MalScore
100/100
MalFamily
Ursu

commj.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 38/66 Related 2134
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 296.00 KB (303104 bytes)
Compile time: 2018-05-31 07:56:48
MD5: beff601484de891d67599e7dc52841c9
SHA1: 98589257aa7d4a5b7473654850da3d792faa0c6c
SHA256: 3eb3ba743da094ae71b2d14b5651302bb48ec81a92d177e52781a24eb92caeb9
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-03 05:03:03
Last submission: 2018-06-03 05:03:03
Filename detected: - commj.exe (1)
URL file hosting
hXXp://gabsten.dedicated.co.za/sites/default/files/2/commj.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-01 17:42:35 [38/66] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x46d4d 290816 90f3135513f1d376a8485ea3230b4192 3f92cd5eed1bc5940622693df7459a4764d3f65f
.rsrc 0x4a000 0x49a 4096 eb02d56c180c21034bfe22c87777e31f eaf99e9f7266586340c9718170d53406d53f4b6e
.reloc 0x4c000 0xc 4096 49e573d75c33826f8b6aff9a22a98f63 f03e36fddb4fe96b7c0cda2acd66222dc64671a7
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x4a054 1094 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2008-2017 Apowersoft Ltd. All rights reserved
Assembly Version: 1.1.5.1219
InternalName: Apowersoft Photo Viewer.exe
FileVersion: 1.1.5.1219
CompanyName: Apowersoft
LegalTrademarks: Apowersoft
Comments: Apowersoft Photo Viewer
ProductName: Apowersoft Photo Viewer
ProductVersion: 1.1.5.1219
FileDescription: Apowersoft Photo Viewer
Translation: 0x0000 0x04b0
OriginalFilename: Apowersoft Photo Viewer.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
System.Xml
FIle type: Library
USER32.dll
KERNEL32.dll
mscoree.dll
GDI32.dll
ODBCBCP.dll
IP Found
6.9.0.114
URL(s)
http://www.smartassembly.com/webservices/Reporting/L
http://www.smartassembly.com/webservices/UploadReportLogin/
http://www.smartassembly.com/webservices/Reporting/UploadReport2
http://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
http://sawebservice.red-gate.com/
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
String too long
<RSAKeyValue><Modulus>0bV1qZA+QL1yZh22yHehJLOzO0/4vUwm6LfL7VVn6Sso0kaOligyF9MvAC8ynG7N9Njfi8GI1/FGI6teSWvG7BgWXkQyC4nYg0Rlx+NWfracm7nOYUXG4TiJPoirh2vfMerfcxgbe7Skb4ftGEX9u6iIEMf1q1orI2K61tELzk8=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
Please wait while %AppName% is sending the report to %CompanyName% through the Internet.
SmartStackFrames
-
Powered by SmartAssembly
appdata
StackTrace
connectingFeedback
sendAnonymously
IEnumerable
SmartAssembly
DateTime
AssemblyIDs
SmartAssembly.Attributes.PoweredByAttribute
Cannot connect to webservice
ERR 2006: This template was not properly processed by SmartAssembly
@1B2c3D4sfg5F6g7H8
UploadReportLogin.asmx
We are sorry for the inconvenience.
InternalName
OSVersion
{logo}
K93oCu6gaxOwgopMMWs1ZicGYHIKRADt4j3TbNWeyp8=
Object
Failed to save the report.
StackFrame
I prefer to send this report &anonymously.
mscorlib
UnhandledExceptionReport
ExceptionStackTrace
fdssssssssssssssss
retrySending
Software\Wow6432Node\Red Gate\
Error reporting completed. Thank you.
Translation
More
Ignore this error and attempt to &continue.
LegalCopyright
%$&$'$*)+),).-/-0-HGIGJGMLNL
error16
Key
saencryptedreport
&Send Error Report
errorMessage
31bf3856ad364e35
Value
Length
True
Comments
Apowersoft Photo Viewer.exe
Debug
GetServerURL
Transferring report.
rosoft.NET\Framework\v2.0.50727\RegAsm.exe
continueSendReport
&Continue
</RSAKeyValue>"
ditto
Cet6Xe47iuuUqL/f4Go16Q==
preparingFeedback
continueButton
Apowersoft Photo Viewer
Rank
&Save Report
1.1.5.1219
default
.ico
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
dontSendReport
debug
Shutdown
fsdy]
TotalFramesCount
SmartAssembly Exception Report|*.saencryptedreport|All files|*.*
ERR 2006: {0} @ 0x{1:x4}
dsfs
VarFileInfo
If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.
Workstation
dsfsddfD
TypeNames
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
labelEmail
FileName
Email
\Microsoft\Windows\
Name
To help improve the software you use, %CompanyName% is interested in learning more about this error. We have created a report about the error for you to send to us.
ByRef
network
poweredBy1
Copyright
SmartAssembly.exe
Method
Preparing the error report.
{0} Fatal Error
UNICODE
SystemInformation
{data}
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
email
%AppName% attempted to perform an operation not allowed by the security policy. To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
6.9.0.114
SHA1
{0} cannot initialize itself because some permissions are not granted.
UnhandledException.Objects[{0}]
DoNotCaptureAttribute
This
Assemblies
error
cancelSending
SOFTWARE\RedGate\SmartAssembly
RemovedFrames
CodeBase
"<RSAKeyValue>
SmartAssembly.SmartExceptionsCore
ReportID
2008-2017 Apowersoft Ltd. All rights reserved
&Email address:
ERR 2001:
FullName
UploadReport2
ERR 2003:
&Cancel
CustomProperty
ASCII
current
LegalTrademarks
v0.0.0.0 from 31/05/2018 05:56
ProductName
panelInformation
8$U
AnonymousID
Static
Powered by
Message
Null
Pointer
/AddExceptionReport "
transferingFeedback
d98c1dd4-008f-04b2-e980-0998ecf8427e
Save as &File
Could not deserialize the obect
UserID
X64
4axrt5biN/muKPbmlwY3+w==
pleaseTellTitle
You probably try to launch {0} in a partial-trust situation. It's usually the case when the application is hosted on a network share.
Reporting.asmx
%AppName% has encountered a problem.
ProductVersion
CGkmgzWpxZs9atUtI1mgyUcahF6FgQ6wtfTka4pJSGE=
__base
&Don't Send
PreviousException
Assembly
TypeName
DoNotCaptureFieldsAttribute
UnhandledException
OriginalFilename
&Retry
ExceptionReportingForm
System.Windows.Application
saveAsFile
Data
<RSAKeyValue><Modulus>0bV1qZA+QL1yZh22yHehJLOzO0/4vUwm6LfL7VVn6Sso0kaOligyF9MvAC8ynG7N9Njfi8GI1/FGI6teSWvG7BgWXkQyC4nYg0Rlx+NWfracm7nOYUXG4TiJPoirh2vfMerfcxgbe7Skb4ftGEX9u6iIEMf1q1orI2K61tELzk8=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
&OK
Count
headerControl1
headerControl2
headerControl3
To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
Connecting to server.
&Quit
AttachedFiles
ServerR2
N/A
8D7qilzN8+CSpLPqxEf66kxDdsJ3R9lyp2tAQtP2EEs=
ERR 2004:
SecurityExceptionForm
TtvSnOsbT5ucO/89V4OscA==
(0x
Path
Please send the Exception Report to {0} Support Team.
UnhandledException.ILOffset
Lqs9z8whpWlhgTohs/FEFA==
Software\Red Gate\
Assembly Version
PresentationFramework,
temp
CompanyName
FfpDaj2Qbx/USBKNveGrhZHVczKEHP+3vkZr7xReaoU=
Objects
#rundfdsl32 .exe#
ggggggggggggdfgdfh
panelSending
bmY0GvtxvNav7Y1b0myYXg==
{31A3279A-09BE-4888-A80C-3731AFFEB7A8}
ILOffset
ERR 2002:
*** Information not reported for security reasons ***
lqBGV/jkLhpfgF1ymGkEYKe913eXXk/TxV8+ERpGqG0=
TypeDefID
\Mic
ObjectDef
ERR
System.String
UnhandledException.MethodID
Exception
%AppName% attempted to perform an operation not allowed by the security policy.
Apowersoft
Current
Field
panelEmail
poweredBy
If you want to be contacted by %CompanyName% regarding this error, please provide your e-mail address. This information will not be used for any other purpose.
waitSendingReport
MethodID
continueCheckBox
Security Exception
windir
completedFeedback
ERR 2005: The 128-bit encryption is not available on this computer. You need to install the High Encryption Pack in order to use the reporting feature.
NameID
FileVersion
quitButton
VS_VERSION_INFO
Error
Do you want to be contacted by %CompanyName% regarding this problem?
http://sawebservice.red-gate.com/
CustomProperties
StringFileInfo
pleaseTellMessage
saveReport
label3
:!K1I
ServicePack
ExceptionStackDepth
Save an Exception Report
%AppName%
000004b0
(0x
gdfsdfdshshsgsdg
dsgfdg
FileDescription
warning16
UnhandledException.Objects.Length
data
%CompanyName%
Microsoft Sans Serif
UnhandledException.ExceptionStackDepth
.png
AssemblyID
Start Menu\Programs\Startup\
sendReport
OSPlatformID
AttachedFile
dfdfdsf
Please tell %CompanyName% about this problem.
You need to run {0} in full-trust, or at least grant it the UnmanagedCode security permission.
NETVersion
SmartAssembly.SmartExceptionsCore.Resources.
<~I<n
}{zy-
,H&&&
1B"e
,5W F
|Hzy{
Xq }
xzpz
aA>ws
}{zy
'ye?s
ExceptionStackDepth
2QKw
#jF_
5T?Em'
SystemPens
puHQ
Int32
~s{z
{Jy{
+(-,
Q~x^
k`L{
zy{#
z{u*
h1y{#
Epzyt
8*u+
!Y_`
I`3:
;rB9~ m"*
b@3}
O" [E
H t,
1R*_&g
rz{z
BY{zy{uz
o[ys
b^zu
2{zz
|{{u*
|@Wn
-ruz,*
get_Height
Nb{z-
.zx(
KF }G
4 y{
7v+,(-
DateTime
s)z
,%&+
#z"w
Zy{z
<2*+)
-5-
^xzz
,%&&
NZy{{y{u$'
Substring
dyzz
4w&+-
dC~P
7n+,
3h{z+(
#q+a%
wwwwwwwwwwwwwx
`{zz
+B'$3
bX/F
SP{z
i %'
Xxzz
qR`S*
eD[e/
&&&*(
Y(#-
Bqzzz
|zy*
get_IsByRef
get_Controls
b3y{
6-;?
Version
>qzyzzy{
w%'&
y)+,
vy{x G
@}pO
CryptoStream
PxG~"
get_ModuleVersionId
!zzu
8T[j
X{k*V
u@+~ qL*r
7g*(
&xzz,
42B
qzz
$7x"
d;xP
$aO
qe+*
gG^jzz
BqzzI
ty7v
zzz+
%msf
zy,&,
^t2YceX
z |I
&&*ot
PNG
"y{dO
g@3~ cL2r
&&*ou
B~y{
9 )jc=
zz;kG
PtrToStructure
^zzzz
============================n
Bqzz(
0C0~q
Marshal
ug H
iczz
~jy{
>yzz),
pC r
ICzz
^$
f{ u
*g=%%
8 p+
:IGO3
user32.dll
4#5
~zy-
~zy+
op_Explicit
RuntimeFieldHandle
j!%'
K|{E3
System.Security
zy{.
2uz,)
6yy$
bpzz
hjdk
/v-()
Sx{u
pwlA
htqh}
ooRD
Apzy+
G${y
NOLM
&#bo
r^{/
Copy
^zzy{
3{zz
,3&&
px``
,s',
{zzy
GCHandleType
{zy{-
q3zz-
EndInvoke
{zy{$
k%dQ_
rxzz@
dY3<
{zy{!
*jr:'
vB ~y{1&1ROH
>MZz
ZkQZaSA
WriteElementString
Tliicb]YWTTJx
wB q
Hz<$2
<>)*
pIDATx
get_IsValueType
6`1q
}xzz)
zzz,-
yr.8
Igzz
,/&&
bkcde#D_
EnableVisualStyles
6qzzz
{zy{{
^vzz,*
%zHz
Point
lQP%
?vzz{z
)be3
qzz u:B
my,w
|({z
.,d3
n<$!
)({z
set_MinimizeBox
{zy
(0V
2dOk )
*Zzz{y{z
WC{z
j%'
zzzQ
7? Y
f{z
(*zz
get_ControlLightLight
z~y{+
w %$
Qy)}NBR
zzzG
vzz(-
`,G
zzzC
Y* +
>xz)
Mw#'
zzzI
&+/
{{zJ
zzzr
agxkF
Format
&zy{
qquz
zzzz
zzz{
XWns
zzzy
/q)#
0v%I
v$%'
h{z(
|yyy
_ R8
|x!%$
u~zz(=
?Gzz)
`Jj]f
5&zu
z+++
Zz4z
?n[%
{HRg
ksVe&
>xzz
:y{u
AppDomain
~pzzJ
L*zz
26`@
zJzzy
GetMethod
w:W
F@ ~E:
zzz
m3zy
0yuz)
-,& o
get_CurrentDomain
Rxzz),-J
ThreadExceptionEventArgs
8v+,
xzz
.,zz
Gz:zz }
sxy{&
sdfgdsfg
Z{]v2
zzz:
PADPADP
r/!j
get_CanFocus
pzzz
BzzzA
z,;$
3F{z*
zzz/
zzz,
zzz-
zzz*
PaintEventArgs
~pzzy
zzz)
Z:zzk_
OpenSubKey
X |uUqze
q,zz
yzz),-
0'iWG
L\zu
tC*r rC)wz
{uz,
zpzz{y{z&
YbNog
,mH#~
FromBase64String
2ZI"r
o>
qzz.-
zjzz
Z{z))*
1 vx#
XC;h
Zyzz
{2zy
>zx*
ToByte
48qO
{uz
%{zy(
**********%x
kzz-
@b<9
Path
set_Text
^VD_
745*
<zz-,
qpzzy
Z{z+
Z{z*
;#>P_
Z{z(
Pzz
z{{z/
e*v_
|zz{zzz%
`zz(*/
Jzjy{$
Kzzz
UTF8Encoding
l()-
L$zz
X_x"
{uzu
Rr{u
v%9C
4s+/
{uzz
#Blob
Control
C<,\
-(&&
Ex{z
{uzC
uz:*
bu{z/+
set_Item
{uzI
get_Year
>e+(*
ZT <XD
q*<2
,c&&&
,jx{
`z;O
n!%$'
add_Tick
,V)-(
Tz_7K
.j/,F
_zuz)
|{{z)
, &*(
&^!-
B~zz
GetILOffset
+7zp
~tzz
]CZ
r=A s
BindingFlags
x\,z
;~*+)
axxz+,,
>?).
hkkk
IDictionary
Ry{)
Type
ef{y
{gas
,S&r
uC ~
WJ7`Q6
kfzz+(
!puzy
N7xZ#
[s_ u
ek!w
IEnumerable
F 8;
S|m4
j}{z*,F
tzz)
$B{
qzy%!&
%O{i
.5@N
|zyH
#6zz)
/({z
o'" M
uzY{z++
Rr-3~
Cursor
Hqtz
kzuy?r
*{Qk20
r#P~
ocIrWP
K{y{
4o:)*"
YuZz
`4zz
$E DG/ A
Rs{z(-
tzzz
Z'zU06
t^imM
hwK4
NeutralResourcesLanguageAttribute
get_ExecutablePath
>c{z
y?v'
Char
,zz,
NC$k
9zy{
&z6y
Zpzz(,
mZ{y
v{{z/H
3H'_|
;qy{u
i{y+
'u-F
$Qoi
dC2~
O1U!Qik
}zuz(
}zuz*
get_Name
GetValue
~zzz
Hzz)
zysu
sC wu
uI kN
7;a-
5~,+
m(zz
/r(-,
yKuz*
;~(*
GetSystemMetrics
X<,sKD
4z;z
z&z
>y{z
>z{+((
GetLength
^yzz
{zz),-I
X|MX
tC,_
fyxy
w",I
+$(-
py{z
zjzy+
~zz*
h{y**
rxzz,
Dx{z
~ y{
w9A$b
~zz,
qzy$$
Bvzz,*
3#Fh Y
vfzz(-,
7r*+
bdKR
~pzz(,
@ /
6g'+
eC2~
6bx+(
*ozzz
3zBfJ
F9nq
py{%
}zuzC
T06n.
<^ ;
N*g
]{z-)
tC r rC wz
xzz
ToolTip
zezz
>y{#
kernel32.Dll
bzz+),
ikkk
zy{uzzzzzzzzzzzz)>zy7t{z
|_1zo
fC1
Hy'u
>v+-%)
v`zy*)/
, &&
'r-)
Cxy{
}y{$,
>j*$
F w>
DialogResult
vx8v
EdKH
\IPD
}s(?
s@ yu
=r)*
{zzz$%!
.text
List`1
Zy{
Wz g
<w$(*
# 8T
l{zu
|y"$$
GetString
`X'pu
set_Proxy
-a3-
Component
,-""
ExtractIconEx
GetObject
zI{u*
nSTj
/[ow
=yzz-
vZzzzzy{
8$4
G{xzz
Convert
P_W
fyzz
wz U
JyJu
Button
zZzz
System.Configuration
{zz-
FlushFinalBlock
vzz)+
!z2z
B)z+y
.z2z
StreamingContext
~t'$!$
{5{z
b2WY
n~zz,-I
?r&z
_jy{#-
znJ9
SmartAssembly.Attributes
- &&&&&
3{{z
E:2i
,='o!a
C6M{
PerformLayout
qyzy+
./*;+
PxWV>!Yo2
SJ!T
-'&&&r (
+] ,
z4Z
zC*~
"T /
7{uI
StackTrace
z+*,
,{{z
@7B{
K3eA
Bc{z
~py{
vrzz,I
Yxzz,
iC'fu
C'c
7ppB]
yzyGLu
~?[I&
%o'h
:xzz)
={u*
,F,$
B%\D
- &&*(
CipherMode
OxzzC$Zu
:{z/
F8`8
|| *$
sB%v
zC ~
|r?r
bs{z
f'SWo82Qu
3vpG
]Gy{zz
zY{zR
+{yx
~%$!'
bs{u
WriteEndDocument
.:zz
&kzy{zy{
rZDvE
vbzzz
y)*((
`/x$5
GetFrame
serverUrl
?r+-()
5z z
vJHF
X^{z
ty7u
6Juz
System.Net
2zz+*
{<Ew4A
)Gs M
SetBounds
%$!'
.qpb
- &&*o
;xy{^?
zz{{
zz{z
`.rsrc
f%$I
+yCj
wzzA
o~y{'
;D
2qRT<s"
OnTextChanged
-Z}C
alzz
{Uzz
"),-
"4Kf
CreateDecryptor
get_Default
"([W
UgxS
9~*,
yuz,-
StackFrame
~%$!
kernel32.dll
i{zz),-
[vy{#*
vqtz
jX}
zy;%
-"a*ia
pB%vu
nyy{
4g{z
css&%e
Enumerator
,{{u
[z z
get_CodeBase
zzy{u
i~:% cf
aA"~
8-<_2;&
!tE5
Ez 0,
&z7z
D{zz
wB=j
}$%'
6ozy{
4uzz
? ,dz
E BI
-b**(
nV*xE
:Xo&
7f<{o
?r(*
^xzz+-
*4y{
Flush
zvzy-*
l[hU
Gzz{zv
3qNw
Fvzz,)
FsPE
add_ThreadException
i+()
fD&u
4QX\
~%$I
}zy()*
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
qqzy
nFx{
Focus
&qy{
mwzzz
/v(+*
zzy{.
*{Rj23
(*+,
S?(V
=^zz
get_IsPointer
tzzz!
qzzC
IxJgi
tzzz$
PlatformID
}B=q
,{zyG7v
Y~vwm
lzy++/
p{zz
ControlStyles
$V }
_Ezm-
PictureBoxSizeMode
20 w
D;zz
~3zz*
uyzz
C<;5=
FJz
_jy{
_{zC=n
Pj:j
|B&Jy
R-}#m!
bFJ
WebRequest
Ebh=
3xzz
nr9@
GetProcAddress
FJ*?zz @
qzzz
Cy{z
|C vu
i{z(
:{{u*
XqW_
3zzu
}y?r
:QWQY
}x"$$
n{(y
}y?v
qzz
-@&r (
}y?i
A?r%u
v6A%b
,J-(
J%$!
j{y{"
GetBytes
&z9y
8~ 5lj&_
Cy{%
d=Q
4 ^3
Process
qzz.
qzz-
m{zI
K 8]
qzz)
Q^,!J
OnPaint
- &&*oT
SmartAssembly.SmartExceptionsCore.Resources.ok.png
-qzz
^[]i
nvzz,*
PUUQQTTLKKKL
Bx{z
%xzy
{uz,-
-A{z
Z{z j
kernel32
6@Zz
_uzzz
aM_^j
get_Top
Write
Qyzy
z))"
{zzF
{zz@
{zzC
zz:*
zOh?
c+{zy
{zzI
{xzz
gt"yU
{zzJ
{zzu
>=b@
C zy
zpzz{zzz%
MV{z
'r,I
get_Assembly
wn>Jj
Wzzz
bY{z
AnchorStyles
zuz*
System.Xml
2R{z)
Zc_[
UInt16
v2|5n%
%-&%-%1- o
zxzz t*
z}{u+
(kp?
s@+yu
MeasureString
MySettings
g&zz
'r,-
/v*+(
2szz,*
')[ogO
%pzy
i]Wb
DrawText
Ipzy
QNgE^W
&w'#q(
-:&&
JIuz)
+r*u
zzzy;;03
get_ClientSize
.kr 3
Spy{
(ss%|
ntF! k@
r{{zJ
N]{u*
e+V)
Bo[f:Z
+ 8)
zzzy#
SoapDocumentMethodAttribute
6q`3
System.IO
tC1k
~{z)
WrapNonExceptionThrows
get_Now
Fxzy
AsymmetricAlgorithm
zyH
zpzy{
akkk
iC1w
{zz,
V%$"
T{y{
{zz)
{zz(
{zz+
zuzz
Fguz
WG/.z
Q zz
.ky{z j
on{z),
;:{zzz
Jb#Y<
O^<H
YRZ!
E=&
%$2Y?
Ptzz
44HN
&&&* +
,fV t* 17
puzd `C
U[wv
{>|S
&F"8
~Jz'&
get_IsStatic
/Fc\cA4=
}{u(y
[];D
%2=
j!%$
#M+#Xf
Bw[/
{y{u$
q*zzzzzzy{
{U{y
b{zz
<}=L
XGT*
fJ!.g
wuz^{
${zy
zzz),-I
${zz
STAThreadAttribute
7#{z
yuzWzzz
7#{u
byzz
m9C h
pC2j
IHDR
cxxz-
-*&&&&
Ykkk
z+)-
Q+J^
`>{z
EQ~M
qGaH
zY{u,
~Gznzz p*,
[uzzzzz$!
CQ{z
xzz)I
V(]/`<
zzz).H
; b(
9}7i
5KBQ 9
]& 6m
#{ Z
+wP*
~pzz+)
rM&pT&E
zzjz
-g&+
j@zz
h{z}zzz
MlWk&Z
Uyzy
1 uaF
wzV3y
System
EventArgs
r{$b
uZzzz
Application
zuzz'
iF^i{u
Zty{#-
r{$z
z~zy-
gffffffdhs3434.My
uC&Iy
91_d }
/o%(
[sbY
@pjSSf
{zzy '
8F{z
W[eb
+@<q
.t{u
%J,|
user32
/?aw
<837
5mBO
x5!Pzz
wuz,*
;iI}
,3~.
Z{z(,
QE^
`(i(
rxzy--J
,)~.
%& %
}zz-,
orsu
CreateInstance
&;k}:
uBJ hL ~
1yy+*
;z*z
>'zz
YA|z
zy
wuz,I
{oUf
MethodBase
#Strings
.}(,
^\1K
o*pm
System.Collections
Image
d91I
I'Yo
dzmg
u$+!'
Oc_
fzz w
=EUy
B.{z
8ox{
F?1clr
{{z*-F
QZ{z
dT +"
nnzz-
OJDk P0
x!&%
:rzzy{
:68S
6aGz:zz h
D)X )
dz{u
.z{H
Environment
e(Y8
^y{zy
**--
"A7f1zs
K48R_
^#u#
'as>
0*rw
iC*~ uC)s
7j,-
OnFontChanged
qzzC"j
1X{z
xy{-
TgoK
}zz*
C<84>
xy{%
<w.bt
jvzy-*
xy{"
V8,s
"h{u
SQ`?M
cUQ$
#$ig
e%$!
izz.
7j,I
xZK/"
]yzz*
7X{y
Ttzy
~3zy*
Jfkh
get_Position
System.Diagnostics
)UBN
GetEnvironmentVariable
GetType
P{zy
set_StartPosition
<Q+&
F{*?zz
:99X
*xSj92
:W T
^)4u
o%'
>,Ty
[%'H
6zx+
9Xt:
wzy,F
OpenWrite
qzz-I
-?{z
cl~@! Dg
zzz,-I
Free
@Orkk
G,zz
uyuz),I
vl$!
U0D1,PW
9Um!
Activator
r()&
Hw5p
f{zz
,v&&&&&
EK%5).
$=p/
exzz,I
*) y
}xzz,-
^A$tu
M.RE
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
xy{ezzz
Qg{z
onjc
~Zzzyt
x{zy%
x{zy$
zpzzy
x{zy&
{zzz
~p;4
iC2v
_)p=
set_Anchor
&u !
xzy(,.
I$6Q
YWlg
2'eb
set_TopMost
>qo(
f^RRs.
S5V%
$W{z
"*Ad
j!&%
KX4Fw
(S*<
Uu,
)zzz
pr]"
|N<h
)[zy{
ProjectData
%{uz
nY{uxzzz
ty4w
xzzjzzz
set_Location
*WFT
Color
8 NV
c@3r oL2v
%Pzz
v' %
~*y
vg~k-'
nuKI
u*)'(+,
lxxz-
&jc6
A0| 8,
jY`
Ioe&
qzy{
*vCj hC)
uz?hgfN<"K_
6J.;
c{2v
Qx{u
Mpzy
EC2/C
set_BackColor
4'b M
r$!%
SetClip
vzy{u
%!$'
L{zz
y^=o
}|!%$
get_UTF8
<5zz
get_Width
!=9tj(
xzzz
* 8p
5h
. C H L ] p }
xzzA
Z3/(
UT. `
xzzF
h{zz
n$%!
2r,-
2r,.
~o%'
=nCr
H+k}
KQ`]]
licenseID
#g>CN
.>ry
AH D b
SystemColors
Fw _
yolz
{u:*-,
j /.H
yzz-
?q+,
xzz(
xzz)
(\=}
<`1o
xzz-
-puz
;{zz
jIW[6
s_ 6jLu
shell32
zi!<
get_ManifestModule
ux{u
~{zz*
)u 9
r%!I
Bqzy
SmartAssembly.SmartExceptionsCore.Resources.data.png
z:ezu
7q*#
q}&'}
-3(3
{zzjzzz
ykzy-
Mzz,
SaveFileDialog
OX F
~|z$'
BitConverter
UnhandledExceptionEventArgs
A ,k
6 p:
zzz
`M{8
bcp_colfmt
uC)s
Q'BBuS
>{s~zzz
?v*-
?v*,
*Ox-+
b#?X
-%&
Label
}7zz
h"TcS
m$D?V
Gv[^3
={w*
5[tz*
z+(,
&&&*
get_Second
-%&&
|I=]
Jx{z
Form
`g7
zzK_
:0MF
&&&&
.},-I
2_zz
,O+*
uJ{z
Abort
Gz{zy
cC2~
Gz{zz
r4zz
GetAssemblies
*k '
ewzzz
v9<>
CommonDialog
!+Ky
mzy+
Mozx/{m
w{zzC
cCyLE
x6:+
{z}
y~!&%
Delegate
kf{y
AssemblyName
@y{u
2y{*
ZwAg
?ny{zy
7) c
y{).
&++++++++++(x
@<-#
@:*.
IDATx
R4uz
get_Visible
#{bV
}~ *$
PlQOC"qrPtG
~-&Z/
GzuzF
D&sY
Seek
&},-
{(LZ
qzy
z>ez
z{{u-
{}aO
}qzy
/`zz(,
OnClosing
51wy
|zzz
Fyzz
<d-W
VxzzC
+*(*
Vxzz@
P{u,-
#GUID
j%$"&
#{zz
>}k(S<`
|Uyzy
1wp{i
d{u+),
LastIndexOf
zJzz+
.^:<g
\pe5
Enum
&z)z
#.zf
o'{z
(G7WJG
CopyArray
x{zy
zzz
zzy
qzzzzzz
ioIk`
vczz(-,
get_Day
xfnbLi
yytq{pzz
GetTypes
set_Name
dwxz
GD
|B&{{ o:B
Default
u=vA_
;3zz
yxzz,-
08~RWsuA
vzz-
ns{z
r"Bf
+
rzz{zzz
3b%$
r%$I
iLc6
get_Length
zz-
zz,
x{z(
rpzz
YwCF
uzzz"
^Zzz+*
zzzz)-
{{zz
DESCryptoServiceProvider
j{{z/,F
Nd4/
$"C
ILOffset
.$XE
C$a hJ
va+,
OAJ;
FMx$gT
jC r
V|tE
{||yyyy
~! 'X
vzzz-u
GetSystemInfo
Contains
Ztzz
X)1> >
ResumeLayout
~{y{(
x{z@%i
P` K
-n+-

&zuz
IDATX
C e E
r*+.
a#bF
C ~u
ValueType
7q*'-
z"wQ
System.CodeDom.Compiler
set_TabStop
Vr{u
y{:)
vzzzu
{y{z"
yx{u
yx{z
=&zzzz%$"
xlV0
!@^q&
LC<b
eZzzz
:rzzzz
GZFF
ToLower
<~$"&
o+!%
6IRJ
<{zzF$t
<?7t
~-u[
(BxT
g{z
2}x{
:a|N
get_Count
I$bC
zz-,
data
Trim
~zy(-
GetTempFileName
d zz
' 8l
!>AzY<
rIOU
r%$!
1y{$
ButtonBase
{y{ X
2@(0
qy{u
Fr*?zz
?nzzzz
vCJ
Namespace3http://www.smartassembly.com/webservices/Reporting/L
System.Drawing
A({zy
uzzz
npzz
j<A f
I+Jf
GetField
zzQ?r&%:"
(kzz.(
uzzu
~pzz*
;{{y
2zz-
2zz*
SmartAssembly.SmartExceptionsCore.Resources.current.png
yy{u
2zz)
yy{z
<bDzuz
3P~q
[i/O
qzz,)
qzz,*
yzzD
y_Di
F*--
/j,(
zQ:V=
yy{I
Wuliicc``YZMx
FormBorderStyle
}zz(*,
yum3'
s"+,
@lg~
9w'*
z6J+9
{zzz;A
UInt32
ToInt32
fvzz,*
SerializationInfo
j ^Gznzz g
WebClientProtocol
+Os
+{yk53
gC2}
get_Version
>x<Bc
set_Dock
Zzy{
uzz*
z<H$
ToString
uzz-
-3rY
yGJ
f? _g
set_Timeout
wzpy
-pzy
<x{z
y_D(
-2&
"kzz
Utils
Czzz,
GetWebRequest
'v=A
] ggB
7rG~{zz
Cursors
3aCr
yyzy*
[{y+
%M, 2\
sC2nv
sC2nu
3~zzzz
yp(D
xzz+-
&&&*o
Nu{u
<=,*
"o4-qy
6 y{
Wz-z
_@m(:
ClearProjectError
ZZzz)
Split
ZZzz+
]}!N
WO`
hS:O%t
}z *$
w_ q
7s$(
tLQN]
H &m
7v(*+
7v(*(
!B5!
(OnM
TQDd
5y{u
Rpzz-,
iwC2%0
CreateGraphics
y{uz
^GZw
A5{z
ICryptoTransform
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
cz `
nxzz
GetObjectData
cz g
T(Dl
tyzz
S'KL?
9X,P
^'}T
t{zz
ShowDialog
rzyzuzz
XzZz
MHzz
10.0.0.0
'O-E_>
m COt
y{u+
v*()*,&,
HQd 3
cz ?
CNPb
;~.MK
*+8v
ZZzz
zzy--J
o7QW
bdNU]
set_FlatStyle
S*$!
ylzz(-,
v=>P=qJ
System.Security.Cryptography
rpy{~y{u
<q)v
Ca5b
9el/0
qy{#*
MemberInfo
ft}=|A
<w&y{u
?6A#
3K {z}
xzy-
SettingsBase
g{zy
}y{y
Start
Fuyzzu
Combine
zwK=yK
6Zzzz
jC2j
&qzy
)zzi3<
}Qzz
xq!]
.kzy{
xzz),-J
xzzzC'
wpwp
kzux
zzzQ}
|{$+'
o
rpph{
o
o
w-(,
wzzzQ4~
LinkedListNode`1
RegistryKey
EtR9~
MethodID
'q-"
*xzz
{zzz%
'q--
9a&g
SvP}
oNmg
4@ ;^X
\(fW
-+&&&&
}y{$
Int64
/v+(
${zQ$~
LinkedList`1
szz{zzz%
|z?>>N
h{zx
>uzz
rpzySzy{
kxhg(
xzz
cxxy*I
oP
XmlWriter
Qxuz),>
7WH#
pHYs
.ctor
*u{z/+
Ny{u
RCC
Y~LL
2qzzz
l# f
\Ex Hh
{{{{),
5/zz
m'bt
mscoree.dll
dom>
0hpJ
3z3u
lvuz
|xzz(
|xzz+
|xzz*
LnZ-
[{Zy
Z
Aj uci
6zzI
?u@8a
+H o
bpzz,
.Mz)
>Zzz
=]w}
&* 8q
?vy{zyt
Invoke
gDsC
1zz.
4XRu
"*? !
2Ozz
rxzz
6So@
d!2*
Fr*?y{
xxxxxxyxyxxx
!y{Fg
C6xbu
cxxz,
zrzz
npzz,
e~/6B<
wSMkH
{zz)/
;K{z
nZzy{zy{.%$
Ryy{
DrawImage
Name
[t'Z
u|%$
Z%$!
YQ{y
y@~t
\0b]
4w)(
osYc
{qxz
)} I
wCI
|e{zy
c-zz
uZzz
*z8{
}G^J
1{uzu
wzy,
SelectObject
Zx{(
|xzzI
Module
=puzzu
zy{
&sh6
zzz(
n{zH
)=&#m(T
xzzxzzzzy{xy;
Array
.y*+(
,$&+
6zz,
cv?x _#
}pzz(
P-F\
k%'
LoginServiceSoapT
oE7t
@.reloc
a@J#
,X3
Ywzz
, &&
Ywzy
~py{+
lxxz
CompareExchange
GenerateIV
Ll_@%
tC2i
Zo<x
tC2j
,s"u
?z{+
<V{u
wuz+
ME}.
Xy[u
HJJZ
$78b
HJJB
yzz,
yzz+
yzz*
yzz)
yzz(
<izuzz
~z W
Byte
get_Chars
Fi+0zz
{(,
/ky{tzzz
CryptoStreamMode
Tc{u
t@+}
MoveNext
mC2r
tD cq
c]zz
YHzy(
x{uz!'
r%$"
get_MetadataToken
WTL-
i{y$+!'
get_ExceptionObject
Zzz,
d({z
Zzz+
uyyz
s@3nv
Npzz
'y{z
6Z{z(
yzzz
x;: j
z}7
u{z/+
r*%(
w$!I
@pEy;
yzzr
ywzzz
%Ki{
& ,w o
sxzz(
j\ sA<
Rqy{
`,Ya41
Yyzz3h^
@am
Zzz{zzz&%!
^!l =
Nhzz
GetVersionEx
=>i^
nC2r
;] !
;h{z+)
ujzz
Vyzz)-
s]M-5/
4b)+
2zz*,
z(),
vCJ hC
wp/(
4k@Uwm
vazz+(,
MessageBox
.}zz
L0TH0
@$qu
|,zu
get_Location
v #F
,2&&
>vzz,*
+EmU
Vvzz,)
System.Web.Services
7v+(*
C(v
zzzr,
zzz)*+
"qzz
&u*nor
}Gzx{z m
&p{z
~D{jy{z
_zzy
y{uz"
z t)
set_Url
GWF8.9888886x
ey;:Y&+
set_TabIndex
gffffffdhs3434.Resources.resources
An{zI
}%'
+,))
r&%.
Rpzz*,
,fz
wzzz
h{z*-)
qy{{y{u)
niin~%
{kSF
get_Item
^jzz
eqzy*#
IIII r
FileStream
?v,*
xzz),-
Zjz
Bzc.
RuntimeCompatibilityAttribute
get_FieldType
iLGL
S{E\K
y5_),
qC v
wZy{uzzz
:$_4e
q,%,
Assembly
0)Q
&wzy+
?r,-
.resources
DelegateAsyncState
g[zz
{uzz"
MQ!Am
U1o?
zzzz:;32
, r
GraphicsUnit
x{uz$
Wvw2
x{uz!
t\',
7v()*
uBE
urzz
$87o
H.#L
mV6N
q{zz
Xux{
,%&&*
=f+)
..633333333)x
-A&&r
SuspendLayout
hB%K{ wM&Jx
Z) 0
j{zz
j{zy
XKN*
_bY
Synchronized
_V Fu
%$%!
\~y{
%,N?
:TJR
zZzz)
w*$!
p U#
6ex{
)-.,"---)-
:{z
] zz
GetHdc
{jL^~aS
RSA1
>>e+/
{zzz!'
{zzz!$
/r*.*(
:zzzK
$V}?VB
NewGuid
z-(,
Rpzz*/
,D&&
/G)_
>e%y
0AwA&
)z6z
|0^}
nkkk
^|zz
,uW`
5a@C
-jzyzuzz
Nvzy-*
AK2<
ZZy{+
Objects
$u%z
mO(o
yl:u
uy7v
uy7u
rpzz~zzz
IContainer
rpzz-+
Clear
l(x{
Wy }"
rO X
2Q!5jz
/v)-*+(/
o x&
v]kzy
{1ez,
bz{zy
1+ y
{yy{
hx{+
fdT#
-W&&
Br{z/*"
T4N=
x{jz*
?brzy{
FZzzz
&kzz
) \%
+
zpzz{zzy
Z$%$
}xy{"
4"uz
}xy{%
}xy{'
6n]C)
ly/v
zwzz
({z
ISerializable
=C.l
K6`{e
{y{z&%.
Zpzz%$
u Qy
"$$$
xzzzzzy{zy
%{uz*
$>Q?
2{zz-
NFP->n
~&%F
bzmw<$
@?94>
7f!(
zz{zzz
set_DefaultExt
Jqzz
yzyG
/u,(
'-I?CS
set_Height
0-zz
~{u(
zpzzz
ez7u
gx{z
K+]&
ez)+
Iz}p
sy{z
R%$!
_("bI
05{c
@h{z*)
E\{z
nKZP
x{zy
/f:*(-
; rH
v_YJ
zr,=]"
d-&-
=~+(*
n[jE
wNvi-
~pzz Z,
Sg|;
vvzz,*
~xzz),
s~, V
be-BY
set_MaximizeBox
{6z
{y{I
E{z,
e [I
D6Z#
0; =
dDG<$
@%iu
[7Q
ResourceManager
Show
Dpuh~S
~vzz
?vR:
GetExecutingAssembly
yhW
x{zy%(
g`{z
=+P9
{zzyR'i
~&%!
PropertyInfo
XmlElementAttribute
O_zz
czz*),
rs{z
:r,-I
LJ\sW
<D&OJ
mqzy-
Z__??
E}z
DYy{
/r)/,
{GT{
VKYya
IWin32Window
&|f{
pB=nu
r%'
Nf{z
get_IsEnum
5`L~
|xy{*
aB=r
`>Bq3
\{y{"),
Hzz)
znzz j
ag>[
A A
Gk(H
cHRM
CreateProjectError
(*()*(&)
,''[
Yq{z
@\Y!
bL2~
_py{
bO@m(:*
|{zI
<b-()
K~zz
# o\W
zLt#(
<I{,
z.J>:
;zFM
~zz
.r{uz
|y{uz
d mhf
Interlocked
m`K9
q{z(-
Bqzz
nd99
@-jf
||%$
Z(#
gwCv
rxzy--
e XGzxzz a
a?'6
|&H
/z {
ry{I
%(7I
r%'H
HJKK
[Zy{&
HJKL
ZF FnD
B8s
, &&
FB*?zz
YB)kBQ
9xl,
Sw{z
ze8A
.qzzy
Rpzy*,
@a'+$
kkk r
2f+,
LoadLibraryA
gazy
,-+(
Empty
|%$!
99PN
chjd
|%$'
A~uz),-;
YX
Wtzz,
7$1b^
Rpzz+/
k|c (
9{<HYd
k#S0Vb
<L;
|Jx{
&&&&&&
zzy{A-
/i+$
3yVz
}*$
?v/+
?c"*
|%$I
z{ %'
B{uI
>tzz
,C h
f&J4
zpzz{zzz%'
7n*+
e!-G
G|?9;=
Yyzy*
<2),
/z)z
get_Keys
<Module>
% ,L
>jzz
Uzzz
4=\r+v
K%'
*~Cj
IndexOf
~9'H*
6o{z
)qK('
Qc8Z
Uzzu
set_ForeColor
1P{z
9zz,
Close
}x{z
^{z
]{:A
Yzy{
- &&&
Encrypt
fpzz(-
{)+,
?rKz
"Powered by SmartAssembly 6.9.0.114
]xzy
@'zz
{yzz
set_Enabled
j#Tr $%
rzz+*
zzz*,*/
appFriendlyName
cxxz
z~zz
}y{$*
N0zz
{p<p
!T\
Read
@zsz
@",
LS(
'VB=n
,{&&
&z5z
0q{z
Evzz,*
&Vuz,
=zzJn
}G~{{z h
value__
/n-(*
qvzz,*
=qzz
)M#O
jB%~
AvIH
qzzz!
>zzz
>zzy
zxzy
zxzz
t@3j rL2nu
!z)z
>G~F
set_Interval
:HD
*r[)
0s$
?zy{
r('
4v+()
:-dqcv
:qzzz
'vC"b 6
AddRange
n`>5
k\x;
get_Font
gAMA
=' >
Y\8C
m\{z
3>C$
~g2\ j
:79>
Lz&z
jizz(z
vy{*
Ry{W
F ~F
&Jf{
XZzB8UOT
rzz*,
<nvzzz
vy{#
a -S$/y
e9{;:
^D{z
5a($,
J{zy(I
Ceiling
upzz
get_Left
.cctor
Ev<#F
AsyncCallback
+~zz
set_FormBorderStyle
mscorlib
]_s,Erh
GetArrayRank
KXP Sj
2nCr
88-e e
7 ?(
ETzz
#UBI
QW'y
3_zz
k{z*,-
FontStyle
jBy p
Refresh
vy{u
C].(N
n%!]>.
%QwC3
u$jnc
"{!z
hg\
2 !H_
eQ-|
ry{u$
+GJu
pHzz
:Zzz*,
ControlCollection
rpzz%$
Nszz
qrzy
%{zy
`ras
RSACryptoServiceProvider
Y]9C
f-Zf
S3;R
Guid
q{y{
s%$I
?{y{
Nqzz
>y*-
{~y{
><{z
zyH
|B%Ky ~3A
/ 8K
r{zz
:hWh{%
zyy{
m%)ZnC
S;?"SP
Fj*?zz
?n*,
=+PaO
wd{z
A7|c/n
1@Kj
6{zz),
O9zz)/
5n E:
.z&y
?n*(,+
yzz,*
ContainsKey
;rSn
System.Reflection
Fyzz)/
DrawLine
awzz
`*&g&+
j0X`
*cGG
1:@]5
yruz,-I
&&* +
RuntimeTypeHandle
htz*
xRy{
SF]{zz
yW]Kk
htz+
A&z+
'fgg
y/v)
!z?y
sP%u
Z}Lk
z+(*,-
Mxd<
m{zz
?7AL
Rzy*
}zz+,*
zzzz j$&H
set_ControlBox
UInt64
jp6r
`RZD
ToInt64
tv7v
vdzz+,,
|!%$
hDb6
LM`$
ol"s'
Iony{
Vkzu+)
TE[[.]
o\
r{z
j(c#
Size
vzzyt
Append
]K E
P%J
mGznzz k
get_FontHeight
c{y-
d`2
-f%$!
+y{<
set_ShowInTaskbar
Rfc2898DeriveBytes
l*()
/tzz

op_Equality
f'|\
}zzA
>J/-
yFKu
@gFc
{zz*
}zzI
*rCj
,K&&&&&
-CYc
Uzzzu
l^{z
8K L`]C
tXx{
vyzz),-
}zzu
}zzz
iY=XyM
>}-(*
.Nx(
v})+
<~Zzzz
W{y
\{>\}
O"PT
npy{
TextBox
zzz),-
=Q,#
|zz),
bfz
Rpy{,
z:zz
?^8_2n
Djp
}zz),I
I1q&"<V
)wzz*
?94>
c{yz
v*+(
puz,*
l_MJ
r{zyt
},*)
-Xmwxj
_Yi
pro"
'xy{#I
4n*-+
Rpzz(*
{;ub
.uV/E/'i
A{ q5
nz>e
,9&+!
G/. ,2kr
7r(-
261F
Oq{z
n%$J
n%$I
:wzzI
bzy{
}zz*
}zz)
}zz(
- r
i~zz)
p,+,
x,(/
zjzz*)
|x%$
_ioT)
&,oB_
wmy{$-,
EndApp
s-/
/~Yj
F^)>^
xaqc
>?JnqY
{y{z'
q{zz+
NZ{z*
NZ{z+
7r-+
*g0j "
s[iN2gX
`kDH
KeyCollection
|w~XZ
qzy*()
h{z|{zy
$Gzzz:
-%P
ouzz
W{ ^
w&,
qk)WN
wzpz
/z z
EDHtS
zzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zym
H"xi
\0+/
z1zz
Dx{uA
[OgN
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
get_Rank
3r*H
M!#
|%^L
_z'J
2q&>K
!zE{
L;VA"9
`stz
RK{z
szy{
?vA=b
{zzz$
|zzzz
{zzz'
{zzz!
{zzz"
[f\6iT
get_Message
!This program cannot be run in DOS mode. $
* +
2t{i V5
rZzzzu
DelegateCallback
A c+a
File
y8:A
xxx%
!]g+K
iC*~
<O_A_A
* 8
iC*}
{y{z&&
{y{)
#l9
{y{*
ArrangedElementCollection
XmlTextWriter
Dispose
m~{z
&C7'
eozz
&zzzI
|(*-
}zz(,
##wC
XT:
WriteAttributeString
~{zz,
xLo7_
j$%'
6kXx5
:eE
.+Sih
^!Jr=
+"cd
2zz-*
yo#J
:ezz
y{zy{uzzzzzzzzzzzzy{zy{uzzzzzz
wzz*+
ServicePoint
FromArgb
w*$'
}jzz
to4"8U6
T g~{
Y% :U
v@K
4j3v
4uz
BxvV
TDR
{tzz
get_Window
-{x+
t<q{
=w{z
*),-
set_ClientSize
o !%$
uy7r
{y{u
vCJ nC
7oy{u
Cqy{F
xzzjy{zy{uzzzzzzzzZzz
Czy{
b2{u
+;E
t@+r rL*vu
get_Key
B y{
g8{z
u@ }
j=;A
r{{z*-"I
PoweredByAttribute
l+*"
j$Fh
x{u%$I
rN >
.1x(
zzFzA
get_IsPrimitive
.1x%
R?I~
e81'
>'q;bm
-;`k9s
s(*,
o{z)(#
fzz*+,
U{6b
E^$NH
]v0#F(
SetProjectError
E(%#
AddValue
szz(-
ReportingService
BevI
}Yy o
Q#zy
c>RX
s@3au
k~Iu
IUn&
;m1d4#
g@3q
Rqzz
^i$-?
2zz{zzz%
Rk{z
op_Inequality
Pf84"<
k'$F
%`_r
GetManifestResourceStream
7+ y
uz,I
^E*?
|C*vu
EC=bv
f~zz,
g}y{#-I
Ks/
lo;\\
zMnE%
?Uzz
=q-*
SeekOrigin
|Xm1
zz)-
zz),
nVIp
$^+st!
Strings
b@3r hL2v
Delete
,:-*(
IntPtr
get_Right
n================ABA=========E
rzz/
R{zz
R{zy
/Tzz
Mszy
x}Lu
whzz(-,
*i_}
Lxzz
oszz
DDDD
n(Ky
Ryzz
l zz
z{{u
U>5)Z
" n0
&h*mor$
vzz,*
cz{zz
vzz,)
gdi32.dll
CK U
::{zzzI
Microsoft.Win32
9J_bP
FileDialog
T-T[^IB
v<$"
j*--
3zz)+
v<$!
/r%$!
G 8a
qzz
A%nu
XK{u
Ozsz
`#x{
-I(/
6,IC
tev<
wxy{&
#ZFk
{zy
bzzz
bzzy
H^A} z
InvalidOperationException
/Y/S:{;f
r*$I
?j*,-
aqzy-
ZA|v
3yJ8
MotzI
e{zz
RijndaelManaged
b%$!'
#Dc}
get_FileName
&+nr
gpy{
TY\A
ZED Yc
M,zv
Y|zz),I
&&*(
,{zy
0`x{%
ZH $
add_Click
ulzy*",
zzz)/,
PK
czz+-,
>8X
Y{>y
Xzzz
)I@=
q-{z
+MpFhD
BlockCopy
A7j o
GetProperty
# #ze
%,22
@\M/
DockStyle
0>1A|
x]Kf1
]2zu
GetCustomAttributes
y)u
/r()
zzrz
KW R
/r(,
8 <0
SizeOf
{Oz
6 8Z
W~zz
b]{z
7r+,
y{y{
>~zz
Qquz-,
.qy{
SecurityCriticalAttribute
H{zz
E;5IO\4i
=2*+'
set_Title
?j-*
UA,nu
xuzC|
@Xx]
[y{u
h{z @
FZy{zy{u
m|D'
&+'~
d5F {
O_8M=Cw
SmartAssembly.SmartExceptionsCore.Resources.error.png
(FGc2
<f.H
\|2qeH
IDATx^
bC2r
k*$!'
zzrz ~
{zyk
B)SR
bC2q
q$$J
BLzz
O TN
zz`G
&&&&*(
LOSQJ_
&&&&&
$3`%
,"&&
ig{l
sQ g*N
wjlW
System.Windows.Forms.Layout
}zy{
(Ox{
<J%$
~ `s
Boolean
'z4{
&vzz,*
Fzzz
4k&,-
mS;A/K.
p5y{
\wvmlhfddYYNx
CI *
get_Checked
qzz@$j IL%f
xeW J
kG]kuz
jyzz,
uB/a
UJ?j
~)1
rzz)-
xtyW
MethodInfo
LXzu
%DJlwk
AgJ iM&J{
mbeX
&y{z
ly,w
vzzr***)
<n~zy{
Kg &
`uz*-,
CompilationRelaxationsAttribute
(f{z
Gzz)
pf{z
&u~s
hQc{
<s'*
aZ35
B|4he
b{{zJ
<k%,
Gzz*
IWCu
MemoryStream
AddLast
yuz)
N y{
Jv{z
i9#eW
,);}
get_Graphics
get_ControlDark
HttpWebRequest
FC ~E:
Oa{z)
_,?[
fP5*V
5Fy7v
r'H
GetServerURL
69{$
.ij*
r*&
Vzu
x-$8
C&Ix
\%/s!
t{py
br3fJ
|y?v
kN3?#
>78Og N.
uC2v
MOr[
1#pH
J(f&#Mc$
B 13
szz{zzz&%
"+uz
n! )
/2p/
O?tO
|~ *$
zI{z
(px{A
M: H
[P_r
+(*-
+(*,
uC2j
7@Y{
+(*)
ry{&(
b%$!
7z?y
R{y{
'a-F
@%fv
Ov%r
SmartAssembly.SmartExceptionsCore
{;*(
z{zz
z{zy
t*+,
vB&Jx
'K$Q
=zz*
?rwp
IEND
wI,[g
i`Jb#uT
SetToolTip
BringToFront
Microsoft.VisualBasic
~J4:A
4s-)
0{zz
ujzz*
rbxv
{g{z
=>&%
8zzy
sC ut
m|zy
>Hzz
zi{u H
ThreadStart
~`zz
W93u
=C3G
~{y{
fx:A
--&&
qO .5
azzz
fC ~
+>Pjw
}zz%$
buildFriendlyNumber
axzy
s!%I
CZy{u
B} r
<Rz8
zy{z
2 *)
zy{v
T
zy{t
zy{u
zU:(
+m ,'
:zzz(
[tW5
U)}a
<n!%$
sXr8
Bqzz(*.
xzz|y{z
bpzz$!'
get_White
uzz+*-
||!&%
0zx{
b^W1
<n&zzz
~s{zy
nd 6
/g"(
smZ/
{zzz(
Concat
yzz),
;,zz
H8;*
y{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzz/
% G.
StringBuilder
exxy
get_Data
Hzz*
vzz E*
~pzy
~pzz
||%'&
nm/t~
zy{(
qzy,,
c{yu
0]q_
zy{$
zy{%
Wy{u
&{ )
k:{z
?r71
M{z*
}zzz$
IWebProxy
~s{u
vZzzI
`yOc
QZ'A(
zz*(
zz*)
z{zz*
z{zz(
r*+-
6czFt
y{z*-"
C{zz
CompilerGeneratedAttribute
oV7yd
get_Hand
&kzzu p
- RCC
hS+Z~
get_IsInitOnly
v8/~]
ajdk
.v)*'
>^r
3qw{_
)nzy{
bzuz
<zz*
q{zx{uz
<4QG
"h
ReferenceEquals
7)zz
Thread
?oyy{u
Vb@
SmartAssembly.SmartExceptionsCore.Resources.default.ico
j*zz
@yru
lvx{
~{zy--
|zzzz$'
xzzz9{zi{uzxzz
i@3y
Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/`
sC*vv
sC*vu
Pyy`b
get_IV
OZzy
AssemblyFileVersionAttribute
]yzy("
R9uz
3U H
u{zz*
System.Text
GetName
||!%$
/J~jZ
6)oc
(9)*
~%!$'
Xzzz,
&xzzozzz
Uz,z
~{zz),
6ooT
{zy+9
6y--
System.Resources
wxzz-
7r*(
p{uz
t%P
<N*,
0!G~3~.
K)ZJ
LOMS
~.zz
=axzzz
v|zz),-J
l{zy
~9(*,
*6Nbri)
tg{a
> pP
;tGc
zjzz,)
!xuz)
=Zzz
GetElementType
y),-
n'$!
set_AutoScaleBaseSize
zxy{
$$$$!$!!!
. 8j
soIT
~zzz*
n_RW
~{zz
~{zy
Zz?z
~zzz!
m*%[IxUY{1
zuzz$
%Z^L3
tzz)I
sAZB
^}<=
] zz
Hls-
y{z?
t@ r rL vu
(w3E=!"
LSQcB3?OE
/r+-
WriteStartElement
/r+(
AP}
/v%I
y{z(
y{z/
'u,I
b)'b
ix{(
umzy)&,
4s+.-
Icon
Fh{z()
%!jR,
%+(-
zu
~{z(
W:T4
`}B6
KLvG
r&%I
Jzy(
Twwp]{zy{uzz
Q{{z
-p$E;'
DelegateAsyncResult
7b),
Y?v'
FJ*<{zv
y{zz
@xzzC
y{zy
/q,(
*y u
--&&&
x***
Encoding
tC q
tC r
>zxi
*:XSa
uZw=B
FieldInfo
Font
3y{u)
{Tzz
Cs{y
oEx
wB%r
<84=
G/ ~F
{zzz%'
nzz*)
).(-,
p& H@
@j,k
}y{uz%
sC vv
sC vu
h+y{
nZzz
fu`i
qy{
String
byzz),
yzy+
ICollection
_CorExeMain
System.Xml.Serialization
Copooopooopopooopppppqpooopoo=
LhX^
set_Visible
~u;4
s%'H
}pzz-(
")-g9
({u
?j*+(
"fI"
Cp |4
MA -R
?b*-
e:SZ6
sq{z
-Ll/
Timer
`*zz
+o*7
UploadReportLoginService
get_Text
%n #
j&%'
InitializeArray
+().
AvDzz*
<b&%
+()-
Zs{u*,
|zzzzI
uB.K
&zy{(
\%$I
$F=q
5 tI
=R-+)
zk4g
+gSs*x
|xy{
Microsoft.VisualBasic.CompilerServices
get_Namespace
#?;W
azy+
^jzy+
]qzy+#
`C1s
P{u8
ToArray
;JLzF.
ex{{
=#T4f
5nuz
@9f.
jxzz-I
}%$!
?6h
k{z/
nx/u
-bs(*
4s{z
1yuz
WJ %
P(zs
~v{z
/v()*
oG/2
&77
P(zz
38J[
x@ >
){u
~v{u
O}-++>,@
-x6x
uigq(N i
Rpzz(9-
*uBj hL*~
{{uzQ$~
&y8u
z%{
t@{u
Azzz)-
1ZNky
=sYy
<~zjzz
nD{ezz |I
bC'fu
JZzz{zzz
bt{z&%(
Q<?o
?r),
xzy(,.H
\s{u
jzzz
jzzy
f]x{
, &*oj
7z)z
Attribute
4w,(
N+{u
:ezz)
Q~uz),I
K|h "
pzz,-I
k~y{#-I
^n>B]
z_x{
%vCj
Dzzz+
{G|J
.xzz
}%$I
get_FullName
gNNa
:xzy
k48B`
O0AiD
pYc(
:xzz
PrM"
fxzz),I
'x.H-T
eg"$
GetGetMethod
tV{z
Dictionary`2
2xzz(
BeginInvoke
puz,
~x{*
.2A_
nKuV
get_OSVersion
*z;z
IyehC
&z{u
u{z.
7`o_S
P*^X
u{z)
{zzy
&&&8T
=nJ=qC?j
)Y ^5
7f:*(-
2&g=
{~zz
HW%' c)
puzz
,u?B
-k
{y{&,
Reverse
~zzd `C
?BZy
~x{z
8J{u)
(/{u
@Yog#
: uw
#2+`qSb6
zC?v
F}TZ
{**#
+qCj
)wCi
$q9T
add_TextChanged
RuntimeHelpers
U%zz
zzJ
I]7
tC)s
;Q{z
u{zv
t-V
get_Platform
'IDATx
}z>v
Hmy{%
u{zz
'{zI
ts]B,
2{{z/
xy{"*
Dwpkm
8jmn
H!AJ
SW3.
}zuz
qC2n
eC!y
& {u-,
=jIz*
?Q~"
8(2s_
,.H
Atsssssssssssssssssssss s s s=
p!:%
Rs{z*
)-$)
FromXmlString
!z?z
*#D[
zcjdk
Object
Registry
-? Q
.vzz,*
&zzz+
)NAK
;y{,
zzz()
%5d9
Lbzz
zzz(.
^jzz,.
5$dr
6Jez$%
^jzz,-
{T_gB
o%h
pC*r
'uzz
N! >z
rpy{(
^bw~ve9
-tzz
&zzz
9wuz,*
4n*+
0115
get_IsArray
<jzz
rpzy
2{u)(
,)tX
lL mm1
{zzy%'
Dukc
, &&*o
c4=]eP
xCue=
get_IsAlive
~Zy{zy{u
FlatStyle
i[Q-
}HI%
I"aHrJ#q
?v%I
^pzz%
}s *$
Cr w
UH6k
=zDDDD
rpzz$
$%#$
a'WyE8
kw!p
^pzz,
wuzzu
yuz*
EditorBrowsableState
nzz*
f)tz
*U%zz
j^jzz
-S3s
b*[y&
mGyozy
^pzy(*/
WMu"
; +*l
r{z/+
Qwuz,*
wB*q
Y8!8=<|
zH tH!JM
Gx%,
dxKL
,]&+1
~%Ic
"xzz
W{9c!0$d
Zzz,(
6ozzz
D{zq{
Jzzz
e`KH
6hoh
Q! EQ
Czz)
.n%)
FH;;03
Rrzz),
8Ae)
{zzz$$
{zzz$'
my/v
yuzu
MAkQ
kb\z
2^{z
}zzA*f
`2{z
-Z8@8
H7zz
ScaleCore
& Zw
<s!z
G4CG
kWMM
b=G
Stream
#XGQ>
nwzzy
nG~zz
}zzz-
@m(:*I
?vo}
SecurityException
u~zz
jzuz-)
}vzz
{BSJB
caJX
sp`<
&&&*(H
iW g
mzy+&,
lX~3
'{{u
a*Rf<
+z {
>f,/
Exit
ODBCBCP.dll
7|/`7
get_Bottom
|>y{u
SmartStackFrame
uLBC
Kzysz
}{zzz
6r{z r
b+$,
>f*-"
1nzy|
15zy
"7{z
&&&*(m
=q{y+
SmartAssembly.SmartExceptionsCore.Resources.warning16.png
#Jzz
gJve
(,*)
~-,+*
v(HKm
Hl?HR
@gXsl
-dM
u*)(((+,
Y{z)
get_Minute
2Ts)R
tod peu
tf{z
add_CheckedChanged
=xv(*
n>$$$
V:99 u/nE
5Wq6
2+ y
j$"
B+0zz
?jy}
~pzz-(
q *I
feZAswV
W g;
U{zz
DataType base64BinaryE
WLiL
\{z
#e{z
"r{u
NhQ)
LfBy
"r{z
p ~~J
V[{z
=jy?
9PpY?g
Gtq."
G^jy{
^pzz%$
6x>+
<u5R:{u
Qxuz
(:"9Q3<
C|)n
p:"|{

t~zz*
&* +
zMS8
qfzz
pB2mt
3_L
}quz
fp6O
iC ~
OperatingSystem
gk )
7\Qo
?j+.
6zx+(,
HttpWebClientProtocol
z<T$
_`95
BZzz{zzy%%J
uQ`L[
{8._F
tFx
get_IsLiteral
xzzy
q<Lnv
z~zy*-
rGA%
FormStartPosition
G5}/
&szy-*
{ j,
Alloc
~i{y{
mp"^
V3zz
bB4W^
0j*)-
~G {zz
dXpK
System.Threading
%{-y
PictureBox
vy{uu
get_Month
!juzy'j+
hGJj
=v$l
MessageBoxIcon
$!%'
y<A f
^zz
.Dp(
* Q
q<*-
o EG;
UnhandledExceptionEventHandler
System.Web.Services.Protocols
S{z
;wzz
b 6:
(Yfe
&R{z
v%$'
>yy*
v%$!
a{zz,I
"{;y
E6<Rz
BDa}r
wASR
|}!%$
Dm2>%}_@
n{u(-,
/) !
uEzy-
(j,-I
Uxzz*
1>3}d
yM1/6vy(J4%;m"$f
zzzte
-J1(
ho<
kUzzzzzz
pC2n ~I
[,{z
Uzz
:xtz
rzy+-
>jm
set_Filter
zzz*
u\;7
Buffer
get_Current
Z) *(@
zwqh:
n@-r
Zxzz
. 0 Jg_
k`Kd
q{zz),
xi)*'
get_ApartmentState
`xzz@
sdfgdsfg.exe
vbzz*),
/FCKA#
La{z
}wzz(
}wzz*
Y{3z
P{z*)
<=%!
i{uz
qj/2D
s-J
?v(x
J zz
(%h4{H
OnResize
vzz)
{u:*,
]*R6
))(-
Dzht
?u*y
GetInt32
*1F|"d`
b8s_
3>*
vzy+
,++H
ReportingServiceSoapT
zx{zv
'vzz,
B%$!
.T4RW0
zzy{+'
_R g
R04>
{}{u
?<=2
A(*e
i@+~ uL*r
`{zJ
!NR*
EndsWith
5&S/
xzz,I
xzz,J
zzz),
c{z
,Z&+
6 N,
Tf{z
?$dj
1d{z
|y<s
Q!Dh
-%{y
D{y{
>Zzzu
dzzA
[}GJ"
T,(*WY6
@Jpb
SmartAssembly.SmartExceptionsCore.Resources.{logo}.png
~Zzz{zzyH
get_StackTrace
A1zz
-#{z
VSVW
?r*,
?r*/
q",
>~y{
^jn|
]kIx
o4a_
Xz>z
&&(?
X[fee
6y*+
|~!%$
get_Major
JIy{&
}zZzz
zy{z!
|Hzzz
SoapHttpClientProtocol
.qzz
{xzzzu
uC2v qC1k
yx{zJ
W{{zJ
Z(]o
[&{y
get_BaseType
?u*'*
pRZz
okkh
#,..299
45zz
uu&3
<=+&
?xy{#I
#zzu
v2.0.50727
8zy{
+h
?azr
z~zz+9
EC~k
cu4&
8$w:
))))*,
9[uz%$
rz,v
-P&&
kzz(
{)*,
kzz*
Bqzy-+.
{zzz'&
GhT:z
2ozz}zzz
WP[HG
ToUpper
+-1
kzz=
Y*=E}
ehjd
kz m
6Fg
y\=8:{H<89z
}{zz
f#)-
GCHandle
/n+(
:>zu
set_Expect100Continue
{:y{
p6I$
&zzy,,
zzzF?u
AP{y
\mLM
*vCj
_=2q AS
get_HasElementType
Exception
:qzz{zzz
(`De
{H.
CreateSubKey
*}Bj hL*~
1y{)
0%y{
>Q)+(*,-
, &*o
@zz,
?ux*
VG:Ob
'r:*,)
3~XY
get_ASCII
aGqB
j$!&
,Efq=
kzzA
U4iGOG2
[yy{
|kdH
*szz,*
set_Size
WriteByte
GetTypeFromHandle
IAsyncResult
Bzzz
by{u
3zuz
SMqz
U[zy
^?d%
v{zz),I
$JYYI
zgBi
GetEnumerator
+uKI
SymmetricAlgorithm
u%.%$
>$!%
\azz
szz,)
} zz
] 7z
2+zu
\z) V 0
8b"h
H>iO
F@ qF;
GetDelegateForFunctionPointer
@VsCtc
MessageBoxButtons
Gz{y
()*/
y{5*
K{zz
Int16
SmartAssembly.SmartExceptionsCore.Resources.error16.png
N8C*
0{z)
L{zzFru
QQ ,
'[{y
$Wx{
8?[V
i%*'
M/]:
Graphics
nC2r tC1w
&z3z
Uksi
lkhj
H-_q
#9zz,
vlzz(-,
@m(:0)
ApplicationException
ToUInt64
(.y{
jq2>r
UnmanagedCode
System.Runtime.Serialization
b!%$
a#xv
Fkv>fRROw
ne{z
tz{z
~Zzzy
-{x+,&
|xzz
*Huz)
~x{u*
9zg%$!
Zyy{
_{y{&
Tu#L8='?&
OBZ1
xzzz.
~Z c
K{z,
J zz
/T~m
set_Position
V^U-
xzzz!
Ohp_fF
H!\#
5j(+*
rg{z
(sgK! :i
r$%J
0r*,
_x{z
System.Runtime.InteropServices
yaee
Ut5*
i{zz*
!1zz
@{zy
]qzy{
Math
ApartmentState
9{zz
F gx}
set_UseMnemonic
:Z]b
7q v
+ ^L
GXzy
\lZ>
`kkh
B>Cj
W%' (
fRtx
`GNiy
ThreadAbortException
5v{z
=vzz,*
EKHI
fpzz,
p=xi=
fpzz)
xzyH
o*#
System.Runtime.CompilerServices
E'D`
I Tz
E+:U
.},Q
PFY
,+*(
\{zz
'*{j
zjzz-
zjzz,
Ixzy-"
SByte
pppppp
vDzz
zjzz*
p$+I
>jz}
>n w
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
uxzz
uo &
_p"}K
FOzz
)Q_qI
}z{z
)2.*%
O&_
cf; f
5Q `
2zz(
TP<+
=i(*
, 8;
JzJz
|{zy
dB2}
(|[wzz*-
*{zj23
set_ExitCode
' ?2
Zs{z&%.
}zy*,)
s je
wyqu
0sOi
,qC`
Zz(z
Zx{,
=r{zzz
y=E%$
"k-8<
n;^
C{|z
TransformFinalBlock
Kxzz
~[x{
wuz*
hB&J{
]\{y
2b)/
oko
rH/5
vzz*
vzz+
vzz(
z}{z/H
l"),
email
vzz,
lB=v
set_Font
hB&Jx
z {
|uz*
7 zz
UIntPtr
6qzz
tC2j rC1oz
?v+(*
?v+()
Zzzy+
UploadReport2
\h{z*)
21zz
MGiI
Hzz)
get_IsTerminating
j%$!
&&rq
IDisposable
VX{z
<c*/
Exists
;)&D
vzzy
Kzz)
nY=%
6{{z
wuzu
FromHandle
ybzzz
^pzzzzzz
:Zzz%$I
kgt/
Ff{z+)
~x?u
%nzz
Wro#R
{tzz fy
|zy-:
set_Mode
7;jx
$%!'
VZy{-
bC%ju
#{y{
2qzz
qzyB%i
15T#
Vqzz
nwzz
B9`I
N@dQ
Rs{u)*
MC?c
&wzz
: uz
z%K {
W!lq
XJuz
Rzy{
v^SwT
@Q8/(
FZzz{zzy
DrawIcon
FZzz{zzz
zzx{
Aa,*-
z{zy(-
)&k/w)
x?u,
?v()*
c@3~ oL2r
,`&&r
X:VK
+9_k
WriteStartDocument
{e6
.{y{
wzy+
xzzzQ4~
mEl5b
Dkr|
s@ vv
MulticastDelegate
AZy{
,xzz
Yzyt
&e{)
1kSQ
CancelEventArgs
kVE_
6,ax
3-&*(
Pa{z
,w+/)&
{ezz,
zy{<>
m=+!
rzz-,
}qzy+
Bitmap
vA'Ex
.My(
SizeF
CCRT
get_FrameCount
/;uw
N]Z[ucR
get_Hour
Ty:a
EditorBrowsableAttribute
SE2
IJ$(=
6.0.0.0
rzzz
vmzz(-,
StartsWith
7DV9h
kY.zz*
E 4/
}{uz
1 (X
Nezz)
zzy{"
suz+
"{RKP
6yx{
~pzz,-(
q{zz*
{z _
r!%$
zy{uzz!
qOm
C?ju
CreateEncryptor
j&*
L[yn#pv"
nW{H))
Rxzz)
ThreadExceptionEventHandler
rpy{
oM& N
yy{*
zy{u"
gC2~
Panel
&...././/...x
(uuq
suzz
a2Dg
jzu(
~%+,
+uzz
r!%I
~{z(-%
set_SizeMode
rzz,
get_Exception
rzz*
7u9N/
zwzz(
rzz)
8e8aD
*+.-
}{u,
>},8(*
mb)f`G>
*)+/
*)+-
())-
Rj{W#
Qkkbal
B%W??NV!Gmy
_b`}
?uF5ezz
@ R
zy{%)
J jzy
/v(,*-
Nx{z*
mytR '
P@uaU
czy{
3~<R#
!x{z
vx{z/,
<v$'
{jy{
vZzz
ToHfont
uzz,
<zHo
p;i3
tC*q
|@D/m
tC*r
ApplicationSettingsBase
uzz*,
:mc"
tzzz'
B{ p
-J2IH
set_Image
2nCr fC1
+{X=
xuz+
&* +
| {z
X'O24
v6KO
Mt9>If
4Oe#
)kQ.
|{$+
f),I
~xzz
rvzz,)
EventHandler
+;zz
zckkk
z{{z*-"I
@1{z
#sy{#*
w8l\5
,>&(X
lk6e
L<84=
r7$
5a*l
|p{z
3zy(
EE; 1
B?9;=
Er yM
SetValue
~<&zzz
+tt#
u{u(
$zy
n$x{
>D|z
_hlB
-e&&&&&
~rzz
QIg73
>r/,Iy V
get_CurrentThread
LqnZF
GetFields
nyzz)J
R_FY
=Z d
z z
CheckBox
{# w
W32%
szzz
H4Z2
@_az
zzzzv
vczz*),
xzz`zy{
get_Module
zzyH
.c{)*
gtzz
CryptographicException
Uz()
, &&*oi
{uiO
";w!
C_ 6k][o
|.zz
,N\C&{-OJ
gvzz
WebServiceBindingAttribute
]{zz/
6{zz
6{zy
{y{u$'
Nzz)
!juz
Rectangle
wMzz
4a+$
.6zzJ
lhjk w
_Xm(
Hjnl7
AddrOfPinnedObject
de7^
xD .
zzzz:
d;;Gz
ivuz-
,'&&&&&&&&*(
Cp&-
get_Size
@[PT
zzzz)
^xF T
OnVisibleChanged
81D1
zzzz!
-+&&&&&
#vy{#*
zzzz"
V zz
7q++
s}!%$
Eg{y)
a{zy
Ysuz,
Replace
set_Icon
>yy%
System.ComponentModel
{zy{
LocalMachine
/{zz
rz:y{
ReleaseHdc
?u+$
c4{z
uzz:u
<)eS \?
WMT|0
>z+{
X8]\
{zy
:6 F
Z{z{zzz

yzuz
oy4k
z{zzzzz|{{y{uzzz
O^{z
j%$I
6>#2
Apzy
>yy+*
IEnumerator
_A_|NE34+
Azz,
n$!%
iPR_
{zy(
add_UnhandledException
{zy*
{zy+
Hzzz
a}Z I
*r{u
IJ B
[~/e
4s&,-
_sSo
6bKT
8 8J
zy{u:
rwzz
I!%I
51)
gz;:
iZzy-
.M3J
Bqzz,(.
t: ^
{zyH
ruzz
h{uu
z{Y?
~{zz(
KJzz
" 4
Y<,r
sapn%
>yq
r$%I
System.Collections.Generic
{Zy{uu
\-:`e
`r"Cw
lfj}
w{zz
c^zy
Zz)z
uwzy
#*EF
)mvI
zyXhs
nC*~
*6 Q
bx{{#
.nEpIK
&yy{,
s@+vv
zy{zv
dxzzC
System.Windows.Forms
set_Cursor
|{zz,
get_DesignMode
;@YgU
d>D.
l4zz
/<&x
uz+(*
]{zz
?otzzz
A9| &
i{z+
get_ServicePoint
jx{u-
q<B
{1ez
{zzz),
^h"/
,)*{\
Ydzz
z~zzu
{8{z
8["j
EthF
, &&
Ff{zJ
;{zzF/u
:zzz
)uGvH+
+*"z8iA
zzjzzjzzzzjzykzy{uzzjzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzzzzzy{zy{uzzzzzzzzT
get_InnerException
SetStyle
Rzz*
0}YCP
exxz
GenerateKey
.tp(-*
'zzz
GeneratedCodeAttribute
{zz)-
{zz),
z~zz+
WriteEndElement
z~zz-
z~zz,
v=%$'
Qi^]TKGFF9F9x
HJz)
S{zz
3:2rLT
1g+/
W}Jo
]{z/
;R.u+
V%$!
GC%f
ToBoolean
qzz{zzz
Mctz)
$:uz
* 8
N#P{
)kzzy
$$$$$$$$$$
Z{z+*
Rzzz
8_ ,
$ny w
&&*o
1R~; k
SmartAssembly.SmartExceptionsCore.Resources.network.png
xz D
zzy{
/v)x
?YA!
'j,-I
pC2j ~C1o
Hv;U__
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-06-03 05:01:02 2018-06-03 05:03:51 169

5 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-06-03 05:01:02 2018-06-03 05:03:51 169

8 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\commj.exe.config
C:\Users\Seven01\AppData\Local\Temp\commj.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\commj.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Users\Seven01\AppData\Local\Temp\commj.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Users\Seven01\AppData\Local\Temp\commj.PDB
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\#rundfdsl32 .exe#
C:\Windows\Globalization\be-by.nlp
C:\Windows\assembly\GAC_32\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Windows\assembly\GAC_MSIL\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Windows\assembly\GAC\sdfgdsfg.resources\0.0.0.0_it-IT_bdaccec94cc64df6
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\sdfgdsfg.resources\sdfgdsfg.resources.exe
C:\Windows\assembly\GAC_32\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Windows\assembly\GAC_MSIL\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Windows\assembly\GAC\sdfgdsfg.resources\0.0.0.0_it_bdaccec94cc64df6
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources\sdfgdsfg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\sdfgdsfg.resources\sdfgdsfg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\ODBCBCP.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2336.14459781
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2336.14459781
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2336.14459812

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\commj.exe.config
C:\Users\Seven01\AppData\Local\Temp\commj.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

Write Files

Nothing to display

Delete Files

C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2336.14459781
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2336.14459781
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2336.14459812

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\commj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\793196c2\66edea4f
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|commj.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|commj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|commj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.0.0.sdfgdsfg.resources_it-IT_bdaccec94cc64df6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\12abbcda\2e1f39e2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.0.0.sdfgdsfg.resources_it_bdaccec94cc64df6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\12abbcda\6d7b1c31
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\commj.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\E2B3BD48
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\E2B3BD48
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
kernel32.dll.QueryActCtxW
ole32.dll.CoGetContextToken
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptExportKey
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
cryptsp.dll.CryptDestroyKey
mscorjit.dll.getJit
kernel32.dll.GetCurrentProcess
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
mscoree.dll.DllGetClassObject
mscoreei.dll.DllGetClassObject
diasymreader.dll.DllGetClassObjectInternal
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CloseHandle
odbcbcp.dll.bcp_colfmt
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
cryptsp.dll.CryptAcquireContextW
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.LoadLibraryA
kernel32.dll.GetProcAddress
kernel32.dll.ReadProcessMemory
kernel32.dll.CreateProcessA
kernel32.dll.WriteProcessMemory
kernel32.dll.GetThreadContext
ntdll.dll.ZwUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.SetThreadContext
kernel32.dll.ResumeThread
ole32.dll.CoWaitForMultipleHandles
cryptsp.dll.CryptReleaseContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister

Execute Commands

C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-03 05:03:19

Detected family: #Ursu

TheSystem Itself @ 2018-06-03 05:10:02