Static | ZeroBOX

PE Compile Time

2093-01-25 05:37:28

PDB Path

poweroff.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00058e34 0x00059000 7.60779903561
.sdata 0x0005c000 0x000002f8 0x00000400 5.89094725161
.rsrc 0x0005e000 0x00049f90 0x0004a000 6.06481693664
.reloc 0x000a8000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a69a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000a6e10 0x000000a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000a6eb0 0x000003bc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000a726c 0x00000d21 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.sdata
@.reloc
@P@X(t
Z?_d
_b`*
v2.0.50727
#Strings
poweroff
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
NeutralResourcesLanguageAttribute
System.Resources
SuppressIldasmAttribute
AssemblyDelaySignAttribute
AssemblyKeyNameAttribute
5a068a26-e823-4a7a-905a-8c114717ef6a
poweroff.exe
<Module>
cfyXYtVrIOk7Ri799A
AsOXaor5sivsVQAWfN
Object
IdownLoad_PID__k66qq79b5ppkju5j
System.Windows.Forms
tx9tqnh972krjuv3
UserControl
ychA823GCeRTN3sShC
KyRLHQjkRyyhQ84LHa
ImZo4dxuBdxqOlbYhW
Wfl0tPIoyro2jpo5Ay
OSdVNBleJXS9ZEyyWh
S6F0gLmQBpuJ1aCvUl
AH819vsYHHGn6vVeUm
tWvbbOqPThhI6T2d8Y
lRJ597QtvT1PKQZoe2
KdkfYYwG9Im6otV6sY
cfUZfEXMqrmrfCEhV3
Ja5AHE1rDqBl5UZABF
qmbKhQ9Ufqlwd0ul2p
QDPyusNClx83PLNO8U
bGTdo4oq7ly6NtCd1t
AkBfVWLmDjRlIsoGN1
G2fCpuS5JvpX5Va24u
zLGUfZ2ae7iDmTKvl8
kPpOEL8mqmrYhrBZsf
VxNTsL7kAW8xTpcChB
X1Me89c1VAUnZMgfmC
DWZR76E28pNMrqm8nb
VbUbwMtytKFDCgNR1B
c2gt2VMvtBdwuTDYfF
wCmuxcytbHNi46tfYy
XQMRa3bpn68Gb0jcvk
UserControl1
pwr_off_Y9uYQGOvBTdCNmQ6
Resources
pwr_off_Y9uYQGOvBTdCNmQ6.Properties
Settings
ApplicationSettingsBase
System.Configuration
LoGO6WDJgYaNFhD9ww
MH5mCGgnF7HHf3Q575
ProductInstall
pwr_off_Y9uYQGOvBTdCNmQ6.Y9uYQGOvBTdCNmQ6
BuyingCrusader
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=16
ValueType
<Module>{1B6E0AA1-0667-4E1C-A42E-4B69346A16D3}
ooweIcUreRbXT24ELs
uoa4x5keRIgtegZ9Ff
SFU4mbT3GMret7THonf
MulticastDelegate
eI6kqseCiPSVEgsXR7
xH4Ph1TL8BZI3oXYvB
eFRdPQhqVCK0gWXJ35
Attribute
ijMFFPOqfFfjp9TfTs`1
uYn6XYpCDxy4ZL1pWs
YYtg2J4aUD5mZSMJfm
blD80fd9NhqysQPl5I
gVkqBOCQGvvg8KIsac
r6lMb0nI5v4J82uey5
qCXyL3R49wIh1LoqMH
jTRxBxYpE6vR0VFaEy
ebrwg5ZinoChBOTSxy
rdkH2bFSS3dJsbdm6V
k9S07eWnNP7qnTnu4L
GOGsTKivWC4h7yEmr2
<PrivateImplementationDetails>{8DC203B7-2380-4653-8F60-12A0BCFDEABA}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
nA7jsOXao
IContainer
System.ComponentModel
VsixvsVQA
TextBox
QfNItchA8
rGCleRTN3
iShmCnyRL
NQksRyyhQ
QT7BWy5yB
EventArgs
AU1VCV0GF
rrfryXYtr
Dispose
disposing
gOk37Ri79
ComponentResourceManager
EventHandler
IntPtr
Padding
System.Drawing
Single
vHVBo4Pj2MqEjZKIxD
EQfWrCpVI1PIhLe0Si
O9c9GHcHpZWKIKIN1b
fNbyeJAKRs01Uh3KGd
HmbsAeF4SjrxPUnSUw
IDisposable
haRLvqGTlvSCb5vGe9
BFpx4rl1PiCn4672VL
RuntimeTypeHandle
GetTypeFromHandle
T3uovaRNGY7RXlaDPA
Control
SuspendLayout
udXTFvdqA6tHyEro0G
set_Location
Wt9f3pKBnXpH1b6Rhw
set_Margin
zoSCO2utOnFY3lkptt
TextBoxBase
set_Multiline
ViAyfG0Ek5MhT93WxS
lyuNu4sPwqpwxoHWeH
set_Name
gfEi1Z6QCyxoHHpUqJ
set_Size
SBitNX77qBtok4QfNf
set_TabIndex
tf3mj3gwTguwJeAeEc
ResourceManager
GetString
YUGoK3xJfadlsR8EBU
set_Text
psIa1fefuDNjBwiDJx
add_TextChanged
rqGt5I24Id7WKte4Nx
ContainerControl
set_AutoScaleDimensions
iBdTS2kt43hvOtJicT
AutoScaleMode
set_AutoScaleMode
nKQH8LvV0X5x5HaeB7
get_Purple
xg2RJgmWwuy32B53QC
set_BackColor
EoV2MASNDcKWjXoMTp
set_ClientSize
Lj3ILsDGDjE40Qx4kG
get_Controls
ControlCollection
ke54RuBy0JG61ABdDZ
KytMjwjGSFRhZVL0bM
get_AliceBlue
jQcjCLXi8SLQdQ1ofs
set_ForeColor
B29MUW4wl1wOp5E3YL
FormBorderStyle
set_FormBorderStyle
B9RYmeJGFluJ9mRNZU
lSCSb51KKfdJpQXYMs
uG9BYkok1nZPCFV8vv
ResumeLayout
DghoaTr9CHKRbeUpLJ
PerformLayout
FlbwYhWuf
h0tXPoyro
rjp1o5AyZ
qdV9NBeJX
r9ZNEyyWh
S6Fo0gLQB
x4LqHadmZ
p4dQuBdxq
blWGJUYLMtNjZoyR0l
b871rK52XI3wFkVHET
clZpJsCZsjyv6u8Eqs
LEYEj6QAZFF0kMNIs0
yC6ZadnRDCR77XkqMb
pLSY0WLy6n3Pm8ZyEe
pf991jbRTi7q087ud9
oNXL7OHwl0eR6LnhxT
j5Dhn59URfmOIyWKAY
zZpcYiOZydeteuCkmT
AAeYTxEKB5Tw47AwUY
bMWqXSwtEHdxLROusk
YO4sqgilgUOh7pVZAS
eaxcGYhkheA0dqSOlj
cBoRHrVnPDWADw2Vv7
aBEPVct1y4meYeDDOD
OI0OelqQkCujtSLOCo
YgCpydWqKLGhRCTPCi
pIjr41MsPSqk8rHrDP
u2noO3Z9InpaxkjhVj
eihfr0UBvRD1mqP211
get_Aqua
lAhTcUa5UoBXXK22qs
Y9jfOOTOP1t22R3JXc
s07gpvf8MDIopoijvD
NZLXM6zRcrSGybKQ8i
ePgx6tINoZhMleeVAod
t0eZcPIIX5pZUQqx0kK
RUaHGpI3a90D8JNqlPd
cXSKueIyBuM1DQpcAo7
GuJL1aCvU
ResolveEventHandler
sZd9aMIANLCmRqPtpvT
AppDomain
get_CurrentDomain
rWZPEmIPY46H4nGkhYg
add_AssemblyResolve
fYE1e6I8oeO4vBoBAv6
WNsRAKIceo1NA9HeJ7R
jJ56MEIpcR8u83w2pC8
xhuiSGIFRuHVB7adOxY
<>9__0_0
.cctor
<DLLLOader_4s2jjdb8gbwvqkk4rjjgzuc4hnzdag>b__0_0
Assembly
sender
ResolveEventArgs
Stream
System.IO
AssemblyName
ddy0sbAFDS5YIvKkTry
emJqsiAPbuA3TmnatyD
YyeY20ApPeu5SJanSHr
RLMUGfAGbVEwXbl1bRP
j0y8WyAl9dAAxtiNOdL
get_Name
Hf3sjPARU2UsXOiuHSM
j3vy9OAdBaA76MWcXMj
Contains
E8HR3cAKex70lHVGFEc
AhSrlXAu3aDkYGq9bcm
KlekSLA0lFP1qgfrBRi
Concat
uPjE8oAsjRVLaL1igot
GetExecutingAssembly
cKhUVxA6nLbeOlW9HwY
efqCApA7RLld5ERbiuZ
GetManifestResourceStream
v1DsAcAglqjNwHBvVdG
get_Length
GWFEM1Ax22nZvLftOQE
W9XXBMAeF17JeubeQlU
a35G1SA2oLVS4183D5K
MCEMhV3na
VAH7ErDqB
hUHS819vY
RegistryKey
Microsoft.Win32
Registry
CurrentConfig
List`1
System.Collections.Generic
IEnumerable`1
Exception
OHG2n6vVe
BmEcWvbbO
SThEhI6T2
Enumerator
GetEnumerator
get_Current
MoveNext
I8YywRJ59
WebClient
System.Net
AtvbT1PKQ
RemoteCertificateValidationCallback
System.Net.Security
ProcessStartInfo
OoeD2Rdkf
Combine
ToLower
Equals
WriteAllText
LYGg9Im6o
CurrentUser
ToString
yV68sYrfU
OfEtMqrmr
uXv3cMIRRsKJgETxsXL
qDQ8KnIdcknfamRwgjj
i7PANKIGS1a0LP5dKvo
BxoOKnIlmJwLYhtfplm
CZxfghIKdwBQrsJ9kPS
tkoEaCIugUufKRys6t1
OpenSubKey
JIJRPfI0xZPic1pceOI
FNJXVqIsYe5NWRHKgDp
GetValue
T09gtiI6eiI9AkMG3Ta
IsNullOrEmpty
xaQgrsI7Mbyma8XYh9Z
rbjipnIgt7hXUHUlGjo
System.Text.RegularExpressions
Replace
Cs0dyPIxIpJ4OxnTggT
MVTEaZIeg64Th8GNGWJ
u3RhbiI2ptPiRBERday
Gk9gwZIkcbP270UPg84
Xg2BJdIvU88vM1wF1qy
ToArray
aeR9egImKZJwFV06xWk
CreateSubKey
RsOElpISPsuvWmh6eXo
pAtSMSIDYSJD4Zv4PLn
xVIsVsIB48pC4mxVWxE
SetValue
jRG5PUIjo1Gj368iUpG
SpecialFolder
Environment
GetFolderPath
olEgAbIXC9a6QbaTEOX
fPNLlWI4k0ahEnwNtVR
PRgunlIJblxZJfkWkju
HkignoI1Vdytx0pnHKY
wAdCHkIooQu3eglKKec
vyvjJsIrRxlT4FZueuK
sX628IICC4XW3bjG8va
Substring
MLiH2bIQ5uFLlndkULf
Remove
vl1KecIYFNTbjLHnyO0
Ir9efoI5xFDg48UoORk
sQi18dIneXJeOIUFmFJ
gTIC9IILZocfcI8Hlc6
GQ1KnCIboFJlTjaHXlj
GPWBgJIHXfhEhPRxrqo
NaMpXTI9FZA1uvpX3IK
qOKSVMIOXIUlMdVw6Gt
noycbkIE1WRJpsHQQOX
QVLxC9Iwp8Qo0JxC1xI
vVuAI8IiBL5CQRbyahl
EWXyE4IhUEWmcqAFTOZ
p7wnKKIVeY5Z10M0W9j
T0wL4EItNNqGPtwtP6R
ymJNhKIqCYZ5J4A8H6x
WV4FitIWHXAw7lDjDad
H73h9lIMTc3f9Ycc6Qt
WiRuCgIZTJ5XjymwpS0
Bew8L8IUqdSTBvf1oXe
HvIKo0IaEdjm497kCDG
cykngOITlowmOFAIq5j
OOCbxQIfDlssEksDibE
v9cVxZIzqjvNbKlDSql
u3C9Y83NGoJieOmdEOx
Y83eeN3Iq2owfUFQ3ZT
fte7tr33ZWdaSEjit4o
MK1kCh3ylBqaitTlFUJ
UFP04b381f51yThlWJK
gY22SX3cIM8tIlZ2HTG
TTPaLx3AMIpVLXZSjPy
fhVP5n3P4Kt608bXWCG
gf6Tic3pXWx3Ujdklm7
SjRBEm3FUbIRJQJiiQr
ujWeWT3GkLt7tQGfv0b
bjSV1H3lahnFiVOOsIW
DownloadString
HaCxY43Rh1FsQUSIv9B
cdOeVI3d6BXbKM2oF2i
UbKaBl3K3WbgdDnK5tx
XRNS2g3u7WnuAk9JgsO
yOMiDR30hu6TF10bSEH
TtocFJ3stuGSj19kD8q
UPrYpQ36PvjtxeAc4Zj
ServicePointManager
set_ServerCertificateValidationCallback
JUXYkw3791AXVx0QbhE
SecurityProtocolType
set_SecurityProtocol
i3NYHt3g9igrHtjZtaE
get_Headers
WebHeaderCollection
dJNjlH3x7N4TeObReR9
NameValueCollection
System.Collections.Specialized
ATCKjD3eZ4low51tfaI
DownloadData
HNvID132wsYXaP6acuJ
Console
WriteLine
TBNvLF3kfhkuB3ossvv
set_CreateNoWindow
Khnyy53vIfS5HADKaO6
Process
DcVey53mocerZlNASs2
get_Chars
O0WAGw3Sg578awd5gd1
ToUpper
jbYaB63DjZ7u1j2dq9h
SCG0IH3BeVhZDwOPynl
NewGuid
fgeG613ju7s2AHJ9RSy
TyFspS3XqkEVFSYFxm8
Directory
CreateDirectory
DirectoryInfo
nqb11J34pKjKwIOqsPx
OyydJL3JUeckJulO1ZV
<>9__8_0
<getResponse>b__8_0
X509Certificate
System.Security.Cryptography.X509Certificates
X509Chain
SslPolicyErrors
VC8EqTAmbDjnIDiW2bp
MBqZ8vAk5RjoD02T3Fi
gYZdJUAvLGZNr62LpaG
k2M3lTASTsjaQmgE1ZU
gwde0ul2p
QDPTyusCl
h5UUZABFS
ICryptoTransform
System.Security.Cryptography
RijndaelManaged
MemoryStream
CryptoStream
CryptoStreamMode
hbKkhQUfq
CNJwtS3rto8hsxhHjCq
PaddingMode
SymmetricAlgorithm
set_Padding
FYHEVD3CB5G9o1QmWLc
CipherMode
set_Mode
uxiAWj3QE8X6U6v0VES
set_KeySize
xArmqK3YKJQboGjuaT0
set_BlockSize
T2bigy35qqGkrhgkC6P
Convert
FromBase64String
Ef1FDN3nTj236j5UTHG
CreateEncryptor
E86gYD3LE5EOyGJETOR
Encoding
System.Text
get_ASCII
M0KVLq3bR7wuqu7OpGo
GetBytes
cFhCgW3HIc4nmcDCP5Q
oI9YPy397aUEfBWckrJ
FlushFinalBlock
XBw6Ui3OCqUXNGBXbWF
YPdp1x3EXGqF2NR50gj
ToBase64String
wvvRJw31TZsS8ErZna1
m6erfW3o0Yo4T5J9vxp
LUi8eM3wY6TrNT1g7XD
CKE2wy3iJ8TdRDlJZSi
hJAtVF3hes5v26INT7b
CreateDecryptor
SjrceE3VmmU4j3nER5t
RtPAXY3tuK8ZlgdwVVr
rwJpoi3qvJmjB2VMSrD
AXY3xQ3WennQJX8RHWo
BBGOTdo4q
AlyJ6NtCd
mtUpkBfVW
iDj4RlIso
aN1dJ2fCp
f83hPLNO8
ItFp8I3U7nnQyHa82p6
OUueEM3adpay82qXT9W
DELskN3TOed1OTtVxtp
oZ7hpB3fZdBaPKFiIKI
TH5RZm3zBfpXkjwDncf
CCHZJC3MmgT4Vc3rAxL
Ht1iQl3ZQjWlMm5xTvH
DBrjAsyNYea9W8nkC7W
OQrRoJyIK8v4uNZJePI
GiC4dEy3j99NCQSZIJ1
SSGGtoyyCbBHTBGTnOQ
A24CoWy8YlWNPwOAIGh
get_ExitCode
J8CXgUycafoDCTXraIW
gBP7dXyAXPM3juvZSja
MZaRe7iDm
DKvYl861M
X5JCvpX5V
V24nuMLGU
TMYx8wyF1QYPAJfhMRC
VRGXWByGBLjcBZnSFZ0
CEmlVKylwwWHK58sbmk
oYu0hEyRw0W9SrEUAgl
iw0sfTydYldeZWEUXkJ
RrFpx9yKx1KpJU4TFAK
Kk6QA2yuuvBiBjuopgL
UobkoQy0pRNQQSU3ekj
CjCKsVysMAgb7L1Ls5s
rFSvY5y6E7EgGxQCSQE
f9qWfdy7jGnh96fHYqK
rE6S6WyglxXJ47P5ZsP
WUaFTGyPDbKxpZ2VYhO
C06wn7ypvg2SxalLoOx
EocJZHyxMfHadIfTmWk
L7Qtf7yeZVI8HrO1U8V
LGmuXly2Gg7EF1V3MZr
nQ79opyk7PIAFIrEJWN
zSIB5Kyv2Sa2q6xoXAY
gbrhGiym8mdolX9wjM2
pdRWllyStLWG4pWAb3t
C89f1VAUn
OMgHfmCeW
OR7Z628pN
zrqFm8nbg
JmuWxctbH
LocalMachine
lGKE4yyjCgothPTqTof
UcEIgByDxuLOxDwrvai
LXuITDyBSPLpPoE1dtA
dDRMIFyX9u0VoOiIddM
fsc76Hy4xUgJJPPIkVE
TXLfnwyJ7Yy0nEY3jaV
BsJsCFy1wGpNVCBruKY
fFkFwoyoIpiLdWVgOSi
K2U1RJyr9lUw9J0bcKy
lBwXs9yCulbQmRYUZhS
rtKOvIyQorodoZ17WlP
YsBHgCyYnIE93ZcrZF1
oi4i6tfYy
XQM0Ra3pn
Win32Exception
Y8GPb0jcv
BRoAGO6WJ
wYaKNFhD9
lwf5H5mCG
Random
KF7aHHf3Q
pZL31nyL8uLNa4Jsm1X
Rd527HybPFLSWGZ873N
SUlx3IyHL8nODfdlbqC
svMXssy5M644tIV4ker
SW2wCkynahMcbYTO4Zf
DFmilyy9eqTVsmMmloq
BSxJepyOrfj9KkjS0mt
set_UseShellExecute
YUHIUryEg0gQANiBlBT
set_Verb
ATYledyw8mLXZsR2tMW
Tjb6fgyiOu90fDctdAi
ndcuZOyhhCIs4vgTMV7
OFgad7yVccZGQu8ktCZ
Thread
System.Threading
bnkQUeytdfg2ugjhUdV
FileMode
FileStream
c5YOyOyqR9DD0bveZ2f
bYmYD5yWo5ZIOusXPUZ
yqUAPVyM23WvchPXF2n
vOuXb6yZrsMtglHZQsp
LYNSj3yUQj9wQg3IQR9
J7jKJVya26yO6JgfBWi
b6M0fZyT3guqtJfM1GG
RuntimeFieldHandle
RuntimeHelpers
InitializeArray
tMG08ayfqRugUZfasxd
OHX5UZyzVngU4g84M6Z
Insert
QHNCEI8Ni30JvJoJpEY
GetTempPath
yJV7PI8IpPfHY0dEmkv
oIwPo483t294gaFKADy
Exists
h1qOd68yPV6xME0aEsv
bvJFDK887rcNM1i6cs7
w7iZTd8cdIEuwdlQioU
QXQy538AB7t2lW6ODGR
get_Size
fTniU18PUBRETJi8Nou
GetEnvironmentVariable
SWp7ge8pOKopYy30i7i
GetDirectories
PkRl3h8FA9cvC7xxPxm
thVAgd8G9i5OTST15Ds
sIsKyO8lBT1jYTRpUuQ
<>9__2_0
<DownloadFile>b__2_0
WRj0NSAjPY0xWnYGTQa
a8X3cUADTsFuDNop7IR
sMb87SABCgtpsXJnC1u
BlXNitAXjOu5SFKdEXK
V75uQPpOE
vMFvQL8RdALmaKVvRlo
zHqPam8dxiT5vc3pn5c
HAH0838KFJrpS04qoZB
uoaBI4x5eR
pmq6mrYhr
bZsvf5bUb
GetProcAddress
kernel32.dll
lMyztKFDC
GetModuleHandle
xNRBG1Br2g
GetCurrentProcess
y2VBBvtBdw
XTDBVYfF5x
IsWow64Process
oTsBrLkAW8
fTpB3cChBN
pweBjIcreR
StringBuilder
uXTBx24ELs
DateTime
get_Ticks
ulJh648sT5WKraN8FXi
vqG6iT86rgCtjnokPa5
ufuLZX87wodaYHDtqDl
Eogwls8gRwup0N4asp0
LOnnEr8uQF0UAeEHhRf
PoJwrA80Enq3TOmWFan
feU21R8x5CTVp1nWAZi
op_Equality
TGAZKi8e6YbxVAGdVUh
op_Inequality
v0plla823cAt5OJZc6u
tFjLd98krDpAEbYxRS8
Ch2rlF8v2nMjoXurbsw
zlSxXh8mL8xpPeaSK1d
WV7E6i8Sw9G934mNhAU
D3Q9Mk8DZehHegVCPRf
lPkaMJ8BHeC9mMwZZjY
JQmTfh8jJG3xOK6ewW9
h1pOwf8X4BqXf9WqHlV
Double
NextDouble
wFh5cJ84qPl7JdMmd4I
cluJgp8JQBiv0ARTSJS
ToInt32
v8Tbuk81OAYLmlbIT7B
ToChar
FiHfmW8oL5V4PUeakZN
Append
QTJIhN8rKCPFYogRLpe
F9SUBI8CoxEmhnmO5sN
SearchOption
IQYKqM8QJcuxUiXoPDo
Ae0kZ78YtPNiU5mX45H
FileSystemInfo
get_FullName
hJ8q3R85pVp0MCrcOvn
frSyAi8nNddxCmhSDVZ
VIJhW38LmxGcxIipk28
kqgJbu8bQWNFe25ECLD
vLi8ZF8HTYiVs4qv4nK
get_Now
soZB04n0EO
bleBPOTLp6
VoYBibo3Zf
InvokeMember
BindingFlags
Binder
Y9upUBA1qQGjjneqOET
UjdxuTAoj17M8JoGeul
kF1T69ArPyVxco98jlK
p8aDjJACSRewABe9POG
RecHx1AQ7Fe0orIIJX2
KTePG3A4Jb6wK5Q35di
lGjqrRAJ30ZLttOTGFC
Aes6iPAYZkcjhvciMp5
T8vh6TA5mOhgB3Zov6B
GetTypeFromProgID
MEeUyXAnCRIhJ61Fhi0
Activator
CreateInstance
QT7rdWy5yB
AU1rCCV0GF
rrfrnyXYtr
gOkrR7Ri79
nA7rYsOXao
VsirfvsVQA
QfNrHtchA8
rGCrZeRTN3
iShrFCnyRL
NQkrWRyyhQ
x4LriHadmZ
p4dr0uBdxq
FlbrPYhWuf
h0trAPoyro
rjprKo5AyZ
qdVr5NBeJX
r9ZraEyyWh
S6Fru0gLQB
i1JQty8ETakKhEExVAC
juBI5A8wHUTtJ2kg9uM
L275X489TiRH4FaF4Uq
lFuiko8OXJaLqqCR3w9
VPkBKECAik
ArZB51xgu3
rjeBa1frad
DFrBu1uCo6
k7QB6KadJt
wiVBvQQtjT
LWQBzrw7Wq
qePVGfDsQb
Xc0VBrH2Q8
iUxBAIODRk
OEKg3GAHOMd3LCET1i1
Vvm2s7A9LAtnAPrNxUq
YraeFrALbAtVd3jfO26
r47AhZAbsfybmGX1Asm
nwWLcYAOZtGgGXJGt6y
o0lV6NAEAAEPAteuJbe
wtnUx6AwX8stIwXg8l6
CYxV30EBF3
r1uVjZJi1M
w7kVxv3JeQ
RSmVIVJq6s
XYoVlMWsXI
EmEVmInUMQ
LbaVs9eEPB
knnVqSC5Pi
mAEVVPfqfO
HttpWebRequest
StreamReader
bNHVrMnm6Z
EofiQlAVco1NHGgtN5N
QUdKVoAtY20MJpiJPH5
QgiB8XAiIE5urrBTNyj
Mum7DPAhspQqtH6T0vf
HGIChSAqr2SPDfkmYmu
PkUrkXAWx5oAJvCpXn9
drHWLhAMwVqt9BZoW3b
WebRequest
Create
Th20tlAZgjHRwvQdvEp
DecompressionMethods
set_AutomaticDecompression
uoU8rQAUaXSstuyLZ1r
set_Method
YSJRMlAaGtUPvHMBKe7
set_ContentType
aT0F9aATbhtMI69Gloy
e1MFARAfT2caSXYSpty
get_UTF8
ulepkPAzP2Oo1Gs76ie
qf7BMKPNrkRBcNrH73I
set_ContentLength
FmS11DPIOcY2jNof4gJ
GetRequestStream
IthMERP36JMYW02iyyf
vGsGdJPyqMxYaYweQGS
GetResponse
WebResponse
VvKqrjP8R5cBFeYO9mn
GetResponseStream
Jbgy3DPcYJwWbuu8mxc
TextReader
ReadToEnd
ky5yGHPA8rYbaRbVkU3
x98cevPPRQ4MHuSEh9e
x6LYLbPpaenhXTps6Om
kFn39UPFPKaIFXw36Y6
rp5v2KPGF4Gt88xavuf
CE1r9DPlatrEjSPyHfQ
w5uFUgPRDVTgEiXmgQ0
BN3nxsPdAaXcUGfnZp1
AvW2itPKGQvv0LjW3gg
gPOo1jPuhFEnsDJrqkA
TqPL6hP08eTnKg22q9L
UblXIFPsxuVD4kuw1yZ
fgtBlegZ9F
TimeSpan
get_TotalSeconds
Subtract
MjIBm6kqsC
a1dOkq8V51kTbJLAIGq
get_UtcNow
VxNf2H8tHeJUeV1T4a5
JkHxFk8qr3150CJ2YrG
pcgEGX8WbsYZbsFoRKK
gerqTZ8i1lPCBYcLaqK
kjM9lU8hlp5MMZUyjt1
mU6Bex8MbWtLIxZSIm0
YnaHgk8ZJOJ5q4Qxjnb
JblFZM8UqXqrJBS7s3u
K78BqH4Ph1
p8BBQZI3oX
MvBBwjFRdP
RPSBsVEgsX
IqecJg8fLDNvRy1Mvku
GIqlIa8zhJdkonkklcX
QxLDm88a96O9HKp1ewf
XU2MaF8TLam2Bxm1usO
iaRD4AcNi6C8frMtXBq
jfLjp4cI47s4hl7jQqn
JBy4nMc3mHQFKTF0Oi9
u3Yk1tcyDZ2f7GUVNiJ
Rjg9rJc8Evl0mpWsk5l
set_AutoSize
xfGbtKccEveS0bsKgFZ
eKT5bRcA1k7tYg4ab5l
gnYjs1cPSdnf7LPu0WG
HRNralcprOjpigSc4Ob
A0w6EXcFaRaX4RZ4UHZ
mB6jsrcGWQ69cBXlT4Z
WUyNTtclfsY5NBjvvQ5
g0qjMKcROjmrKTCZlbn
TIRuZDcdK4bTxRJdxGq
VeuT8ScKVrT4pSTglEB
SdAtKPcunQyJZ8JuVHC
UijsFwc0exa5c3GpKuA
kucJfecsVS74Rq5G2PD
IWwWEZc6BbY0NUYXsal
NU2c2xc7hGRDsn2WlDd
YI2Q7scgBpbQjoiIjjN
HZLB21pWsv
MtgBc2JaUD
kqVBXCK0gW
get_Assembly
PPqB9fFfjp
CultureInfo
System.Globalization
nTfBNTsLt4
ATTBL6m5yY
V1Zxu4c2CUTMyD5rCmc
xyVUISckbJ7Ovjj4l6m
nSIV0TcxASl9MPyXroS
T7DqqKceFAb3DuXhnkZ
cUrob4cvQRBDDqVtYGE
syMi9Mcm0RuGNr1NjOS
O2fLUQcSZE9bTa5RLMO
C9OK5TcDpmxKJ1leBoE
QYSosRcBRgmXRZIGgi9
lJ3B15mjMF
haxBoAZYJ3
defaultInstance
get_Default
yc1Hqqc4uDEe6IL0OZT
nOZigRcJeVaNv6mOZoN
qcZyLncjANhXY5617q9
vXZmHwcXLOx7KXc3WkC
eTao6Wc1JD0QhBcv0Mr
SettingsBase
Synchronized
Default
VmZBESMJfm
JsonConvert
NewtonsoftJson.Json
Newtonsoft.Json
DeserializeObject
MMalp9cCpUIVVi0qyFp
QlIkpkcQCdpJfN4Gs0g
fecsAscYWMQYcuIQ8SP
dvZ7tlc5UE2OrGiq0a2
MclU47cnBQGp9s8m3Gk
Cw9M2acLFnsfCrbv67B
mndQPJcbRvVibbTQVjR
ied4kNcHpF4vrBO5UgW
RDjiLJc9QiqyPRyfUAK
GxELJWcO0TH8mpUtaMe
lVU5o2cEh7WRcqtYu42
m4WedYcwuRn6WdVklfG
cGMZFWciHIVLrFDJwtB
mtGIIGchfpNuGbxTWZh
tdjnhycVhR7s4oXHqxW
dsUJbTctWvq8ZstwyBR
NsvQtDcqe6QKaUp3xbO
Rh23pOcWMHJ9dL0LZJF
sau3NscM4Spjs4wIMkv
uMi1hucZyQBBPLEOSgo
c6RZTwcot2I6DQJsDfo
hjoMTpcrC1ReImndprE
KrJOHYcUopjmcGF4FE7
GrJt6bcall98Y4CGR84
<Ritual_ywcNqK26M2EpsSNC>b__0_0
OgoMJmPgIRf5xKYX9TD
GIfkLXP6AlpUsTI5vAI
UsbX3IP7uneAjWPQ7L6
bxPCn4PxgFaU2cil8iD
blDBy80f9N
EqyBbsQPl5
glVBDkqBOQ
get_Link
set_Link
get_ExecParams
set_ExecParams
S2wde7cT5fSsLVSYpWt
QrO4xOcfPBa2RWSTarK
ClFOfeczlKMyPKGyshG
ERaJOUAN4kaDR1DA7Rw
ExecParams
avvBgg8KIs
WcSB86lMb0
g5vBt4J82u
Cy5BMLCXyL
d49B7wIh1L
pqMBUHqTRx
bxpBkE6vR0
cFaBeEyp5e
zVHBTbGP0a
AFsBhPCyAq
guaBOMCGGQ
h0qBJDb8Vj
vrwBpg5ino
JhBB4OTSxy
rdkBdH2bSS
edJBCsbdm6
bQ9BnS07en
oP7BRqnTnu
HLpBYOGsTK
YWCBf4h7yE
hr2BHwoTh4
TQrBZxA7BK
XWTBFTJDRS
IHnBWHIAd7
get_country
set_country
get_ip
set_ip
get_partnerName
set_partnerName
get_productName
set_productName
get_excutionWidget
set_excutionWidget
get_buyingChannel
set_buyingChannel
get_discrepancy
set_discrepancy
get_PostBackUrl
set_PostBackUrl
get_userId
set_userId
get_prices
set_prices
get_salesChannel
set_salesChannel
get_active
set_active
get_ipLoggerCode
set_ipLoggerCode
get_modeUpdater
set_modeUpdater
get_modePublisher
set_modePublisher
get_paramsProduct
set_paramsProduct
get_ListProductInstall
set_ListProductInstall
get_UrlTrack
set_UrlTrack
get_trackPostVar
set_trackPostVar
get_dailycheck
set_dailycheck
get_TrackDecrPrmKey
set_TrackDecrPrmKey
get_TrackDecrPrmIv
set_TrackDecrPrmIv
get_tag
set_tag
GWKXs9AIqsqwT0ZXeMe
wqYW4SA3lZBPN9FLq76
ay85OJAy6YGbQxaqVxp
g7AkLeA86OAIakoV6m7
country
partnerName
productName
excutionWidget
buyingChannel
discrepancy
PostBackUrl
userId
prices
salesChannel
active
ipLoggerCode
modeUpdater
modePublisher
paramsProduct
ListProductInstall
UrlTrack
trackPostVar
dailycheck
TrackDecrPrmKey
TrackDecrPrmIv
5B709FBE04D94E0256927AA846FBA4740190F3DE
ukgVQ7aiZc
B1P8hFWWKutHa
typemdt
FieldInfo
MethodInfo
GetFields
pReThKPjaZL5nQN9GbG
Module
ResolveType
bW6J4iPX5pmOvAaluve
MemberInfo
get_MetadataToken
Wuyt1UP4d0snT5nrq1S
ResolveMethod
MethodBase
L1T9yJPJ9y8vhLJ9d9C
Delegate
CreateDelegate
uRYma4P18cKhNayugUg
IbcxFGPDjgAfGVATf4k
PqE9yFPBrBxntCcGHtg
obBGjSPo9RJ5nHrfKJC
PehlOcPrxmCgYy9TkqP
E9ioqkPCQPaF0W2ajwO
u3vSLwPQmmb5blC8oT2
get_ManifestModule
object
method
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
e5rVn2fW8M
oUKVRTXfuY
zXtVHsx30D
Jh8VZ9juEG
iNRViJtZX8
jUQVPAEr44
pWxVA9T97x
hLKVvdtlnR
oZ0r3YAegB
z2irje8CsM
buYrIJC1PC
aaIrV8JQGm
uh7V66RoWX
daxVfOVaCo
WXXVWusbmk
PixVYuTq5M
NsprGZebZJ
N3XrBZKPVL
cCjVzuQydm
zO4Va03oaR
rJDV0PfUqP
Ea2VuBK3I4
tIlrxtRLpc
TAhVFlnQbM
QekVKaMkDZ
myGrrCDD4R
iwqV5te31h
UInt32
SortedList
System.Collections
Hashtable
RSACryptoServiceProvider
set_UseMachineKeyStore
vUw8hFW4Umq3R
tOjVwdavG1
UInt64
BitConverter
GrrVXIlUY0
UInt16
hhtV1UZk7T
P0iV9n4aZf
HLBVN58tkE
sfbVohgm8y
O0XVLn94L8
gIYVSUE8yb
ObjectHandle
System.Runtime.Remoting
Unwrap
kdNV2Wg4bt
siSVc2Qhvf
MD5CryptoServiceProvider
HashAlgorithm
ComputeHash
CsgVy88cdn
VJ3VbfaQk4
BinaryReader
UphVDfwLqa
get_Unicode
LOQVgacXPy
g8JV8ADXwa
jLgVtxX90V
Marshal
GetMethod
jbsVMbWkqS
get_Location
GetName
get_CodeBase
GetType
GetProperty
PropertyInfo
FD9V757ZPI
FileAccess
FileShare
RV4VUjaBaE
set_Key
set_IV
ccAVk8gsQT
S5oVefJX1l
r19VTwxJa9
U6vVhYVHuW
IbJVOAKRya
y4NVJCMrwg
Jw8VphC2Wv
sZiV47SuSj
QuHVdP7KD5
VJAVCxcpRD
tNZ6VKJ0UbpTVeEsgs
lGJOXRmK2ryHt64yBO
get_BaseStream
zTWZoCR4yNwmHasQMs
set_Position
tpcFBjWPhsfjvmITE7
lqoYM4sLTPQCetmoXB
ReadBytes
oij8Af5cCBin6exlUQ
BMMli8XloI4tUR5n8x
Reverse
o7E15ZPXfQ2qYM2SA4
TcwwJ0EHdvAHNIJESb
GetPublicKeyToken
xPiWvPhGMvH1BAATay
c0lZLHHtroXEQJvUes
oMCh9tgWUmZXEcZ4iy
euHNTFxokuGqhtK69b
iYndkQ6nOWUPSs2wGp
L4M8FFdSL13ARrg6Il
XJsuosGOefYWljPFmq
lKJ0LIM8JIcvih1427
AC8Jh5w3dxdwFSV6e6
KyrqHgt9lbJiuaaBvB
JC3CIyvMfYfenepiGw
CvWAtybaAakAbiol7r
HGtZEDPnuFyXvYyFPIJ
PyhPdhPLF6fPiybQUEy
k9vBQtPblekxUZlX7LQ
FjMKGvPHStSEKdMZtSq
qt4maxJAZYJ37TT6m5
ce4DmfsmSrOT856tDgfrkMb
fbYrlNFOOe
IhOqtfPErKmDO9Lm3Bw
SlOXnLPwQJ0dVrWp6EQ
sX4aNJPiM0stacFatX6
Ah9VMuPh5hQFQ6LDOXb
IIuDlAPVIEePmaYwQkk
sNvQkfPt0KQ46hi1QX1
LXxwOIPqZoDh7Do79Ll
TodnUsPW8Co2575YYLD
GjX4yIPMEewKOyML2iX
TOJY3pPZuVgQ63oUgIw
YVknf0PUQgl2sTJFk5t
B5Mfa9PaIeWLfNNMRK1
fN9ElFPTby9WsXYHq4C
BSGk0EPfS00pHxkQu5q
A7htSqPz4TkA5hdeaaH
OkE9JtpNLYipH1Wl0s7
i8NfclpIoXA7qBPmnoJ
XIKssHp3vZrmWls8eYh
C7jYwEpygGTP4roKYua
eEMPAUp8VEwWUYrIQiI
classthis
nativeEntry
nativeSizeOfCode
EuQrmapeHe
X01rseIxHS
value__
psmrqCK2IB
tjE8hFWzu0IFC
K7ZbIZpl9vtHsYbwBf5
rJsr9n0pFT
JnmrNCAIfn
zWRroJwVgk
HssrL2Kkt4
tj7rw2Ryrp
ao1rXkYMka
GetManifestResourceNames
AddRange
PE7r1PvBp3
add_ResourceResolve
kLjw4iIsCLsZtxc4lksN0j
dXT2KdKI8B1wNeO36G
eQOAsorxYK3BFE1fnb
hxkZ8pSNPM5tc7nZ2g
ymKKwGYumJeQdPRiGC
eh3kAcsXO1SRedhQwO
diKnsTCWfBU1S84g91
fHdqfAyl4hdVPhLtBP
GJhVx429O2j9okc3Vp
mbryctECYktNDLH3yb
hd8loAwEGQhFrVdkdU
HW700Cct82PXVMtarq
AwurSFR2GU
IsLittleEndian
uPkr2CWREA
pkKrcb3ktO
IwXrEhb7rX
W69rymjch1
uVTrblt6EE
m2yrDnQfrT
OL0rguIKWo
I3kr8Wktdr
cUYrtR64IK
zPorMowlQa
XJHr7xRwur
IARrU2K8U7
ruGrkA9MN1
RW4reatQqx
Ei9rTgFE5D
MimrhyTr6v
RMZrOKPVNo
IdvrJkoMGt
uHXrpRnAOw
BHVr4E9SVS
x2HrIapxInvuDGxR6jx
PPIMH4peFsUEX8YuRbZ
sxPsvop2AZGytkntnTP
QwoZ9bpkwtDZrlYiQw7
FDSSbTpvL2BS9l6YUUT
AZX1sbpmBs6q78RfA5U
QllNTDpSik3C08Y8kNF
nKSXUApD7g64HPq8mwn
PmTHs0pBu4LAGjZEARg
ywJYEspj6Ecl5pmgXJu
T887DcpXq25b3kcBc3B
rcisLmp4DtnwF46hkbd
HLhhThpJ8vXcSqVR6hm
JuALOPp1XFN6Go2QJAc
ToUInt32
M6Fy5UpoxLFonpGp63f
HDMhkZprSySxeTb1I1Z
o4R7lBpCqL8ad2EX75h
Gm9sOepQ3vLBXS5RqBg
Ivy1pNpYZSkC0ANls1e
cg8lJRp5xhQi51RlHWy
Bhr6nopn3xadrBFC73k
AM22lXpL1PML18yk3wZ
HbIcdIpbLBr10o8E646
$$method0x6000007-1
$$method0x6000020-1
$$method0x6000020-2
$$method0x600002a-1
$$method0x600002a-2
$$method0x6000039-1
$$method0x600005f-1
$$method0x600028c-1
$$method0x600028d-1
bpYuwIl8Jua42KnBYC.5CRyTBdEVyQwAQwRvf
K0sscIHNGICWZd9dxE.E6e6ADUPqVc3qMKZLp
STAThreadAttribute
ReliabilityContractAttribute
System.Runtime.ConstrainedExecution
Consistency
SecurityCriticalAttribute
System.Security
SecuritySafeCriticalAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
CompilerGeneratedAttribute
EditorBrowsableAttribute
EditorBrowsableState
JsonPropertyAttribute
TypeLibTypeAttribute
DispIdAttribute
TypeLibFuncAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
FlagsAttribute
WrapNonExceptionThrows
pwr_off_Y9uYQGOvBTdCNmQ6
Copyright
2022
$dcedbbd8-455c-432f-89f6-3481fb737f66
0.0.0.1
3System.Resources.Tools.StronglyTypedResourceBuilder
15.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
15.9.0.0
ExecParams
country
partnerName
productName
excutionWidget
buyingChannel
discrepancy
PostBackUrl
userId
prices
salesChannel
active
ipLoggerCode
modeUpdater
modePublisher
paramsProduct
ListProductInstall
UrlTrack
trackPostVar
dailycheck
TrackDecrPrmKey
TrackDecrPrmIv
$F935DC23-1CF0-11D0-ADB9-00C04FD58A0B
xH4Ph1TL8BZI3oXYvB.eI6kqseCiPSVEgsXR7+eFRdPQhqVCK0gWXJ35+ijMFFPOqfFfjp9TfTs`1[[System.Object, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
QrgC.6
!eRxU}
6gw*w,
T+<u).!
Q .?w)
[|t}C]
{/zW=4
*>t^#9
!V> [S
$;L:r
<*.&w
H&l9Rx
5E~r2Yb17
S"m(|/
zq;8G
xrKm4B
4,1<m)+
3RZ@W5z]
h?"8qH
1t{Xybu
Caq%)v
n|m78w
O;;mmd
} .en^
~n_N/~
~\:P-p>F4<~c)EE%
%Koi5r
|F]dQ"
d&g,L@
YX8@$V4
@uDz6\
bpNc*5
]O.Mu}H
Jw`of,3
|Iu`mz
Za.QyZ
W0h!8Qi
aJS8z.P
S(MY<F
+)nP<i
4r=:)xC4
ay]%-f
M<~sWIA
}^~Xw'
bgBYC^
T->5_G11
8_X?Ct\
XkuZc#
sX48fsia
'CFBM#
wXEZc5n
uIUb95
Q~4V<3
s`R/w$
6[ CT%
27iDV~
nv[7`6oO
yxbu3n
qKX.5/
LO<:c
Fub;nHvq
Qx_M3q5/L
g6) O!
aXsZp}
`pvZ'q
JM^_z-
RrNqJ_b
BVUs"\^
YpT|iRfO
!o7p*ie
K]cCF$
sv1n,C
%k72pqH
cG~U1S^=
Cpk>E81(zF
Xc[e Bk^E-/xJ
\4PZ5y
J5JCNt)
(=mFGO.
\4~5.,7)dU
H*?ase
448pXP
9km_VSY
IVO2*E
ap(1Tq
;P/<j/3"
Ag52AZ
(!7=vi
]G42Cw
pn;og-
jilw\#
bi# P6
s(MLC$
-N|AUG
?v;KcS
Ko?RJc
8ms$<@7
&5V=Q@
:eh}5;n
$\MV<d
ownv}4
!a.dYI
zd]~+(b
B=rs;xI@
iW,soH-
JdK=W_
;U7v `
~a[ H(;s
v5b ^4
f){I~$
z,/L4z
y>Fcqjj
f dYGI
].:mR3
,m]|iQ
Na%bDP
r1FM5p
+8;-1g^
.[RmIKjv
:TuAcn
j7Y$EaUH
(Diw@w
d%`#z@
}Q}p"6
lMDCj_
HqflD{
?~5&PB
Z\7}0Z
lfZW|r
;s{C5K{t
%-?U4x
qW^A(7
9i}0rt
6+V3:A5l
{i+U77
oA)m31
?jhEgS
g#&Gd!9
?(` {k
K4|%Q.
'7VB+dU?
fK{{1LPbv,
w6"F/66
)nah!sU
g[;bhI[
2FSd@-
V58K-u
[bz9 ?X
HW{++7
P\R0XQ
J[U! k9
Gs~UL]
? TLE#S.
&ethhU
q3{{'-ce
TFMjAw.
YZ~9)e}z
5Y'kAg
8apOJz
EZg{nV
^!yhGc$MS
:qLb*a
&ws=5w}Y$f
7yP,=K
$`E<~Ea
E7c?enID
B~)*ZG&
~J3B_m
Wy'LVV
2>?'?r'I
SmS'<`
.~KDUd
g):JM&
w\kb2lF
jiU}U2
8G.@YA
0.OvO>X
:%tbor
l(`!ea
j N[n<ea
|D+;i8
BDK'RwmS
xPSe?F1
~G/Nf%Df}C
b{%n}W
jW[4WK8
(X(gtH
[4pLX
U!`,010
/T\X)D|
zQl.?=
OHV<:y
4!ZEOV
..V)y%
-OlZJ0
84XGE*_m
0(bt/NT
cM?8^
aP@PiJ
gp$qtU
V-6%%^
ac?XFRyC
f Eeg,
NFlC3i
C-Z&/|,
(we<C8
hNF_/:
{T+~"O
vQOKEg
'VHq\v
0D/\u[}1@
(?w~6,[
*3R:m]
bf m0|>x36
kR}AGh
'QZWu%
@d(:>o
WRscjh
.dmR;Yn
&v6a L
Up!P$s
Rm`@/u1
usfhd_e
kA?43D
"AEh,^g@
2RE 8sWm
(ck3xL
Mw;WpMp
{Szf1,
eA?WCT
b@Z'F:
PT'RGC
$bb=8Z0qf
u\VU_G
L*}b?P
`%Ayv:
4}w!c'-
Y{o(MFM
no.5VI
gUQBk
-EZ!'X
6zh45
*7Ms.T7
&hoh9K
*!xh/Z=
^Oo~a6s
~nj[~(
F4&ur_
gN/UZ,
x.x]8mF
[PUU,8
(EPCVl
<+w|.}
LhBch{b-
tp`w!z
s>^sr!
Va9q&b
q$; UYu
j~}2R`
Z8sP]$
xJ$_.3
?L:;zv1a
7%:D:&9
!T~UA+Q
nPl''cBn/
6ym7*S
g)@)Jj
<{Sc/$z
Rbb2y=h
<@P8sy|
TudIGG
X?4EQ@
5ihd)w
J?L#\f
~BoRPZ
O0Nr2i
_a(dWB
2>+"XD<
k.]9B:
<96i06
(a-"D=
&@WiHZ$
q'aDga
'br jB
+wsM>q
wNF@P3m{
k!6Do'
I7;tgN
1O9VD"
(,(\Pv
w#3z~#
rCKacd
--zeiO~
X['2KN'q
So0dp=
IYhy^iL8e
CH{a+mD9
UN5$c&
3|1>/x
w.IH71
op)m;V
sV5/^(
K0_ttz
)!I%En\
-M\]31
+gH98V\
#KuCA8
hp:c@s
f<w.o
MN/M^?
U0/ul5F
W|@Oy!
}*kzjHzo
O;)SE=
(GO\{L
[3y8S"
4a.>WJ
f>zGNZ
gpCFaUH
[rHY9O
4fi?~)D
|.hg#>b
TZV$^Y
QUeY#b
FJ'<ccPu
V&),,V
uC[!YD
h&taKC
{^zlLJ
HXWaELo
=uk}ex
!*"@Ew
QHP~BrPq
=ER&IkZu
dUkVT+
T~_J5uC
/Z! $"n\
d4D ]U
]H&cEw|J
UZs0]?
G[;\"2S
WeIuvk<
R- Dn*X
0K!)?8V$2*#
rVGbc
/G@q{"
# U2Oez
qq]?7q5!vO
'DL3bS
q{I/{n
aAs|)J
0 |2]:
RXjPaP
NG;x0G
|n~q1e
^LdeK
OR9"^h
q`@N\H}
zF%s?1Q
Gg41}1A
,M7 )!
K!g-Jo
\pyOc(^iZ
.1:&OM
EfkU(3
td"Sl`
#i>s>s
~pNP3G
.P6ahu
,#jlL\
wuXjeR
#Ud3JZ
97I'a\
t/=2i}'
&:t3q&)
7,!qE'O
]Ru)1
_)w^v;
T%muL4
`5W!l/
A29lz6
=T$IEOs
5%S`r4
Cu49.$
l3}C|3
{TqbJP
O&|<?@&
aqE]_sI
B$@/9
89W^C-a
t XGXY
YSQ|#P
+jl#yTB
g'?jsl
=N!aGe
i|HD0J
>H|#4G
"1nyP9
$v3 %5
$L&D5+
D.%x?fFV
-w|wS_!
2%In:?
;;8/3C
>=KXM1T|
nveA9#
poweroff.pdb
_CorExeMain
mscoree.dll
Rfhn M
8nVDNR
#Rp!rAFV
;t-D_b
`] DDD
v X%?""2
&Ti7@N
}EDD&[
/""2=|
nMDDD.Q
Ge?"""
Rr'"""
EDDD&E
DDNpp|
yVW<>:d
9W{=>[X
$@DFy,
p#o3,Vs
mk-TUJ%2
__`?,;XoY%
<IC[{XlWcU`
#"2]bIPSU
{O?d,g
<g-/X/rV
cu^iP
!b" U
W.OSU6+
92<!xVb2
%kyN?t
&K qPn
a1qDZK
;=%F8-
=F)F6#
8wK2c8-K2
5VkV]G$=
q_d= L)Jcy<
8-K&YNi-
S~3!v-
t!0o[^,
3D:8.V\
BkJm(M
uF)Jc8
%F+Jk)m
Z2c8*$`
D+Ea,Gy
KTdM+E
};PI|^
P#0oZ^,
2%M@7E
IDAT?./x
-S(Rc(
4V)i{)
M(lBn-
i--A7(
2JQ&)O
:fYFn-VkB
<-K^L&
5{VFM|
~^0MSRc$
LVgbkzO
,!>;J)
ohn,{y
udZShC!
I]s\U,
%ZS&)e
052 l+6
7{s&IJb
3~:;#5
gdgng.
cTCPjhOiIT,PM
&ir^,9MS
fs^L&</'<
hLEK6Z
rBfmLM
z{C#>Q
UzO/M9
BcEeIV
{FyNw<
CP?-(g#@
jQ7,K>n
"xFYN7M
y?nr-nr=
IBg<&-
ex2_2(
Q5@,rV
$#NF#N
TDvqrO
>@c?C4
&)Z\j6
%IQ0.r
(HZE5Xlv
lvHVZL
s_2}2`
1+,C[|
y "_Um>
x}xfq c
KDvqrO
HPT]68
"r&"Oq
RDO VO
Uo_0f
!G$Ei(
KUzq*Q
d%i"#+o
%r+tGQ
@dImno
&cz_YQ
Fh[]Dn
2:iB+M
fDyF'Mi%
8XC\d=
CzYF;Iy
.;QD=I
Z/V~E0g
A@FN+M
z]Z:)p
"NSziB
IL/IhF
{m`fmc}
0$pNfI
v;<m5i
E9 &.r3
Ek8[%
104A@5"-
LVkx)r
s|)qW`
IDATVJ
,&VGon
nosmm
sJ3`FYT
B5+`7M
ro<1#~
sg<f?4#~
so2ag65w
!w&cvgS
M{r~G9#
!ou{\[[g#
!n/{Q'
")r&Iy
_~[1KS
\Bw|Z@
,"rZD>C
;.NN r
U~92R)
?/N. r
?::4|!
){=o"K
[DdBD
<_}+vz
iUk4fg
<?xml version="1.0" encoding="utf-8"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app" />
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel element will disable file and registry virtualization.
Remove this element if your application requires this virtualization for backwards
compatibility.
-->
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
</requestedPrivileges>
<applicationRequestMinimum>
<defaultAssemblyRequest permissionSetReference="Custom" />
<PermissionSet Unrestricted="true" ID="Custom" SameSite="site" />
</applicationRequestMinimum>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of the Windows versions that this application has been tested on
and is designed to work with. Uncomment the appropriate elements
and Windows will automatically select the most compatible environment. -->
<!-- Windows Vista -->
<!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />-->
<!-- Windows 7 -->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />-->
<!-- Windows 8 -->
<!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />-->
<!-- Windows 8.1 -->
<!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />-->
<!-- Windows 10 -->
<!--<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />-->
</application>
</compatibility>
<!-- Indicates that the application is DPI-aware and will not be automatically scaled by Windows at higher
DPIs. Windows Presentation Foundation (WPF) applications are automatically DPI-aware and do not need
to opt in. Windows Forms applications targeting .NET Framework 4.6 that opt into this setting, should
also set the 'EnableWindowsFormsHighDpiAutoResizing' setting to 'true' in their app.config. -->
<!--
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
</windowsSettings>
</application>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!--
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>
)S71SDAShQShYShaShiShqShySh
.+J.CJ.Ks.3m.;JI
"!$#%$&#'#(#)#*#-,.,0/1/2/3/4/5/6/
pwr_off_Y9uYQGOvBTdCNmQ6.Properties.Resources
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
{11111-22222-10009-11112}
K0sscIHNGICWZd9dxE.E6e6ADUPqVc3qMKZLp
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
pwr_off_Y9uYQGOvBTdCNmQ6
CompanyName
pwr_off_Y9uYQGOvBTdCNmQ6
FileDescription
pwr_off_Y9uYQGOvBTdCNmQ6
FileVersion
0.0.0.1
InternalName
poweroff.exe
LegalCopyright
Copyright
2022
LegalTrademarks
OriginalFilename
poweroff.exe
ProductName
pwr_off_Y9uYQGOvBTdCNmQ6
ProductVersion
0.0.0.1
Assembly Version
0.0.0.1
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Clean
tehtris Clean
MicroWorld-eScan IL:Trojan.MSILZilla.13011
FireEye Generic.mg.6c0577d77a62c8bd
CAT-QuickHeal Clean
ALYac IL:Trojan.MSILZilla.13011
Cylance Clean
Zillya Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender IL:Trojan.MSILZilla.13011
K7GW Clean
Cybereason malicious.711e2d
Baidu Clean
VirIT Clean
Cyren W32/MSIL_Troj.BWA.gen!Eldorado
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Adware.CsdiMonetize.BC
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.MSIL.Csdi.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware IL:Trojan.MSILZilla.13011
TACHYON Clean
Sophos Generic ML PUA (PUA)
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE IL:Trojan.MSILZilla.13011
TrendMicro Clean
McAfee-GW-Edition GenericRXSK-DX!6C0577D77A62
Trapmine malicious.moderate.ml.score
CMC Clean
Emsisoft IL:Trojan.MSILZilla.13011 (B)
SentinelOne Static AI - Malicious PE
GData IL:Trojan.MSILZilla.13011
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1203820
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit IL:Trojan.MSILZilla.D32D3
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.R506407
Acronis suspicious
McAfee GenericRXSK-DX!6C0577D77A62
MAX malware (ai score=80)
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34582.Oq0@aK1IMcg
AVG Win32:AdwareX-gen [Adw]
Avast Win32:AdwareX-gen [Adw]
CrowdStrike Clean
No IRMA results available.