460c1a-755d-d857
& ' ( ) * /.
6f460c1a-755d-d8207
6f460c1a-755d-d8304
6f460c1a-755d-d8305
6f460c1a-755d-d8306
6f460c1a-755d-d8307
6f460c1a-755d-d8300
6f460c1a-755d-d8301
6f460c1a-755d-d8302
6f460c1a-755d-d8303
6f460c1a-755d-d8308
6f460c1a-755d-d8309
6f460c1a-755d-d8
FileVersion
ProductVersion
0.0.0.0
OriginalFilename
stan crrr.exe
6f460c1a-755d-d8238
6f460c1a-755d-d8239
File
6f460c1a-755d-d84
6f460c1a-755d-d8369
6f460c1a-755d-d8231
6f460c1a-755d-d8232
6f460c1a-755d-d8233
6f460c1a-755d-d8234
6f460c1a-755d-d8235
6f460c1a-755d-d8236
6f460c1a-755d-d8237
6f460c1a-755d-d8413
6f460c1a-755d-d81
6f460c1a-755d-d80
6f460c1a-755d-d8144
Ii_dll
6f460c1a-755d-d8145
6f460c1a-755d-d8285
6f460c1a-755d-d8284
6f460c1a-755d-d8287
6f460c1a-755d-d8286
6f460c1a-755d-d8128
6f460c1a-755d-d8129
6f460c1a-755d-d8283
6f460c1a-755d-d8282
6f460c1a-755d-d8124
6f460c1a-755d-d8125
6f460c1a-755d-d8126
6f460c1a-755d-d8127
6f460c1a-755d-d8120
6f460c1a-755d-d8288
6f460c1a-755d-d8122
6f460c1a-755d-d8123
6f460c1a-755d-d8432
6f460c1a-755d-d8433
6f460c1a-755d-d8430
6f460c1a-755d-d8431
6f460c1a-755d-d8436
6f460c1a-755d-d8437
6f460c1a-755d-d8434
6f460c1a-755d-d8435
6f460c1a-755d-d8438
6f460c1a-755d-d8439
6f460c1a-755d-d815
6f460c1a-755d-d814
6f460c1a-755d-d817
6f460c1a-755d-d816
6f460c1a-755d-d811
6f460c1a-755d-d810
6f460c1a-755d-d813
6f460c1a-755d-d812
6f460c1a-755d-d819
6f460c1a-755d-d818
Engie Global LNG
6f460c1a-755d-d8410
6f460c1a-755d-d8411
6f460c1a-755d-d8412
6f460c1a-755d-d8447
6f460c1a-755d-d8446
-1K
6f460c1a-755d-d8445
6f460c1a-755d-d8444
6f460c1a-755d-d8443
6f460c1a-755d-d8442
6f460c1a-755d-d8274
6f460c1a-755d-d8275
6f460c1a-755d-d8276
6f460c1a-755d-d8277
6f460c1a-755d-d8270
6f460c1a-755d-d8271
6f460c1a-755d-d8272
6f460c1a-755d-d8273
6f460c1a-755d-d8440
6f460c1a-755d-d8278
6f460c1a-755d-d8279
6f460c1a-755d-d8401n
ebigaciqoguqad
6f460c1a-755d-d8414
6f460c1a-755d-d872
6f460c1a-755d-d871
6f460c1a-755d-d870
6f460c1a-755d-d8379
6f460c1a-755d-d8378
6f460c1a-755d-d8375
6f460c1a-755d-d8374
6f460c1a-755d-d8377
6f460c1a-755d-d8376
6f460c1a-755d-d8371
6f460c1a-755d-d8370
6f460c1a-755d-d8373
6f460c1a-755d-d8372
FileDescription
6f460c1a-755d-d8416
6f460c1a-755d-d8188
6f460c1a-755d-d8260
6f460c1a-755d-d8417
6f460c1a-755d-d8478
6f460c1a-755d-d8479
6f460c1a-755d-d8476
6f460c1a-755d-d8477
6f460c1a-755d-d8474
6f460c1a-755d-d8475
6f460c1a-755d-d8472
6f460c1a-755d-d8473
6f460c1a-755d-d8470
6f460c1a-755d-d8471
VS_VERSION_INFO
6f460c1a-755d-d8490
6f460c1a-755d-d8491
6f460c1a-755d-d8492
6f460c1a-755d-d8493
6f460c1a-755d-d8269
6f460c1a-755d-d8268
6f460c1a-755d-d8155
6f460c1a-755d-d8154
6f460c1a-755d-d8157
6f460c1a-755d-d8156
6f460c1a-755d-d8151
6f460c1a-755d-d8150
6f460c1a-755d-d8153
6f460c1a-755d-d8152
6f460c1a-755d-d8403
6f460c1a-755d-d8402
6f460c1a-755d-d8400
6f460c1a-755d-d8159
6f460c1a-755d-d8158
6f460c1a-755d-d8405
6f460c1a-755d-d8404
mpanyName
6f460c1a-755d-d868
6f460c1a-755d-d869
6f460c1a-755d-d864
6f460c1a-755d-d865
6f460c1a-755d-d866
6f460c1a-755d-d867
6f460c1a-755d-d860
6f460c1a-755d-d861
6f460c1a-755d-d862
6f460c1a-755d-d863
6f460c1a-755d-d8311
6f460c1a-755d-d8259
6f460c1a-755d-d8256
6f460c1a-755d-d8339
6f460c1a-755d-d8338
6f460c1a-755d-d8331
6f460c1a-755d-d8330
6f460c1a-755d-d8333
6f460c1a-755d-d8332
6f460c1a-755d-d8335
6f460c1a-755d-d8334
6f460c1a-755d-d8337
6f460c1a-755d-d8336
6f460c1a-755d-d8230
6f460c1a-755d-d8319
6f460c1a-755d-d8318
Comments
6f460c1a-755d-d8348
6f460c1a-755d-d8209
6f460c1a-755d-d8208
6f460c1a-755d-d8205
6f460c1a-755d-d8204
Translation
6f460c1a-755d-d8206
6f460c1a-755d-d8201
6f460c1a-755d-d8200
6f460c1a-755d-d8203
6f460c1a-755d-d8202
6f460c1a-755d-d8409
6f460c1a-755d-d8408
6f460c1a-755d-d8298
6f460c1a-755d-d8299
6f460c1a-755d-d8292
6f460c1a-755d-d8293
6f460c1a-755d-d8290
6f460c1a-755d-d8291
6f460c1a-755d-d8296
6f460c1a-755d-d8297
6f460c1a-755d-d8294
6f460c1a-755d-d8295
6f460c1a-755d-d8111
6f460c1a-755d-d8110
6f460c1a-755d-d8113
6f460c1a-755d-d8112
6f460c1a-755d-d8115
6f460c1a-755d-d8114
6f460c1a-755d-d8117
6f460c1a-755d-d8116
6f460c1a-755d-d8119
6f460c1a-755d-d8118
6f460c1a-755d-d8449
6f460c1a-755d-d8448
Lega
6f460c1a-755d-d8406
6f460c1a-755d-d828
6f460c1a-755d-d829
6f460c1a-755d-d820
6f460c1a-755d-d821
6f460c1a-755d-d822
6f460c1a-755d-d823
6f460c1a-755d-d824
6f460c1a-755d-d825
6f460c1a-755d-d826
6f460c1a-755d-d827
dll
yright
6f460c1a-755d-d8441
6f460c1a-755d-d8281
6f460c1a-755d-d8280
|<:
6f460c1a-755d-d8362
6f460c1a-755d-d8363
6f460c1a-755d-d8360
6f460c1a-755d-d8361
6f460c1a-755d-d8366
6f460c1a-755d-d8367
6f460c1a-755d-d8364
6f460c1a-755d-d8365
6f460c1a-755d-d8241
6f460c1a-755d-d8289
6f460c1a-755d-d8243
6f460c1a-755d-d8242
6f460c1a-755d-d8245
6f460c1a-755d-d8244
6f460c1a-755d-d8247
6f460c1a-755d-d8121
StringFile
VS_VERSION
6f460c1a-755d-d8407
6f460c1a-755d-d889
6f460c1a-755d-d8399
6f460c1a-755d-d8398
6f460c1a-755d-d8397
6f460c1a-755d-d8396
6f460c1a-755d-d8395
6f460c1a-755d-d8394
6f460c1a-755d-d8393
6f460c1a-755d-d8392
6f460c1a-755d-d8391
6f460c1a-755d-d8390
2018
6f460c1a-755d-d8212
6f460c1a-755d-d8213
FastCGI handler
6f460c1a-755d-d86
6f460c1a-755d-d8418
6f460c1a-755d-d8419
6f460c1a-755d-d8148
6f460c1a-755d-d8149
6f460c1a-755d-d89
6f460c1a-755d-d88
6f460c1a-755d-d8142
6f460c1a-755d-d8143
6f460c1a-755d-d8140
6f460c1a-755d-d8141
6f460c1a-755d-d8146
6f460c1a-755d-d8147
6f460c1a-755d-d83
6f460c1a-755d-d82
6f460c1a-755d-d8218
6f460c1a-755d-d8219
6f460c1a-755d-d873
ion
000004b0
oductName
6f460c1a-755d-d877
6f460c1a-755d-d876
6f460c1a-755d-d875
6f460c1a-755d-d874
6f460c1a-755d-d879
6f460c1a-755d-d878
6f460c1a-755d-d8467
6f460c1a-755d-d8249
6f460c1a-755d-d8328
6f460c1a-755d-d8329
6f460c1a-755d-d8326
6f460c1a-755d-d8327
6f460c1a-755d-d8324
6f460c1a-755d-d8325
6f460c1a-755d-d8322
6f460c1a-755d-d8323
6f460c1a-755d-d8320
6f460c1a-755d-d8321
6f460c1a-755d-d888
6f460c1a-755d-d8240
6f460c1a-755d-d886
6f460c1a-755d-d887
6f460c1a-755d-d884
6f460c1a-755d-d885
6f460c1a-755d-d882
6f460c1a-755d-d8368
6f460c1a-755d-d880
6f460c1a-755d-d881
6f460c1a-755d-d8199
6f460c1a-755d-d8198
6f460c1a-755d-d8210
6f460c1a-755d-d8211
6f460c1a-755d-d8216
6f460c1a-755d-d8217
6f460c1a-755d-d8214
6f460c1a-755d-d8215
6f460c1a-755d-d8191
6f460c1a-755d-d8190
6f460c1a-755d-d8193
6f460c1a-755d-d8192
6f460c1a-755d-d8195
6f460c1a-755d-d8194
6f460c1a-755d-d8197
6f460c1a-755d-d8196
6f460c1a-755d-d8246
6f460c1a-755d-d85
6f460c1a-755d-d8359
6f460c1a-755d-d8358
6f460c1a-755d-d8353
6f460c1a-755d-d8352
6f460c1a-755d-d8351
6f460c1a-755d-d8350
6f460c1a-755d-d8357
6f460c1a-755d-d8356
6f460c1a-755d-d8355
6f460c1a-755d-d8354
VarFileInfo
6f460c1a-755d-d87
6f460c1a-755d-d8106
6f460c1a-755d-d8107
6f460c1a-755d-d8104
6f460c1a-755d-d8105
6f460c1a-755d-d8102
6f460c1a-755d-d8103
6f460c1a-755d-d8100
6f460c1a-755d-d8101
12.3.11.4
6f460c1a-755d-d8458
6f460c1a-755d-d8459
6f460c1a-755d-d8108
6f460c1a-755d-d8109
6f460c1a-755d-d839
6f460c1a-755d-d838
6f460c1a-755d-d837
6f460c1a-755d-d836
6f460c1a-755d-d835
6f460c1a-755d-d834
6f460c1a-755d-d833
6f460c1a-755d-d832
6f460c1a-755d-d831
6f460c1a-755d-d830
6f460c1a-755d-d8173
6f460c1a-755d-d8172
6f460c1a-755d-d8171
6f460c1a-755d-d8170
6f460c1a-755d-d8177
6f460c1a-755d-d8176
6f460c1a-755d-d8175
6f460c1a-755d-d8174
6f460c1a-755d-d8179
6f460c1a-755d-d8178
ProductName
6f460c1a-755d-d848
6f460c1a-755d-d849
6f460c1a-755d-d842
6f460c1a-755d-d843
6f460c1a-755d-d840
6f460c1a-755d-d841
6f460c1a-755d-d846
6f460c1a-755d-d847
6f460c1a-755d-d844
6f460c1a-755d-d845
Copyr
6f460c1a-755d-d8317
6f460c1a-755d-d8316
6f460c1a-755d-d8315
6f460c1a-755d-d8314
6f460c1a-755d-d8313
6f460c1a-755d-d8312
6f460c1a-755d-d8258
6f460c1a-755d-d8310
mbly Version
6f460c1a-755d-d8257
6f460c1a-755d-d8254
6f460c1a-755d-d8255
6f460c1a-755d-d8252
6f460c1a-755d-d8253
6f460c1a-755d-d8250
6f460c1a-755d-d8251
2018 Engie Global LNG
Assembly Version
CompanyName
6f460c1a-755d-d8425
6f460c1a-755d-d8424
6f460c1a-755d-d8427
6f460c1a-755d-d8426
6f460c1a-755d-d8421
6f460c1a-755d-d8420
6f460c1a-755d-d8423
6f460c1a-755d-d8422
6f460c1a-755d-d8388
6f460c1a-755d-d8389
6f460c1a-755d-d8384
6f460c1a-755d-d8385
6f460c1a-755d-d8386
6f460c1a-755d-d8387
6f460c1a-755d-d8380
6f460c1a-755d-d8381
6f460c1a-755d-d8382
6f460c1a-755d-d8383
6f460c1a-755d-d8229
6f460c1a-755d-d8228
P-`
StringFileInfo
6f460c1a-755d-d8223
6f460c1a-755d-d8222
6f460c1a-755d-d8221
6f460c1a-755d-d8220
6f460c1a-755d-d8227
6f460c1a-755d-d8226
6f460c1a-755d-d8225
6f460c1a-755d-d8224
6f460c1a-755d-d856
6f460c1a-755d-d883
$this.Icon
6f460c1a-755d-d8415
6f460c1a-755d-d8429
6f460c1a-755d-d8428
6f460c1a-755d-d8139
6f460c1a-755d-d8138
6f460c1a-755d-d8137
6f460c1a-755d-d8136
6f460c1a-755d-d8135
6f460c1a-755d-d8134
6f460c1a-755d-d8133
6f460c1a-755d-d8132
6f460c1a-755d-d8131
6f460c1a-755d-d8130
:0ul&
rD3l*
e|@{BX
k OM2
2e3dA
S{fo
r={f
g d1
CharSet
GetDelegateForFunctionCxfpvcp
?eZ$
5* GX0
}er7l
U~ELD
PNG
yaZ+
fjM[Gq
NA8rM3
T@O=
T4cG
"JaS
):3m
o -W
I[85l
_Ux-"
Q; g
29;P
2IG
-S8O
ResolveEventHandler
b9M
FG8E$
7YHe
T :
K!i!
H%/\
sf;u
]NM0
VaMw}
#hnh
]7 ,
X<Bh
d#L{u
B,TB
puZ`
wT6nm0
f JR}
c4![("F
:so@>
6/ g2
rU$
?.g2y6P(
|XQ4
+QvD
N:+p2
ulK!\
CryptoStream
\v n
|h`Vs
Q>e{qy
[Mk+)
$s1/
l|G:
`^uM{
Vw9N
,E %
2}q_S
U3?*
QL-v
%4H%
!;tv
gBy91m
`6-F
oGR Y
E.q6
k8~^
4-if?
iHMfCy~
ic\^
Pc>y
@oDCXZ
)`>f
Q.>J
;d-.t
3
Kn57
AENNa
#`iS
yFT2
N),;
-(wpJ
vm^J
?'j
/9xrKo
@490
^dm+
Z?P`
.X<u
"+^]R$
m&(]
)R i
Recent
mjY^
#M;a
7V7Kbs0
P"P>
02'K
\T9~
NTAf
Ioz+
c{lavi
*Z39
^y57K
L e#
_GV5B
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.Properties.Resources.resources
$ z$
EMe7&
C3+0
`p?W
.tpBn
\MM,1H?
Dj|B8
m4t/4
iZ!^ ?o
]N$/-
iPU7
3Q h
~@w[
zI.
D?r3
N~9" z
LSr}(rx\
ETUbrk
&PSy
HP P[[
Format
~WZ9
EAog
>N Z
QRQ=
086DC6EE6B30B4B2VS?,1437838FACD165AA2F01
fbss
03:6
Bvh^o
xq,KJa
iKo3`
v]B)
5Q>i
[Eqgw6
Z>J/
_h&S
z|z
@r K
V^%va
3,
n~~V
A"\LQi
X|^~
_[pb7
OpenSubKey
ad{
i^7I
spVN
rIYF
4GWt
3-y>
aNVa
@6]a
bu
Jr("
@k&*
DtcleworkDisplayName
;qq:
6}`]
H@,/~
UnverifiableCodeAttribute
y-'b
set_Text
^5}/
r!r|
L6K2
Ujmxf
S8yd
7C n^"
#%-S +
'>aoP
fH :e
S=Ax
lfNdaOj
7#Y;
iSourceFile
h~`v
4{p-
;*,!!
)EPkDf
{kXEz
33k!L'
kWjJ
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
k@G3
xW?>
+ 41 @
. %!
@h-6
[qAeY
o> #
0M2v
c+~2
/8|r
9ZEnG
g-<>
56a3,e
<YSW
v5\v
;z>m
AMpjc\
DefineType
a`W`
nGG&
B.[8s
jv.!
]v04
;HR~kq
P94=q UT)q
O`hx
Z{R )
Lh4`
T&k?#
4G{-
IU |
BS1J
-;U|
`)t/B
%.N4Y
U9.X
Char
0eXb
A&^%^
$._u
96I%
#h~m
Waig_npfjg
_9)M
$Ai>bo6W`
GetValue
5!t+R
GmpZ
0eAv
D%_
IE'v
tvK{
IDATx^
{-"E
B R #
-MnK
PX(Z
<D 9Ena
,9h|W
?I"Jn
epSd
qqp+
Pb}lghvTser
-kq]
[e& Xb!
Zdp#
aPs4
;V,]
|M'5
:)eB
?14IW>G
pT)GET
>lEv
x Ag
\aeV
Gvc[{ovR`th
iBo 0-z2
'ZDD*
SU [
&'._x
GetParameters
$N)V
A=3pD
kSF!T
hsoh
U3$
cPi@
JvkN=#T
:mIhi6
X Y3
K( a
M9xt
4 k[
kv1$
n!c
.text
YNT4
WBQ+
x%J%
?{ai?]k
mW}I
nQ~{
+;m)ecm
GetObject
+U_9Ci@Hhx
K PE
0kI9
WrmkeakogModes
B>Ec
Setg~ayqDcre
object
QOC,
w3)lL
@,V2t#
ssOF
2X6@+
1em|
*6!
VymL
Rtblic
CommonOemLinxd
**~A.r)M
a It
1e -
^(Zy~
c*)dg
!/Ey;
2=yY
E 8C,!
/H40>
UjZp
^v}mjgn
T^cM
nxMR
0\Spr
cC`W
wNsF9
1XTV
hc "D
=GXI
|Ac'
F}BF
(&<kyr
Z+E5B
a&Y0 u
%x_;j1
p5w("
/o$n
b(E&
AU\<B
4To/m
a.tt9
k<P
Vew0TY
`f2g
$78I
Wfq
9y9
>cm"L c
c;6|
0?eE
+gff
Ot(V
L\~lLgt
\ P
-=d5+
@a,Ap
/]vBEm
V6A$
koO6
nK>M
w)L8
5^Q=
Cf2 ;o
C66f
LocalAppData_xx
PublicLibraries
Y(.
w}_SnHDL
.ctor
get_CodeBase
byW.
kbc,
uvDv[
htSNSW[`
9| l
5'uP
?1%q
Settings
Rfc2898DvefhgD{ues
*|e"
Rj2 k
^~tW
qLf)
[7o
SsTE
JC)[
streamBytesTransur}lgb
"h5>
.6MqOi
Z 6}J
%[[f<8
RI3
&`|]
K3we?
%# @
9HTv6R
aQtM@
nbv"
7hD~R
7hMc
F4r_
UeR1
:wZ\n
]bfhg
7+Gv
Ypz6I
)S`6
&E6 %N
t'ZSN
X /Ml!
O IK
93*K
0WJ;
&!?I=
J1Xo
hFq>
MCM
TargetFrameworkAttribute
$H4n
+Yp(f
DWwP
SearchHistory
9ej[~
2gHqLLK2<!? &4TT/I6<A#+2&
G rZ
RnmuoAlbums
JMbU\C
aJHe
'R{qx:
]Rp
|WaK
iKM
h6*;W
i+^3J
(j/ &@
get_Assembly
SRl+
b W%Y
4PZe}V
]%#)
IdE_
71b@
!^K x
jp?N
EEhT`B
TV+=4S
Cx%l
MbFP
CogC
=f0Y
#BPzlt
AXl(
> ox
:h~c
#Y wY
bQ,5
}i)0
l{b(4
r\De
ZL"[
3Q d
9gNg6
!|R{<
qF} V
.W0!}
:H!x
:"My
f'g/F(BM7$
Yl>q
:VLs
Ovd{
w!D~
set_Credentials
R6Zc
@t8E
A\HT
a(gf
d#9J
CX_s
2WJol
2.jwi
{rl)
[< t:&g
'PeU
IHDR
x<o.
#KXW">
m~^G
1;\u
.B`|_
ygr]Lodule
HJ>t
?ha5
a=%
h5v\%
s^/FOc;
cHyBAX
C!RDm{
L\|3:x
zeN6I
KIS{
53%m(
=<l+
3 [hD"%
$ A<
System
Application
)!x5
n +s
d]Cm
F4^-d
3G/#^
*7x9P
n2-)CG|
{m3X+.
\FJc4
ugb @
?Ys|]
k;d~Z
jEVA]
hc I
u6:
.|;KK
MethodBase
]#r=
d.D#
1}u6
V7taf}
T9_qT~
)/a-
Y)5_Z{
H':Z
e>F%9
>dn
Qc (zGsEnWv$R>_$XcF_WGTV%
PxhP5@
8V@6
'u+j%
AhU^
width
I||j
O\[e
^H!{
#iuId
dS,I
{W/#[
,_Vmj
Qoa`p
x%09
'>eApx"
rDEuF
H%G
JnK
8C}
uKrM
.m/+6h
M svQ
c*?yEV
]:Zuq
T9B
SKu\ a&
#wzR
%DK"
y#Q\E(7cF:?
l0Y4
~h~7
1NB?
Gy9%
TjdqZt
Tmlt
_g9x(SPW<dN
:aG$\
\P 4
=y ,U
fZal
lSystem.Resources.Ar|qwtadReader, mscorlib, Versio}*;02(2/0, Culture=neutral, PublztD{{Rmjen=b77a5c561934e089#Systvz!Lgumtrces.RuntimeResourceSet
`lmm
a@oH
4zD >
ue(n
{T&`sy
;|%\hI
GJ."
{9ct
1 BH
kk'.
/a~
g:Q*
NG93Q
KO.pk
HuLVr\
d6ba_w
l[Gh
}?~q
C[Aab%
&S&
!vD o?
<(P{
$1T4
c2gX
@j=r
$zHA
OVb[+
Desktop
m=U$
dK: )
YJg#3
+*R
@6kA
',KGq
khA
cghlR
>Xx5
g|7
1T_4
GC5oF
<: W
_<*)
QhQ=
{{`UHlQ
w=*a
dE`P
Wvcl
rB/3
eb] /!
vx[(
CgE8l
Mpzs7F
M9~3
ck (
rPZ
oY @
F uT
{q/f
W,93
D,C4-
GileShare
>$hN
,[7=
KNR=-
f!5k
;*1IS<F
KA3n
"/;z
!Nj|
\4e;
!)![
i52)
{TDc
GE
l/t4
t*0B
I gF
ta@U
>o$V'
_MU
-e'D
addres`
2cv7
pz0'
p2I
u0P Y
[j H+pm
L bS01
SHGetKnownFolderPat{
'%U"N
hoUE
?18Iwjo
t &x
=i>P
w]eUi
8jTIG
g v]
Wrigr
s:}={Py
0HR
1fL
Y ZA
f"Sx
?H(6
gkrv&(;
g(r.
cMHI
xP;^
S)
"Bn%
QDk2
pYP?5
]JcQ
W_H'
XFSW&&W)0C6`qqw"?I{xI}k_#
pxI-D
T[3*
bJ b
\y01~ S
/99= D
set_Name
ZI /
V L
Default
&t%+
a wYbr
2`SS%yfk
Fhspose
h&K!
~[VoW
_t&s
ulTE
]U<A
[(<
!+Hf
x2^ x
J6T9
brm
:Vg@<
{mRV
\nSi]
PG'G
pc|#
hFwh
IktWy
;3fj
j%u:
*er
>u'03r
MX)H
c_(9
defaultZy|jchad
MI_ea
Az6=
\3*Q
<*YA/
8t;JCf58$
z) @
X8BE
}V}d
x3IS
&7*a
n$cx
a9]n
]L's
-5?[
RM96<YKz
.8*m
$/.T
\w 8
wP#A
nkEA
^?lw
4
s& b
R,So(
N3](<
v0P~
I?#//
Mchc
KI @
OIj[
1qi{
~m0e?f
UZ#t
(N(_\z*
gWK\6-
t)"Sv
XIUo
A+k&
jjxI
QnXo
K 6
@z%KuX{:q7
4w V
:oZ{
JnFy
r[DyI
CeO
'1W5
[COm
XnhL
~\7j
BASZ
i2Pw
bT71
WW!]UJhbGfP-
F?$.
NLpg
>9$ @
ksd6t
u}pl
yYzk
Kn\y
m+;_x<Z
lXF'MrLD
"_ #iU
'i]\b
w}U L(s
5yW]
z\?V
AMi1
+o nW
Gr[~Y
c
5J( 3@
2CXw
`>"k
6:m"
Pou_I
n#8^X
PT* ti
/9iIg
:_#i
} @5
oWuo}
xt"^
5[Hq
ezJiU C[
4qK^
,,%E92/
'nil
XL>UQ
?%$
4%m_
nI}\5H
yf3_9
sHoH
twHkZ
=q E
c>%:45
jeSmZ
<;ob
kXKm
System.Runtimv9LqovkmerServices
/6.1Rx
"yW%
s\R9J
V@n"
E(Kw
SettingsBase
gm Z!
47cl
RVe#R
Copyrzpgj"
x5 v)
aM6(
,uext
&}l]
C69
m!&LN
set_FileName
\}j@
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.Resources.Ii.dll.mb
z *1
wngvhonRelaxationsAttribute
S_ i
QFE
\gakoInvoke
nvC^z
hXDSi
z]mK
Ne\
GetFolderPat{
gi<Pa
History
6 ~eSO
}+4G
3)5md
-`a
in]
I|/dT
<6C|
Y T~l
JFnw
\]x{
x F8
?s4' f
`KkW
ReadDoub
qWv$
2}{e
I|~t
l~A?k#
]{cb
bAa7|
NQp95V%y
T(5sA
e_CN
;UHM<fUY<fY^<fY^<fY^<fY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jYb<jYb<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<fYQ<jw+</3
L674
o@sz!
G Map.8~
Yc_
Applicag~`pQnmstcuts
10Fw
TuM%4
&qrKLf
buffer
c.J 8
[^aj
JFn#
g?t#
1vvlR
^3/a`
=WU?
F2.A
not#
Array
=f,
61Uy`K
;!N7
o 4m
GcwF`
7ihw
r-uTW
u<u
v'>w
$7H*
\=Dc7
d6W$
-1K
,)i ~
>RdQ
X~pwC
p? i
,<GD
-.9
z94Ec.<i7
-d<,
0f0.2*W
=XEA
(IJlL3
n#4-c
dm K
9PBI+p
FinalReleaseComObject
glAllocationType
pr-I
Microsoft.VisualQv|wa(AnmpilerServices
#.AD
`X}D
hGSJ
}Xk1
f0j*uVN
Xf6z
})3t
BT%Tq<
xQm9
lpAddress
WRRc
_ 2h
System.Drawing
\ cW
+n1[
}w4k
s'{>
EoA]
OPpc\
+c&y
,z,q
1uvJ
*T,99
Iae7
?T4>
Directory
{Fx.%q
I.9g7@
Xy)J
*eW5
!2ZXK?yz
:c?BnX{G
%c1j
hi;Nm
HgX-h
v*n.9)L
DK(i L\Y
ReadUInt64
[oFCc
|z!b
_.3KU
RuntimeCompatibilityAttribute
\'"&
D=$O
M_M=
@_ykj#
o:9%y
3008
A`djs`j{EescriptionAttribute
|p>"
~ SHv
Pm9*
-*Co
J# Z
GetTypeFrom[vaznc
. F}
Yh3f
%m]s^cgH(
@z)c
[6+*
`sff
*d:d
f`2}
rX>#
~ V,m
D'?"P>v}( f[
=u*D
*,e:
r}dg
tz 3
)6'klo0
H>Mm
5>r"
C5714
2X :
6gj
B|+p
`Mi+
HH=o[g
(zQ5<
r1(n
l s
1?Un3n0ED,%fU"Rh}!IXd?18
;S]
Size
DH H
[aBd
`ip4]
F#ZN2
>g~4
$4`
Le]MML
?ui1p
ReadR{c\{rgr
8[*C
Seplace
ChangeVo{{luknn
r*aR
5RF{?
gKz7
6Q)
'dz%
AQ$<g
O>WO
I}c<,
?.>p
IContainer
h)1<"
*$t&
D|7
lpEnvironment
;D~
%r
8t)d
dfszK
JEGk
LN|r
lbH\
Qrogram
$|:f
C]=pPc
W\u]0
VA+_l
RZ=
sn\*
RlffY
LV(]y
|GE]
~TDC
|PhvxT
>,hk
D|<jas3
tiL[L~
TBW$
Qh%p
RV1
/%ZFO%
NHRE
IO9;
cvrqD
f"zZW
[1E)
cd F
j .i
ywQD
M 7/
!Eqn
}w|e
'UQL
;LTq
FsC=r
b}^-$
I"T7=
ResourceManager
m{kRO'#
`}]PDAN
eq}0!
GetExecutingAssembly
)DQ-
\?2~^t)
a t\
1}9(
YgrDsames
yYCh &y
8
u^w%
^@^s
ContainerControl
~[-'
)9c{
7ITn
/BqJ?
l8"&v
ToInt16
-"
I/LR
;I2{m k
I|C:
@[qA*Z)
Af.`
V\k%
3^y3
'zW_
EX_}
1$AZ]
`ZNm(
uwmKe
r_l
f: F
4W:jO}Gy
>\2L
WD=5
,Oq;A=
|m(t
u_ ~
JnR"
|LX6
Kx r
pp$,
/,n2
z IR2b
KRsV
%qP,
pj<J
o72 gr
hThread
EA@tS^
n4bL
37tQ9d`
Fpkrk`lize
K^B>
= qC
,#obY
tG~TW
2 9K]%
Empty
;mSr
`C. x
9ead
h-z{
T7;kT
#[TP<
oG*V&
`|+?
X[@d
|mnk\8
I9L]0_
n~th
i19'
0+2P
*>_F
\B1_z$2
"t&W
B%!2
~i,K
BX7{
Close
<lf5
T6Q3Ys
z]?>\
&"+W
op_Inebbnrkr{
]O/
{A]i
uBv(
/xQ>
UQo:
klyd
tN'S
PR[T
6z%k
2Cs
1`#_
& !OL*
d&00
x )@u
EjtR
&!d P
9#]#s3
3 DK
'j:$
VMz
K.T~
aB!c
"_k
$400c847d-4f79-4b5f-8f11-319782348257
B4&!
zYk/
3$Z(
=A_F:s
vIvNxj
U4 H
P[!:A
UT=#
XnK;
vVhN
l6$
}O%9
t@n7
>q'9f
C>pX
3iDjb
+Xa1N
m`s?
Cm\y
mscorlib
6wP<
FileMode
&z8P
k0[&
F8HgI^@Y
6[M~
;b81Z
V VU:6U Ego
!: UQ
F2E1
IP
oT#U\
GUj%
newpath
s\iW
/9X1M P
~l.Q
3!^wN 6
6zRK26u
Y4*
~^TA
C*17
aYT5
A57y
?!|?
R@07
zZfb
7)Ns
01Da
/l"FB<E
>DR,&fjk
~5f=
I Hh
.FxO
G@ e!P
+2&U
CY0#A
P,!TU
RuntimeTypeHandle
DH3C
S%.<*.
8M \
J#@i
jQI
insgvcXmjfdr
SXzB
RzlYq@
'=<.~
z 5^'
w`\wxc
t$fK3
n/&ZQ
i lw
7z6
\HBZ
i a)(C
0 TIHl>
_Ai `"
9`+NW
W 4}
v.\1(
| _Z
-o7br
vuo,<d
oR|M
](J
UInt6'
processAttribfcjm
S'NM
&Bv@
+aa?
ao4aSr
H*ms}
o $u
yM&n
P0;Q#
UserCe`ypgoGilesCommon
7_@G
MtgES
7htq
RtM7
*pKt
s R=
m QB
6UgY
gRm?}
FN
F9)Z
)>u
;gjS
koN z
,0UUUH
=*:q=x
Jinz%,
CP&3Y
J(69
/SAV
o-j_
(Z`Q
d3rA
AQ9b
iV?!
DrO@
P+q8
[UJl
E~b?b
ro @
!m&
:) Qk<G
<R9t
/NB"0
DvqfpgB{oamicAssembly
%>16
oIM=
DzvcqeTgrult
V8q'
cky8
N0 u%6
z?}i
9P]zx
>@v0c
Y 'Q
T2| <
7:wl
;"I..
#
,C=RZ
y}a
w azp
P 8%{J!3
R 'a
:vXX
MCS
wHjp
=H1Z
JW)o
/]9ny>
c$qM
Sj&U
* 9I
=!/*M
?j:},ZM
'oTX
C09
F5;
"cb
*~(!
ApD
;@ e
g'G=
!This program cannot be run in DOS mode. $
8^v{`
_O'
c) cCG
9+uQ
Dispose
-}8 ?
vkyx
_LLb
|72:5($
~J`{
,]V&
+&FT
'`*8p
Q~RX
Iu_?
WJ*]g> O
rkCB4C
@n{,*
set_ClientSize
MAYR
$@F s
%5WQ
zI3I
Irm'
dj>"
-<s6'
sUWGZ9
IL@7
N0{d
,27y
+*u[
---
h!h?+]0
d=Z5
>[w@f
5f i
{=PL
=]M
i_s.K
dDaY*
> 9 Td
6ey1 +Z
~<V+
z6 .2kX
lP?,
GetTycrIlmkAMSID
ye`L\
2^g^)Y\"
W[mP
gmQ<
Sx3dF
yaj
Qm.&
_$a(&
W$/62
Pgv=+
;48%
&IXmB
2SEE%]FO
TWv*
$E3M
QrogramFilesCommonX86
5E'!
J1 u
FI -
QP7s
%lmY
Uz1H
[ 9E
[Ny%
M\3
&cZ.
xxUx
Aaeng
ru.I
=ij
r~nfu
p#6T
EU!W
Y(|[
j9\}
System.Linq
System.C|{c{arknns.Generic
SB<bg
[0R
;J;AJq
*5=d
:Ic}
*B} 3M<
Xm09
xLC mz
JFE
8^Y?
*gQn$#
0bII
+-}<
I^A%p
SopjU
Prou~c{
v4fM
o49')8 W
jvTH
=<p1j
9.kWZ
IJk@2
P#lN
u E'
GHLm
D LT
#AJ-
8&)M
BlockCopy
J<%46
{&2i
N `y
l>lhC
G =jO?
`*a*
Mutex
\5Wh
H?{5
Jpwkgsable
! >:1
*@i7\
3Xq:
Yr9M&n
xW1}
/Qy-
(
###I%!
% C_
xQVU
"6r?
.ie?Y
UvpA
B_NN
AJx Sa
set_Key
J:uji
]T*[@
yU D
Atw$
O(+5U
*&PS
n|#'
) qaP5
} .!y
Y8}Z
Boolean
Q8c|
ElX!
\W/Bca
}X@$
^?K9
MethodInfo
fkms
E}11i
tK*EfL
CompilationRelaxationsAttribute
T7o;u
P@VrW
9Cc,
bA'k'
SaWm
!m|%
MemoryStream
e? 6
F mpR
xb"=
!u?51s
#*|>/6
u? FB
k_BU
g4;pr7
<c v
sD"q
-BM&0_2
Bb_'
2<se~
l09
9~G*
Y<k
yA.<
8:VY$
J/w#
3")@
&% L
]=eD
$0P]
,Cw({,
*Dwl*
\{a/
OKC
2J/gfu
inheritHanw{jm
cA t
bF<{
ReawDMgvc
^Z S
ii F
oK.5
\+Q
b$i^p
GQT\v
J.m#
*:+<8U!sW(UHKcGb][Ua@kG^$
IIos>R
Qyz|b
Assemq{v]mkr`nyAttribute
BMXI=
h2dL
5q
f {R
|mI7
OuW
z\-
@F57
| ]=
N{1w(r:X
=EFv
}%d -E

eXp?Q
;k0
Rectangle
{.=0j
bsV=
QHKM
:@Tt
qal-
*5AOuB
&gaq
mL7 V
1MsFm
>5KK
Concat
fBxE0
=; N
SU IJ
cC|L
"D{w
*MdJUQ?
6I ,D
}g85
O8~6
vm5y
Xh_F
4b-C
63'{
oI1Y
0mm @
IG*1
#M7pv
f!zL_
$l!0
{P:W
Vz9-
FeA |s
zi#A
Cf8r
IIWD[
%-8#
33HU
I/AW=D
Favorites
lMbj|
QKshe
< < < < < < < < < < < < < < < < < < <
]%]#
System.Text
B+b'
n<y
t?1]
~ub>
qSnU
PhNPilD
lo4z
L4QE
@t[r
yUN=0E&Gf DwB1QA<6mZhElT$
uBo
LZ_
( e
X lIca
X_^d
}+xt
5-ZU
pcqtlt
8siR
K03;
1o4K
|HCk V.
pM%UuTDk
T\A6
GetAssembly
Go7a
~X4+
4tru
.@>v
OwoajLaunch
[;j.Vy
P*VGzc
S\BM:
<bkX
&J0g
8[T1*em7
\z{g
*JZg
sXbF0/
t%=s
-6jr*\
h} q
46bl
(wHk
l%8x}
Y_wb
vY%2
Gz68
%+q^rp*BP
/@%==kI
cYXuy
L.{s
EdtProcessById
iGtb8
U4Wx
Tdq0
C'8w
cxf-Q"
%CIG#V2
KZnGR;
x A8u
sD7gw
y~61
DxQ:/
SMnr[
S\]f
BZ<J
UnverifiableCodeAttribfcj
0}(3
4YiJ
]2wl2a
\f fS7
ULZr
8."U
f):/@
>d|Y<}
0]Bf
AWYSg
osB4
NFd0s
&zc8/}
W`s9
_CorExeMain
DebuggerNonUserCodeAttribute
s'7R
~WM(
k1 '
e9/
-XC"
-GnQ)
!i('
#a`n
\qM!
<l]}
'?IEx$
[2{4L
W"Q;
DebuggingModes
Dt w
m ?%
get_AssemblyDirectory
u|mk
W2;:
8q_^
WD#ES^
J"18'o_MH&
)F*n
]; X
X9Sv
O5y#
>W: HA
RF2 u.
a"\)[
MethodBuildve
)f+lH
uvseamSize
rD|V
g.[
PV7E.E
Cn5Q
P7WU
oymF
jBzRL
Dx Y
uv ,
n T)g
L,Y`
0`ep
~`2\
8nMQO
+\ N
Pt_
!eCK
6Y!!6
cK1j
f v14
`-r>
iAP5
wfW|
~4D39
A%Hp
s;uc5W
[Lm
hv6t
5?8)
!l{g
QyiH%
vl E
0R,S
.j-
V";9
Y%Q,(kT
>+8y=-
I$X]
F;e
!K$-
wd%
itbk
p E*
'Hk9T
Xzvb
\;S:6
:6fab{
:RH*
:N"+
d@I ;
5WqK8
6%9n
:~-|
1cN#X
|A>]
d`V,
Jc/3
9h(&
)8.:
<_z$>
2~'4u
Kq6t
DirectoryInfo
AsDn
@k]C^
UEOx
y :p
X=ZN$
get_LocalPath
Zy{/4
:Im<
P s[
v1jI
qf}}0L
B"2
u}.T`
NvH,h
z tO
=W\\6
Mb}=
h+:6i
ea&2
!?'
*N+
8 _v+n.:
) Ukp
,Z!P
9;n]7R}
<Fb1i
$Cq."n
w I
Xjv[
'q4 V
gegHLkptgotDomain
9w\.
V HI
pr ]
p[5q
tf2j
get_CodeQv|{
W6n*v"
KyF-
w-eTpI
v{02
|[(%
=t.>
j<0r
QTm:j
{ wN
W /V
(Y^m
?" /!
'l@R:
SkyDriveDocuments
Gk,o
b*}jL
h *k6
dLy?
CN"z
Ry)0
+cs
.b_u
=k7k
:j\3
I1`U
G:WY
=pgbC
$QSu
gpOt
|"m+
C)5/[$NH
>Tooa
^#e
D*P
h&qs=
1.0.0.0
aKdd
~U%
>$ig
gp/v<
g #c
V5Vb
?&,{
>~"#G~
SxI-
RoamedTileImages
c]]U
8{;>d1
vt?k
k0)%
Z`Y
B6p.
}eoo
h^wH=t
Stream
~a_}nn
"bO*
HcJ'
r\4
iel})
t9FA
nexX
&df\
Vtn\at9Q
T{eC
@ )c!
{Z==
/Pv%M
AsaL
tMCN
/B!f
5'[3ie
2$sC
A4sk
7-Yi
Tof(
`7(5i
7Nq')
2,[50
vYH#
ArK]
EA1#/;X4EFGC10797D568BBD9F24D7B8185#.M-6
yz oc
(+2zZ#Z
R]PLl{vvnServiceProvider
E9u!
;Q9`
r[8*F
1E_{
n9RH
,x$J[
9DEn
]8 "
,Oy{
(0}P
qmZ`
~-uy @
B3CV ^
yEn b
;ECS
[*_E
(,)'@
avv7N
uey1
ScH@
2dZf[
ZfTZ
jV,zK
[e*<
f f
}jfu
j-D[
;";-
ImplicitAppS{x}jasvr
nq;m
tULAp
pJ'E
/G<_
a:_ o
}@qG
Q]b5y^
6k=5
Wyes
b|,%
j/"~
CreateType
:7i4Vi
@eY2
(lbA
w)q[
2q3=
@g8
6J&/
nBMO
+.fy
iHzS
J37A
Hsh>
|TaiA^F?MX
V1wBX
g983b9aq
vH<E
.81;
8h0n7
5((l
U,Yt
$4>7
O tN>O
6d:+
.#07YK
oT5c
f 4
I0LR
ModuleBuilder
3System.Res|b}}gu,Uools.StronglyTypedResourprMkkjfdr
`^^(dR
Ov '
^PTIfS[
CHou
\#6OIq
ba*A
83O^
ou#4;
/Vb;'
r2<M(R
uJ! J
*L2W5] 9t
vQ{o
",Yra
Hs?,
gIX'[8^
&V go
pnZ|
=!ob
} V
F^ h
set_IV
=I H
GD5Dv
)Qsw!F
5Y6
FD@x
0sZ&
X=8
?I=l|
N*AM
T3G7
h w/n
)hcXW)
Kl.vc{
0w=Ss&
~LEtic
}O:C
hNnPG
3PZf
AAh,
}$f7
0!P|
W'(]
$#QG
~2>[
Q.zO
X RS
CqQ?
Y&0)3
Ps/c
7Ca$
Q{"0
Yz5~
3U0\
9rD0N>
BQE2
F:V9
D'=nw
Dzfb
k4yUN
? i9@
T
wJ6 @
h6p)7
5 BEQ8K
Program
5!BM
m?wN
Gl~ic|
c|y{{zr
RieM
csMo
3X-k
GS C7
3# @
{%7H
CJ =o5.
x&|O
[>r
VtMs
4l%
3ic@r
5/oF
a|I6
)?6e
[< rV
}I8F>
yv(Y=&
FCS;
qH<c
LP M;Bs7
hHD_
:~H @
L >h!
set_Length
xBX N
DP9x
()
eo:X'
1G*L
_IH70^
Mg.mlZ
r>K:
fb7=
cP] I
Jcrt
&=[1p
2wqx
-_u<
RJ[_
FL^_D_B%|
wJ'[}
t7,6+
3 8'
^0 @
<R~Rz
wVAS
TO!
-EnJG
VNXW
@ SW:
so%t
WB~7
Yu2o
*//)
qo3X^
')X^
=}W4
ReadUIng$=
~sEy*
{0>9
X rEF
;SoL
+^8=
TgnteType
~f>
#r)x+
}h_I)@C
&?!7
Q$<K
'y|k
[pnxq
*?kT12
mW3
GHH(
(;<l
BGGE"
g Kh
:>Ma$WD
k;a!c
handle
r3nq
u r.y
PublicVide|d
o ]&=
8_oY"t
!?t=
9e.
@n`f
[~Ey
{DU>
nzQa
&x f
jY}r
E:J
w <rI
R xP
H(q\
T o(
_#8C
*Pc{
R{AT -
k&LYY
ktE
$?%_
,*:
Wrc{vcDhle
4[d
*Pc\
mvQf
+ Dyk
|?W5
set_IsBackground
V1+8a
;Hr>
MJ%P
G:{hYg
*5T,
T~\
B^jY
SampleMusic
*Tzk4
[SZ[
t"x>`
KUi
X4[Z
!/t
$X8=
lAE9f
h8lm+n
4%ew
?w"
~Q*J
P5/8
AsynpTnrndcbk
s5mOF
IDisposable
aD1i
dSnY
U2&a
i#s\
(z4y
_&R
SsVf
[X)'
cc r
SjxkhgQInvokeMethod
k+h:
_y~Z<
.-3C
L|W4Ki
C?KT ;;
_sK
e{, `
SY:cT)d
B.=|o[5I
wcHT
U 0
Bz"#D
F_b$
,\tRR
i(ug
Stap|[lceg
G'9x
Vl 5q
o%H
I./b
*m o
T`d,
s3|vnc
mVkE
TrH&.i[
: 5
>=pb
ca|f
,fy:
(/%A
!>{P
m5='
Cw,)U]
gjA,
W'H%
vlh4
J T{
P.Wd
Y_HP
a6Kw
e\-U
BinaryWriter
GGPwh.
?){O
e:bd
Knl%
-s@tV"
?"_)
eH,$*^
L,-4
VRAg
O`Ds
|cug@ddress
{g&
} MQ
#GUID
;b*}
$ &q7dA
po)tAb
SvG"/f
h)po
`\vW
f^7K
MocalAppData
#T$i
dH?;
Synchronized
\<n%
9U q!x
5kD`
t R0
$Lz;
cryptBygr|
kg&:`
Y5,|
Ajn R
T?a=
gJYW|
8,\x
+ _x
.nuA
~<AxI
Qyx'*
iTG""P
Y.Mu
m g4
[ (
j>[4L
(&bP
{ @
pV||
g|t}
@ol`ryReader
o{U]
%r_Z])
sj&L
3A+-
F7HL2l
~{JT"
(<.9O
1d=T
'v B!
SXj>
2nuu%ggh
@j3K
Y3w[
"WGE
_#pt
q"Yu
3"@e
N}jz
$% @
+;~,&
P:LK
CGPLex+
iP.qUY
j*x$@
9Pnf
j[u
WEO+
$@]J
uh~
ur;\
Rb^0
Xfe]
mUiw
v L|
3 >_
X-Jn\
Y}'V
92Qk
E_jn
PbcJ
OY_f
SAXH"
owaY
8_mR(
F[)f
get_Spva.
i<YY
N47)
"de'
Vn;o=
J3_C
!A AN
{fqJ
):|'n
f f f f f f f f f f f f f f f
GGexLpn81
f-e
l2`X}
/k>Q
\9z
.z>)
*'uS
\(c@hu)
AyJh
{'lNcm<wo
]P0 zV
]p 4
3mH}
\QfY
?jbG4
h)k`
TQ_UO
mOif
uP{q.
Fv0'h
uH i
anw|Y
^nh$
R0-cw?
-0>>Yz
0lh0
|Z8P
I%5*
3@Y5
lH? B
92$F
z\JG @
^nhM
L. )
installUxczgt
(P%&\v
2018 Engie Global LNG
BN;6x
OSVa
!DD3
B}L
zNAM
6[p})*
? M%
vd)?NOY
V[y.U1
lVR
n= "~
#|Gf
c*"io
A'>f
/]>QaKn
9tJ[
6_2kt
C{hpD
I=_b
lkqA
7o.<
<-=n
: 80rD
KM@eHdD
e6T!
9a-d
w)H
4*6y6
GeneratedCodeAttribute
@W6)TJ
OVrO
GU
@0GP
Qlc@
!!g0
Y1`s
!vJ{
G``FV
i<glT.;
N@,hV
<Zo?D
YP+X
B'XTY
_v)In
0Gx
* $ns
lMm.
mo F
lYa N
P uO n
ktx nT
WcW4
JwK`7
A>9F
9rDu
$>Yd
?E0Md
k?R|hb
tsE(
C1|[#HG
,pW&
F `ty
gt'd
wl|%
c?3+5
'PV`
p!|$c
09w {t*
Qh*E;
]~LI'
m"YO>@
Substring
,+}e
;UvY
x[*i
57<u
MpT
&? L
pV/ o
TE )K~
pj4Z
X4(B
so+S z
C^1D
ehp5
9[mlj(xr
3H=QS
h-7
2;
vae+
2K]u4D
ZP0M
Invoxr
][Y#mLN
I?eb
&&ba
:4JI
)d]C
R[<f
q3PB
Dvmvco/Security.AccessControl
K #
RLL~
Marshal
6Ky\
>n @
6~\* ;<
:F|,V
mO)>
R&e'Y
]MWu
Ee_M
(D
8 g[
1D<6=)
P"B
rt]f
TDz/X
?do6
UiZ-
YB*4
hZ$$
X@ie
&9C
' sO
Mih?
4;Rn*
Uph7
bSY9|Rd0+F}
8FNJ
Oa}L
f<cV
7qJ-
8Ydc(V@:@90gEvW7&i\be5{&
?@&e2i%p
RtblicUserTiles
#G1
C$kY
CDBurni}p
yEe w
22RT
*W,j
6);d5
NZ;C54AA3F5EC98E04FF99E0EB6AC3'';Z26F2F7
C[Kq
AssemblyCompanyAttribute
G5+"
startupInfo
vMes
\ C
^U@5
d+v7
<1 *Y&
c3&^
O}6u
(?q
")&B
.EB
@
zZ`<s
e14
=/Hp
'%[=
\pWKP
#T8)
1 Qa
UsF&
k >Y)
|tL'
N_*|$
AppDomain
Douq{j
W'r/o
}>Rzh/s
+Q,3
|Q;8`
jpA.
rag
rae
}C!G
s2%
Tk k
7v6P
6Hx-
LU4
=hs
Qhngle
R:\-
VjR3
{LMmF
) [X
MCF4
{AhudN
) s"
U2l}
sUKR
Mf`ZA
4G^Y
LoP*
&li{
s.nM
qTBn
}St<
A ; Q!U{L
lILq
+S>%
o C
[8L
\dgp8
E| heD
B1Rp
eCds
CameraRoll
1zA
Control
V 9m
:V%Vf}
#6m|3
FeLgV\#
Foc0k@
FGhm
$tCX
My(+w
qae
ToUInt32
;g{.
.@f)
F xmx
<M r
f1_P
2|cH
Type
6I4{
#l4n>
1y :
[aV|
*J+
Gi^kO
F+wY
QBI*
gn6
Sf3J`shData
3= D57
I{M"
wA@
%pz.!<P
Uv)_Oi
/:-F
%/ 9
\0&tqD
2~ A?&kx
f~2c
@zgy
^Zin
Iqbpv
a3q^b
xS15
6fg>
&_3?[m
dLC8I
)"? {
\&V'Ba
M}~
VH+d8
oTfP
#:JE
?fIoU
+/r
Pp[{qZ
R:ge
S>t[
#_#*
H2ivU>g
M@]U1W
*2#o]
O7H,
fyxt
GcFb
4br_
SW W
vcfg
^Lg&
wbuk
originalPrcg
,!fhN
VKR|
H(/6
wb1R
Q7dZ
292*$gX[
4JTn
<mnnt
j0=y
zP u
4gE[
95jQ
vJW\c>
Zl^ f
t}*T
Gl>v
,>j=0B
Qk+?
] Q6
5IQ{'
GetString
{Ab5
#rp
6vd`
MjP
.g qn2
I@-@6
(}M2
7un34>
}N/AV
JN[Zh
sp#I
*YP-
+8 /
7apC0
IDB!4QWWm
Uf0l
Q od
P x@
{" y
FXRAN
FGK~
:Sc\
%Tre
SkipVerification
]f][
qu^6
xRL
aC5@
u Yw
Monitor
I*z5'
>Ou5
=Module>
1W,`
z'uT
qtDL
bK|(
XE2Z
YO #
9GDn
' ~go
2;.Vr
^Hw.7
d|:CM
y)VH
M xX
:b
ac !
TNte
\B(3
Xvd
U{rtem.Runtime.Versioning
TDUx|l
r j(
n!Gt<2
b~no
K1y~
xdt!
7A-)82
X1!]&""
`.rsrc
H=91!boj
1,p+7L*
LL c
QnK@k<
ezn=m
T!8
k= (
0aq%
xCy!
G |
u`P t
?RVQ
?I)h|
\\Dt
^j:-U
[Z$$
Gdy
xB/V\
"LR7d
K fb
+$ny
().,
r^?v
.c[2,@
/n*,
%j.[
`zKkrmAttributes
r*kD
,Cqpj
j eb
H9,[
}X5C
T`pagv
Y6Eu
Xq4P
chky
<e %
H~}4_pi
jkjc
o-j3BYe.
vF e
[F*\
h!~\
fr2HKm
mjiW
WebRequesg
{Y_S
xv!+h
K;@
K1![
SVjs%
NetHood
Bl()}
wCBxF
6W> @
sy`H]
47&;.
* FR
Y/6}
I^5H
(
CU46
:. 5
+bL^
1{o`
b-)
@x0p
.;%
Mb o
yVT6`L
R'h3S8
JgqiAlgorithm
>3LvbA
-BF!
Ne)7
htZ:
e0IRJ
kernel32
W mj
=RWb
qIw x
R`rameterInfo
set_AutoScaleDimensions
0|oP
z '5AL
"2#<Zh
v]3 G
2-!X
EW~/
s} m
#S?[
Qn0V:;
$9a2b9547-5549-4d03>.k-7+:cb067ce242e
2(4w

rc*G
BoK@Y
0i9\
FAC6XF
SqO
,o2we~
j6Y+
!]a
~+J-
Dufe
FlagsAttriqb{{
U 6r
RU5_
ZbiS
4KHw
YM>#o~HV
iK35
{x)#
yb(q!
xn7j@CJ
uYI%
InternetCache
eVt*
GqremblyCopyrightAttribute
O0Dx
J H^
ll@|
SaAlp
( OEC
System.Runtime.Versioning
S;)C!
Tg#+
p._w
K)a
[c2 gO?M1
=j:%
IRRh
IconSize
CcNl#
XBl%2
h>g|g\
27!z
t*>>*%N
;Q5F
q9](
m 6p
Yv1U)b
g{_T6
Ry:';
?Cmg'&
dD,|
V}YBdZP
v1kFc7
Nwx
Downloads
tx@/
n5,E
@8SA
ProgramFilesX86
B(_@
OC6
f .S
rD[E
)\)C
Sa) eI
L<{J
4[((
\vgjn22.dll
#Strings
{!,3
Image
@UVH
6XR)~
VjT0
t{+
JJn~HQZ
C8#Og
lbE`
#@#Dq
#{:r
,d,y
#T hJ
{vpcceHandle
k}(} x09
nn,d
Jw3G
"p5i `
[O
;[t#^
U /
8@7 p"ARd
`"aC
v-<@
VXO{`q@
R5-B
@brz
(i"t
Q2L/
0wG)0
M:G_fuW
![>
6X[
NR{CHfj
SLNN RQ-
IlCR
bI> [
TypeAttributvd
"=&M
%]Oz
\gqrgl.Net
add_AssemblyResolve
J8Cn
vh(Y
d u|H
Z{ "#
(U'#
?xk`
F AO4
#8[)2J
ZZol
3[.>oc
f}~!^
LMBf!'@
-~0'D
qg}er
%W"X1
L X
AssemblyProdft{_vrphbute
eC.T
lac'9
MU;5
@ +$
T;C
uk_
Windows
E6eg
VQs8x
y/-w
K]R[
D& WM5V/]
&),g
3| r
F3v}c
_qFe
]mZ1
r6T3
q:@E
'*
2 au
V7v&6Y
\ lN[u
sf1*)
k>.-,>
EciL
&Yx}
A"cBgv
o/3-
\zsx
N5 b
~/QQ
{i$}%|&Hh:D>2,[n8k^[jIK2$
O*p
nij)
0,^V
3_U)4
@JB:
FQ3D
]mkonnAdminTools
|=Spr.
F\_#
OTpl
J $
uf|z
.ux5
VD~e"
& >.
n6 t^"#n
5dKz
m Bh$FF
;e;-"R
X^$!
rGaW
H 4Y>6%
[14IW
-/i\
|BQm
f8i;
!b$I
Sau6
13:A
c'O:
(RhY A
Jjtg`d
w+h[
=17uS
RorzfpeGrqData
}n5@7
42
<;%|
}asw_t%
Form
70_
\6]\
J3#F
'3>HzSn
o+_z
MemberInux
C$caY
:^lz
|Ned
/mr%8
l`rB
o`QJ
X[Ql
Tn1 *{U
@Mo.4
Delegate
k|y'dU
7btF
vo$ufR
sWPI
e m6
ozZM
1x9#S
0K#
j<Bv;ob
U)C@
|&Vn
8c^6LL
Z~!znj
CqplicationSettingsBase
XK(
^L-_
gIQD
u-hp*P5"Z
tCFKj
get_Bmp
p*X
1St~
IW R
Pf.q
B]b&
$9yh
|hI6m5 K
Jmn#
NRPg
d; w
b~1oA
AbajkkgIelpers
V""
LQjRT 9
M}&3
`lPK
~<18
]c' 1
.wNK{
b!@[6
k =r
q}T=
aK %+'
NnckBits
Z5L>"
.%XF
xat8
*FS@
\y}Y
Oc+~
mMbn4
k[ WWY1
/ory
'J,#\d+(
Contains
glvq
ResumeLayout
S Rz
cB3M
H,j;
6t\w%
iNl>Y
ValueType
%[ |
System.CodeDom.Compiler
g*&(
(J.IW
|wFt <t^1
] $
:h+v2U
^u&z
h wE
5xoM
V's\
4$gc
to`!
@L4e
t6Vo
N`z<l
BGg;zz(n
r28[
5-9,ca
CzShL1
"=V
}D @
TDU@
setL@fpfiuRtyle
z"E_
tT4|
`bn}
R+a"
Ol#e
PFq0
h9W,
81Of
s]{+t
LVfF[
Dvqnknr
o8E-s
\P/M
(4YR
(f f f f
}'Si-j
C,gr
i..3i8..i
BZ\~$q
:J3j0?
,<Ho
49+e2
,~F2
g]hd
:YJX
ToString
JGr!s
G4Xzs
WE3.x
<Nn`
U]:
x>sI
/ 4i
U{rtem.Windows.Forms
IhJak
>aHQTe
yN; vP
J<Cv~
L!zj
c2xM
Qgtd
JSn&)%
m%"Dg
k Lr
@)nz
TnFra
\<RV
t~$F
Q5ZV
$o6BN
AssemblyTitleAttrzuzjg
,e`WG
!88&
&sI"+
2?H+`kMj
Oxu9BB
,ak-
get_StatusCowr
Jc_P
j$]R
.BJ0&
Q} _
/6-k
$McT
2wVd
8.7j
x55~O
ZWlr37
1hq
bzZ:
MMGbK
oletricAlgorithm
-6VP
9@yL
PiU%0E
Videos
31r
es[K
J,=t
9 #8
n_eI
yW_B
\5x]
TT3,
/"(M
B=C
BG$u
~lG H
|;yX
.gil
QublicPictures
%N?6
;#m_
:Ku?&
~%!E
n-ZCqa
`'%^
HuG;
Us3QyneY
sY3V
Q3kg
Hi T
/&M2
y;+K
jA_F
Sj}mkrsess
fx>2U
PjBL
2ZSZ%tin
aqmgN
DsomBinary
[mY_v
Y& <9
<x [
fPR"f||
QKtT
\3 zX
flProtecg
`qx52
'k;+
Main
Sguq`geBoxIcon
kIPQ
?9qV
=` c8
3rkR
(mbQi|H
\>#~
=5
. q.
"0=1
"'(q
m,"U
/Ja"
z3:;h
v4.0.30319
rl`\I@
"qkX
]t8;
XI?e
Miu_g
(k2j
tmFAa
=3vH
r9fLbm
'*E*
T|[`igt
ws0cs
! DS
PublipPnsgRcrks
Module
a;8apwu
T}(v
@w__
WCCO
b9>T
+-$^
K19L
1]M.*
mYhhKj
/c+'
)m>1
${>w
]0T|]
irc&
/c|j
@.reloc
zY nh
&Jbs9f
hPTa
BH[4
nuWW
Jh g
o(:N
WriteAllText
rs@1
b+"uQ
*Y o
dx{l
C_AN
B#gT
B_ -
-mG8
kfZvyG
jG;no{h{6<
9)Vi
W,'nP
! 2018
'Qy89
hd5
w$!U
(b1;
t[j}
Pkp:TdW {
c%'x
r0o9@
RFg5
Jtsv
z^fq
PublicRinggxa{q
5 ~3
o@kmesCommon
TV*P
q]SD
I<0{
TT]a [
v\&m
\9F'o/
OP-g|
AyD?
dQe5
f ##c"/2Y7
*>+
RLen
RXJk"f'
]lJ$
p>UA
IDispo`vmrg
QYk={!2
c 1s
QQ50{
n3+W)
$FC
*> G
fby*x
87#Q
]nmrtPath
+z'{.4E
c8}dYk
AsQ9
C/hLV
E @d
)Fy8
FileStream
CB01E0B0B937382A7E8CCWVN*2@11CEB9ADD9A77
`2v?ME
5 D4
_l9!
THNn
3X5y
)b e
y,+J
D:}/
HR @
}K:/
])4
/sY#
t1IPy
:z^2
+A? E
q6
*Mpb
ReadToEnd
%9c~1
4okWZ3J
Ry\>
(fXr
Z$r4}]
"t9Q`rR
c`jcjDhleSize
StringComparis|y
_ F$
} \Jb
=;.yD
2m a
} @
q%Gb
w3);5Wj<
b,o
[_v1
$u8F
|_zq,
epVp
'qB
j>>FA
sX<
0DL
u-L<
^A b
@*H^
8H6`Y
Q01J
AssemblyBui
kl|,g
:*z'
CTvc
0j}8
JIQ0
G R
D"7_w
lF&u6
3imJ
System.CodeD|z!]mkrhler
oIf$
r) @
zpjQo
4
/[E<
YawSe@
N"L0U
VVP{
pO%R
q?(@
5;oJZ
R2p>
:(p-
4Ie\b
7y[z
-?aW5
jnQ
XQe(
w}Ho
T1}>'
pR*.
dkrA
i, eA
1`28
J3I[
Jf?)E
>)\f
6Fl 1
lpApplicationName
D:'M
m;`v
hi^dmW
\{rg
(A<Z:Q
~1s [
Show
AOC]
BI>R
P-b*
ML6*^
^r XkM%
RmBhar
x=sc
E@mA
!$1i
B>M#
dIn+
217
GKxD/
GIhK
<CQA
hQ*3Gn-
xlE6`
&'Z=E?YW-
N(!V
N S
1(@sAI
Mc9o
rZ|=
XU b
Lqvf
0evf(
$rWTNq @
-+ c
3i}I+6s
^~b6
`N.Li
e;#BU
"J+dn
2dx_
^ L
=(FY
QdndTo
1KUxR
\}&j)
h\Up
Fd,K
d?}%9
U%~~
@UkT
7]63
^\lAZ
(jW2F
]v)h
9HHA%NM~
vW 9
fLMc
Y-}JP9F
s5|i
< uT
03mC
fwwB]M:
Yr^%y
, 0RP
<0J\1
`YbA1S
quem.Security
KGW\[
]|XJ+
e) h
'?EGu
"#i7r
bO $Y
I y
FzQ U
v^!:
:m@<;
_n ,n`
Fgcb
7E(|:
_vwp
sWj
7Ffp
xEXK\
k3&H
C~o
}.R*
5}CK
[DEO
],aq/
Pn)p
]z3*
pD[>W
rqu8
>*|X<c
{q$V
J7r
P.c.
Y)_,
I9&C
.NETFramework,Version=v4.0
shqGv
|MpS[
}V(7
g<n
'aY<
07)N
Y:_B
RorzfpeRkmes
eR'Y
u[JL,
;xi'
5En8:
VJJ=j]
CreateZy|jchad
value__
D`P<
&'Wy
ujk9,
8yieI
!&z
26T@
}m]3F
+Gx:/ aF
&JA0g7
N2-M
ProgramFilesCom~xaF42
$qvBZD
IT$m'-J
O)t.9RP
jSTM
_n-uO
BBC u
*WIn
:K<B
qa<8
j#u
F{)\mN$
6c-5s
[) d
nEMw
Sysgrb0Qcatrity.Permissions.SecuritjGjlooqrionAttribute, mscorlib, Er}mkil<4.0.0.0, Culture=neutral?7_k`jkbKeyToken=b77a5c561934e08*
l*/Ro
JK\2
]{FfA
/J
M^ x}
+8b5
[6dsb
%l>
FP Z
Yp:T
\& h
4H '"
W&w5&x
<K,%C
Y(Wx
|uTF
.hwM
J][x
MWHdL
+@-n<
StartMenu
rLsbU
KT3e
rhR
*&$i
e|$8
2 \H
<&t,
|V Xs
\4VW
{,Kb
2|0]
8= ;
,'/l
@b~0
!WD2f
==?Am
PO W
]mkonnPrograms
;{?0
R d
-4IV
ContainsKey
_Wq,
N`>LHY M
?e(
1 x
nPx-
HRO[
hn !
t{>$
;s?-
.N 7)
~!?
m7tn
vH2+
"lMr
L !Q
MonitorPackageHost
h?Lfg
QCfJ
erL8
a~^fDq
1<s
@6,=4
O'al@
R\EZ:
RbY
om>Z
Lx21
zSPYPLpz
0$<|
)8]<
BuCq"
)1^d
7mTA
00d\Q
#9`Z
:xpb
4x,A=~z
I y@s{-r
Vd5/X
UWlL
' jz
3 ~
RrI0
}29%
5j$T
>f Q
H(^g
VLuxr]
=_:W]]
SUsSystem.Runtimv9FpvcpnpServices.CharSet, mscor
=AzT
V4h '
|NP
,2$r
G!bGM*W<
pluaD
TDL@
~m2"Pgssion=4.0.0.0, Culture=nefc}
h]!aHQ
ydKE
5; fP
|g6MQ
yucZ
,2$i
Qm&Qk
4L,9u{
0+G"
2TPj{
:[DS
)ZO
ReadInt16
MulticastDelegate
P\(pV
@zBR
W3$EMq
2"""%&"
<wk
$vCzT
SzTt
UP2W
F"T9v=$
!'P|H"c
$=.$
}g>8**
UnlockBits
GetNonZeroBytes
eL]
Y{vd
m-^1 v5
bc?l~Zl,2
49|]
idPA
mscoree.dll
|" 3
<g[S
- [r
qI++
lZ8'
Q&RI
$KJ2
\\zs
2Tbz
SHSetKnownFolderPag
`k-JX
+_vSX
}`E
P2
o&=@
Fj|64=`
]NN]T
4T)0(
{&qk
Wa-3
9mJ}Z<
izY|
,=@*d^
G/*0
fIvHi
vzKp
h q;nX
FY`sV
d$- >
X:uZ
8)!n
Dv3C
?D 6
"#-4
YK";
MMom
k@"(
T#Q~
Engie Global LNG
V7i@
$WV\
(Rg`
)`ad
&8@QMu
$xm>u
ovj,
USh~
FL<I
HXH >
j44y
AZ[2
wfOAnUUf
^mIH
0"TQo618
U| @
a`,R}
eNsd
Rmc@
I]NF
HC:]
{Y V
w{~G
<=u
]@m/!
0]Z0
lTN[
\LJ3
]:Xs
Sysgrb0Pcdmection.Emit
fz{jsmbg
[ *X
Ey@S
6r>o}
2>.:
=Mo Ot
SQ!L
pK;=
/K+'
22M4J
[EbV
C]hu
#CC(I
u,xt
pZuS
`D|p
Delete
\$W
Exlw
@L0S
44!#
h3~bU
t;qx
@$ @
X{JO
$EP~
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.fm.resources
$!q+
E Cl^
NsCH
s,+%RZ
?K][kR
-.LB
` G*
}_H|
i8hL
vg:7
lWoCv
2v?(
, b_c
]|to
@N*?
NAPP1r
G68I
me_n
Oxi
Microsoft=AfmwgnCasic
OrOdg;
^;fD
M[^+
|(cv
&)@-
HPP>
;J~
"cv
bommandLine
lG8Vb
>VRT
*i @
&\gp
`h%E
+g7u
QBQ=
7ZK'
EY/G
$/EM8
xFdI
6* >
R4\E
$lgb
?Z-Z
XldK
|O@O
BsgU+
rjseadAttributes
r731L @
JQ E
Cc*#
h"'Z
^hc}
il?N
YpH6XBP>kC=`[kq{pIQ+98lb"
MJ+*
Xez<O
-|T DR
ACqf
v;bFA
iZK`e
&Km/
1Q<Nf
*PyX
-fP[
1~4p9
.VJU
oiDq
?m8L
O6Fg!B
V5Z+
_IR5k
,c=`b
jp[5h
,%N#
?KH$"
?gpoh
,^NvH
#g'9Y?
#?s-
j _C3'3
!1(Z
Z>?@
&f (f
P!h0s
> ^o
Ha:m
f zZj
7\~v|
zuEpdationFlags
)1dO
e)/o
pp2FQCk
R/4
^d@Qe9
t 11
Z&IwR
jKsJ
S 0 #
wRr
fF&W@2U@(
}Q6o=
~5NP6
A[S:]
)"M4h
( NQ
tuFB
5&<k+
-~y)}
>3+3
Aql\0#z:
p,Oi'
fD 6\I
}`<C
1S 9a
-;Uk#D
wc+[
,MJ.e
c#h[
u7-]"
:?vbG
<Zc
zyD^[
StackFra~r
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
@DE
22*8
_qxk
gJ[D
3}8z6
4/y
w`sW
\wM.
I"m^
EM>^
!RXb;
1GEx
w6[#
b l
6KG>3
Q-^~
|Q?s
TMu?
1#-y
| *f"
Pk'"W
L-_A$[
:1{s^
&zgxE
K)T=
Leh%
%JWH
gS7n
pb.q)
_Oo"
1HlB
o!yobfKu
3###32223
VvrrRtatusCode
,uTh
_|ad8`
L+GE
)N'.
O [e
=}8p
2P/LVt
|5wP
2+cs"
GQ+a
YLN
fap
ue^#K
15.0.0.0
|ktb
M8BG
2'f_ y
8=;l
z-Tu
%G9|_
H8_(
/B&y*L
<'_P
%II=
/$y1
D\?]
~LH?uf
ITH#
jbJW
FetCurrentProcess
"Jdi
N@h"j
n%JB
@nwv@msExit
XT<'
.xY5
zMQ=&P
{k_i
w+g|
?3aMMzt
Pm Pm
l28b
AKnJ
`L|"e=c8>
Ba)#
vzu
/c/W
>&$)
wo_dn_HQ
"Kb*
v|\ da p
{TPs
lpProcessAttributes
|1Cl
s @a
Resofel{Ogl`ger
kuJk/
RcNC
6tN
b/ d-
GT*$
eqvJs
,pj` # @
'`T/
i#ab
dG>)I
&' !
ui(`
kc -
g&C
y{3G`'
pse
skks)
UX9Y!MN2}H
GetName
A*&GH
_HuT
s`qR
56p>
)G&%`
*:+
qYJo]
T6)C
Qf;s
R;C
skL;
%e3n
zS}T(
u)#Zz
:Q}1
Z -Wz_
*zV^
ToArrrn
+pvV
CJ9$f
ReadInt32
wK/m
E<4
Vx[tvHm2
&_lH
43d0
~dD+,j
g8KS
3t2_z7
mKw]
cn"uW
QHaQ
F*\F"
0N"]1
]HD|
pjr*
/j79
w<nW
i(R@
]O !3=
)"aq
RT O
cG9.A
g\NK
2E$B
~2 T "
N/n3
o6sT
(}cJm
~lJE
k[}C
~&K9
XCzY457$
aGY<
b|k
ot7=
/-=g
?c!C
=}U0
E0GAv7
Bp;k$
C|V.&Wv
GO**
Bd\%
Ly@U
CarnjgUwcKey
\U 8
m1)EK*
i92C
T7G)
VFGG
B3gO
ImageLockMode
,3 [L1
7]r&
%u!y
;#r=
xbB'
FrLKeQWPl
uO_
Bo8'
.M ]
m;;r9
[rt$
)# @
uCpV?
rh 4
B:]Do
(W!=C
(}1Spy
.]Xh
wU/Rm
9 ^]}
\Z]x1,!
R^I!
/!vn
cN~a7
8I5B;
'P]= /
tC_G
q w^s
}Jt3?
_5]q
N)4m
x{':
W:n wO
e6c
fx\.
_EBv{!
Z# Q:
ZS{tf
^}_lv
`cl8MR
tI0J
9It`
splei&#
>xqg*V
ir\U\
>E0zh
.ajd
]pccueDecryptor
:omv
G[2j
(F ~*
x!v.y)
8K9t .
n H?
T@sj*
NRCE'
EDM1
19PNr2-
1 w[
& a`
=83$
svUR4+0N
u:Hv
ax>Z[ |
"s'7m
LL=
ZG 7
&ah7G
> & n
GetCuaejpvKguhod
Uzb>O
oivR1
Zy
5z%Vt
[j>5c
3Bt[
lZ <
PW]#&
PVx&
-*J%H
[?2(
=8^Z
>mg
FZ Ru]
&e3lKh
15B,
& 0%J
n2iE
[\7 &
Documents_~mlct{
kE1 _
an%'
EventWaig_npfjg
@:|B
J[UJz
7 P0
*yC1
u5j@
78<~
YeBEmi
kW)@
M%0'
xu. !,?p
`octH}-
WYGmN]
b /_/YF
}&,6oZ
h]-U
#2~M]
k@#tM)-
XRx|
* Io
GetExecutingAsse~ucg
oVnt[h6
{o.t
t4rv
@ 9!
\.Cb;]
Registry
oMT~{
GetFileName
ComVisibleAttribute
~jN:
x|qe
Z*+^
ComVisibleAttributv
v?YK3
U. <
0%[0
*z 9'@
'055
zM_v
Playlists
MRtb
e/z28
VL|s]VEPN/<YW[K(*LD><ze:"
_5;61
Tycr
15416AA105229A98F1484A178VTJ(GDA7B9CBABC
:VR^
K"]>it
rE# +}
s;?i`
SearchTemp
B^-}
rMjau Sybd
vS
%4$T
K^8s!
o IM+
= f1
-bb>
zo[R
]Zc(
mC.i5m
ghR-
&}OtA
^!,}
K&hBj
k"<gx
Q^3!
+BCi~WU
P>DL
KMzt}qqidu.VisualStudio.Editors.SegcfpeuFdsigner.SettingsSingleFilvPjpgtcuor
^!yT
vGqR
K Ma
WebRespo}dj
G jj0
7$M2
;-`8
DJ^n`
?"SJ
VS\][c
HGvW
UHRlp
}#_vw
}.=W
1Yus
zYSfJc
]E55
l'5n
KG:c
'U3y
Ma
Gyo%/
z@{;
?h 56P
\qzv
jxFs9
!z~!k
@b`yby
/Xb2I#
0+l
d<iT
@N^x
.oL~@R4
N&cx
&E# q
pJOBZ/KI%)#;{t";r|ABYgiC$
lbCy
`u5Vo
SwB1c/
UR=i
%2a
.BS_t
73i(
TWW#
^PTI{in
`vzFl
D [
6wri0
E0#g"
0LU\?
yx#
NL @
Hj:p*
}0[O2%
'-m^
,X1Q
}4 ?
?kGZ\T_o!R1/>A_r0pU0'~= &
C /(&>
qS~7
pZLx
oai7=<z
C.bQ
M 5a2
N;5
.NET Framework 4
dey:z/
fLya
waN/
|{qh
z$~&
1-Q
&8?&D
O=`n 9
/dFg
R9 1
&U\)
ZgD!
BV>s
k3& w
20#P
ZM-A+
mC\_
tv3O
80&rB
WMa7
W2CB
EF L
q i'
k}u;
cS2Q_7
'Q[[
9 E,Hhv
G.tO
XV A
6&q
B`>k
tYD5u
m;I<
Am:C
99/p->
+a k'
GetHINSTANCE
f /@Bo
`J$n
90=l9Kz
a?,
Buffer
/_<8)2D
>]K#"
.Jw_
t&vQ6
.7i
]X`^
Ho)_
Jf f
N`w^i
';!{y$
:fK6
PtAs5
O7YS}
OT%a
1%!]
k9=,
c C'Rs
?ih&
AR<
#A*T
UBvb
t7HK4%
\[p
MPIhr
|!Li
&xAw
~3'
baj9w]
Random
t='N
S #Hz
1*4y'
k&t9@7
2 {R
ZPt[
n I
N&@w
f|k"%q
DR=[
N Sr9s
n)j- 9
G&D
poXE%
WC '
(/fi
QWn
kT>\R
tT;zr
~>f5
i=y~F
,,)d
Gu06B
T* w
eB <
}l!6
gZ%C60
FN}X
%]hV
c^T*
1 Cf
f o6\
DwQ]Sv9
vtJ R
` W7
7:aJ
BvZ$
Mem|evMvtg`m
%xyn16-(
Protensq
lpBaseAddrvd|
>p[D
set_Item
2gg`%
Qe @
K9FH
`:i:~E/0
>#j
VR t
9kk0
zGby
1YNO
Exception
B1<Dk
<% tg
y DW^
s:qo
~>3o
$Hj U
` cT.
TU3|
_,e
XKBJ
TPt%
cnRtmbessInfo
`N b
p`<];
jC;W
Bph5}
,RD(
Zetdt
fw J
(}1x
`ce$.
$]xgN>
mqPn`
]g!(;
*k.%
A_G~
XSY
kNl1<Y
E5ROV
JpU1e
Y=h<
*tTj>
<zEx
F(n7
Hd'C
|sD+UbsN
v_gd?
nA?TN
R6:D3
B 3$f
G~pJ9
M*7<x
kJKt
K~/s{
\ G^
@J2W
UnJS
&53J:l
~,yf+kz
Cfo}
9\]E
:<n
&Om'
2o9a
CD%x
UNK(:u
zqn9Gfk
9SBp - 4
IDAT
~d2Bv)s n
M ,?3
plSb
Q(dTFg
?^m^
0|q@
\wg3
Math
^PTIxfk
tVk:
cWq
wyc
$[~=
7qU2
procvd|Wl`msmation
W j*
I%54
" @yx
|A."
vIFi
-YUR
$C~a
cmdCopy
k P)X
>UWg vr
1~2U
FreeCoTaskMem
)m^(
">.$
amAR
@yz*
`c%Q9#u6(i1\PQ<`y})fQG:7#
{xbM
YX(_
Q# PM
R=f(
[9_#i
^yCG
QtrToStringUni
E[gk
k|U"
3NHH|5 |
Y0DsVq
3I'
ET \
8tt}dT
qV-q
Uty0$7
6>DGO%
$dK#
;)!|6
7sVt
N>"]9
wF]2
l".b
vzl\
fc:
8)m8
`$SNzx
N:t`y
Ig8BM
1rQg..
uO>S
+YXt
Lya$
Y&"h
h^YH
R`}*
!%++mH [)
t 9#
BzH)
'QH*2
&lw8f
hf4o
^O~t$
7' @
'<2yT5i
=m|~
wUKd
HH(I8C
proce`d
Ux_
J]]l
P+=D
J <N
ufq@c
(6a*6
Music
L4 {F+
Rrzb
SRL?
h'q]
%`~#
AssemblyProductAttribute
f]8Zn
bj6sl
*1LV
cR/6(
^PTI|jo
l-'ASn
g>FA
GetFolderPath2
A++
chh mm
lg~3_
<Module>
jUl>
+KSn_
k2 0
qneEnP
LA@/
g<`|
6v'oq
-?bHH
@ u'
;6sPr
vjL*
'\2
s@^u
!!v[8
)sAQ
vG9ka
IUOM
wanm
@2;69
]6b>@
8pB[
RAFT
3 3 3 3
SamplePicgb}{q
e#E<
A8++?
AL_*g
6s-C
XW1?*
P}tL{
p\ U`
* ZQy
!$)W
Q$j]D2
so_vl
Df* ]
~sl/u
nJ(H
pX @
SidebarDefaultParts
fyo%
@D+lo
bL<H
eL!W
k<UqR
ODpun
yk CwndvY
qP:qy-'j
aL-9C
Xl 3,#
$=]>~
UoGl+
rr
s;.,
. 8Pz
X Cu
?~ @
EndInv||j
sQsB
Exf*$
<5!
q;qR
C~ G
y('STJ
=A+E
*z@|
\}2E
nZF,L
{W'^
f DY
5 7\
Z#]
(%" s
QV"^l
8yE!
,`8k
{q1D"
htOAjl
_}i
Wjy!
S s6
F'i }69Q
27 `
Cookies
SetValue
c mD
]]2<
L*-`
gZ%K@?
%eB$
5GWo
Pi m
L~e<
2%cV
CKjnF
vyxHg8
Vr)kB
0bC{08
@rqDX
?L1-
~ }|A
Ip"xyC
?9agE
`XVN
h*A:>
t[L.mh
z.-B f
TjH,
NPwOZ<
ih8+ (
z @%]
5|]^I
c=La
:5I
rw1q
:`RN@
&-:ak
ASMb#
hS'9m8
fileNameA
YwA
A}W;cg
set_Icon
\Ax`
System.ComponentModel
d }
hSUx
=)7D
hCH-
ef S
BU W
RmMs(':!
F&b&
INxHKK
B&IIm(
C#Z#
EwP
A6A
RandomNu~ujlEcldrator
& S0?
"{Nz
)ZQ*
-)xk
& (5
,!:@
n Kc
I/U_
BwW+ &
N=dj
kF*-
* bF
j1;,|o=
jBSzBT
kN [
5>D^
<d%I
System.Windows.Forms
e QE
4.V>
B&#K
*M["k[
KW v
RegistryRights
Sa<^[
U5U?
?(#U]
4Y;F@L
EkY&M
6P"|
R ^?q
O[Yi
S8VK4
lIkmf*h}
bu.OHr
.b?m
#dyUl
P{G>
tVQ+^
q%z*-
F41Iuhm
=7J;{
pu@-;
ilnZ
F wS
$*/V
^uP y
R!bZ
EA3?
M@V~
xF$U,
Mo9r#<(`p
<N):?
ocvdrType
eefaultUser
#/XS
rp+D
v#Wt
KT!eH
y#8w
A>[!v
ZoB>
fNOZ
e78
"LMw
g=aD
WeWL
d,uT
e^IM:-
1 V-ltr8
nAsG
p[9r
5t2@s
_ jp
t)rB
'r0%X
ixEe
'?~b
> Q;E
f+++f--0fDDDf???f
TD+Gy
=)(+
up \
o4\:
_%h:I
>x }yM
e~t9
uwk
@5FGN
"VI=
A'p>N
)M|(
5 ah
2<6$
B2\}
xJS!
KD:bcr6
c["Wh
`t4aQ_toIB#BduK>~Kc$06Wy
#Ong
q!A{M/
R@KE+?l
mEMt
|lZ&
Sl}
.,@
T :7
cC4qh
+#_
u Y2
w;\<
rcs.
i.G]
?zz 1
_890
J!:i
y5Sf
?uz x
I Tk<h
B LZ
70 ,
.^?Igs
zyuvX:
(Tz!9}
Dg^jcEb#O
\gqrgl.Runtime.InteropServices
YNg ED
`V,2
8FXo
j=d4B
)\][s
TFpA6
"6f%
5nN"=
n0,(L
TwotimeFieldHandle
/b-R
,WEY
f$ a9(x
!"&o
op_Explicit
hM_O
System.Security
W2Z+c0
^D&&QP3px
t"&B~R
^hmW
=*/@
RecordedTV_~mlct{
s"X
6=5H
dE*\>
\p^1mv
w^\9
type
RV5:w
f3.M_z
? bxp
~[I1B
#F y%#
''&q
?({O8RB
KcRRC
j'SF
d vT$
3 1S
<aNG
WzDRT<V
SetImplementag~`pDjcfs
lU:D
9i'{
'[-a
r$"=
7`td
UVGZ
`7"vXR
<e~
<#)s
\R :
w*}}Y
M^LNv
(C!q
u\78
tjr|
(FYb
*KjC
k/"n
M_JJg,
=iV4
} 9s>
.4 @
eQE%
yc\#V
Cfn6
KPp (p7L*
"Copyright
[ ^6SI
[QHo
%w|%$~
JcE.
,h^k=f6
*c:
L ]:
Uzxdcp
<rC.
i^IqWG
get_CurrentDomain
\brP
, (;
Ringtones
i4%[)
N@s]G
pog$
Ic@xt
0Df[
y@JP
2-&k
tX]|&c
VX1|
Hn+`>-
"6U@p6
3<Zfnf6
DH [
@S43
W06+
mD[S#:
,F@
ss(i
r%hdl;z
w?<pW
][/C
Tf#jUY
UNP?.9=
PublipS`}wkgots
]1pZ~
v)d;
wDq
Path
.( e%t
j OX
ocV`sks
89nT
2Pq$G,
CU]M
Wr}wtc@xtes
6@Ya(
T=%,
KXivI
#Blob
Sk07
&\`
C1+ %
QRu.
)COZ
1G$,E
v m)
VIM0
[w$w
]=Q{
f5IC
)Ztt
Iytf
JZM|
MC,8
}ue}x
F2[J
fot*
^.bJ
oqR/uo
tq#8
[IU
MQ-ho
OP@?
K?*r
x-CB
#9_:C
w>/
')Ua
@E&X
`S4h
+sD]
rv:N l
Q&Y D
)[:
PGZ:
Y4=C
Kz:7C,
Q&f
V5h/
iC!Ub
se=O
I;$k
R4{'
p`d}ePW
n1<4
Iu)4
z L
T $PY
-YtQ
iwqX
~d( x
Lxr
[KG-
'`LRZ
$a g
XgkM
&Llp/
kTEi
EW49
h2y{
P3E(l
-|ud3
j#Z0
K;u%T
R b;Eb
&H\hFk
MdU
R*r$[
N^O"
>At
v(:.
# 6)
9Bg!v
^dba
o(0*
4= 4
=4N.
ubS#
*-k4
=(qH
HnzX?
AOQ>
zxZw5
Ef]&
yP-bu
X!y!
PZ&Y
XUxp
a9 1wm
~r"eB
C%K m
'y+i&
pDE}w
c;7q
8cI
e:h:
8yH
"513:
dA0`
B Oc_o
Floor
z?W
g9L
x>b.
cQ3%
PublipZzmke
L~y @
J": |
Ii.Propeacf{q
UWmfo
v?$9
wY+116
>*NO
z%2O
3&.
s4Uh6;
GetDirectoryName
sD94qiB;
/ J E
bM:-1
\~z5l
eWcl
5aq^M
9|/1
_0Jn
System.Configuration
`m5b
>GWu
J ~ZZu
%iV@avT
"'Q.
I[f! I
6grR
L/'
Mh;=
ICJ&
ecv^BaseAddress
^ Yx
~ <t
U?c2%
{Czr
DKffP#^
B~Utt
f3Cy
NextBytvd
9g @
LyJY
(o7E
sz6
\qY7
^ )fLF
6bB<4
n=`. k
!0"w
d;xgV
v>bN
Klmv
g0 C
GoSM
(Z_.
A7@R
B'']mZ
z45;
m@ t
5egK
BS{]
QHgQ
aYqgs
U# B
3JJ.=)
=5S`q
H?)~
SDK"%@
poho
IconData
@k({
)cG
(9X^
b zl
`+;A&
YgrOdthods
;k9P2Y
]"P=
b=;&D&
0u!H
kyZ!I
-udy
hjDL%
:bRA[?
[g@o*
X47cUr
_dO_
ybaP
cZ?
ADX<
QLIGQ
GegSflgevnryName
,SJ9
1=6%
2TS!F
zD\9
0^T]
]5XJ:]1
l5ps9E
]Q>i
!68|
9KLt
Kdhm6
4fn/
]. 4
vP/[
K-w:E
n W
Gy0:]\
height
/ B
:K_L
510Rh
(Kg8/'
8yNVF
Z2"35
Xv rE
#wt\o
oxith
vJnieX
4w{_
F '
qIM9
9+SB
)Urm
bsZ+
oea(+
\?`h+J9JN
psD+J
' >A
Q$Nk
jhEFj
( fA
NWjN
6Y|}
"A(/Ea
Process
4eR
V4]
i@&-
3?p,
j,Y{
b~%7
Combi}r
Sjd{{o^:7
M{uvdm.IO.Compression
Aa @s
o gue
pD3b
FF^/
x= v+w
mz^k
ImageFormat
Iyl#$
xPbC
g>u{q
|X?Q
:%s5
3U0'uTF
nwZo
gZJi
%%bJ
s"Z{
8_MK\
9?lp
`)c
Licrosoft.Win32
$*A(z
=_^*^
Q [ @
System.C|{c{arknns
)GM7
1tHn
get_Q{`}iUk{e
_K^6
u b`H
System.IO
WrapNonExceptionThrows
r>uL
}PV^P
wV+f
bl*-
7([m
Z?gd
Hm[H|8 N<
blAg
E|Xx
z4V
ec4`"t
v@,
sS :
C6W3Z;
NV<-K
A bM9
}f0m]B
al7tr
) 18
t(9w
{S{ m/
B9R(
\@{u
(zKX
Tkh$
)}-e
EZ\A
la2>
NvUi
Nk UQ
Netdx}uAtgeential
a^vm8
HzwN
k9uB@
hL[lKZ
gdt }}g
~#]NrHMjF
eThF
>YPLz
h_AU
\{\g
vywpcVu
Tb|(P
CwV]
=i93
dMd
_-i?qjYT
aPQq%u
^32M
Pq2d
593ox
;s}I
MK?Y<
PjjOcviodImplementationFlags
\ud=9
op_Equalzcv
l0}*
k!|A
/9YY
EMmV
s,boX
?k<g
v\Wz/
f<\x
\gjpPcce
vedt
l= @
Q01QF
g(3&2
hM\8x
Exter}vc[zegqtion
v7$$
_]'@)
Px=HD
A^ZT
$UCF
^~(3
BD[c,V
]X2c~
SNCu
7 9n
\nQ>
o)^@
&YpQP
oov &qK
_{{
'<TM
g uz3
n6x~
l(}0
mSM>`
@I V
m*\/
?2i.
scdt
N0~$
]@iPM
wgZ-
;)e.A
-KPX
4w.[c%
o-8@_
Me`]
61;g.
1[U,
#iOD/
l' ^
=X:5
VirtualProtect
2`SS%{in
;.v_
qK` @
\-bq,z>
MmZ
A34G
bytere}
@ T
V(Fdk5
*1
ZWD_
O)U}]}
Tf=T
WyFY
94 ~
IuZ{
# Vs4
u7I3
zG9
j8zY;
5%Sr W
=[=0
System.Diagnostics
3+Iq
2 s\
4`Xm
OriginalImatr|
Q%t9h
> ;M6M
G.za
VDeg
sY$8V?
{uB$
v#8y
pT @
tD]8
rxXf
?r6B
[mfO@/T
~$hbiv
mcc 6o
P;^GC
K@O6
JIF:
TT `
yq_x[W
e._R
za1J\
; Z9o*
i\ 1
^\)d
e c
q{++
~* d
dJ|6
+*nR
CL&C0
} h`
A@!rBv
Mg @
1B<O
V9/:oL
36;W
zzOo
bInheritHandlvd
u5<Bp
g8S^
Ht6_
RegisgevUg
nZ^^
RegistryKvn_{pkkrsionCheck
get_UTF8
D="%s
l QPe
)q%#
B4KTLLFXdcsl;,Ds;AV$]3u)"
!y.~@
Jtg.
GT,Qr
frGwF
Pz ~k
7GnY*
].Z>Er)E tO(
s i^5m
q: N
' ,4
A)8v
Mkd7 ?
zT-F
Izx0G
]Z7~
X4Rn
%X#
YkA|
<XW#
q^Krx
gTc$
Wg9=
^bv.
*8?r
$'Yjz
xe*Y
; ]%
I-+j<
n%a@
Rt-G
Je\G
'9JEb
851z
z1O?
4N ^
FastCGI handler
(>d+Hk
kl!a
kGF|
D u8
obcT
Ts-a
4">"
r\aiR
;8Ew5
kylE;X
Z|'S
1 H
TEv^W
Usve_lm`kmes
sZ+3
}z/
m*?9
F6^
E}t`zkhe
FHQ&+
5 Gfmq~
tZ qH
,q[#
epdationFlags
5Ivit
Z1F<S
L[/f9^:
)) \;
aP
3;8%O
[XD8~
+:ml
Ailwersions
JJHZQ
8VAr
L/^3
"Fn%
b=-?
SwP'
O,eu
u_'d
KQLO
|W8Q
!s S
=="Y
LwhvhmeTypeHandle
l~<pgr
"]Lr{
hXl##
~) P
"##8
Tm_;
C"8$
=x-;y
zOTs
1jFM~E
k2`:
|W8!
I^!
n1V
AESDecryptBytes
~u/&
rt%1n3
souj
P~Grh
:(|=
;r$+x
kQ5p
rWW9
),p
1a3-
(` ?B%
p 2"
C>J_#
Q:do
#(FR
21;7
vm>
H"J V8
JK X^WM
*6.J
Z9lFIm
GuidAttribute
EC
E K9E
!=zZ
Ng
zK`i
6D@ N
+hYm
hQ![
"y +
8Sc/
_7:k
8wNC{Q
k ^Z
(dF{l
b#{K!,r
(5:j
00`
6DTMm
>Xy_
wLg3y
"azG
#7"z
s0'G
sn~H
L"{L
saltBytes
V{X6
!o$h
Fpj s
~U3I
c+ytb
UInt32
Zn]r
I^q5
^0/y
fab(~
0qp$ @
a|-L
Q&+#
z/]C
hM[(
QHDy
H8Ei~
G'MCY
XI-i
utHr
}0V=
0/H)
]9OuS
~'3 P
:,C:0
Z4#c
n*"QublicKeyToken=b77a5c5619 #j.:?
,rDu
#MYDS
PicturesLibrary
DGpo
% 8
]fPX
X !D`-
,-Xt
"C]K5z
U}&8
u{ V
I,~4
IM?Q
@m^`"
Ikt/
<_2q
A=\&dc
/^d"
HT=
4Jwg4aj"
0WR&
4#X^.
s2_y dd
[Mem
>{_G zx
?;=5
y4 j@
AEWQDb
872
|fYA
Jrjcr
AssemblyTitleAttribute
$BS7
ebigaciqoguqad
L$ 3
^>9c
z,ew
}OzS
_gDX
c),#
Bj x
+f Y
xoaC
uh{u
Ta^& D#m
|#"
cCT%
f^vg
xY-
t{vk\
?naN
6Zl
GaLi_
VO E
Z h/Z
vP,p<v1G@
$D#~]*/r
#Ix.
jj}Y
kzuh
QyT1j
sqhW
rWr|
7}OuI
9M}F
(Y]N[#
*b o
F J{
PlR-
H5n@
&`b
bXK
Zw'\!
pTMI
Int64
s<#w
N>DW
a@_c"
Qqlit
';s:
Sjwz D
nOL4
z5m%
7w02e
<X "
ESC#FL
@~6<H_Nx
O~ W
PADPADP
kOT*
to@`
15.3.0.0
DZzbbBD
|ZSS
=, &
fBY;Ajw
J 5s:]
DNk.
Z"f?
@~ m
- 6G
7<`s
TH_:
RQf
_# !
k`&/
C& Q
IV G
# rjM
D?>~
U?`r
System.Security.Crypt|p}
8R0%
[s.
v{e-
D[ S-x
8NyB
-&z-_)
4;J
4.7d}
FrameworkDisplayName
MXY_
PyxP
djj]Gpfuments
gvcPZg`ctltNetworkCredentials
%!4L
TQgr
data
a{bd
F J~X
)' v
Twt]
YUmF
{mS;
%~>O
x7e%O
)V]>
E_^9
Qwk5=
get_Chars
XQTS
:~f-
gNJ9
^J!e
7X ;
nizg
ewStreamNumber
q_?
VS9%+
5kWwJqKc
? ^e
"?EF
7c~)
>Bx^
-_~H
bkMkI
nq%f;s;
[v|e
II]8hq~
;RxNl
j*n
VEfv
>Z#I
^P >
L:>
+1}=~
}f|?
n_:O
>""&
:+n~s
5Nq!
F }B
J cc*
"(! !Z%]g
|orX
`^e.
cPzO
u{o4
P]b >qC
lpContext
VJ".
ONI#
cg.B
t|R @
N=9$
Tl$c
=$+H
M<)pT
(LX
eAqW
L"K;s
}"J_u
BZvyj
BMrF
\(ZL
Z[-5
8R b
$9>K
Lzd{~3
q b(
e@ P
FjhS
lC >
m.NcP
DMM
32)'
Assembly
D4F481B8E487+TJ-65D2DE3626769AD50050AE50
&~0n
(}+mTuyB
Qy8ab
l+f?
Subtract
[ 9d
/ade
k@2s&
get_ReturnType
8qgI
System.Drawing.Size
VG3~
vB,2
2qBo
SuspendLayout
s_*
!:;w
:VOT
c1R8 Z*M7 d;J
?_;9
##~H
hEB9' L;
^AEK
D1/7
wm x
RD/n
m,)_r
$uYu
i>t
BI t
set_AutoScaleMode
~e#+
c4"=
;$xW<H
KOx3
Rw#}:&
law54f"
NQDr
\/6<
vd<Q>:
-Df|
7,cZ
q oo]
${l9s/W\
p -/
MHQQ
FO;]#H
ParameterizedThreadStarg
) wz?Hq
-\w{
kvtf
Q/p=
b}eB
$nmL~
; .
oCf~
$@`
oCf@
Mx?C
GetProcesses
:BQ[J6+ S
V5Kh
cHz(
cr6
,lV
|R#B
?Z gDU
(2<
, -3)}
YtE,
;82>
xM_2l\
6DGX0,
}L#1V
~|1x
CC6?
(%Ip
}-sd
`|c/.7
knownUxczgt
Y9)G8
~6D7Y->P
Gby2XR
zCPrcx
h! ;
param
uu,s%
%+)-0
`v0qB7v<
hU\Iz
AS}#
(2?&
CNv/
&9xO^5
9"`}
lHy_
\@?C
jun
N*tJ
itJe
~ (cx2
-NWv/
S#4Xz
N'C?j;Nv
^aexn
\zh m
3OYx
yUpt
M$'k+n
%fY0
gu{F
Vez
cW,bnT}
]\Cf
d(c4k
p9h{
"av[[
y T(
~3Ud
do!C
?fu:
o+d*~rz
wY*V,
ErYn
:B/#@
n$EL
Ds r
Oi #
i7IFo
a z)?
/p]Uj
=$l
^K;-
01,0k
wa'v
#teX
}b(Q<\s
vca|
08_r
H`V+y
x]QP8
2+9;
pSg lGz%
YgrOdthod
n9I8=
sH~R S
D[ UF
"-f}
AssemblyCopyrightAttribute
>qpN
mH`Y
!qH[68
KG 9
UserProgramFiles
0 ~
zVgz
Oe*J
Z6 7
Npu
pF=;OL
w.XQ_
CwJ3
6 ln
YWd$
2w&:
jq
A ?6r
5axx
6\xJ
SizvXi
~FN8Q
];Siu
+3AZ
U{rtem.ComponentModel
ZV]QJf
c`P
o2+e
;ab-
O(af
2>07%T?E
r5!-v
EGE6o6@es
TDUx_
^d{?
qQ* _
:E;
}"$^
mscoarj0fjn
==?2 >
DeqbhycdndAttribute
+@|
r Jk.
H"NbvI
Templates
Kz=a
j W
!Jmc
R=sU
{5IsY
TLK)q
_f@e
RFo*3
fc'
}Pw?ixJ
ga||
]IxX
P(>b
_1K/
G&SW
Pxajcevr
.$m"
bZoL
O$]M
96] &
oUVV<
.+|
R+YI
4<%c
uRJh
U+ h7uN
='+K%
nSize
x@vv|G
U8H9s
?< j
oZE
h!W,'
kFj2
UkGy
kZ-a
[{J
t ?31"
K_F$
[ C%
>18'9+
6Y5Br
:E)y
Fj
>j3/
.cctor
:88L
rXE
Mrsg
46X"qj
Sv c}
krG(
QjipVerification
UnmanagedFunpcfqlVmhnterAttribute
6j*N
T7ty
x\#Q
r ( v
s*V.
ZiN{+J~mGqqb:{aGG-&?O!+C+
ILAG
@4a!
yK7+^,$
6sHm
KnownFolder
qKw[
i48!gT
NZ<k
2V>
<cn0
jgI}
iB la:
MvgoWrite
B;vL
Go7
M8W;\Q
v4 !
`%;@
get_KeySiir
3%Z[IV
2lgK
~(nY
BaSSq
2 + b
82[=8]
;sA2
System.Reflection
Z6hl
.RW(e
`sc>
W++T
`d`
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
@" :
(r @
S:,W
}\PD]$^
X2P?
z4wk
?} f
ufB7
^m-R
#fXJ
Fx+3t
VIx|cC
_;Ze
MessagvU`f
*QA~
in"0
Th]-
^ zCv
$_id
?.La
n /3
Qs S[
anVZ
(xSnQ
r&NL
k/A0
cI W
_mW
mgr]Uimeout
vaA+Ay0~
ah$*
|8 h
_C]<V
@Gq.o
$|AH{
r 0
yi 7y
AssemblyDescriptionAttribute
%(G ;
4D wg
9T_"q
Asse~ucgAilgigurationAttribute
Q$1O
ANq v`,
@5h,
@cCR
@,N[`
N=%6
tj%
Oh.fG.ar|qwtads
D3H>]
v)~
Oc$v$
jFnNg
)R X
`h62
kqborlib
Wbur
mE2`9
K?ST
"[iP
Hv~MI?
n^G
z1K]
$pin
g7;-
jNl6"
B;[b
[b%r@U
R}zM6
+*:]
fS[
z<Y{
O\ni,
n4c8
]-DG
H!cb
dUy7
Is |
Vaf!
dy9_
LF^`
LS9C
p<O1
i, ~
y_n@_
Y9yyG
B;[)
0enC
dfr/nc
U Yz
L 6`(
)NnyM
vF$
fx1oWi
H/Z}E
IyMu[
Ljq$,W
kI9l
9l^`K
r}Ju
v4)W
mdk9n
N*O}-
}GAn
g0^7)
mAJ
ndg&
c3x@
Mg,h
bsI#,
um!WT
,]P'
}y,^
S)YM
W}^_
&DAV
Gr~Y
On$~
,0Y4
DSBh
'%Ez
tz}!
^+pg
j3Fj
*OF+
6l /cs
+FHn
$EBL
7.S915"
~<'|
z+h9
&'d?
[#PmV
C/%.
;*od72
~]HF
mN-Q
D3f-
0Kz>
{D{ues
FtVh
'tI~a
-% O
t^ZQ
_)m\
S/p
-Ye/a
LSA|
mEUk
RszB
8b}3
Rv @
?@hh
x %>#
bKPh
5-Y.fKG]
Y][#
KO!D
axM!
qno>
|C*{t
ES#T
_D Z.
?d+L]v
~bMJ$\/i2"(B*
WCTi
|3t#
A ^
\VC2u
c8T%
l6%J
Q/RB.
/^| Hp
,tA)
UnVI
HdF6
UNNu
7w"|#
n6pN(
h,fYB
6Z(0
GetBuffer
UserPinned
Y w/
wNh;C
B`,2
s=M*
r*Bi7
GetTickCount
2 8V
6,[
X! eE%It
2ar@!m
K{ZZ
rrQP
wJN
'CA$E
S_1e
PyQ.
_ /#
>NBG)
%z;4
gJr O
(LDTFramework,Version=v4.0
6uW>U
w@)01L
tuOY)
K+`&
FileInfo
7E,<
Gbo@:
jy>%
Cn U.
d $9
UoIG
q@iI
9xj
_W|S
%0r2
IQ 5
get_Itvz
bn|(
=`V:
K azw
-hK\
hF=uZr
; Ip
hv1IS
^ha M
B$h$O
H4E\
b[sm
t8
Ju?M
wQ:CnRIB
Y'L%
g3*7
[)qjKE
Jvn{
5f.I
:l4~>
"^]^B
} ;4Eo
=:!X
h)`,
BD @
Y S,
ToGenericParameter
Pko
F:R"
Mu3k
&}LB
f#l\`
~c75f
akQNP
hE?;
H ;a
e7G0c
HQ@`
5< B
X6 L5
>Mh9
?Z 6~
:W(!=
f+S
.]pY
JPXQ
Wqc
p^V|f7)
+8rA
:{$
\H`M
.X@9
`({PI
ReadUInt1%
/WB
),j$
1pZ.
(9EN|H
1,4h
rl~H
#V[
jKO{[
0v{)Q
h.%5
Pg'q~
'4ba
D [3~#
^ u[
^_r%_
ResolveEventArgs
`TX
"n:8
0JEd3i
@H#VrM
U"! %
[poE9*
"vo>
8H{.Q
,XPlyiQ
v e*
<.t\
aJ!Se
t2P3
<Y^Z
_tL#
Create
&jF|
P%?2
Y>+
NFM?{
W#?E
G1ZD]K3|
i7^(
G?B_
zr5x
GetDefaultPat{
,i(8
T&$V
}IBA[>2
~wXH
]bk*
}ZB6
q eF
) KL
-+%mi
s&aL/oy^1@ [RltJL"-?X%7b!
<PrivateImple~rajcrknnDetails>
~z=
VC"t[~
L-}N
Q&_0
sdnk
'J*[
G`>D+
V5p$
7i3a
eUY@
DG_ )wJ1,
] *U
Hy9=
sl8;W
-N<
Vk>w
Q1jpt@
r%rz
~e8*
HmdQk
\h!wTu
d57>
S8V
)YEx
!$"G=
%^a?Oe
KgNf
,cj3
k@3;
._@
!Fg'
T|P<k
x9s$
v 5[
!3KE8c
F 69 e
J5Rn
MKtX
<Wwsni
ReadDecimal
rV8q
)M8~
<0(\|
YL~/
&MM|0,
?2C, :
pL;t
p<PyJ
o6a7
w}L2Y
kV+F
1t&t
M )B
4gP
P38@
JE0<
qobg
%GNC
bsL H
<t{w8
m&JF
Copy
)54QY
<xTc#
AssemblyFileVersionAttribute
Lk @
/F8VT
tUf;
#b3f
System.Resources
nZ @
*d6MO
]pG<\
L Jvim
}15_
h)g+
+o@(
#?2W&
:qr0
totalBytesTransfeaejz
,BQL
bJ.=
%ucp)
W_3>
'i?y)K
d~<I
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=
L 2x)
paU
)-
F+l0
HINQ
HF~N
8l@
0.Kks'
XK 0
u]wD;DK
*yziu'>
Icon
.EG{
"xr9
qydL
1<
vte`
WH&R
_~ }/
S/%-
vqme
*y O
f|* ;u
kdVj%
GSzp{
27}Lwq
<E %
#7VM
dbXNb
-iGR
p@GU
UOK
&"b[{
?4 ;
PublicDownloads
Zh *D
m$7X
V%8d
sLkIR26Y
Z(6UK#U7
}) '
W71i
[Nhx@K
""Gv
Tgch\!
rQm0nd[
SD! k @
JrvqWebResponse
^*x*XFbA
6cv?
W>VV
GenvenjgbAndeAttribute
"FgM
GetResponse
yZzDH
$$+(
)sP+
/YY?7*
87q;N6
K7:-
C&1rU
fr|s
g/_Wc
j1b<
A;RMv
c3
Xf.v
L@7.
-& IJo
\"V
T+qv
)~6M- LIP
;&#@
ux8[
V# `M
Q\k7
spyjG
SSY7fj
/&[2`u
{D{:
4C*k
2Z)m\_khvNxi2`wx9O !F%V$!
<C5I8
,]HZ
''Eu[
uGRv: $
t wN
,Nn<
a>qX
pUo[G
Cg %
mP|S
'GCF
u=?aE
UbkN
20:!-?I`
SgrjndAttributes
f[ ](a
jCgoz
U.ov,
.+1b
[3WC
RlHN
F&90
nmy<
"TYv
YllnJ
m5}vA
je>bl
X4xd3> YjR
BallingConvention
jv'H
&bsZKr0
N?ci
ps^_
f(8b
qL!v
Eu1P
PX!@
cdj
az 13}
kZ_8
#H{P
n]yn
0*,i4r
' '-
J6kM}
DebuggableAttribute
-) x
xA@(
dD),l
MP5
qeQB
o=;hz
9 JO
ReadQn{{q
T)/c
gX?5
]AU
]AT
-f P
d LUbU
##2d
/"}?
o+#xR
z*Yy
z7rf
Ow [
6NJ)@
Rw?~
q7rM#e
rGR\&
NAw#
\'ra
}S\r
>,%Y
r9Mj
%&S-
]m2 k
KPun+
.I3fO?
d]'%
Nw'+
~hN/
e:{
fl/f'
`[>u2<
&zzx
Q6er}
Read@c}wla
QdJ.,K
Z(3m
9+?M
68 f
CCF;
yX},.r
GetDomain
%'g'
/6i#B
StartFile
Io5s
SkyDrive
\? a
EditorBrowsableState
AssemblyConfigurationAttribute
enJM
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
i\J&
CultureInfo
Heyhj
OL~8
|)van
?iy%
LX6y
Hashtable
_7'z
3fu_
0?&C
MF G
6[S;z
*. bH
TY#Ft
$V,Z
wo_dnzhm
POR"h
/t06
=d 0
~HU(K
<_w-X
nR s
bi|I
Z#ky
IsNullOrEmpty
8-r
<I-<y
8P
NG5P
Gn`;
ntC!
(7 C*
I0?o
..\M
-X:&~K
oOsB
v4ut#\_
IcH?
^KMX
<nLl
.2Naa
'/:m
oc#G
Vzrt
#~TB
FgR+!
qtYD
%>&vX
&#Y}
v Wo32
tINYV
usCh=
ADQ+
MzN%[
ProgramFiles
s>fk
,U t
NP\ K
`QU6
c9zA
sw
*AH>
p'g*
!l H
!l V
Vg$@g~
|bR]
I[VcC]
rH lN7
p."
SavedSearches
n\0X
a!2Y*b
V;h\
N 4f)F
VEs,
~{yr2
S0vhl
Qk3S
T}5k
SF#l
iFD4?
xK=j9
h0V<G
y0VR
;[h*z
G;MIY
Vxh[
z2})
nbVR
Mp&0
M8rp
F8,e
U&i^
CBdgo2
System.Px}{
B_C[
$?Nn T
6y]t
ztif
!`wo
QM3
PwP^
TargetFrameworkAttriqb{{
,Zc z
uvjguPdad
ogge
eJ4Y
e6=;
.{
-|t2
s&^m$
X4-8
#]$n
T:pY
>Z)c
get_UtcNow
?V\V
PrintHood
oqp(/E
I<[f"E3
ufFQ
^dlzx
.XvX
5j %
D:Q?
:Z X
@=/"
kU!<
0Po!
`4=4
SSq\
InvokeMember
i@53
z" t
_{B j
rjoT
eula
D K!+
7I_H t$>
}I["vQ
:?\%
TF*U
jXmI
MD5CryptoServicePaxywfcp
\ 0*
Ye[(4
GeN{
##84q
P/0.
/Fsa&
<X_-
x :|
_)z<
:k7m
Sy Co
rY&Pi"
|].0
E-#[Ji
?"? .&
]oNb
0=H0
*] n! d X
KW? A
#@AL
o YIj
F;4C
_LAES
rV 4y
lrtu
`zV{
@ZDb
:I4Lfr
+ Ub
:(3#
q#TM
lvZdm`O2u!
:H^fh
%vS\
OtVMf>M
ES+z
Emi
J M@
vrb$w
X0]4
]=7~
InuA
o@5s"
6 hc
I\@
ZuaG
T9uR
!H![d@
x4iHjx
<U]^
B2:
DxeN
{ABz
g{qra
f5v|
~;Lu
ohM=
R/?9
XAx
tAVi(%t,
^%D)+
BkN2T1*
j0 @
@n|jgk,Flobalization
BwN~
"jJ!
wGv124VI
R NJ
Flush
~/\2o=
Qxstem.Reflection
m fj
i qt
I $8
B3`P
u&f&
<<}e
P (Y
/b!V
?c)s"
) dkE
vg}0
TK c
TfEN
QiJy
zquH
+^\<
@Mjfz
Qdti
,j4A
Iv?o
4vOlp
Vb\ST+
h!j5
FcD3s
vSCg2x
Y%zK
sbB{
!5a] o7
s%9 `
J;]S}"b2/9f3prGucJq5%Yd-#
STxM
{,DG
pHaA
v4@ e(M
xA&Z/
'h:H
^Q])a=
J`*/
^hn ~
hi3$
X 9 f
yPM]
Ad B
7gy
O}f1*n
sl\ d2:
K`_%
qS~8]Kq
["++
j((1
/W5j
:X<#
OZ0;
jpy7L$G
I-|Z
S(AT
<jh
HSy@
#kh
#KgL
Nl06
{2LD
SByte
fjX(j
(v$F
Tf.O
/G=Q
Kg$}A9f!
fT T
2 Qec
2B
g3E$8
m6f1k
~IPy
@kzR
{$vw
gYf
W^ T
i4~u
z+I`$
jcOv
gsW0
{9vS
v[}{
/S/%
;Ft5
"^By
*99F
gv{U
{s"d
] (iz\
u9fh
C t!1#
,8 \
BrQ@
H;w;
Exists
r(:,
,nP%
)))t
2ZC^
U}.L
-p||
@2C(4
XH'H 5nG
$M~/
-y>
n{lq
S>sV
!+D2
guI<
vK[be
U i
Equals
s'Ra
'QCzp
Dq%0
}MhU
Khz.
.}wLYs
6;3}
'!<bp
Pb4:=
[xNB
ComputeHash
PE*
2 2
eym!
ikA~
g@2
value
Bitmap
?F/&7
Qt%1Pd
#O:K?
8=~C
BN#9X
s)rZ&z
($~*
G*X<
+2x}
085S
dN `
:akp
+ffz
eLB+
pB|j
7+jF
u H3
5}`Zj
O.,Q
7)([
SkyDriveCrzjlcTmml
2WUD
autm
INLY
`bds
8[JE
w--(-wfhiyhmi|hmi|hmi|hmi|hpi|hpi|hmi|hmi|hpi~kpi~hpi|hmi~kpi|hpi~hpi|hmi~kpi|hpi~kpi|hmidUUiBI"i
8`o {8
dP r
3<-&
85H~
/4@_h@&C
}[T
JNRL
Read
oXk(
C~ljwtgr
0y6[
[^ [^q
Od L
p.S
oVs]`$G
/Hal=
L*vVT
w3]_S
i`%
ApplicationSettingsBase
Qc[_
fd;0J
^+2x
9hFK
&OzG
F ]@
l/>0}m'J
|#1.~
_\B52B
e7~S
EN1:
EG8$4
A+!>ke
Xzf?
Thread
]}@O
a$kgZ
@O$U
Te
j 4u
pq>B
d9vqX
WhH5
Uuk
YmUS
be|fI
Hu!>{~E
_V)-
3x">
2nKV
[Zs
Documents
Zr/9
el(VT
6)sIuH
tu[=
Y("Z/
n=,B
;GU:<
ih6Ad
<gO@
(&ub8
PCbG
FX6O
M\m&
0/0
x)~h-
f"j_Uh)
_zq\}
D m
}i$u
V$P/
"Zn}R
.ZGlPC,
[*e.
Pkm?
Lx/nWF
""[&
_G>1
U%gX
cr [L\
sC1Mz
-B%%c
)x,1
f)>2
U.p+]
?PD)Z
Q*p4
HW8?
Q(vx
xFoa
>=s{
" '-d
JS ^
;mZ1
<CxU
rbg
mNS[
Pn6l
U661
{"J>z
Jlq,
-~e
=}5d/<
|U8,[^5
uw@Q
n{9$
#i[U
g{M5
LNNJaN
lpStartupInf|
_X|jk
w.uu
9|5f7
Vsk?
fTl2
Sy`cjs,Emofiguration
c"hZO<
_ %7HR
<ZC;
.0d2
x&V
WqSE
p= GV'
7Kk b
DNXLv
>oAcz
tfZ/
_35-
&8O
1=h6u
Q__ F*x
dTYS
7c.>
>#jh
i-n*_
SRAV
%U&.r
$z+HAY
DALY
1Y~:
F:-O5
rAl^
%]Map
\9Q [l
'=b#`=
q;L7
!D`H
y"uhW
Bdb;`s
]PtnFU
cV /.
f f f f f f f f f f
7,0
MM:)`
j&jZ<R
Qb: y
px(:
p~|4
*p?5
"+TJ
ReadSingle
AssemblyTrade~v}uCrvsibute
1m oF
j^E4
WgSM
7|M(v
IA^u@/?I
~,wk
^C,.
Q>c{
Sleep
P ]D
1gc8]1
"'%r
9%2
^P@_
uPi@
DateTime
xYEW
CredentialCache
G_[^
L&c<
nsg:
@G"$
}XlnA
&rZ
7{KM
N!{r.
SrW[
uLmFk
7($
2&'2>
9,I
mg9
?0`\
0"s`&
R {O
uHiV
X}LY
>BY'* Z
lp(~
1qS5
aAH<O
Gz._
*R}
KAY=9
o5`_
.=1}
Na/h
kernel32.w{c
pA,M
ETGK
w53#+
[+!v 8
,n%RH
+s4La
4_
[+/bF
$cIG
8[mi
6f3
A`<et($w:>SbNI<>LSaj<]th!
!#)z
N8N=>
r} }Q)
ResourceDir
Compres`~`pOifd
b/e>]
jP,a
path
1v4Z
S>>
v{{q
@?E
DeflateStrerz
lpNumberOfBytvdXlkrvdn
JtH2X
N0 @
x[[w
~q]I
1,zl
Y&2%
2i|
ProcessStartInfo
RuntimeFieldHandle
R Lk
N@ @
xqlv M
xDM?|"#
v#)a
x,Z[
bzr)
[(U2BLZ
KTtB)B
**)
&3-
viAhd^
(j C
_E!M
<OC f
A$ b$
<_<K
rw&r
+N|J
}SXg
Y"+0
+dsU
C[y3X
4\WM
x@$@
zSY]
?u,M
Font`
DfzgdcsParts
_xV#
Libraries
lTYR
ilznZ
s{g`
eWo{Ng
?*V?Ta
!=J
i'em
(u{yA
Ns/m
SU|{Zi
Db @
h{hgX/R
F:/$.!B
~EWPM
&
lm:Q
UZU2
'MZ
6_:x
xY`A
N)ed
9ddx
` ZN
(nWT
{93XF
*}$1
?B|t
pjj]Uk{e
o@kmesX64
;
w}{U
&P-*sz
ul^6g
rgqrBytes
" hD
V&wD
1jf7
;~kaE
(o2|t
j\H+
}*7
)we+
7m]e
1i A_
yD<"
+S6P
`r[9
Q@F_
Qqj
} cC
0kINy
sRox
m7jr
yb%/1L
AssemblyTrademarkAttribute
Gn1&
+.I-CL
8sT`
[2>m
E^ll
r>NP
ajDYs
~+5-
Pf@ ^fH
fb:d
Ick&H
\2&1g
^hG?
4`M6;k
aM 6
)xbkY
P0/bG
;)~7
e nG
z3=b
/sd{
m h
*KO]
D_uK
_s8$|
sWQ|}
~m&fZ
S02
^0=_p
&2Q>Z
-zCb
Ng0D
"(PlI
duUU
4^fi
EditoaU}quuccleState
K.<GvCc
N"e '
^tHF
#Y1}
0[vXpn
t4A1
zH?:
;HP
s|g8@
_V+v
Bo'`
get_TotalSeconds
+v>Kx
/2!Wz
}}0w
PflPO
\!Wgh
CommonTemplates
mbiH
^+]L
Q./O
t{C
UriBuilder
Cwzp
n :uX
RA5
]c!
6 &zj
B=-]
CommonStartMenf
L=e
dbJC!
get_Name
NWBv
t8En
`*zY`/
Q"e^
qC al
E:GS
CopyFileEx
t ~+
o^t
IDATX!
9rJY
%)Ry
\:}a
oUD#
DLz\
sH!t
<K?J
"?96i
E[lm
ZTZZ*
YkM+
5;EUf
v3w L;
&f (f &f
x_|u
<tqk^
p0)-^I
6>5&w
_{^ h
- l
L~MD
QF''.3 +
GI1
&o G
I=91
4XJ(6
Gmb:
fmT2
1hA>$
?vK{g
YS $
[{f@/
AssemblyFileVersi|yNjvtkcute
t,.H
Urmm
pnrd
wq*?
f_Of
MYmhMG
"5H(
Convert
A _q4
:OBa
oz*&$z06&z$**z&*(z$$$z
=@ ~^
Xv@c
o$aF
vEc\<
$[?k>
}ay3ld
i7c0
WqMU
6&9(C
xYp,.
.M&4
_ @a_
2Q
FT90uF
p!bD
80{(
:@O\g*
n&TI
9MDX
.t"zR
{r?h
gV(OHH
(wbb
$ #>:
A3DJnl
=#(1-
MN;T
F4X,
q?!tCi
PR N
25kd
Bl4k
L'GX
[Y`[
ylw9
v[9K
LoB/?z
H9z1
)[eO
px*7
bx-(
+Dm(
D}w#
1 Z9
bEeo
RuntimeComprcf|kjkuyAttribute
FTUW;|y
Ln->
`d*^
y3Hn
cu0D
&C?/
]p+.
RunPe1
zb{.
j+61o
*'2R
/^bL,
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
get_Default
1%ZZZ
>!^%
{g82
kernel32.dll
"DW?W
get_^vfpOiftle
\} 5
applicati|yA
F6`z-
1U@\
,,Sj
:, h
7:>{
1w+>p
jX\
~#cB
-s @
NG" 7
[0{m
bpMa
iu/<
e_)!
Asfi
,SXH
L=|>
protect
-B~L{
[lso
=J6gC
J!^>
g!'pQ
@%m
b<#T
S{R6
1C=LS
z~~Iqrs
g*M
4(ER
gKAIO
bq,\
)`IJ
NdIK
9A<_)
r0K(
) %m[BF
Bdpt
A=ab
pXEi
?>w"R
#K;:|
)37r9
6xkg
`.._w
GetPath
M} 'u
~$+Y
mSPV
N}
GetBytes
vnR8
X~x(
' p7
^ "L
#ah8
0=Mb _
g9EP
dk.t
;tRi
9j*Im
0 8"
4'F8R
FileRtl{qu
d:V?
.*$\;
R&nq+7
Write
G)L}
9`RI
&V!6
E=\N"
,L?h
D)c%X
~=r'R
\G =b
dMpSO|
X?ff
=ej
%k&r
.z!#
Hk20
wZ=8
4_f
mz@f
Seg
45eW
E'~
PublicDesktop
JG+6
+dqD
$,DV
ZaQO
5M.,
9Fy]
KF J
}b3 AFN5G
!%"b=
BharSet
I/"=
ToCharAravv
XF^5RPJ
9]7t
Ixi_Nm
c0T
ymm)W
faz
%<t
_5y'
4ubIb
tW"
e^I\E8
cz y
P#x4
eDC\
A:OQ
ruaf
Z5%==
fv{]
CN\AC
1\UN
I)S`mvK
Ur^
a%k:
zu^~
,rL)q
System.Globalization
&=h:cV
&?dh
0 ji
HTok(
-' Jb
2Jw1-\
t}|!
leSS
12.3.11.4
jM6X
XdJ;
E|uV
)P1
VpngramData
n`lxq
System.Drawing.Icon
qj3k
,`c[
<2P{M
sA?!
67}E
<FFER
CreateInstance
<p_bX
3`yb
W "yK
":2
3 R:
c9`j
O(= [RL$
b|J/
.L/Y(H
,J[%
[7%m
2wI#"
4OW9
#?<h^~iy$@
9:ar
c7e
NoSY
*[mH
bNv9
Environment
l!K~
y>X/
#nH8-
OM=
ox <Xo u\!bLw
, %Nr
)se
owAv
)O{p
Decimal
Bi"P
TH$Ba
eXBYSV`
.Se.
^+6
l]'`[
= q
pckg
"$Lm
RNaXp
N*c/
y@u@};
J+7u
@76_|
get_Path
+oXd
1U%v
Activator
]M?
75 ,
ll@MK
bS3%
]d U
} IB@
M5DCgS
O Gy;
{`k5
b6r~-rc
@0g^
q>a}*
}tZp
ui 4f
M R
ReadBoolean
y{_
t\CC
E |:
n L!v
`'u;
U4;n
'7ke
KT1%
)OmpE
'qy0
Intern
ComponentResourceManager
sNi*
LLFA
NP ?
'X,U
SeadByte
Kill
Q*1]>
|o~.
lcuQath
environment
dtEf2
?GxK$
*gAa
+%tQ >{'
v8KL
FcPJ?
w5Z ,
R;B$
2K @
" \r^
tO`[
'dZGg
^)DJ
<f=0/
f(* z
cHRVV
Y a2
&gui
+7 r
$z %g
`q|.
u&A-3
*"_
vdM@
Qxstem.Text
?<)D7
:[U{
lpPxbschfMine
H3xcv
iz kz
dpDH
}z" !;,g
crGua
ue~
;%V/
RVjW
|q6a
At{qtoStreamMode
}=BE
8xnr+
AssemblyName
!z&X
Pq'u
.<a
`Sy.
;- (
G,!2
j-m*5
e'vl
+*)(
Tf0U4
k~S Y
<\^6
<5(u%(
J_;d
V|{L
C*Q`
sK;5
-WG1
: \_T
tia+J~
\ cTn
`[dqx
:.+^
+6!S
cS( <P
ZP{>{
JiNn
/HeW
/7afK
2Ew<PA
`?ik
{oF'
NhVL
'c#2)
TypeBuilder
veqW
KQ/z
|AoQ
8Q4^
\g ,|
Evade
]s/\n
&|;!
,]@=
VirtualCe`jgev
L|tGA
get_Length
];x
af:H
;$v
Z9%+
GA1K
gF%
%_~r
(XKXT~n
*2c[
$tM8So
FUc+
XK.
E4? 7
Nia`lizedResourcesDir
3DpQ
_S!Pu
)P^}
p;l&
O0 v
l,^+
uX7,4
Ywof
@FlDs
S{Pq
~s/F0F
uQKf
gU$
6 +`c|
!dGS
WX9))L
zP>C
7Pz{
^;'
-o'1d
Sy?X
vq@
l a(zP
%?i (R
>WoL
QUm!
fTxCi
fa7Ew
o ,nm
H6>Q
Zj 4
8BWh
$W-
HqOr/
Hp p
5|h-%
. {$
FNSpw
@.rv{`}
5 g~
D~|z
2#BQ
,qpB
OAbA
Pyc u
*/5Y
=^"]
zE`q
<6iQ
qF)M6
h7\7
7k3EC-
nyt4~
TuA.
N3Tvb
|{@1CB
ky94<
o}"<z-|x
`K;E
y3Wk
ATA~
'L#k
"*|5
d.h4
;3!
"v9}
Move
~ A2,
hnmA,V
/Wy0P
yBtc
S3!r
"v^ v
">n,Q
.rsrc
5+w~c"}
iG"
AdminTools
tg(s o$W
e6G[xL
.c+T
J;|X
;j\.x
J%o4
gYPF!@
~RUZ=
N5]6
EaP~
Oh@"v
}sH>
*a6r
bN'S
=Wj%
G #5R
D(T>*9`/
BLKv
h}l?
JkE^
2sFj
+duKE
{,6{
&cd\
ken!
/]Wh
hQKx
wIPj
s7;*
BigT`ptcpuer
X:&f
?<JJe
pY"X
7&@1g&
V,xU
Strerz]{cbgs
Start
|&'2&Dh
2 dy_
)#8.j3@
F'&1:>
rddw
IzEJ/u
YwLE
sWVQY
?sM&
Data
#! l>
nv@tffer
TN Zr
C jFA
z( O
#Y7yy
m0J6k
_*Ne
S:r
get_Cv}
Nqx
NGb]
V\fO
NP"^
:B_QAP
nH-~
0L3`O,em
;(K3D
>Rt1*vC
cjX
" 7 6B
WaitOne
s?FY
.NET Frrzjimti!4
l9?U
?2g
3. @
G~5H
0V(
un`HT
@>gz
\8>@
hMpb
g1]E]V
9-n J
\wJp6
wJBH^tN
63^DK
oFHr
M$pDVJF
rNw
h@Hy
UaG#y
`|J@,
[GIK
jv?fS
?kYK
KR ~p
51hU
+(Jn
Byte
3@h\H8
0zN"_u&1
|v7\
0[V-
J-'t
"(Kj
;=<C
;'1T;C
hlUl
5MN&!{
-OGc
`A* [S
Zx7ff
M1*\
8<*[o]0@
ELv\
$5?>
*Z`wT
Ho, .
j>>.k1
dFM @
u G@
we8Zn
4SMZ
3vSRb
\U$;,
TYa kxG(
ob4>QE
c uB
)?< A
35a3JJ
ProcessModf{j
OUt C
Q<^M#
n8 2
A7rl
7cBRx
Z=c+l
ioPi
<%!X
U=$Q
}>T
rb:@
Sjd{{o(Fsawing.Imaging
I8pb~)M
_uZ[
BW2#[d
U|s*
sl}c
6#:g
uN*A
BqN' 6
FreeHGlobal
DeviceMvcnzcrcRtore
{+I%4
yU0T=
327J
,v'vcO
sTj(Cy
x0Vg
'4T #
0f`|
}J-
BindingFlrp|
UsC7
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.exe
"k]Xm
y8QDK0
M`{NQ
@s:y
`J5@lUym
eG"M
laHm
(Lg}l>
< `;
pl<fT
TRx~
|o(2%a
e Gh}
#JC)z
set_CreateN|@fpfiu
|jx#
> fvk
85!j
DefineDynamztBqfsnd
.:y<y!:
uABG{
V~9-
F(x$
n8v Yj
-wSe
X0N_
dbFIy!
P 3"
@9;A
p\8)
Open
>1ae1#q8
aBGW
BoZ{:4C
XJx @-
l!Sg@+
/WT0 b
g1k]
[lrgs
/2wK
O99
^sX6
m1_<" E^GJ
/b9F
;IKk22/
?BwcC
V"K~P
Void
D!Q7
'JRb;
tjH
$ JV
g8k^
gT;
rtRO
)Nh>5
-ag\b
jrcD'
p3Ga;>o
3[*Z
O U
Me"u
Db5'
y`xj
s@Pu
<u, -Bl
iklw
|\3O
|?*x ,
"f_u/
J^T1w4$
Y I
p^w'
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
M+xl
umLJ
=>!)
%pdj
]h1m
$IZ
{ oY
+ &U
^HD%{ Q
wt t
Vtm#_z
\.v!
dwCallbackArnmmh
G;V }
Jjq6~
KsT/\'
5" Y4d
>cYC
+d"Y
Q{c<}
Sukc
P<a
nabd
)3na?R
Q7)`
od,
:8T
n6"V
BCWn5B
c"_>6:
o 6@i
9j
)[1)
([Mtn
-2upqs
W74E
qz~!
~e>:1
c|#4
{NaJo
_W0>h
FhzF
TGA;2
(MW9^
SecuritySafeCritztnrCrvsibute
m}_FB 9
4Pm5
%A w`
h(j
^Yq\Nr
=f~UW @
QiBq_a
m\!\
Wp$6p8
"D1
-Y.5h
5#4\
4fQ(ik 0
`&Pb
</ d
?]:^/Z{
w;Pu(
T&3+?
Pe@/U.
+SUi4
ReadByte
C/3c7`]
8yRy0F
]%@x
Y>k7[I
= ~7
cb'Y[mH
_uuB
=#
8?r @
^348
&zN%
]mYu
,0rp}
hP2
*A y
AcpxzpvVkbtures
oFc s
f)b
'|9?
AllocHGlobal
pL w
r+$ 8
4=[#w
' A"kO
U]{z
d9e1x
+ fK
m^*>U
BitmapData
2`LE%
&\E9
C>Zl
;!em
{Jesl
ceD>
&G:J
Si5
F"\Q U
E{1(
Vc5uDK
ob0 @
(S~J
YIm[
nna7B
D2'k
& #
ReadInt64
NbH
=]C
`rE=
oU=:
nE1Lh
Z}!K
IndexOf
Hp=}:
tbUc
Startup
V>lb
1]r]ik
WMv;n
=f GrxuXT
^iJ1`
_e;3%
LAd-
*wLj
(`OZ
|)IS
e` Yn
^AVB
f[M--
,6\z
!b<V-u
8
t7<X
z1Z|
8N4&
/_1O
L8]59
LXxX
<&je/
[+v
get_Declaa~ayV
{OBn
,_R
YidN
)}Y(
|5:!
n!`>
PzwfGvuribute
awU_5
`&wP
e!A%
Screvy|vmrq
lX!x
F;;Itch
d F +
2KL-X>
2nSL%aI>
Nxnq
HZj0Aa
fDjNv
NWSdn
SHGetFolwr}Ncrj
@%LT
/R {
eI$jA
4yAp
GvcIwncL`meWithoutExtension
U,JrC
HC;r
l@d5
AutoScaleMode
9v?&H9&`E
KtZjZ
$Kk^]
'NvYnl%
X09R0
t"ij
>}Yd
Yp7y
RegisgevHcjwdKind
Xkjg
gLa1
t +c9g
qn,|/
\q`k/
TvM
.>!L5
5frK
Lt]F
sp^a
LRr?
X&}l
zQ@#
_xv!n
bAT.g,Z
wc5VL
Cs\<k
v,5;
o'#8
-hL+
U1!6QK
@ ^M
&/u
sed
<Q>{
Q+}rH
Jiw?
e{T3
f<ze
; ed
H [ m
SMxE)
7o<
H |t(
EZ`6
jat"
jfP`#
A) M
548C150Q%=+DG0@ECCA589EECFF429A90351ADC$
}gbX]'
$O0*
]Fb^
SizeF
0._Y
[m~b
RTT+
K70~
:RS.
b>;]
3Cv *
BX&8
4X^{
Pr|p}
"`qye
)n?}
b[Z[
)1@cq
o Q
RA3c
Uat\(^
SampleVide|d
EventResetMode
yF1<{J
4<{`
*-_A
MA}}
1 /T
d03|!
chmvw
nqI!
p'Lq
op_Equality
XXyW6
Bd2j
jqt\
Y^<Y4^
/&M*r
hJpP
5JM5u?
ifmei/
xQ3
rgFF
( V
{rq-
,W%Q{eQ0Q
@]k3
f :Y+
"Xiu
5"{)
9 {A
0-Ip
Qqc@G
agu_ProcessName
2|aj2
!z&((z&&&zGGGzVVXz
Pdwp
((^L
jE O
Y|&h
h<#DRO]
k=m[R
f{nN:
"|+ @
|NEn
7 T;
xfbl \'\
+a.O?D
:z<0
D Of"
Y>B$
wDgGY
q2#~Ei
(b+k
B~,c
85/(
E{]rL @
"!?}
|sA1
hDestinationFz{j
LuiPS
SkyDa~y{Roauures
RoF,
CreateDelegrcj
DQ:W
px{Q
H#s]
apzh
*e+
[o c
*S zol
OG%#
MMS8
He s
`Kw!
e& & S`4l
rcf9#
^p %q
i[NZ
m``.
:<Kc!
& b8vS
l _>
D'SH
\h.c
Z3qf)
callback
EGF)
HttpWebReque`c
A%ty
7,(
<8[G
^c_Z
BgcuggerNonUserCodeAttributv
oqH<
K" NU
}Jl@
{mnkgi
||| }
xL[z
1 @S 2
+h$1
; EJ
yALk
f<2w
!x6]A
"v`K
m yfq
FEPPL
];.
1i1P
lhP4
dDQ1
B`^V
a_z7
nvF`ta
?=(\
\#$9J
YJ@.
i=4S
I?o\
1 '(
5! D(b
`f `
#T\k
q%xwA
xQZD
^b|waJkcrary
}X/c
G_<!
^bn_
k}/S!5
xP=zh
03$t
%(#q&S5
BSJB
u0`\
[ 6[V
Pc3!7:
+Gr3P
P5Id
Kb8$
e1En
hw^$
MU$h
f0Fj{ V
=v1v$
#`K/_ >w5
}2fz
gRt%
S5C!
P Is
)&31
Ft@H
(=HN
IntPtr
thread
s$(8;
NB1
k1rL
7 fq
(,9|
cp|%|
0-,)
&kFY<jbI'k,@J}t,)|{IW|rv"
0vJ5V
E:I
[vpcceStart
_ETE
a*V;
K/&7
h"~
r6Y
M(45
s2[l
X8j6*
InvalidOperationExceptio}
CS[=-
R";>
0 [+c
s"$@fb
QSGF
L%3.
)\ @
Fv'E
L-vA
[1$B
D$N+
Y$$m
G2TDiE
Ag-z7
DGs(`t
r 1k
r"p's
[{- v
{]9\`
&'hs5s
qs](8X
rTL5v
\^\D$
FjE}
Vd*X'|
TimeSpan
,Ey~`Gj
kIM%g
x>[B
r\WDgE
UPD-7
T}{crgEirectory
Z%cSH
RmHnt32
w 9I
i Dq
b) kB%Z
OAWvD
s.JW
B(}A
6X<n
[8 ~
A (0
^,D 5
;T%)
P(No
ref
agu_FullName
f Uum
5*RT
O\,J2
DS+p
a{WC
<,Ur%
9qB|
UnescapeDataString
gCy2
UICe?
Z2?
dBWA;Y
c!#C
(a|kj6W
!lgm$
th=x
rbo
d~Mf
xt3_
hMltC
&{RQ=
.t45q
{hq
krw`
?XJ[
YQRf
I3ZU
nl<R
j>$km
$P<
(w==B
^ca;
c>X7OJ6(
ds`SL)
CPSB
ZpD g}<o
fH+P
Ynna
>]{H
ed_Y
bk)G
}DAgo
q'x'
E]Lq(
G&6{
"Fk,T
{L)?
I[Dt
YOOMyfl
5Em,
B+=/
<W9|
$kY.
mYW4
`@FE9
w s
WoXW Y
8ccFPT
wbo!VWi}2
DO o
XJ0H
Z0*H[
O?tz
2z)9
IEND
VRuLr
_!+gj
L$f4
_pO_
GetCommand_~a{Cter
I%<:Ro!
-e7l 0H
<7++<
c"[h
t Bu
W{r(=
b\O<r
5R[ I
4FQ5
c #3e
-p%0
qJhWBEu
RjS3TM
T1vM
V ix
A{a"
j^cX!<v 7?
6f460c1a-755d-d8.Resources.resources
po0&
2*Ju
g PH%
A{6
)U hr
s3n!
x;Zw
CallingConve}cfqlu
C~3 kx
n/Bb
eP_A
NF('
v ]g
'r[A
mc=D
scHp7
IqWJ
STiv
3y&*gR
bNsc
lk:f
5yA=~"
m!>/
_HZ{)
"Ko
ldJ
aYiJ
VTGW
:f +
g $v
Fu|K
:$4
*^+
0lvh
*&*I323
eGC6}
bytesWritten
_CorDllMain
^YXHN
CompilerGeneratedAttribute
h~>E
o<V\v
EditorBrowsableAttriqb{{
Rq<n
4A2}
0Zy)
ek/B
eT@!O
hj`5:MEI
Al)N
vq[H
xfz G
cygo
T,r-
I|YS
(u_IU
E15r7B
e]sR
7xlr6
v*7GUr9v
pXVq
Insert
XhQE
67Z~
"R0X
1^4f
}?9y
E"9[
eBD
hhh}
dagvN
0f99
"R0q
get_Id
. 3j
OA_q
GetElementType
GCq
Ka9#
c "m[Vi!
UY|}
3-`$
eyGKeh
Tb})
.Wsv
92I']pL{
RozvESi
Vl%=
y@Gj
f Ak
LbK
z`7PR
n|i
zp|u F
GsdL
@x9;
i f/
;s+a8
Y 6h
znh[:
OXrZ
Z =CI
[|g:[e
io]]
gs&F
V2o[
O~V2
8nv.P.
D9]0
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
d1(y
)(Q}
<dEX
$n^/5
lm!z":
YZ >
.MHt%
?".zg
D.uf
u1zCj
=ZhV
H+E4
String
a- @
NJ`g{)f
Otm\
DaoE @
_/V=
tr;h
hK?
&J"^
>gu~ {
YG$O
-9^%
Q42?
#TZS
ICryptoTransf|eb
InitializeArray
`adi
System.Diagnosg~lm
C(r-$
%!gG
,x8F
,Db3
*Z+
*nqw
(fcG
z){;
n0vZ2v
qiny
"].[
!+]
v]cX
EditorBrowsableAttribute
ZS~.
IEnumerable`1
IuCK
|Sgj
k#ga
p y#
e^IWB4
iRg
DtDq
c{=W
`.sdata
"fSLJ8f+GRb{N*;+es
mjcnm32.dll
G-T/
)N&/
m$VA=
@%eU
\& B
OiN\
Load
hjS5:;
dqa
=q]M
get_Module
(hLRpu
rdM-
neO xh
ZXj@
OR!E2x
i3@aZg
61r!F
a]~2*sI
GT)s
L97!M
+(8gC
5Yr)
@Ho/
Dictionary`2
^oc3
K0<<
J<Jh
H +Z
j f2}
6'=M
cwzF
a<\
Ns_z2
2 $I
WN#:X
Lg$^
=R$rQ
h0nH
X @b
K Msp
[fpiu
} kT
z9C
J,"G
HgNa
bcod
Sua*+
#` , @
T)LX
0&j5R*~
7#m1
`P:s
ZCja
.M A
iXIx
TWZo
y%{W
RuntimeHelpers
4n,B{dXo>
;2_GJe
#mW$J+G
kR i
i^r5Q
]n?
SaveData
\ngek`lFolder
7`s6
;<cz,6'N1Q
m4AG
F=+@d^
*v9(
nxdB
XuU1
p$ZZK
x;C3
SK++
F&go
@Q 4
Vm+k
9 T
%(?]O2SQ
>>h
=8/!
$XCP
Object
@cvm
x;qj
m>x
<S.
R0eE&
Nmolu
3System.Resources.Tools.StronglyTypedResourceBuilder
v'Uh
; bq
{)x6
UWz"<nJ
7$ia
_DP0
WVJf
C6V#
AesManatrk
_ @
1tX
d*)]p
'N~Z
msGa
V`txDBMB
Kp3z
DMN5p
xWG<:
{rVU
uDzH
OGI,P
95`
SBen
Hw +
BRM|,
Y`pv
W [{/C
%?nH_
lF-h
["B{
kwlCL
,Ow-
-6<
v g
% M2
t) 7
]InV
<XHo
Ea?I
E ]d
>|~T
ZrJh
E"ZD
YGvl:hG
F6kW=S
#C 2X^5~
]44.
xob5mc
Z7$]
j-D,
3i}x
6*U"
x. 2fk
& f]
8Q?4+P
d"fqj
ius]
Exit
% 4
/Ob1
3SLi
-Fy6
9b7j
b ,[
^ K[k
!(xI
4 _\v
|P0X
mhoia
Q5]fo
LqokmoStartup
yo.G
5^;<lcIwh
VjD/
2Zx]:
Ua^G
@*Eh
f'hd
")c
P|$BQ
q)-<^8
I5?em6}$$!
;`$5
O' SiB.
Dd{SHo
LPtB
QAA7l
oXTD
f}zQ
+`=H
M2B<$
*EBC
t} V
=3hI
\{q#c
;q4e
GCi/
>Ng
:9?4K{
<5@Nd
&kGX
TBgs
G_;
AC,C%,<U9"::ZG+!gM0^'@Ix$
System.Threading
.t n(J
-''cu
Eaw&
|1el
=R_/`
pyUd "
u%!4
b|H<.
c`Bj
a%[9
# SN
^VO(
t5.0.30319
xQ)-
W E"k
;Rg.Z2
k/-
9{g;
M0\p
F_lOq
@ppend
*FbY
$/h3y
?{%l
l2L'M
1>}z
6-g
jOZ]t
m[?`
EVR'
_+T{~s
MN"\ tL4
8F:E1]
&<Sq
%Pk5
_Us=
H.Ty
dEnF
RZ0'
p(?g`V
gBZ?
1^!l^
ePr(E
fG%z
<#{,
Yy @
c[r~
(U6Jv7+^
>EYp
Jx`lE2Jb!+NJa?mI,vtQNb*&%
=>8q
N&$!
'8iH
"dS*
sP/p
^;] z
blD;
8aiA
Indvo@x
~@3d
wY
M`86k
:kI(
wl'%
.>*f
96&l;
$100
L_X<Z
v,AK
Next
96ii
n5UDe
b G|?
'" >
Q|l}_
>E-3i
/rU%{
SeadChar
A{
v$kniE
});T
_@vrB
6V&V
O_pt&d'
ZA2MFo
5!o?
|_u4x
Okv#%YM
{_~T
$hI_8
A;d1
V/^[
0WLKjb
# FK5
lqsz
8@P]
LC|{
% 7;
_Y |
mQ-8
Z%r/
{J*`
3Bo
StringBuz{k{p
:1<7D
-J @
-Zq5
/?B4
&RJt
<NX
@oleer
gw h
, %C8cG
W2R~v
u{30
ar H!
uSk~KqC
\:C,
S8I5
E$Wp
p}A+
.KBG
Vs@z`?
hWLD
QV:4"
#*!k
sV`o
]wtpdntDirectory
P!b^*%
ngRy
4-yV
1 'c
[{zrPdader
W TbM
iTg@H[
W#aM
i5@rS
Y/f@*
nh;%
GetTypeFromHandle
IAsyncResult
7 [H
<$6j
'd9Z
MJKe
1wAE
f&b3
s'}eN
40c
ZdD%a
(ZK
W(9&
FZf@G
l~uyb
e>OQ
J3wO
Uw*w
}i5\P
C& l
~aSk
]H{G1
2@i(
&|D`
>?,_
~^P`M
iRe)
i&>`
:0^5
.`]k=
7{DnP
Cg9
E :`
=E&]
Os=|
P=[o.4
; xg
5% H
Uz1^9!
R.Hy!
e73yp
&bhn5ICx
K~_'Q
&ePEp_<m
MCXF$E
sK%<
QLP=(
#e=J
C n
hOc^
C($[
System.Runtime.InteropServices
)#G7
C.!G'
6-%H
IE!b
O2 -
[1}H
3Ycp
nh<=x:
XmH#z
C\) Gz- [M
8-mK
yQ B
,0hk
' / '
r aJt
P}HFJ-z
39~$
|Mgs|
&_lp@@
*TzH
-J'):y,
System.Runtime.CompilerServices
Xj%@
oWy
56|y5c@,A/>Z}Jd :7LojyW0!
PspSx
#2A(

u$ >E=
zs`Nl
\-l0ka
]WA;L
,"njw!"i
IPejzghvhals
7fcK.
`cw/C
hProcess
Q`mplePlaylists
F*EZm
LEI<
jiok
; vTL
vKoe
ZhZBu
\oOa
n6PH
8[/`
reLNJ
W)!v$
+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.Properties
{+j @
{F N
Ih 2
~?]K
@}-0
Q4dj
0 10Cb
pRmE
pqbAN\
0[((
R;g?q
1R9&
C}9B
Iw;B`
VC @
;PCl<
O<$!
K\;W~
F[n
lW*Fr@
LG(+
s,F]
d0ob
Z< >
QNmwo9
"Co;
z]L/
Vvx>
=Pd 5
QPu^
'1Z*n
FN+/
3_ng
L ue a
JL1M
Q X6
!MZfk\
0y}3
fojU
elLb
f]]yu
W`B.
> +`
\GfsN
%\4%O?
sq^p
!This3g}qetcl cannot be run in DOS mowr!
l5C;
-MUt
#f*
's\}
|}S*L
3R0W
'*~/3
*/0@4
"k9s
4;q8
S }gF8
9-{,
4Jq7q
y' 6
gi;%=
i1-
z@SK
<??
g4; #
Zw|Q
AguFullPath
4Q[h
bufferSize
'bg@
`+[
Dx:^
T<.e
$b2Q
ProcessWindowStyle
I_\A'
U;XU
ZK4C
Y$Ga
84 :
dZTf
LqovkmerGeneratedAttribute
_~H&A
Pst=
W>++;
'8.<
y vm:
>$&-
4Qe @
^p ?
!"5(6
o5Yc
"RRs'Gp
{
uf2
hQ.1
T]/-R
e{RC
n#[Qm2
ZR_1
VkAbw
b z%
GqremblyBuilderAccess
s]{G
c^^R
v8WH
M{fc
cfe}{lrFhrectory
{3Y KD
3zy5
H2>6,
&DxL
fnT
J^\O
&g]vz
K(/V
PR;rp
Tml\ ~o
m:|;
s @
9M>p
ENBPMw$
[YSi>
I'rEe
Encoding
d'!-
Z}h4A0
CyjA
B*(2
W+?h
ALls
wppZU
Ff%LF
];y
^4;+
V~;q
K"|$
VAo5
p!";
4:1l`
{;}|
k6} E
{c g
^|Hr
z~h
/Q(m
69^7
R# Vr+
xtl
'LU 1Y
@bd*
t:SS
SDPyz)
:VUE
r>Yf
z~K
`N/P
kLU1}#
o_D-
+lA]
h|-!
F =7^1~_
B8PgW
[!Bi
MessageBoxButto}d
g[vpcceAttributes
.Mn4"
iSd9
Zero
OFI)
JDBW
%i/J
EP'+$9
=fWj
_o ~8 +
L7F6
,[!r
SRO}
X+cO
XGSa
Wu A25
c4$:
Zn_U
,,Ri7<
>.Ly
_i`x
RzHt
RP;A
=aO :
Xl >_
6/&B
Fb>*bH
c[Y\X
,n_(
hhQw
J2<>
b93
?;8l
66m,A
Q/2IG;)
g`%kWO
6pj2
bj iS
McpgeGames
D $nI
y3 u"3q?
!@"W
U!>]
J;_T?
>S?;!
dL fb
[OBA
Jx1;P
d]0,\
u]PQ
*Z.[
n_\7
System.Drawing.Bitmap
f#/
PixelF|eb
yX5=,
Nf3
:)V.T
&7Es
eGKs
^BoL]
f\$z
ahOmF
ef`B
8emb
[S5g
J5'5
Videos_~mlct{
Kw9?
) 8I@
m3D}'Bt
V~kJ
F18IZ@K
i\*D
9k_
3U,y
8?G$
zmN;
Dw($
&`=Ss
G$?.
Sl<"
Unl6[y
J'vKCv
bb9m
Q^mF;v]
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-07-30 12:08:39 2018-07-30 12:11:28 169

3 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-07-30 12:08:39 2018-07-30 12:11:28 169

9 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-RFQ180730doc.exe.config
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-RFQ180730doc.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSVCR120_CLR0400.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll
\Device\KsecDD
C:\Windows\assembly\NativeImages_v4.0.30319_32\+3IKkX74YmS1c6a155e#\*
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-RFQ180730doc.INI
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\Microsoft.Net\assembly\GAC_32\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
C:\Users\Seven01\AppData\Local\Temp\Ii.dll
C:\Users\Seven01\AppData\Local\Temp\Ii\Ii.dll
C:\Users\Seven01\AppData\Local\Temp\Ii.exe
C:\Users\Seven01\AppData\Local\Temp\Ii\Ii.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Users\Seven01\AppData\Local\Temp\it-IT\+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.resources.exe
C:\BVTBin\Tests\installpackage\csilogfile.log
C:\Users\Seven01\AppData\Local\Temp\it\+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\+3IKkX74YmSX3Thmxe5+hS6rIQNncoz6+djicmw8jsBpbY32edX5wMOpF+nwZuSvmOTX5ZEDKrw3jqSB2XXg00hSngxziH6SzNP8XSBjipJvNA0GW9unDxkasKD2JvrOWpA=.resources.exe
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\62dec581cd40afd680502a581d529b7e\System.Xml.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\62dec581cd40afd680502a581d529b7e\System.Xml.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ade5aa3c89481539adcaf7d9526dc8ac\System.Configuration.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ade5aa3c89481539adcaf7d9526dc8ac\System.Configuration.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\rasapi32.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\ws2_32.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\winhttp.dll
C:\Windows\assembly\GAC_64
C:\Windows\assembly\GAC_64\mscorlib.resources
C:\Windows\assembly\GAC_32
C:\Windows\assembly\GAC_32\mscorlib.resources
C:\Windows\assembly\GAC_MSIL
C:\Windows\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\*
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC
C:\Windows\assembly\GAC\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_64
C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_32
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_MSIL
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\oleaut32.dll
C:\Windows\System32\tzres.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\shell32.dll
C:\Windows\System32\it-IT\tzres.dll.mui
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\iphlpapi.dll
C:\Windows\assembly\GAC_64\System.resources
C:\Windows\assembly\GAC_32\System.resources
C:\Windows\assembly\GAC_MSIL\System.resources
C:\Windows\assembly\GAC_MSIL\System.resources\*
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
C:\Windows\assembly\GAC\System.resources
C:\Windows\Microsoft.Net\assembly\GAC_64\System.resources
C:\Windows\Microsoft.Net\assembly\GAC_32\System.resources
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.resources
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-RFQ180730doc.exe:Zone.Identifier
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\psapi.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb
C:\Windows\symbols\dll\mscorlib.pdb
C:\Windows\dll\mscorlib.pdb
C:\Windows\mscorlib.pdb
C:\Windows\Fonts\staticcache.dat
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\bcrypt.dll

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-RFQ180730doc.exe.config
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-RFQ180730doc.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\62dec581cd40afd680502a581d529b7e\System.Xml.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\62dec581cd40afd680502a581d529b7e\System.Xml.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ade5aa3c89481539adcaf7d9526dc8ac\System.Configuration.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ade5aa3c89481539adcaf7d9526dc8ac\System.Configuration.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\System32\tzres.dll
C:\Windows\System32\it-IT\tzres.dll.mui
C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb
C:\Windows\symbols\dll\mscorlib.pdb
C:\Windows\dll\mscorlib.pdb
C:\Windows\mscorlib.pdb
C:\Windows\Fonts\staticcache.dat

Write Files

C:\BVTBin\Tests\installpackage\csilogfile.log

Delete Files

C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-RFQ180730doc.exe:Zone.Identifier

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quotation_Sheet-RFQ180730doc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Quotation_Sheet-RFQ180730doc.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Quotation_Sheet-RFQ180730doc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Quotation_Sheet-RFQ180730doc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\FileDirectory
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\LegacyWPADSupport
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\Quotation_Sheet-RFQ180730doc.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\9CBB21E7
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\Dynamic DST
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Display
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Std
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Dlt
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\Quotation_Sheet-RFQ180730doc.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{3697C5FA-60DD-4B56-92D4-74A569205C16}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_CURRENT_USER\Keyboard Layout\Toggle
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey
HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\KnownClasses
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 024
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\LegacyWPADSupport
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\9CBB21E7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Display
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Std
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Dlt
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-RFQ180730doc_RASAPI32\FileDirectory

Delete Keys

Nothing to display

Mutexes

DBWinMutex
Local\MSCTF.Asm.MutexDefault1

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
clr.dll.SetRuntimeInfo
clr.dll._CorExeMain
mscoree.dll.CreateConfigStream
mscoreei.dll.CreateConfigStream
kernel32.dll.GetNumaHighestNodeNumber
kernel32.dll.GetSystemWindowsDirectoryW
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddSIDToBoundaryDescriptor
kernel32.dll.CreateBoundaryDescriptorW
kernel32.dll.CreatePrivateNamespaceW
kernel32.dll.OpenPrivateNamespaceW
kernel32.dll.DeleteBoundaryDescriptor
kernel32.dll.WerRegisterRuntimeExceptionModule
kernel32.dll.RaiseException
mscoree.dll.#24
mscoreei.dll.#24
ntdll.dll.NtSetSystemInformation
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.GetNativeSystemInfo
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
clrjit.dll.sxsJitStartup
clrjit.dll.getJit
kernel32.dll.GetFullPathNameW
kernel32.dll.VirtualProtect
kernel32.dll.LCIDToLocaleName
kernel32.dll.LocaleNameToLCID
kernel32.dll.GetUserPreferredUILanguages
nlssorting.dll.SortGetHandle
nlssorting.dll.SortCloseHandle
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
kernel32.dll.CompareStringOrdinal
kernel32.dll.SetThreadErrorMode
kernel32.dll.GetFileAttributesExW
kernel32.dll.ResolveLocaleName
kernel32.dll.CreateFileW
kernel32.dll.CloseHandle
kernel32.dll.GetFileType
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
kernel32.dll.GetCurrentProcess
kernel32.dll.CreateEventW
kernel32.dll.QueryPerformanceFrequency
kernel32.dll.QueryPerformanceCounter
rasapi32.dll.RasEnumConnectionsW
ole32.dll.CoTaskMemAlloc
rtutils.dll.TraceRegisterExA
rtutils.dll.TracePrintfExA
sechost.dll.OpenSCManagerW
sechost.dll.OpenServiceW
sechost.dll.QueryServiceStatus
sechost.dll.CloseServiceHandle
ole32.dll.CoTaskMemFree
ws2_32.dll.WSAStartup
ws2_32.dll.WSASocketW
ws2_32.dll.setsockopt
ws2_32.dll.WSAEventSelect
ws2_32.dll.ioctlsocket
ws2_32.dll.closesocket
ws2_32.dll.WSAIoctl
kernel32.dll.FormatMessageW
rasapi32.dll.RasConnectionNotificationW
advapi32.dll.RegOpenCurrentUser
sechost.dll.NotifyServiceStatusChangeA
advapi32.dll.RegNotifyChangeKeyValue
winhttp.dll.WinHttpOpen
winhttp.dll.WinHttpCloseHandle
winhttp.dll.WinHttpSetTimeouts
kernel32.dll.LocalFree
winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser
kernel32.dll.GetEnvironmentVariableW
clr.dll.CreateAssemblyNameObject
ole32.dll.CoGetContextToken
ole32.dll.CoGetObjectContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
clr.dll.CreateAssemblyEnum
oleaut32.dll.SysAllocStringLen
oleaut32.dll.SysFreeString
kernel32.dll.RtlZeroMemory
oleaut32.dll.SysStringLen
advapi32.dll.SystemFunction041
cryptbase.dll.SystemFunction001
cryptbase.dll.SystemFunction002
cryptbase.dll.SystemFunction003
cryptbase.dll.SystemFunction004
cryptbase.dll.SystemFunction005
cryptbase.dll.SystemFunction028
cryptbase.dll.SystemFunction029
cryptbase.dll.SystemFunction034
cryptbase.dll.SystemFunction040
cryptbase.dll.SystemFunction041
kernel32.dll.SetEvent
kernel32.dll.ResetEvent
kernel32.dll.GetTimeZoneInformation
kernel32.dll.GetDynamicTimeZoneInformation
shell32.dll.SHGetFolderPathW
kernel32.dll.GetFileMUIPath
kernel32.dll.LoadLibraryExW
kernel32.dll.FreeLibrary
user32.dll.LoadStringW
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
iphlpapi.dll.GetNetworkParams
dnsapi.dll.DnsQueryConfig
iphlpapi.dll.GetAdaptersAddresses
iphlpapi.dll.GetIpInterfaceEntry
iphlpapi.dll.GetBestInterfaceEx
kernel32.dll.LocalAlloc
ws2_32.dll.GetAddrInfoW
ws2_32.dll.freeaddrinfo
kernel32.dll.DeleteFileW
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
diasymreader.dll.DllGetClassObject
user32.dll.GetProcessWindowStation
user32.dll.GetUserObjectInformationA
user32.dll.GetActiveWindow
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
ole32.dll.OleInitialize
ole32.dll.CoRegisterMessageFilter
user32.dll.EnumThreadWindows
user32.dll.GetFocus
user32.dll.MessageBoxW
gdi32.dll.GetLayout
gdi32.dll.GdiRealizationInfo
gdi32.dll.FontIsLinked
gdi32.dll.GetTextFaceAliasW
gdi32.dll.GetFontAssocStatus
advapi32.dll.RegQueryValueExA
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
dwmapi.dll.DwmIsCompositionEnabled
ole32.dll.CoUninitialize
gdi32.dll.GdiIsMetaPrintDC
oleaut32.dll.SysAllocString
user32.dll.SendMessageW
cryptsp.dll.CryptGetDefaultProviderW
cryptsp.dll.CryptCreateHash
bcrypt.dll.BCryptGetFipsAlgorithmMode
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
advapi32.dll.EventUnregister
cryptsp.dll.CryptReleaseContext
rpcrt4.dll.RpcBindingFree
oleaut32.dll.#500
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
kernel32.dll.QueryActCtxW

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

Detected family: #Malicious

TheSystem Itself @ 2018-07-30 12:20:02