Analysis Date2014-11-07 19:07:24
MD5618afbab638ead39d02aed258b496364
SHA1680d181c116c35ea7e70c289500087712ffdd714

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
Section.text md5: 4c34601ff1500646c56a9b2c5f837666 sha1: debae79569cd7d5ff3ae42ff57a5bf30404647c2 size: 184832
Section.rsrc md5: 3cba99226eaf2387ef0fa4a85ddee976 sha1: 90eda9b97ab260fd26d814313a43ca10ffb77fef size: 1024
Section.reloc md5: 7dcdd660990563cbae72e88577fccb6e sha1: e176e377fb6b497b0cfb2e45bd195bde678ab0d0 size: 512
Timestamp2014-10-26 16:31:10
VersionLegalCopyright:
Assembly Version: 1.0.0.0
InternalName: Pro Dowloader7.exe
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: Pro Dowloader7.exe
PackerMicrosoft Visual C# v7.0 / Basic .NET
PEhash9ccc4f0bc21437ae7786d098f55e7c1f9c52b414
IMPhashf34d5f2d4577ed6d9ceec516c1f5a744
AV360 SafeGen:Variant.MSILKrypt.6
AVAd-AwareGen:Variant.MSILKrypt.6
AVAlwil (avast)GenMalicious-PL [Trj]
AVArcabit (arcavir)no_virus
AVAuthentiumW32/Trojan.VDRN-0374
AVAvira (antivir)TR/Dropper.Gen
AVBullGuardGen:Variant.MSILKrypt.6
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. Webno_virus
AVEmsisoftGen:Variant.MSILKrypt.6
AVEset (nod32)MSIL/TrojanDownloader.Agent.QT
AVFortinetMSIL/Agent.QT!tr.dldr
AVFrisk (f-prot)no_virus
AVF-SecureGen:Variant.MSILKrypt.6
AVGrisoft (avg)Downloader.MSIL.ULU
AVIkarusTrojan-Downloader
AVK7no_virus
AVKasperskyno_virus
AVMalwareBytesno_virus
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Variant.MSILKrypt.6
AVNormanGen:Variant.MSILKrypt.6
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\Microsoft\GDIPlus\FontCachePath ➝
C:\Documents and Settings\Administrator\Local Settings\Application Data\\x00
Creates FileC:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

Network Details:


Raw Pcap

Strings
+
+++++.,
++
+.
+
...f.
.<
..
.<.

!,;!,
000004b0
1.0.0.0
! " #"$ % & (')'*'-,.,/,102030KJLJMJPOQOWVXVYVhgji
1,#1,+
,?1,C1
1,C1
{1f6fc409-7126-47e1-b9ac-2b2f3dfc7e97}
1,N1,C
!=1N!a!h!
3,C3
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
Assembly Version
!,C!
&,C&
C1.C1,
C1,F1,J1,N1,Q!,T!,X!,T!,X
,c1,h1,F
C&,Q&,C&
!,F!,
FileDescription
FileVersion
InternalName
LegalCopyright
m_Label_Desc.Text
,N!,
!,N!,C!
OriginalFilename
Pro Dowloader7.exe
ProductVersion
,Q!,
q1.F
StringFileInfo
Translation
!,T!,X!,N
VarFileInfo
VS_VERSION_INFO
-	+*++}
,%&&&&&
$$$$!$!!!
$$$$$$$$$$
%+.+/+
+ ,	~~
+ +!+"
+ +%+&
+!+"+#
+)+*+/~
+$+%+&
+&*+**
+#+$+)
+%+&+++,{
+++,+-{>
+-+.+/+0~
+.+/+0~
,-+0+1+6
+0+1+6~
+)+*+++0+1uu
+++0+5
066JwWW^K
-0+F{N
,(+1{-
1$+\{>
1.0.0.0
%+1+2+
+1+6+8
{1f6fc409-7126-47e1-b9ac-2b2f3dfc7e97}
+(+-+2+7+8,	+7s
#,..299
!:2BL\O
3:2rLT
+3+4+5t
+3+4+5t:
+3+4+5t6
,3+5+6+7+<~
3#Fh	Y
3Gx;{]
-4&+4|
-4+4+5+:~.
-4&+4|a
-4&+4|b
-4&+4|H
,$+4+5+6
+4+9+:,
4VGhpcyBhcHBsaWNhdGlvbiBoYXMgYmVlbiBidWlsdCB3aXRoIGFuIGV2YWx1YXRpb24gdmVyc2lvbiBvZiBTbWFydEFzc2VtYmx5LCBhbmQgdGhlcmVmb3JlIGNhbm5vdCBiZSBkaXN0cmlidXRlZC4gWW91IGNhbiBpbnN0YWxsIFNtYXJ0QXNzZW1ibHkgb24gdGhpcyBjb21wdXRlciB0byBiZSBhYmxlIHRvIHJ1biB0aGlzIGFwcGxpY2F0aW9uLgoKVGhpcyBhcHBsaWNhdGlvbiB3aWxsIG5vdyBxdWl0Lg==,U21hcnRBc3NlbWJseSBFdmFsdWF0aW9uIFZlcnNpb24=
+5+6+7~
5T?Em'
..633333333)x
+6+7~;
+*++{7
8-<_2;&
+8+9+:
+8+=+>+?-.+B+C+H+I+J
--+9~\
,9&&&+;{
+9+>+?{
,9&+9,
+9+>+?+D+I+J-"~
+:+;+<+A
a2VybmVsMzIuZGxs
+<+A+B,
AbandonedMutexException
+A+B+G
Activator
add_CheckedChanged
add_Click
AddDays
AddLast
add_ProcessExit
AddRange
add_ThreadException
add_Tick
add_UnhandledException
AddValue
Adobe ImageReadyq
+@+A+F,
aHR0cDovL3d3dy5yZWQtZ2F0ZS5jb20vcHJvZHVjdHMvZG90bmV0LWRldmVsb3BtZW50L3NtYXJ0YXNzZW1ibHkvP3V0bV9zb3VyY2U9c21hcnRhc3NlbWJseXVpJnV0bV9tZWRpdW09c3VwcG9ydGxpbmsmdXRtX2NvbnRlbnQ9YWVyZGlhbG9nYm94JnV0bV9jYW1wYWlnbj1zbWFydGFzc2VtYmx5
aHR0cDovL3JnaG9zdC5uZXQvZG93bmxvYWQvNTg3Mjc4OTcvYTMzMmYzNzQ2Y2NlZDFhYzZjNTM2YjQ5ZjRkNTVhNWExMjMzYjY4MS9hMzMyZjM3NDZjY2VkMWFjNmM1MzZiNDlmNGQ1NWE1YTEyMzNiNjgxL1BybyUyMERvd2xvYWRlcjYuZXhl
AnchorStyles
ApartmentState
AppDomain
Append
appFriendlyName
Application
ApplicationBase
ApplicationException
AP*,T*
Assembly
AssemblyCompanyAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
AssemblyName
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
AsymmetricAlgorithm
AsyncCallback
Atsssssssssssssssssssss
Attribute
AttributeTargets
AttributeUsageAttribute
AutoScaleMode
AutoSizeMode
a'WyE8
+B,<+A
base64BinaryE
BeginInvoke
BinaryReader
BinaryWriter
Binder
BindingFlags
Bitmap
BlockCopy
bmV0d29yaw==
Boolean
BringToFront
Buffer
buildFriendlyNumber
Button
ButtonBase
bV9MYWJlbF9EZXNj
bV9MYWJlbF9EZXNjLlRleHQ=
bV9TZW5kVXNhZ2VSZXBvcnRzQnRu0Sm9pbiB0aGUgcXVhbGl0eSBpbXByb3ZlbWVudCBwcm9ncmFt,bV9Eb05vdFNlbmRGZWF0dXJlVXNhZ2VSZXBvcnRzQnRu<RG8gbm90IGpvaW4gdGhlIHF1YWxpdHkgaW1wcm92ZW1lbnQgcHJvZ3JhbQ==,Q29uZmlybUZlYXR1cmVVc2FnZVJlcG9ydGluZ0Zvcm0=,ezB9IFF1YWxpdHkgSW1wcm92ZW1lbnQgUHJvZ3JhbQ==8U21hcnRBc3NlbWJseS5TbWFydFVzYWdlV2l0aFVJLlJlc291cmNlcy4=
bXNjb3JsaWI=
c2FlbmNyeXB0ZWRyZXBvcnQ=PU21hcnRBc3NlbWJseSBFbmNyeXB0ZWQgRXhjZXB0aW9uIFJlcG9ydHwqLnNhZW5jcnlwdGVkcmVwb3J0$UHJlcGFyaW5nIHRoZSBlcnJvciByZXBvcnQu
callback
Callvirt
CancelEventArgs
.cctor
Ceiling
CheckBox
-$+C+Ht
ClearProjectError
Combine
CommonDialog
CompareExchange
CompareString
CompilationRelaxationsAttribute
Component
ComponentResourceManager
ComputeHash
Computer
Concat
ContainerControl
Contains
ContainsKey
ContentAlignment
Control
ControlCollection
ControlStyles
Conversion
Conversions
Convert
Copooopooopopooopppppqpooopoo=
CopyFile
_CorExeMain
CreateDelegate
CreateDirectory
CreateEncryptor
CreateGraphics
CreateInstance
CreateSubKey
CryptographicException
CryptoStream
CryptoStreamMode
CultureInfo
CurrentUser
Cursor
Cursors
d2FybmluZzE2
DataType
DateTime
->+>+?+D+E+F
+D+E+J{
Delegate
Delete
DeleteDirectory
DeleteFile
DialogResult
Dictionary`2
DirectoryNotFoundException
DirectorySeparatorChar
Dispose
djEuMS40MzIy(UGxhdGZvcm06IC5ORVQgMS4xIGluc3RhbGxlZA== UGxhdGZvcm06IFdpbmRvd3MgMjAwMA==
djIuMC41MDcyNw==(UGxhdGZvcm06IC5ORVQgMi4wIGluc3RhbGxlZA==
djMuMA==(UGxhdGZvcm06IC5ORVQgMy4wIGluc3RhbGxlZA==
djMuNQ==(UGxhdGZvcm06IC5ORVQgMy41IGluc3RhbGxlZA==
djQ=(UGxhdGZvcm06IC5ORVQgNC4wIGluc3RhbGxlZA==
DockStyle
DoEvents
DoNotDistributeAttribute
DownloadFile
DPFJTQUtleVZhbHVlPjxNb2R1bHVzPnZ0Zk05dDVOOUM0VkZXQnkxOGRnRjVNU1JSN2kveUZlbWtNakVWUGl1UUNUd0ljRVhwdG9TQ0E2Q2ZjR1FtalJ4c3dQRm4xcFNESkRZYWdzNG1qWXlSVXFFSFVFMHVsOWNTdVVuem5vMFNrL21lT2pJa3JjNlZHWUgvUFV2emw1d3BCS2xsK3g3eVVRVnhxNjdVLzRwbUJKNmdBWk1ZZlR6bEI5c0phUzhyMD08L01vZHVsdXM+PEV4cG9uZW50PkFRQUI8L0V4cG9uZW50PjwvUlNBS2V5VmFsdWU+4IWMzYTI1MzdjLWE5YjQtNWQzZS02YWMxLTQ5M2Q2ZmQyY2UxMA==4e0UwMjA3NkVCLTZFREItNEY0OS1CQzU1LURBQUFFNzc1NUQ3Q30=
DrawIcon
DrawImage
DrawLine
DrawText
DVGhpcyBjb3B5IG9mICd7MH0nIGhhcyBleHBpcmVkIGFuZCB3aWxsIG5vIGxvbmdlciBydW4uIApUaGlzIGlzIGJlY2F1c2UgaXQgd2FzIGNyZWF0ZWQgdXNpbmcgYSB2ZXJzaW9uIG9mIFJlZCBHYXRlJ3MgU21hcnRBc3NlbWJseSB3aGljaCBpcyBvbmx5IGxpY2Vuc2VkIGZvciB0ZXN0aW5nIHNvZnR3YXJlLiAKCllvdSBzaG91bGQgcmVwb3J0IHRoaXMgcHJvYmxlbSB0byB0aGUgdmVuZG9yIHdobyBzdXBwbGllZCAnezB9Jy4=
DynamicMethod
e2xvZ299 UG93ZXJlZCBieSBTbWFydEFzc2VtYmx5
+E,.+D{
 $E DG/
+@+E+J+K-
+E+J+O+P-
Encoding
Encrypt
EndInvoke
EndsWith
Enumerator
Environment
Equals
<)eS \?
EventArgs
EventHandler
ew==\RVJSIDIwMDY6IFRoaXMgdGVtcGxhdGUgd2FzIG5vdCBwcm9wZXJseSBwcm9jZXNzZWQgYnkgU21hcnRBc3NlbWJseQ==
Exception
ExceptionStackDepth
Exists
ExtractIconEx
ezB9IFVuZXhwZWN0ZWQgRXJyb3I=
$ezB9IGF0dGVtcHRlZCB0byBwZXJmb3JtIGFuIG9wZXJhdGlvbiBub3QgYWxsb3dlZCBieSB0aGUgc2VjdXJpdHkgcG9saWN5LiBUbyBncmFudCB0aGlzIGFwcGxpY2F0aW9uIHRoZSByZXF1aXJlZCBwZXJtaXNzaW9uLCBjb250YWN0IHlvdXIgc3lzdGVtIGFkbWluaXN0cmF0b3IsIG9yIHVzZSB0aGUgTWljcm9zb2Z0IC5ORVQgRnJhbWV3b3JrIENvbmZpZ3VyYXRpb24gdG9vbC4KCg==
FalseString
/FCKA#
FeatureNameAttribute
*+F+G(
+F+G+H~4
FieldInfo
FileAccess
FileDialog
FileMode
FileNotFoundException
FileShare
FileStream
FileSystemProxy
FlatStyle
FlushFinalBlock
FontStyle
Format
FormBorderStyle
FormStartPosition
FromBase64String
FromHandle
FromXmlString
gdi32.dll
GenerateIV
GenerateKey
get_ApartmentState
GetArrayRank
get_ASCII
GetAssemblies
get_Assembly
get_BaseType
get_Bottom
GetBytes
get_CanFocus
get_Chars
get_Checked
get_ClientSize
get_CodeBase
get_ControlDark
get_ControlLightLight
get_Controls
get_Count
GetCultureInfo
get_Current
GetCurrent
get_CurrentCulture
get_CurrentDomain
GetCurrentProcess
get_CurrentThread
get_CurrentUICulture
GetCustomAttributes
get_Data
get_Day
get_DesignMode
get_DialogResult
GetElementType
GetEnumerator
get_Exception
get_ExceptionObject
get_ExecutablePath
GetExecutingAssembly
GetField
GetFields
get_FieldType
get_FileName
GetFileNames
GetFileNameWithoutExtension
get_FileSystem
GetFolderPath
get_Font
get_FontHeight
GetFrame
get_FrameCount
get_FullName
GetGetMethod
get_Graphics
get_Hand
get_HasElementType
GetHashCode
get_HasValue
GetHdc
get_Height
get_Hour
GetILGenerator
GetILOffset
get_InnerException
GetInt32
get_IsAlive
get_IsArray
get_IsByRef
get_IsEnum
get_IsInitOnly
get_IsLiteral
get_IsPointer
get_IsPrimitive
get_IsStatic
get_IsTerminating
get_IsValueType
get_Item
get_IV
get_Key
get_Keys
get_Left
get_Length
GetLength
get_Location
get_Major
get_ManifestModule
GetManifestResourceStream
get_Message
get_MetadataToken
GetMethod
GetMethodFromHandle
GetMethods
get_Minor
get_Minute
get_Module
get_ModuleHandle
GetModuleHandle
GetModules
get_ModuleVersionId
get_Month
get_Name
GetName
get_Namespace
get_Now
GetObjectData
GetObjectValue
get_OSVersion
GetParameters
get_ParameterType
get_Platform
get_Position
GetProcAddress
get_ProcessorCount
GetProperty
get_Rank
get_ReturnType
get_Right
get_Second
GetServerURL
get_ServicePoint
GetSetMethod
get_Size
get_StackTrace
GetString
GetSystemInfo
GetSystemMetrics
GetTempFileName
GetTempPath
get_Text
get_Top
GetType
GetTypeFromHandle
GetTypes
get_Unicode
get_User
GetUserStoreForAssembly
get_UTF8
get_Value
GetValue
get_Version
GetVersionEx
get_Visible
GetWebRequest
get_White
get_Width
get_Window
get_Year
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
Graphics
GraphicsUnit
GWF8.9888886x
(%h4{H
HashAlgorithm
Hashtable
HttpWebClientProtocol
HttpWebRequest
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
-I&&&~2
IAsyncResult
IButtonControl
IC0g,Q291bGQgbm90IGRlc2VyaWFsaXplIHRoZSBvYmVjdA==
ICgweA==
ICollection
IContainer
ICryptoTransform
'IDATx
IDATx^
IDictionary
IDisposable
IEnumerable
IEnumerator
If you accept, {0} will automatically send {1} information about the features that you use.8
IjxSU0FLZXlWYWx1ZT4=
ILGenerator
ILOffset
IndexOf
InitializeArray
Interlocked
Intern
IntPtr
InvalidOperationException
Invoke
InvokeMember
IOException
ISerializable
IsolatedStorageException
IsolatedStorageFile
IsolatedStorageFileStream
IsWow64Process
iwC2%0
IWebProxy
I!Z!n!
JBuilt using an evaluation version of SmartAssembly. Cannot be distributed.
J(f&#Mc$
JkNhbmNlbA==
JkNvbnRpbnVldezB9IGF0dGVtcHRlZCB0byBwZXJmb3JtIGFuIG9wZXJhdGlvbiBub3QgYWxsb3dlZCBieSB0aGUgc2VjdXJpdHkgcG9saWN5Lg==
JkRvbid0IFNlbmQ=
JlF1aXQ=
JlJldHJ5
JlNlbmQgRXJyb3IgUmVwb3J0
-;`k9s
kernel32
kernel32.dll
kernel32.Dll
KeyCollection
KeyValuePair`2
,K+K8P
)&k/w)
L0FkZEV4Y2VwdGlvblJlcG9ydCAi<U21hcnRBc3NlbWJseS5TbWFydEV4Y2VwdGlvbnNDb3JlLlJlc291cmNlcy4=
LastIndexOf
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Ldc_I4
LF'&X%V
licenseID
LinkedList`1
LinkedListNode`1
List`1
LmJpbg==
Lmljbw==$VW5oYW5kbGVkRXhjZXB0aW9uLk1ldGhvZElE$VW5oYW5kbGVkRXhjZXB0aW9uLklMT2Zmc2V04VW5oYW5kbGVkRXhjZXB0aW9uLkV4Y2VwdGlvblN0YWNrRGVwdGg=,VW5oYW5kbGVkRXhjZXB0aW9uLk9iamVjdHMuTGVuZ3Ro,VW5oYW5kbGVkRXhjZXB0aW9uLk9iamVjdHNbezB9XQ==
LmV4ZQ==
LnBuZw==
LnR4dA==
LocalMachine
LoginServiceSoapT
LSQcB3?OE
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
L;VA"9
Marshal
MD5CryptoServiceProvider
MeasureString
MemberInfo
MemoryStream
MessageBox
MessageBoxButtons
MessageBoxIcon
method
MethodBase
MethodID
MethodInfo
Microsoft.VisualBasic
Microsoft.VisualBasic.ApplicationServices
Microsoft.VisualBasic.CompilerServices
Microsoft.VisualBasic.Devices
Microsoft.VisualBasic.MyServices
Microsoft.Win32
MissingMethodException
MjAxNC0xMS0wMlQxNjozMTowNQ==
Module
<Module>
ModuleHandle
Monitor
MoveNext
mscoree.dll
mscorlib
MTAwMA==
MulticastDelegate
MzFiZjM4NTZhZDM2NGUzNQ== UHJlc2VudGF0aW9uRnJhbWV3b3JrLA==$U3lzdGVtLldpbmRvd3MuQXBwbGljYXRpb24=
============================n
-N+^{^
n================ABA=========E
	Namespace3http://www.smartassembly.com/webservices/Reporting/
	Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/`
.nEpIK
NewGuid
Ni43LjAuMjM5
Ni43LjAuMTAz
niin~%
Nullable`1
nW{H))
object
Object
Objects
'O-E_>
OnClosing
OnFontChanged
OnPaint
OnResize
OnTextChanged
OnVisibleChanged
OpCode
OpCodes
OpenSubKey
OpenWrite
op_Equality
OperatingSystem
Operators
op_GreaterThan
op_Inequality
op_LessThan
-,+O+P+Q+V+W
Padding
PADPADP
PaintEventArgs
ParameterInfo
PC9SU0FLZXlWYWx1ZT4iHKioqIEluZm9ybWF0aW9uIG5vdCByZXBvcnRlZCBmb3Igc2VjdXJpdHkgcmVhc29ucyAqKio=
PerformLayout
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
PictureBox
PictureBoxSizeMode
pIDATx
PlatformID
PoweredByAttribute
"Powered by SmartAssembly 6.7.0.239
pppppp
Process
Pro Dowloader7
Pro Dowloader7.exe
ProjectData
PropertyInfo
PUUQQTTLKKKL
,Q&&&&*
Q291bnQ=
Q29kZUJhc2U=
Q29ubmVjdGluZyB0byBzZXJ2ZXIu
Q3VycmVudA==
Q3VzdG9tUHJvcGVydGllcw==
Q3VzdG9tUHJvcGVydHk=
Qi^]TKGFF9F9x
Qkkbal
QnlSZWY=
QVNDSUk=
QXNzZW1ibGllcw==
QXNzZW1ibHk=
QXNzZW1ibHlJRA==
QXNzZW1ibHlJRHM=
QXR0YWNoZWRGaWxl
QXR0YWNoZWRGaWxlcw==
R2V0U2VydmVyVVJM
ReadUInt64
Rectangle
ReferenceEquals
Refresh
Registry
RegistryKey
RegistryValueKind
ReleaseHdc
ReleaseMutex
@.reloc
Remove
Replace
ReportingService
ReportingService1
ReportingServiceSoapT
ResolveMethodHandle
ResolveTypeHandle
ResourceManager
.resources
result
ResumeLayout
Reverse
RG9Ob3RDYXB0dXJlQXR0cmlidXRl
RGF0YQ==
RGF0ZVRpbWU=
RGUmYnVn
RHluYW1pY0ZlYXR1cmVz
RijndaelManaged
RmllbGQ=
RmlsZU5hbWU=
RmVhdHVyZQ==
RmVhdHVyZXM=
RnVsbE5hbWU=
RSACryptoServiceProvider
`.rsrc
RuntimeCompatibilityAttribute
RuntimeFieldHandle
RuntimeHelpers
RuntimeMethodHandle
RuntimeTypeHandle
+r+v{A
RVJSIDIwMDE6IA==
RVJSIDIwMDI6IA==,aHR0cDovL3Nhd2Vic2VydmljZS5yZWQtZ2F0ZS5jb20v
RVJSIDIwMDQ6IA==
RVJSIDIwMDU6IFRoZSAxMjgtYml0IGVuY3J5cHRpb24gaXMgbm90IGF2YWlsYWJsZSBvbiB0aGlzIGNvbXB1dGVyLiBZb3UgbmVlZCB0byBpbnN0YWxsIHRoZSBIaWdoIEVuY3J5cHRpb24gUGFjayBpbiBvcmRlciB0byB1c2UgdGhlIHJlcG9ydGluZyBmZWF0dXJlLg==
RW5hYmxlVmlzdWFsU3R5bGVz
RXhjZXB0aW9u
RXhjZXB0aW9uU3RhY2tEZXB0aA==
RXhjZXB0aW9uU3RhY2tUcmFjZQ==
RXJyb3I=
RXJyb3IgUmVwb3J0aW5n
s9,TTNo
SaveFileDialog
ScaleCore
SecurityException
SecurityIdentifier
SeekOrigin
SelectObject
SerializationInfo
ServerComputer
serverUrl
ServicePoint
set_AcceptButton
set_Anchor
SetApartmentState
set_AutoScaleBaseSize
set_AutoScaleDimensions
set_AutoScaleMode
set_AutoSize
set_AutoSizeMode
set_BackColor
SetBounds
set_CancelButton
set_ClientSize
SetClip
set_ControlBox
set_CurrentUICulture
set_Cursor
set_DefaultExt
set_DialogResult
set_Dock
set_Enabled
set_Expect100Continue
set_Filter
set_FlatStyle
set_Font
set_FormBorderStyle
set_Height
set_Icon
set_Image
set_ImageAlign
set_Interval
set_IsBackground
set_Item
set_Location
set_MaximizeBox
set_MaximumSize
set_MinimizeBox
set_Name
set_Padding
set_Position
SetProjectError
set_Proxy
set_ShowInTaskbar
set_Size
set_SizeGripStyle
set_SizeMode
set_StartPosition
SetStyle
set_TabIndex
set_TabStop
set_Text
set_Timeout
set_Title
SetToolTip
set_Top
set_TopMost
set_Url
set_UseCompatibleTextRendering
set_UseMnemonic
set_UseVisualStyleBackColor
SetValue
set_Visible
shell32
ShowDialog
SizeGripStyle
SizeOf
SmartAssembly.Attributes
SmartAssembly.License.Resources.error.png
SmartAssembly.License.Resources.logo.png
SmartAssembly.SmartExceptionsCore
SmartAssembly.SmartExceptionsCore.Resources.current.png
SmartAssembly.SmartExceptionsCore.Resources.data.png
SmartAssembly.SmartExceptionsCore.Resources.default.ico
SmartAssembly.SmartExceptionsCore.Resources.error16.png
SmartAssembly.SmartExceptionsCore.Resources.error.png
SmartAssembly.SmartExceptionsCore.Resources.{logo}.png
SmartAssembly.SmartExceptionsCore.Resources.network.png
SmartAssembly.SmartExceptionsCore.Resources.ok.png
SmartAssembly.SmartExceptionsCore.Resources.warning16.png
SmartAssembly.SmartUsageCore
SmartAssembly.SmartUsageWithUI.Resources.current.png
SmartAssembly.SmartUsageWithUI.Resources.data.png
SmartAssembly.SmartUsageWithUI.Resources.default.ico
SmartAssembly.SmartUsageWithUI.Resources.error16.png
SmartAssembly.SmartUsageWithUI.Resources.error.png
SmartAssembly.SmartUsageWithUI.Resources.{logo}.png
SmartAssembly.SmartUsageWithUI.Resources.network.png
SmartAssembly.SmartUsageWithUI.Resources.ok.png
SmartAssembly.SmartUsageWithUI.Resources.warning16.png
SmartStackFrame
SoapDocumentMethodAttribute
SoapHttpClientProtocol
SpecialFolder
StackFrame
StackTrace
StartsWith
STAThreadAttribute
Stream
StreamingContext
String
StringBuilder
#Strings
Substring
SuppressIldasmAttribute
SuspendLayout
SUVudW1lcmFibGU=
SUxPZmZzZXQ=
SWYgeW91IGNsaWNrIENvbnRpbnVlLCB0aGUgYXBwbGljYXRpb24gd2lsbCBpZ25vcmUgdGhpcyBlcnJvciBhbmQgYXR0ZW1wdCB0byBjb250aW51ZS4gSWYgeW91IGNsaWNrIFF1aXQsIHRoZSBhcHBsaWNhdGlvbiB3aWxsIGNsb3NlIGltbWVkaWF0ZWx5LgoK
SXNXb3c2NFByb2Nlc3M=<U09GVFdBUkVcTWljcm9zb2Z0XE5FVCBGcmFtZXdvcmsgU2V0dXBcTkRQXA==LU09GVFdBUkVcV293NjQzMk5vZGVcTWljcm9zb2Z0XE5FVCBGcmFtZXdvcmsgU2V0dXBcTkRQXA==
SymmetricAlgorithm
System
System.Collections
System.Collections.Generic
SystemColors
System.ComponentModel
System.Diagnostics
System.Drawing
System.Globalization
System.IO
System.IO.IsolatedStorage
System.Net
SystemPens
System.Reflection
System.Reflection.Emit
System.Resources
System.Runtime.CompilerServices
System.Runtime.InteropServices
System.Runtime.Serialization
System.Security
System.Security.Cryptography
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Principal
System.Text
System.Threading
System.Web.Services
System.Web.Services.Protocols
System.Windows.Forms
System.Xml
System.Xml.Serialization
T0s=,U21hcnRBc3NlbWJseS5MaWNlbnNlLlJlc291cmNlcy4=
T1NQbGF0Zm9ybUlE
T1NWZXJzaW9u
T_]29g
T2JqZWN0
T2JqZWN0cw==
T2JqZWN0RGVm$RG9Ob3RDYXB0dXJlRmllbGRzQXR0cmlidXRl
Tailcall
tEXtSoftware
T+,+F+GJ+G{&
TGVuZ3Ro
The information you send will help us to improve the reliability and performance of {0}.
!This program cannot be run in DOS mode.
Thread
ThreadAbortException
ThreadExceptionEventArgs
ThreadExceptionEventHandler
ThreadStart
ThreadStaticAttribute
Ti9B VW5oYW5kbGVkRXhjZXB0aW9uUmVwb3J0
TkVUVmVyc2lvbg==
Tliicb]YWTTJx
TmFtZQ==<U21hcnRBc3NlbWJseS5BdHRyaWJ1dGVzLlBvd2VyZWRCeUF0dHJpYnV0ZQ==
TmFtZUlE
TnVsbA==
ToArray
ToBase64String
ToBoolean
ToByte
ToHfont
ToInt32
ToInt64
ToLower
ToolTip
ToString
ToUInt64
ToUpper
TransformFinalBlock
'TT$	x
TUVdFUlRZVUlPUEFTREZHSEpLTFpYQ1ZCTk0xMjM0NTY3ODkwcWF6eHN3ZWRjdmZydGdibmh5dWpta2lvbHA=
TW9yZQ==
TWljcm9zb2Z0IFNhbnMgU2VyaWY=0UGxlYXNlIHRlbGwgezB9IGFib3V0IHRoaXMgcHJvYmxlbS4=
TWV0aG9k RVJSIDIwMDY6IHswfSBAIDB4ezE6eDR9
TWV0aG9kSUQ=
TWVzc2FnZQ==
+,+-+.tZ
_T+Z{0
U21hcnRBc3NlbWJseQ==
U21hcnRBc3NlbWJseS5leGU=
U21hcnRTdGFja0ZyYW1lcw==
U29mdHdhcmVc U21hcnRBc3NlbWJseVJlcG9ydFVzYWdl0
U29mdHdhcmVcUmVkIEdhdGVc(U29mdHdhcmVcV293NjQzMk5vZGVcUmVkIEdhdGVc
U2F2ZSBSZXBvcnQ=
U2h1dGRvd24=
U2VjdXJpdHkgZXJyb3I=
U2VydmljZVBhY2s=
U2VydmVyUjI=
U3lzdGVtLlN0cmluZw==
U3lzdGVtSW5mb3JtYXRpb24=
U3RhdGlj
U3RhY2tGcmFtZQ==
U3RhY2tUcmFjZQ==
UG93ZXJlZCBieQ==
UG9pbnRlcg==
UGF0aA==
UGxhdGZvcm06IFdpbmRvd3MgOA==
UGxhdGZvcm06IFdpbmRvd3MgWFA= UGxhdGZvcm06IFdpbmRvd3MgMjAwMw==(UGxhdGZvcm06IFdpbmRvd3MgVmlzdGEvMjAwOA==$UGxhdGZvcm06IFdpbmRvd3MgNy8yMDA4IFIy
UGxhdGZvcm0gQ1BVIENvcmVzOiA= UGxhdGZvcm0gQ3VsdHVyZSBOYW1lOiA=
UGxhdGZvcm0gT1MgQml0bmVzczog
UHJldmlvdXNFeGNlcHRpb24=
UHJvIERvd2xvYWRlcjc=,djEuMC4wLjAgZnJvbSAyNi8xMC8yMDE0IDE2OjMxOjA1
UHJvZ3JhbSBoYXMgZXhwaXJlZA==
UInt16
UInt32
UInt64
UIntPtr
+u+L+T~
UmFuaw==
UmVtb3ZlZEZyYW1lcw==
UmVwb3J0aW5nLmFzbXg=
UmVwb3J0SUQ=
UnhandledExceptionEventArgs
UnhandledExceptionEventHandler
UnmanagedCode
UploadReport2
UploadReportLoginService
UploadReportLoginService1
user32
user32.dll
UTF8Encoding
-*+<uu
|uUqze
]v0#F(
v2.0.50727
V29ya3N0YXRpb24=
V:99	u/nE
value__
ValueType
VBMath
Version
VG8gaGVscCBpbXByb3ZlIHRoZSBzb2Z0d2FyZSB5b3UgdXNlLCB7MH0gaXMgaW50ZXJlc3RlZCBpbiBsZWFybmluZyBtb3JlIGFib3V0IHRoaXMgZXJyb3IuIFdlIGhhdmUgY3JlYXRlZCBhIHJlcG9ydCBhYm91dCB0aGUgZXJyb3IgZm9yIHlvdSB0byBzZW5kIHRvIHVzLg==
VG90YWxGcmFtZXNDb3VudA==
VGhpcw==
VHJ1ZQ== VXBsb2FkUmVwb3J0TG9naW4uYXNteA==
VHJhbnNmZXJyaW5nIHJlcG9ydC4=4RXJyb3IgcmVwb3J0aW5nIGNvbXBsZXRlZC4gVGhhbmsgeW91Lg==XezB9IGhhcyBlbmNvdW50ZXJlZCBhIHByb2JsZW0uCldlIGFyZSBzb3JyeSBmb3IgdGhlIGluY29udmVuaWVuY2Uu`UGxlYXNlIHdhaXQgd2hpbGUgezB9IGlzIHNlbmRpbmcgdGhlIHJlcG9ydCB0byB7MX0gdGhyb3VnaCB0aGUgSW50ZXJuZXQu
VHlwZU5hbWU=
VHlwZU5hbWVz
VHlwZURlZklE
VmFsdWU=
VU5JQ09ERQ==
VW5oYW5kbGVkRXhjZXB0aW9u,U21hcnRBc3NlbWJseS5TbWFydEV4Y2VwdGlvbnNDb3Jl
VXBsb2FkUmVwb3J0Mg==(Q2Fubm90IGNvbm5lY3QgdG8gd2Vic2VydmljZQ==
VXNhZ2VSZXBvcnQ=
VXNhZ2VzLmJpbg==
VXNlcklE
W1Vua25vd24gY29tcGFueV0=
WaitHandle
WaitOne
WebClient
WebClientProtocol
WebRequest
WebServiceBindingAttribute
WindowsIdentity
Would you like to send feedback on how you use {0}?
WrapNonExceptionThrows
WriteAttributeString
WriteByte
WriteElementString
WriteEndDocument
WriteEndElement
WriteStartDocument
WriteStartElement
Wuliicc``YZMx
\wvmlhfddYYNx
wwwwwwwwwwwwwx
**********%x
&...././/...x
&++++++++++(x
+	X+	+
X19iYXNl
XCouYmlu
XLXioi
XmlElementAttribute
XmlTextWriter
XmlWriter
-Xmwxj
xxxxxxyxyxxx
Y3VycmVudA==
Y8!8=<|
YB)kBQ
/Y/S:{;f
{||yyyy
Z+)+.+3~
=zDDDD
ZGF0YQ==
ZGl0dG8=
ZGVmYXVsdA==<SWdub3JlIHRoaXMgZXJyb3IgYW5kIGF0dGVtcHQgdG8gJmNvbnRpbnVlLg==
ZkQZaSA
Z+kY~=
|z?>>N
ZT <XD
ZW4tVVM=
ZXJyb3I=
ZXJyb3IxNg==
Z+\Y~=