[################################################## ###########################]
Analysis Report for PWItemGenerator.exe
MD5: 294ceec98615227b6e0b59dcd60efc59
[################################################## ###########################]
Summary:
- Performs Registry Activities:
The executable creates and/or modifies registry entries.
[================================================== ===========================]
Table of Contents
[================================================== ===========================]
- General information
- PWItemGene.exe
a) Registry Activities
b) File Activities
c) Other Activities
[################################################## ###########################]
1. General Information
[################################################## ###########################]
[================================================== ===========================]
Information about Anubis' invocation
[================================================== ===========================]
Time needed: 176 s
Report created: 08/29/11, 12:34:31 UTC
Termination reason: All tracked processes have exited
Program version: 1.75.3394
[################################################## ###########################]
2. PWItemGene.exe
[################################################## ###########################]
[================================================== ===========================]
General information about this executable
[================================================== ===========================]
Analysis Reason: Primary Analysis Subject
Filename: PWItemGene.exe
MD5: 294ceec98615227b6e0b59dcd60efc59
SHA-1: e0c79b5a70ccc59d9e88169ee14ecac07cae0aad
File Size: 65536 Bytes
Process-status
at analysis end: dead
Exit Code: 0
[================================================== ===========================]
Load-time Dlls
[================================================== ===========================]
Module Name: [ C:\WINDOWS\system32\ntdll.dll ],
Base Address: [0x7C900000 ], Size: [0x000AF000 ]
Module Name: [ C:\WINDOWS\system32\mscoree.dll ],
Base Address: [0x79000000 ], Size: [0x0004A000 ]
Module Name: [ C:\WINDOWS\system32\KERNEL32.dll ],
Base Address: [0x7C800000 ], Size: [0x000F6000 ]
Module Name: [ C:\WINDOWS\system32\ADVAPI32.dll ],
Base Address: [0x77DD0000 ], Size: [0x0009B000 ]
Module Name: [ C:\WINDOWS\system32\RPCRT4.dll ],
Base Address: [0x77E70000 ], Size: [0x00092000 ]
Module Name: [ C:\WINDOWS\system32\Secur32.dll ],
Base Address: [0x77FE0000 ], Size: [0x00011000 ]
Module Name: [ C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\msco reei.dll ],
Base Address: [0x603B0000 ], Size: [0x00066000 ]
Module Name: [ C:\WINDOWS\system32\SHLWAPI.dll ],
Base Address: [0x77F60000 ], Size: [0x00076000 ]
Module Name: [ C:\WINDOWS\system32\GDI32.dll ],
Base Address: [0x77F10000 ], Size: [0x00049000 ]
Module Name: [ C:\WINDOWS\system32\USER32.dll ],
Base Address: [0x7E410000 ], Size: [0x00091000 ]
Module Name: [ C:\WINDOWS\system32\msvcrt.dll ],
Base Address: [0x77C10000 ], Size: [0x00058000 ]
Module Name: [ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rwks.dll ],
Base Address: [0x79E70000 ], Size: [0x0058F000 ]
Module Name: [ C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll ],
Base Address: [0x78130000 ], Size: [0x0009B000 ]
Module Name: [ C:\WINDOWS\system32\shell32.dll ],
Base Address: [0x7C9C0000 ], Size: [0x00817000 ]
Module Name: [ C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll ],
Base Address: [0x773D0000 ], Size: [0x00103000 ]
Module Name: [ C:\WINDOWS\system32\comctl32.dll ],
Base Address: [0x5D090000 ], Size: [0x0009A000 ]
Module Name: [ C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\msc orlib\642534209e13d16e93b80a628742d2ee\mscorlib.ni .dll ],
Base Address: [0x790C0000 ], Size: [0x00B36000 ]
Module Name: [ C:\WINDOWS\system32\ole32.dll ],
Base Address: [0x774E0000 ], Size: [0x0013D000 ]
Module Name: [ C:\WINDOWS\system32\MSCTF.dll ],
Base Address: [0x74720000 ], Size: [0x0004C000 ]
Module Name: [ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rjit.dll ],
Base Address: [0x79060000 ], Size: [0x00056000 ]
Module Name: [ C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sys tem\36dbfcf62e07d819b3de533898868ecf\System.ni.dll ],
Base Address: [0x7A440000 ], Size: [0x007EA000 ]
Module Name: [ C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing\c91f68c2920882e02aec00eeabb6b415\Syste m.Drawing.ni.dll ],
Base Address: [0x7ADE0000 ], Size: [0x0019C000 ]
Module Name: [ C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Forms\0c70e5d82578be2f6c0dde89182261c5 \System.Windows.Forms.ni.dll ],
Base Address: [0x7AFD0000 ], Size: [0x00C9C000 ]
Module Name: [ C:\WINDOWS\system32\uxtheme.dll ],
Base Address: [0x5AD70000 ], Size: [0x00038000 ]
Module Name: [ C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll ],
Base Address: [0x4EC50000 ], Size: [0x001A6000 ]
Module Name: [ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cult ure.dll ],
Base Address: [0x60340000 ], Size: [0x00008000 ]
[================================================== ===========================]
Popups
[================================================== ===========================]
Window Name: PWItemGenerator!
Displayed Times: 1
Window Text:
Page
PerfectMysteryPotion Costs 20 clicks!
PerfectHealthPotion Costs 20 clicks!
LimeStone
Costs 5 clicks!
Inventory!
Ground!
100 Clicks
Click!
[================================================== ===========================]
2.a) PWItemGene.exe - Registry Activities
[================================================== ===========================]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Registry Values Modified:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Key: [ HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Expl orer\Shell Folders ],
Value Name: [ AppData ], New Value: [ C:\Documents and Settings\Administrator\Application Data ]
Key: [ HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Expl orer\Shell Folders ],
Value Name: [ Cache ], New Value: [ C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files ]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Registry Values Read:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Accessibility,Version="1.0.5000.0",PublicKeyToken= "b03f5f7f11d50a3a",Culture="neutral",FileVersion=" 1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ CustomMarshalers,Version="1.0.5000.0",PublicKeyTok en="b03f5f7f11d50a3a",Culture="neutral",FileVersio n="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ IEExecRemote,Version="1.0.5000.0",PublicKeyToken=" b03f5f7f11d50a3a",Culture="neutral",FileVersion="1 .1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ IEHost,Version="1.0.5000.0",PublicKeyToken="b03f5f 7f11d50a3a",Culture="neutral",FileVersion="1.1.432 2.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ IIEHost,Version="1.0.5000.0",PublicKeyToken="b03f5 f7f11d50a3a",Culture="neutral",FileVersion="1.0.50 00.0" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ ISymWrapper,Version="1.0.5000.0",PublicKeyToken="b 03f5f7f11d50a3a",Culture="neutral",FileVersion="1. 1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Build.Conversion.v3.5,version="3.5.0.0", publicKeyToken="b03f5f7f11d50a3a",processorArchite cture="MSIL",fileVersion="3.5.21022.8",culture="ne utral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Build.Engine,version="3.5.0.0",publicKey Token="b03f5f7f11d50a3a",processorArchitecture="MS IL",fileVersion="3.5.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Build.Framework,version="3.5.0.0",public KeyToken="b03f5f7f11d50a3a",processorArchitecture= "MSIL",fileVersion="3.5.21022.8",culture="neut ral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Build.Tasks.v3.5,version="3.5.0.0",publi cKeyToken="b03f5f7f11d50a3a",processorArchitecture ="MSIL",fileVersion="3.5.21022.8",culture="neutral " ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Build.Utilities.v3.5,version="3.5.0.0",p ublicKeyToken="b03f5f7f11d50a3a",processorArchitec ture="MSIL",fileVersion="3.5.21022.8",culture="neu tral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.JScript,Version="7.0.5000.0",PublicKeyTo ken="b03f5f7f11d50a3a",Culture="neutral",FileVersi on="7.10.3052.4" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Transactions.Bridge,Version="3.0.0.0",Cu lture="neutral",PublicKeyToken="b03f5f7f11d50a3a", ProcessorArchitecture="MSIL",FileVersion="3.0.4506 .648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Transactions.Bridge.Dtc,Version="3.0.0.0 ",Culture="neutral",PublicKeyToken="b03f5f7f11d50a 3a",ProcessorArchitecture="x86",FileVersion="3.0.4 506.648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.VisualBasic,Version="7.0.5000.0",PublicK eyToken="b03f5f7f11d50a3a",Culture="neutral",FileV ersion="7.10.3052.4" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.VisualBasic.Vsa,Version="7.0.5000.0",Pub licKeyToken="b03f5f7f11d50a3a",Culture="neutral",F ileVersion="7.10.3052.4" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.VisualC,Version="7.0.5000.0",PublicKeyTo ken="b03f5f7f11d50a3a",Culture="neutral",FileVersi on="7.10.3052.4" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.VisualC.STLCLR,version="1.0.0.0",publicK eyToken="b03f5f7f11d50a3a",processorArchitecture=" MSIL",fileVersion="9.0.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Vsa,Version="7.0.5000.0",PublicKeyToken= "b03f5f7f11d50a3a",Culture="neutral",FileVersion=" 7.10.3052.4" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft.Vsa.Vb.CodeDOMProcessor,Version="7.0.500 0.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="ne utral",FileVersion="7.10.3052.4" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Microsoft_VsaVb,Version="7.0.5000.0",PublicKeyToke n="b03f5f7f11d50a3a",Culture="neutral",FileVersion ="7.10.3052.4" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationBuildTasks,Version="3.0.0.0",Culture=" neutral",PublicKeyToken="31bf3856ad364e35",Process orArchitecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationBuildTasks,Version="3.0.0.0",Culture=" neutral",PublicKeyToken="31bf3856ad364e35",Process orArchitecture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationCFFRasterizer,Version="3.0.0.0",Cultur e="neutral",PublicKeyToken="31bf3856ad364e35",Proc essorArchitecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationCFFRasterizer,Version="3.0.0.0",Cultur e="neutral",PublicKeyToken="31bf3856ad364e35",Proc essorArchitecture="MSIL",FileVersion="3.0.6920.110 9" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationCore,Version="3.0.0.0",Culture="neutra l",PublicKeyToken="31bf3856ad364e35",ProcessorArch itecture="x86",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationCore,Version="3.0.0.0",Culture="neutra l",PublicKeyToken="31bf3856ad364e35",ProcessorArch itecture="x86",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework,Version="3.0.0.0",Culture="n eutral",PublicKeyToken="31bf3856ad364e35",Processo rArchitecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework,Version="3.0.0.0",Culture="n eutral",PublicKeyToken="31bf3856ad364e35",Processo rArchitecture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework.Aero,Version="3.0.0.0",Cultu re="neutral",PublicKeyToken="31bf3856ad364e35",Pro cessorArchitecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework.Aero,Version="3.0.0.0",Cultu re="neutral",PublicKeyToken="31bf3856ad364e35",Pro cessorArchitecture="MSIL",FileVersion="3.0.6920.11 09" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework.Classic,Version="3.0.0.0",Cu lture="neutral",PublicKeyToken="31bf3856ad364e35", ProcessorArchitecture="MSIL",FileVersion="3.0.6920 .0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework.Classic,Version="3.0.0.0",Cu lture="neutral",PublicKeyToken="31bf3856ad364e35", ProcessorArchitecture="MSIL",FileVersion="3.0.6920 .1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework.Luna,Version="3.0.0.0",Cultu re="neutral",PublicKeyToken="31bf3856ad364e35",Pro cessorArchitecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework.Luna,Version="3.0.0.0",Cultu re="neutral",PublicKeyToken="31bf3856ad364e35",Pro cessorArchitecture="MSIL",FileVersion="3.0.6920.11 09" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework.Royale,Version="3.0.0.0",Cul ture="neutral",PublicKeyToken="31bf3856ad364e35",P rocessorArchitecture="MSIL",FileVersion="3.0.6920. 0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationFramework.Royale,Version="3.0.0.0",Cul ture="neutral",PublicKeyToken="31bf3856ad364e35",P rocessorArchitecture="MSIL",FileVersion="3.0.6920. 1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationUI,Version="3.0.0.0",Culture="neutral" ,PublicKeyToken="31bf3856ad364e35",ProcessorArchit ecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ PresentationUI,Version="3.0.0.0",Culture="neutral" ,PublicKeyToken="31bf3856ad364e35",ProcessorArchit ecture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ ReachFramework,Version="3.0.0.0",Culture="neutral" ,PublicKeyToken="31bf3856ad364e35",ProcessorArchit ecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ ReachFramework,Version="3.0.0.0",Culture="neutral" ,PublicKeyToken="31bf3856ad364e35",ProcessorArchit ecture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ Regcode,Version="1.0.5000.0",PublicKeyToken="b03f5 f7f11d50a3a",Culture="neutral",FileVersion="1.1.43 22.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ SMDiagnostics,Version="3.0.0.0",Culture="neutral", PublicKeyToken="b77a5c561934e089",ProcessorArchite cture="MSIL",FileVersion="3.0.4506.648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System,Version="1.0.5000.0",PublicKeyToken="b77a5c 561934e089",Culture="neutral",FileVersion="1.1.432 2.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.AddIn,version="3.5.0.0",publicKeyToken="b77 a5c561934e089",processorArchitecture="MSIL",fileVe rsion="3.5.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.AddIn.Contract,version="2.0.0.0",publicKeyT oken="b03f5f7f11d50a3a",processorArchitecture="MSI L",fileVersion="3.5.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Configuration.Install,Version="1.0.5000.0", PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral ",FileVersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Core,version="3.5.0.0",publicKeyToken="b77a 5c561934e089",processorArchitecture="MSIL",fileVer sion="3.5.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Data,Version="1.0.5000.0",PublicKeyToken="b 77a5c561934e089",Culture="neutral",FileVersion="1. 1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Data.DataSetExtensions,version="3.5.0.0",pu blicKeyToken="b77a5c561934e089",processorArchitect ure="MSIL",fileVersion="3.5.21022.8",culture="neut ral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Data.Linq,version="3.5.0.0",publicKeyToken= "b77a5c561934e089",processorArchitecture="MSIL",fi leVersion="3.5.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Data.OracleClient,Version="1.0.5000.0",Publ icKeyToken="b77a5c561934e089",Culture="neutral",Fi leVersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Design,Version="1.0.5000.0",PublicKeyToken= "b03f5f7f11d50a3a",Culture="neutral",FileVersion=" 1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.DirectoryServices,Version="1.0.5000.0",Publ icKeyToken="b03f5f7f11d50a3a",Culture="neutral",Fi leVersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.DirectoryServices.AccountManagement,version ="3.5.0.0",publicKeyToken="b77a5c561934e089",proce ssorArchitecture="MSIL",fileVersion="3.5.21022.8", culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Drawing,Version="1.0.5000.0",PublicKeyToken ="b03f5f7f11d50a3a",Culture="neutral",FileVersion= "1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Drawing.Design,Version="1.0.5000.0",PublicK eyToken="b03f5f7f11d50a3a",Culture="neutral",FileV ersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.EnterpriseServices,Version="1.0.5000.0",Pub licKeyToken="b03f5f7f11d50a3a",Culture="neutral",F ileVersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.IO.Log,Version="3.0.0.0",Culture="neutral", PublicKeyToken="b03f5f7f11d50a3a",ProcessorArchite cture="MSIL",FileVersion="3.0.4506.648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.IdentityModel,Version="3.0.0.0",Culture="ne utral",PublicKeyToken="b77a5c561934e089",Processor Architecture="MSIL",FileVersion="3.0.4506.648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.IdentityModel.Selectors,Version="3.0.0.0",C ulture="neutral",PublicKeyToken="b77a5c561934e089" ,ProcessorArchitecture="MSIL",FileVersion="3.0.450 6.648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Management,Version="1.0.5000.0",PublicKeyTo ken="b03f5f7f11d50a3a",Culture="neutral",FileVersi on="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Management.Instrumentation,version="3.5.0.0 ",publicKeyToken="b77a5c561934e089",processorArchi tecture="MSIL",fileVersion="3.5.21022.8",culture=" neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Messaging,Version="1.0.5000.0",PublicKeyTok en="b03f5f7f11d50a3a",Culture="neutral",FileVersio n="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Net,version="3.5.0.0",publicKeyToken="b03f5 f7f11d50a3a",processorArchitecture="MSIL",fileVers ion="3.5.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Printing,Version="3.0.0.0",Culture="neutral ",PublicKeyToken="31bf3856ad364e35",ProcessorArchi tecture="x86",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Printing,Version="3.0.0.0",Culture="neutral ",PublicKeyToken="31bf3856ad364e35",ProcessorArchi tecture="x86",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Runtime.Remoting,Version="1.0.5000.0",Publi cKeyToken="b77a5c561934e089",Culture="neutral",Fil eVersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Runtime.Serialization,Version="3.0.0.0",Cul ture="neutral",PublicKeyToken="b77a5c561934e089",P rocessorArchitecture="MSIL",FileVersion="3.0.4506. 648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Runtime.Serialization.Formatters.Soap,Versi on="1.0.5000.0",PublicKeyToken="b03f5f7f11d50a3a", Culture="neutral",FileVersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Security,Version="1.0.5000.0",PublicKeyToke n="b03f5f7f11d50a3a",Culture="neutral",FileVersion ="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.ServiceModel,Version="3.0.0.0",Culture="neu tral",PublicKeyToken="b77a5c561934e089",ProcessorA rchitecture="MSIL",FileVersion="3.0.4506.648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.ServiceModel.Install,Version="3.0.0.0",Cult ure="neutral",PublicKeyToken="b77a5c561934e089",Pr ocessorArchitecture="MSIL",FileVersion="3.0.4506.6 48" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.ServiceModel.WasHosting,Version="3.0.0.0",C ulture="neutral",PublicKeyToken="b77a5c561934e089" ,ProcessorArchitecture="MSIL",FileVersion="3.0.450 6.648" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.ServiceModel.Web,version="3.5.0.0",publicKe yToken="31bf3856ad364e35",processorArchitecture="M SIL",fileVersion="3.5.594.0",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.ServiceProcess,Version="1.0.5000.0",PublicK eyToken="b03f5f7f11d50a3a",Culture="neutral",FileV ersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Speech,Version="3.0.0.0",Culture="neutral", PublicKeyToken="31bf3856ad364e35",ProcessorArchite cture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Speech,Version="3.0.0.0",Culture="neutral", PublicKeyToken="31bf3856ad364e35",ProcessorArchite cture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Web,Version="1.0.5000.0",PublicKeyToken="b0 3f5f7f11d50a3a",Culture="neutral",FileVersion="1.1 .4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Web.Extensions,version="3.5.0.0",publicKeyT oken="31bf3856ad364e35",processorArchitecture="MSI L",fileVersion="3.5.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Web.Extensions.Design,version="3.5.0.0",pub licKeyToken="31bf3856ad364e35",processorArchitectu re="MSIL",fileVersion="3.5.21022.8",culture="neutr al" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Web.Mobile,Version="1.0.5000.0",PublicKeyTo ken="b03f5f7f11d50a3a",Culture="neutral",FileVersi on="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Web.RegularExpressions,Version="1.0.5000.0" ,PublicKeyToken="b03f5f7f11d50a3a",Culture="neutra l",FileVersion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Web.Services,Version="1.0.5000.0",PublicKey Token="b03f5f7f11d50a3a",Culture="neutral",FileVer sion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Windows.Forms,Version="1.0.5000.0",PublicKe yToken="b77a5c561934e089",Culture="neutral",FileVe rsion="1.1.4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Windows.Presentation,version="3.5.0.0",publ icKeyToken="b77a5c561934e089",processorArchitectur e="MSIL",fileVersion="3.5.21022.8",culture="neutra l" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Workflow.Activities,processorArchitecture=" MSIL",publicKeyToken="31BF3856AD364E35",culture="n eutral",version="3.0.0.000000",fileVersion="3.0.42 03.835" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Workflow.ComponentModel,processorArchitectu re="MSIL",publicKeyToken="31BF3856AD364E35",cultur e="neutral",version="3.0.0.000000",fileVersion="3. 0.4203.835" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Workflow.Runtime,processorArchitecture="MSI L",publicKeyToken="31BF3856AD364E35",culture="neut ral",version="3.0.0.000000",fileVersion="3.0.4203. 835" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.WorkflowServices,version="3.5.0.0",publicKe yToken="31bf3856ad364e35",processorArchitecture="M SIL",fileVersion="3.5.594.0",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Xml,Version="1.0.5000.0",PublicKeyToken="b7 7a5c561934e089",Culture="neutral",FileVersion="1.1 .4322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ System.Xml.Linq,version="3.5.0.0",publicKeyToken=" b77a5c561934e089",processorArchitecture="MSIL",fil eVersion="3.5.21022.8",culture="neutral" ], Value: [ 0x70002100560045003300360030004b00630034004b006a00 540044003400 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ UIAutomationClient,Version="3.0.0.0",Culture="neut ral",PublicKeyToken="31bf3856ad364e35",ProcessorAr chitecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ UIAutomationClient,Version="3.0.0.0",Culture="neut ral",PublicKeyToken="31bf3856ad364e35",ProcessorAr chitecture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ UIAutomationClientsideProviders,Version="3.0.0.0", Culture="neutral",PublicKeyToken="31bf3856ad364e35 ",ProcessorArchitecture="MSIL",FileVersion="3.0.69 20.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ UIAutomationClientsideProviders,Version="3.0.0.0", Culture="neutral",PublicKeyToken="31bf3856ad364e35 ",ProcessorArchitecture="MSIL",FileVersion="3.0.69 20.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ UIAutomationProvider,Version="3.0.0.0",Culture="ne utral",PublicKeyToken="31bf3856ad364e35",Processor Architecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ UIAutomationProvider,Version="3.0.0.0",Culture="ne utral",PublicKeyToken="31bf3856ad364e35",Processor Architecture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ UIAutomationTypes,Version="3.0.0.0",Culture="neutr al",PublicKeyToken="31bf3856ad364e35",ProcessorArc hitecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ UIAutomationTypes,Version="3.0.0.0",Culture="neutr al",PublicKeyToken="31bf3856ad364e35",ProcessorArc hitecture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ WindowsBase,Version="3.0.0.0",Culture="neutral",Pu blicKeyToken="31bf3856ad364e35",ProcessorArchitect ure="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ WindowsBase,Version="3.0.0.0",Culture="neutral",Pu blicKeyToken="31bf3856ad364e35",ProcessorArchitect ure="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ WindowsFormsIntegration,Version="3.0.0.0",Culture= "neutral",PublicKeyToken="31bf3856ad364e35",Proces sorArchitecture="MSIL",FileVersion="3.0.6920.0" ], Value: [ 0x29006d0066002a0065005d0061006b007b0040004f006900 6c0024005700 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ WindowsFormsIntegration,Version="3.0.0.0",Culture= "neutral",PublicKeyToken="31bf3856ad364e35",Proces sorArchitecture="MSIL",FileVersion="3.0.6920.1109" ], Value: [ 0x6a0025006c0024003200790062006300690035004b002900 75006a005100 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ cscompmgd,Version="7.0.5000.0",PublicKeyToken="b03 f5f7f11d50a3a",Culture="neutral",FileVersion="7.10 .3052.4" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Classes\Installer\Assemblies\Global ],
Value Name: [ mscorcfg,Version="1.0.5000.0",PublicKeyToken="b03f 5f7f11d50a3a",Culture="neutral",FileVersion="1.1.4 322.573" ], Value: [ 0x250045006d0041006a003f00430025006b00390057003700 63004e004200 ], 2 times
Key: [ HKLM\SOFTWARE\Microsoft\CTF\SystemShared\ ],
Value Name: [ CUAS ], Value: [ 0 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Arial Baltic,186 ], Value: [ Arial,186 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Arial CE,238 ], Value: [ Arial,238 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Arial CYR,204 ], Value: [ Arial,204 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Arial Greek,161 ], Value: [ Arial,161 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Arial TUR,162 ], Value: [ Arial,162 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Courier New Baltic,186 ], Value: [ Courier New,186 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Courier New CE,238 ], Value: [ Courier New,238 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Courier New CYR,204 ], Value: [ Courier New,204 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Courier New Greek,161 ], Value: [ Courier New,161 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Courier New TUR,162 ], Value: [ Courier New,162 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Helv ], Value: [ MS Sans Serif ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Helvetica ], Value: [ Arial ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ MS Shell Dlg ], Value: [ Microsoft Sans Serif ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ MS Shell Dlg 2 ], Value: [ Tahoma ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Times ], Value: [ Times New Roman ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Times New Roman Baltic,186 ], Value: [ Times New Roman,186 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Times New Roman CE,238 ], Value: [ Times New Roman,238 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Times New Roman CYR,204 ], Value: [ Times New Roman,204 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Times New Roman Greek,161 ], Value: [ Times New Roman,161 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Times New Roman TUR,162 ], Value: [ Times New Roman,162 ], 1 time
Key: [ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes ],
Value Name: [ Tms Rmn ], Value: [ MS Serif ], 1 time
Key: [ HKLM\SYSTEM\CurrentControlSet\Control\Session Manager ],
Value Name: [ CriticalSectionTimeout ], Value: [ 2592000 ], 1 time
Key: [ HKLM\SYSTEM\Setup ],
Value Name: [ SystemSetupInProgress ], Value: [ 0 ], 1 time
Key: [ HKLM\Software\Microsoft\.NETFramework ],
Value Name: [ InstallRoot ], Value: [ C:\WINDOWS\Microsoft.NET\Framework\ ], 9 times
Key: [ HKLM\Software\Microsoft\.NETFramework\Policy\\v4.0 ],
Value Name: [ 30319 ], Value: [ 30319-30319 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL ], Value: [ 0x9ae26ea720cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ System,2.0.0.0,,b77a5c561934e089,MSIL ], Value: [ 0x8a57dea520cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSI L ], Value: [ 0x18bb1ba420cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL ], Value: [ 0x9cbf64a520cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL ], Value: [ 0x028b82a120cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ System.Runtime.Serialization.Formatters.Soap,2.0.0 .0,,b03f5f7f11d50a3a,MSIL ], Value: [ 0x586ef1ad20cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL ], Value: [ 0x50fdd5a120cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSI L ], Value: [ 0xa6ff4ea820cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ System.Xml,2.0.0.0,,b77a5c561934e089,MSIL ], Value: [ 0xca1b97a220cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\GACChangeNotificati on\Default ],
Value Name: [ mscorlib,2.0.0.0,,b77a5c561934e089,x86 ], Value: [ 0xa8ce1d9f20cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32 ],
Value Name: [ LatestIndex ], Value: [ 117 ], 3 times
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\19ab8d57\291a02d0\6 ],
Value Name: [ DisplayName ], Value: [ System.Xml,2.0.0.0,,b77a5c561934e089 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\19ab8d57\291a02d0\6 ],
Value Name: [ LastModTime ], Value: [ 0xca1b97a220cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\19ab8d57\291a02d0\6 ],
Value Name: [ SIG ], Value: [ 0xe129b85668d5c94a83901a595a688da0546fb0968a3ad8f3 9d84fd920ec9 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\19ab8d57\291a02d0\6 ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\2dd6ac50\3914f670\a ],
Value Name: [ DisplayName ], Value: [ Accessibility,2.0.0.0,,b03f5f7f11d50a3a ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\2dd6ac50\3914f670\a ],
Value Name: [ LastModTime ], Value: [ 0x9ae26ea720cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\2dd6ac50\3914f670\a ],
Value Name: [ SIG ], Value: [ 0x0c125ccbcbedd94384951da8e0098afff59f82cfa273bcd5 5ade98bfad83 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\2dd6ac50\3914f670\a ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\3ced59c5\7f729234\b ],
Value Name: [ DisplayName ], Value: [ System.Deployment,2.0.0.0,,b03f5f7f11d50a3a ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\3ced59c5\7f729234\b ],
Value Name: [ LastModTime ], Value: [ 0x9cbf64a520cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\3ced59c5\7f729234\b ],
Value Name: [ SIG ], Value: [ 0xaa6a30bb5ee45e4395aee8e3e013862cc3e045ee0eeb054e 6d82e3b4dc36 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\3ced59c5\7f729234\b ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\3f50fe4f\6e9ac653\7 ],
Value Name: [ DisplayName ], Value: [ System,2.0.0.0,,b77a5c561934e089 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\3f50fe4f\6e9ac653\7 ],
Value Name: [ LastModTime ], Value: [ 0x8a57dea520cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\3f50fe4f\6e9ac653\7 ],
Value Name: [ SIG ], Value: [ 0x7739f7fe32588e438bd70fda47be005ca87ed832d6e6b76a a0302a427ffe ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\3f50fe4f\6e9ac653\7 ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\41c04c7e\4426ac2f\c ],
Value Name: [ DisplayName ], Value: [ System.Runtime.Serialization.Formatters.Soap,2.0.0 .0,,b03f5f7f11d50a3a ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\41c04c7e\4426ac2f\c ],
Value Name: [ LastModTime ], Value: [ 0x586ef1ad20cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\41c04c7e\4426ac2f\c ],
Value Name: [ SIG ], Value: [ 0x84ba240465953246b597c8a014faed3e952c5f993566c233 a384370ec6af ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\41c04c7e\4426ac2f\c ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\424bd4d8\67e63d5c\5 ],
Value Name: [ DisplayName ], Value: [ System.Configuration,2.0.0.0,,b03f5f7f11d50a3a ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\424bd4d8\67e63d5c\5 ],
Value Name: [ LastModTime ], Value: [ 0x18bb1ba420cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\424bd4d8\67e63d5c\5 ],
Value Name: [ SIG ], Value: [ 0x13b985b524af744ea7870ebe1b5d5d0658961b3f64a74093 492875c9d8f1 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\424bd4d8\67e63d5c\5 ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\475dce40\2995e574\e ],
Value Name: [ DisplayName ], Value: [ System.Security,2.0.0.0,,b03f5f7f11d50a3a ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\475dce40\2995e574\e ],
Value Name: [ LastModTime ], Value: [ 0x50fdd5a120cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\475dce40\2995e574\e ],
Value Name: [ SIG ], Value: [ 0x35ebef571a04574ba2270f0f0ce1e3b70ca85b8f2d6480a1 d16ea10f281a ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\475dce40\2995e574\e ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\6dc7d4c0\3fcdfaca\9 ],
Value Name: [ DisplayName ], Value: [ System.Drawing,2.0.0.0,,b03f5f7f11d50a3a ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\6dc7d4c0\3fcdfaca\9 ],
Value Name: [ LastModTime ], Value: [ 0x028b82a120cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\6dc7d4c0\3fcdfaca\9 ],
Value Name: [ SIG ], Value: [ 0xd13b44b636575b40b535819858133665d8507ae68706294d da848b7a1e72 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\6dc7d4c0\3fcdfaca\9 ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\7950e2c5\319545b3\8 ],
Value Name: [ DisplayName ], Value: [ mscorlib,2.0.0.0,,b77a5c561934e089 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\7950e2c5\319545b3\8 ],
Value Name: [ LastModTime ], Value: [ 0xa8ce1d9f20cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\7950e2c5\319545b3\8 ],
Value Name: [ Modules ], Value: [ sortkey.nlp|sorttbls.nlp|big5.nlp|bopomofo.nlp|ksc .nlp|prc.nlp|prcp.nlp|xjis.nlp|normidna.nlp|normnf c.nlp|normnfd.nlp|normnfkc.nlp|normnfkd.nlp ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\7950e2c5\319545b3\8 ],
Value Name: [ SIG ], Value: [ 0x61498a5bb093b143a337bdf5962ece99bd6c58fc8f03105a 020331f4a600 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\7950e2c5\319545b3\8 ],
Value Name: [ Status ], Value: [ 8198 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\c991064\268e923b\10 ],
Value Name: [ DisplayName ], Value: [ System.Windows.Forms,2.0.0.0,,b77a5c561934e089 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\c991064\268e923b\10 ],
Value Name: [ LastModTime ], Value: [ 0xa6ff4ea820cfcb01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\c991064\268e923b\10 ],
Value Name: [ SIG ], Value: [ 0x44a949e4640e604da04329762516a96e6e1fa3a76770071d f15dc4d908f9 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\IL\c991064\268e923b\10 ],
Value Name: [ Status ], Value: [ 4098 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\181938c6\3c74e9a9\8 ],
Value Name: [ ConfigMask ], Value: [ 4361 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\181938c6\3c74e9a9\8 ],
Value Name: [ ConfigString ], Value: [ ZAP--0000-0000 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\181938c6\3c74e9a9\8 ],
Value Name: [ DisplayName ], Value: [ mscorlib,2.0.0.0,,b77a5c561934e089 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\181938c6\3c74e9a9\8 ],
Value Name: [ ILDependencies ], Value: [ 0xc5e25079b3459531080000000200000000000000 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\181938c6\3c74e9a9\8 ],
Value Name: [ MVID ], Value: [ 0x642534209e13d16e93b80a628742d2ee ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\181938c6\3c74e9a9\8 ],
Value Name: [ Status ], Value: [ 0 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\30bc7c4f\1d498232\7 ],
Value Name: [ ConfigMask ], Value: [ 4361 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\30bc7c4f\1d498232\7 ],
Value Name: [ ConfigString ], Value: [ ZAP--0000-0000 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\30bc7c4f\1d498232\7 ],
Value Name: [ DisplayName ], Value: [ System,2.0.0.0,,b77a5c561934e089 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\30bc7c4f\1d498232\7 ],
Value Name: [ ILDependencies ], Value: [ 0xd8d44b425c3de667050000000200000000000000578dab19 d0021a290600 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\30bc7c4f\1d498232\7 ],
Value Name: [ MVID ], Value: [ 0x36dbfcf62e07d819b3de533898868ecf ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\30bc7c4f\1d498232\7 ],
Value Name: [ NIDependencies ], Value: [ 0xc6381918a9e9743c080000000200000000000000 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\30bc7c4f\1d498232\7 ],
Value Name: [ Status ], Value: [ 0 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\3cca06a0\31de29a4\f ],
Value Name: [ ConfigMask ], Value: [ 4361 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\3cca06a0\31de29a4\f ],
Value Name: [ ConfigString ], Value: [ ZAP--0000-0000 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\3cca06a0\31de29a4\f ],
Value Name: [ DisplayName ], Value: [ System.Drawing,2.0.0.0,,b03f5f7f11d50a3a ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\3cca06a0\31de29a4\f ],
Value Name: [ ILDependencies ], Value: [ 0xc0d4c76dcafacd3f090000000200000000000000 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\3cca06a0\31de29a4\f ],
Value Name: [ MVID ], Value: [ 0xc91f68c2920882e02aec00eeabb6b415 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\3cca06a0\31de29a4\f ],
Value Name: [ NIDependencies ], Value: [ 0xc6381918a9e9743c0800000002000000000000004f7cbc30 3282491d0700 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\3cca06a0\31de29a4\f ],
Value Name: [ Status ], Value: [ 0 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\61e7e666\69db6748\e ],
Value Name: [ ConfigMask ], Value: [ 4361 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\61e7e666\69db6748\e ],
Value Name: [ ConfigString ], Value: [ ZAP--0000-0000 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\61e7e666\69db6748\e ],
Value Name: [ DisplayName ], Value: [ System.Windows.Forms,2.0.0.0,,b77a5c561934e089 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\61e7e666\69db6748\e ],
Value Name: [ ILDependencies ], Value: [ 0x40ce5d4774e595290e0000000200000000000000578dab19 d0021a290600 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\61e7e666\69db6748\e ],
Value Name: [ MVID ], Value: [ 0x0c70e5d82578be2f6c0dde89182261c5 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\61e7e666\69db6748\e ],
Value Name: [ NIDependencies ], Value: [ 0xc6381918a9e9743c0800000002000000000000004f7cbc30 3282491d0700 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\NI\61e7e666\69db6748\e ],
Value Name: [ Status ], Value: [ 0 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\index75 ],
Value Name: [ ILUsageMask ], Value: [ 0xffffffffffffffffff01 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v 2.0.50727_32\index75 ],
Value Name: [ NIUsageMask ], Value: [ 0xfffffffffffffffff1 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\PublisherPolicy\Def ault ],
Value Name: [ Latest ], Value: [ 1 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\PublisherPolicy\Def ault ],
Value Name: [ LegacyPolicyTimeStamp ], Value: [ 0x0000000000000000 ], 1 time
Key: [ HKLM\Software\Microsoft\Fusion\PublisherPolicy\Def ault ],
Value Name: [ index1 ], Value: [ 0x00 ], 1 time
Key: [ HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mscoree.dll ],
Value Name: [ CheckAppHelp ], Value: [ 1 ], 1 time
Key: [ HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mscorwks.dll ],
Value Name: [ CheckAppHelp ], Value: [ 1 ], 1 time
Key: [ HKLM\Software\Policies\Microsoft\Windows\Safer\Cod eIdentifiers ],
Value Name: [ TransparentEnabled ], Value: [ 1 ], 1 time
Key: [ HKU\S-1-5-21-842925246-1425521274-308236825-500\Keyboard Layout\Toggle ],
Value Name: [ Language Hotkey ], Value: [ 1 ], 4 times
Key: [ HKU\S-1-5-21-842925246-1425521274-308236825-500\Keyboard Layout\Toggle ],
Value Name: [ Layout Hotkey ], Value: [ 2 ], 4 times
Key: [ HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\GDIPlus ],
Value Name: [ FontCachePath ], Value: [ C:\Documents and Settings\Administrator\Local Settings\Application Data ], 1 time
Key: [ HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Expl orer\User Shell Folders ],
Value Name: [ AppData ], Value: [ %USERPROFILE%\Application Data ], 1 time
Key: [ HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Expl orer\User Shell Folders ],
Value Name: [ Cache ], Value: [ %USERPROFILE%\Local Settings\Temporary Internet Files ], 1 time
[================================================== ===========================]
2.b) PWItemGene.exe - File Activities
[================================================== ===========================]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Files Read:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
File Name: [ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\conf ig\machine.config ]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
File System Control Communication:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
File: [ C:\Program Files\Common Files\ ], Control Code: [ 0x00090028 ], 1 time
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Device Control Communication:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
File: [ \Device\KsecDD ], Control Code: [ 0x00390008 ], 8 times
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Memory Mapped Files:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
File Name: [ C:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT ]
File Name: [ C:\PWItemGene.exe ]
File Name: [ C:\WINDOWS\FONTS\MICROSS.TTF ]
File Name: [ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cult ure.dll ]
File Name: [ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rjit.dll ]
File Name: [ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rrc.dll ]
File Name: [ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rwks.dll ]
File Name: [ C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\msco reei.dll ]
File Name: [ C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll ]
File Name: [ C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll ]
File Name: [ C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll ]
File Name: [ C:\WINDOWS\WindowsShell.Manifest ]
File Name: [ C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5 c561934e089\sortkey.nlp ]
File Name: [ C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5 c561934e089\sorttbls.nlp ]
File Name: [ C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\ 2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll ]
File Name: [ C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing\c91f68c2920882e02aec00eeabb6b415\Syste m.Drawing.ni.dll ]
File Name: [ C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Forms\0c70e5d82578be2f6c0dde89182261c5 \System.Windows.Forms.ni.dll ]
File Name: [ C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sys tem\36dbfcf62e07d819b3de533898868ecf\System.ni.dll ]
File Name: [ C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\msc orlib\642534209e13d16e93b80a628742d2ee\mscorlib.ni .dll ]
File Name: [ C:\WINDOWS\system32\MSCTF.dll ]
File Name: [ C:\WINDOWS\system32\comctl32.dll ]
File Name: [ C:\WINDOWS\system32\imm32.dll ]
File Name: [ C:\WINDOWS\system32\l_intl.nls ]
File Name: [ C:\WINDOWS\system32\mscoree.dll ]
File Name: [ C:\WINDOWS\system32\rpcss.dll ]
File Name: [ C:\WINDOWS\system32\shell32.dll ]
File Name: [ C:\WINDOWS\system32\uxtheme.dll ]
[================================================== ===========================]
2.c) PWItemGene.exe - Other Activities
[================================================== ===========================]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Mutexes Created:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Mutex: [ CTF.Asm.MutexDefaultS-1-5-21-842925246-1425521274-308236825-500 ]
Mutex: [ CTF.Compart.MutexDefaultS-1-5-21-842925246-1425521274-308236825-500 ]
Mutex: [ CTF.LBES.MutexDefaultS-1-5-21-842925246-1425521274-308236825-500 ]
Mutex: [ CTF.Layouts.MutexDefaultS-1-5-21-842925246-1425521274-308236825-500 ]
Mutex: [ CTF.TMD.MutexDefaultS-1-5-21-842925246-1425521274-308236825-500 ]
Mutex: [ CTF.TimListCache.FMPDefaultS-1-5-21-842925246-1425521274-308236825-500MUTEX.DefaultS-1-5-21-842925246-1425521274-308236825-500 ]
Mutex: [ MSCTF.Shared.MUTEX.IFG ]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Windows SEH exceptions:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Description: [ Exception 0xc0000005 (STATUS_ACCESS_VIOLATION) at 0x4ed9b290 ], 6 times
[################################################## ###########################]
|