Static | ZeroBOX

PE Compile Time

2085-07-23 13:47:22

PDB Path

poweroff.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00054f44 0x00055000 7.53886164767
.sdata 0x00058000 0x000001f8 0x00000200 6.65152804643
.rsrc 0x0005a000 0x00049f8c 0x0004a000 6.06503885993
.reloc 0x000a4000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a29a8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000a2e10 0x000000a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000a2eb0 0x000003b8 LANG_NEUTRAL SUBLANG_NEUTRAL COM executable for DOS
RT_MANIFEST 0x000a3268 0x00000d21 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.sdata
@.reloc
Z?_d
_b`*
v4.0.30319
#Strings
poweroff
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
NeutralResourcesLanguageAttribute
System.Resources
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
AssemblyKeyNameAttribute
AssemblyDelaySignAttribute
ab1ce07d-aa84-4f13-9ea4-28bce953a520
poweroff.exe
<Module>
CEIJdeluhOWMeAFrGs
GcLlpRSeUb8is8S1K8
Object
sxhFxP6JAtu8ICEe
IdownLoad_PID__k66qq79b5ppkju5j
System.Windows.Forms
HgMhpDXPKdXjQfME
UserControl
uk1n8DwQ8KsCHjlmSq
QyqtN0Jx1m0LsgC9Gr
P2asSa2SELrf6mmsSA
mXC2Xw85hcHF6tb42G
<>c__DisplayClass9_0
<>c__DisplayClass9_1
<>c__DisplayClass9_2
pemoSyNfMAkQ666fMu
UTw142fTgC6ucLlIEX
vvaKyDZceY4rFlXNyr
d33Gt1YYBti9vZkg8C
xBVoJMMEJlxoy4o9U6
xp9KjRqCJDAA1SolmY
pSMC34eZgbF8SqC4IW
TNb8U6hReKwAjcEoGQ
SbJNylIFJYqOeBlyiI
gZGKEwrMbUWPTjTcyf
iGQGyhgxo1moDGDfBU
oSh5x9PnISQx6k7S6a
cHgCd1GQ9ZBCIDUfg4
EAVST4FX9RUcRyVoLE
I2BbD6U8DVoO9xOhyy
RWTACjjfyaaPTMQ9Y5
Q97uKRWYEVTrDPuHRm
FNWI4Zt6RMyp7oJUiQ
hVZJjFyPiTKhyaKkFx
iX86cjH73cfDOT31ZB
Xl9Cbqvd53gwhc96mu
CxJlBtRHoXAZnmk0Ki
BxFLgcvtHfyC5SBm
pwroff_ZFubDnukJ9Y8fcFJ
swq8g5VrF9tMTsPFa1
wtiBq1uOqdD16MUaOn
Resources
pwroff_ZFubDnukJ9Y8fcFJ.Properties
Settings
ApplicationSettingsBase
System.Configuration
h9PVA2EfOccBkso1G6
y3Dnl25uRyRKVKiD8y
ProductInstall
pwroff_ZFubDnukJ9Y8fcFJ.ZFubDnukJ9Y8fcFJ
BuyingCrusader
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=16
ValueType
<Module>{2CE82472-B5A5-4E8B-AD80-107BC81DE8C4}
RMUkCGLwZUDQ7Ubdqy
zqmfBpiBKNEXSZmd8O
SFU4mbT3GMret7THonf
MulticastDelegate
UFd0eK3bsDVy7kuU78
dqdlcK7MWF0sRimdR4
W4neXx9N82Yoc4oUdB
Attribute
iJEGs6k1gFPpsq8DaD`1
UjlbP7ntgm5e17LjBQ
OpU5RPpwa4F6WEaWEY
urITgZTeIcKtTIkaCo
RgBNEYB20Q9Pps54dy
EMdtevKxdpQhoL1Vhl
hk1SUE4AXiZSqRRCg2
sxCN9W18Xq8tFeHCge
rjXSriCNuOPlyK8VXO
IsdpSHoTc3tF0TJiNA
ocMG4TbEXHuvoTxyvD
kVYy8hc1Dep1bt002N
<PrivateImplementationDetails>{05BA3585-6C6F-4D30-8403-8136D9E2AAF0}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
qs9JcLlpR
IContainer
System.ComponentModel
lUb28is8S
TextBox
NK88vk1n8
WQ8NKsCHj
cmSfqCyqt
h0xZ1m0Ls
NAiaWU99l
EventArgs
AmFlf3uBG
yjESIJdeu
Dispose
disposing
nOWwMeAFr
ComponentResourceManager
System.Drawing
Padding
EventHandler
IntPtr
Single
hVv0YmSs0IVjaXkmW9
Fja8BIbTRYrsw6ZDVl
pDJ6N2vXuISOidBSg2
lC0CbrU59CoxvKuYYY
WKdyFcxYfUGYEo4DYN
IDisposable
qTk6UJNdIFOllg2rFu
Th68sugQhe95miKlHt
RuntimeTypeHandle
GetTypeFromHandle
MXJ00gTBtkBjRVw8ZX
Control
SuspendLayout
WU6n5s5LfReGHKKadf
set_Location
DJHujT83IJyYR3jlwy
set_Margin
p5hcAhZYm48OTYM4GJ
TextBoxBase
set_Multiline
w5f9933WJyMJlSm62w
TqZbsmDCyDTAXbNIEq
set_Name
nxpTRa61Bjhjv7sjF2
set_Size
q3LC9Kp4jqF59YX6uT
set_TabIndex
YFxNVd7hTptMBdMRse
ResourceManager
GetString
iAaQcvXxKZj4nqScsF
set_Text
bX4EWVmq1kFfRsb1IV
add_TextChanged
Q3m8lSQLXSFqtV7l9e
ContainerControl
set_AutoScaleDimensions
U8tMvUdf45uLgHjDZ2
AutoScaleMode
set_AutoScaleMode
mUhxudeQOvB0OInHrx
SystemColors
get_ActiveCaption
qM0ZCMwSZ9pNDZjfti
set_BackColor
k39ehqs5KgYg9b2tov
set_ClientSize
oWNM69uxi6UyXQ5Zgb
get_Controls
ControlCollection
wRGYOMHJwugF02p0u7
mGbAVLFfh6StdjWcKw
get_AliceBlue
NeGCWvE889fZX1Ttt9
set_ForeColor
vPTQx8jhF0DXtPXeHt
FormBorderStyle
set_FormBorderStyle
uVqbOoKG8kqTLnD1TI
Y82G7pOm9Vb2IVQwdM
U2OJLt1a1RftJQnkHu
ResumeLayout
jce8vafyJuV7oCa1w9
PerformLayout
ammqsSAhX
P2Xew5hcH
r6thb42Gg
mmoISyfMA
HQ6r66fMu
UTwg142Tg
pC9YGrC2a
HSaMSELrf
h6MS8hLXZaJPFeDXW0
HWWsNLI6AAtGafJXyF
U8OLh60At96p50RV9h
dwkqADyJqFa7NHLQgP
KydStsCrWlhqUM3qOa
IdWDPAhClA3YmVt7Y6
PO1Q3aYwAyRnxRP2PS
pdRxa7PBaGoFjAfwM0
JNFEEhWUfRSkoQeZ0f
Nfx95Q4gGj7BKQ07OH
aYa8hCk0U1CNf0GyaX
c2INuba5OtHHoFL6s1
jW2pLWGXbd94uwP3Pb
PIeFC0ic8rgaHtW6qf
v3cY39noiLfNVi8ZIT
KUVXlTl132vQUxn1dS
TiE6Bq2XgTfJjCJyn2
viaeA6rMRnbAw8kGF6
get_Yellow
rCJhlmtwvQYme2KwNC
lAHf7Wc96JB4JD79rb
mlt6OVJmeb7SuajCKC
PZs5lEM4pQThcGKwd1
q4pvhqAqOHssrhGAQE
get_MediumTurquoise
H7GX45oAHXQmqa9iVW
zW8sYXzQt5tAGNYOnX
fFQde3VRQgxMh47ml15
xqN7uRVVtYYDNjkRg6H
XCHutdVBcIRtoe4DAl9
X7dxfQV9E3ZrSt66vDj
SVifmVVqLXYRyUclxSm
Q6uPcLlIE
ResolveEventHandler
zG8ld5VS69mNlsoUkJn
AppDomain
get_CurrentDomain
lS7K1yVbdI5qomyNoVU
add_AssemblyResolve
fMADamVvk05hZeldl9N
Rr74V5VU6qn0KnXe7GT
kjlYbaVxKtXakbvjQHs
lpTdWsVNof9cKZ2JOpB
<>9__0_0
.cctor
<DLLLOader_4s2jjdb8gbwvd76932ZR3RB5KWNJqkk4rjjgzuc4hnzdag>b__0_0
Assembly
sender
ResolveEventArgs
Stream
System.IO
AssemblyName
vy74QWUGlCRHyXFm7X9
nYeQbvUktIeeurx2ZvJ
PghvsNUawFBAw24y0j4
FELXneUimm8tyRoDsT0
L2SZmGUnyVxsYmloFh9
get_Name
UQuxDCUlyReLBck2l4w
zbAD7QU2Lmuwf7oLtbT
Contains
t7gaIAUrK1qG8dPpUKS
Ok8ex5Ut5PatSdjmUw4
qU2sqWUcGinF6TCPKdu
Concat
CQkl0ZUJRlgYZlplqlW
GetExecutingAssembly
yZV50LUMENIYtqGL67f
AailKEUAHriRd25KTTy
GetManifestResourceStream
g8MFFgUox8QEjto5wMI
get_Length
UiWm6pUzgd54kpcNI18
b0QonUSRIlZ5gFrJNDb
ScgrTESVYE1gVy2ZNsw
dqCU4IWXN
S8Uy6ReKw
TRvGaKyDc
RegistryKey
Microsoft.Win32
Registry
CurrentConfig
List`1
System.Collections.Generic
IEnumerable`1
Exception
lY4FrFlXN
ArwW33Gt1
jBtti9vZk
Enumerator
GetEnumerator
get_Current
MoveNext
p8CvuBVoJ
WebClient
System.Net
kEJRlxoy4
RemoteCertificateValidationCallback
System.Net.Security
ProcessStartInfo
Q9UV6Ep9K
Combine
ThreadStart
System.Threading
Thread
ResetAbort
ThreadAbortException
BRCuJDAA1
CurrentUser
ToString
dolEmYgSM
Q345ZgbF8
yger2XV5HBSZQDO3sN1
DtCT1GV82aEfDjTEYth
qq2EUEVgsoh8p6T2ClY
dv5swHVT0we6cEbwmWK
wh8NoLVZgJKY49aTmgR
K9mGM1V3Q1f9vyVVAcp
OpenSubKey
vi4dKnVDMYRaUdutTvP
RDmpf4V6M5XxKv6RRGM
GetValue
NPMXioVpbH6fntV7JRw
IsNullOrEmpty
L4g84XV7nRR6Mgo50MU
AC6u0nVXZWUCKCEmdcS
System.Text.RegularExpressions
Replace
z0HGrsVmTiMKaP4halK
JHoA5sVQDASc8OA9kHC
K0YrxYVdPe1Yoh5xCBV
dOj6ONVeDKVOb8Lj6be
Equals
zPNpxEVwKgA8QlC3i5l
ToArray
Ok6TEwVsWWgRGec5v06
CreateSubKey
g9FUkmVucV00vQq65Bt
P4tVX4VHJ8lbg6LSjor
b9n9A2VFew6jqpQByBN
SetValue
NiR6MWVERvkyAamaCD8
SpecialFolder
Environment
GetFolderPath
sA1kkcVjLDdwoe9dMiY
v0dLvTVKpHSn9rMNaPK
WriteAllText
RwtZvRVOx0OUrVA5BP7
gAq77gV1oYEWhfxkMFC
fUnVfqVffbdMr31SOlZ
XORiLbV0IeYPTNU0X8y
KONVgDVyksLWLiyjn6q
Substring
Rv4vdbVLAn5BffmUZ9B
Remove
tb1puoVIgvIrGR6yRKf
Y43wTmVCtotURQWxJpu
JoZCWtVhOlufAMxloo0
MC1C45VYdtWdYU1yDJQ
XWkdF2VPdThSS9hdjZE
iFybC0VWjDYg5gE3Ci6
BUB0SWV4yXIdgHRtbJF
GhTsOsVkfB0p1OdtXFH
Fa6oqZVaQEPilkhJ1dZ
kL2sIDVGWufc2HMNpCW
P0r3qIViN71FWJabniw
gDs7iyVnbI3nLtTfPik
FEhO0FVlR052FcOo26K
tlfyt8V2PksXvdKCQ8g
BhadwVVrvnvdm65SYyK
KLmx48Vt6JiP4LFpMbI
q3iOpsVcSV2SrC8MfgT
ToLower
u2tXBBVJJyjhiBoY7nw
B3PHoHVMPmotgQdPWfE
gey04WVAXLpVb8t0HMt
MUZmqWVod2SJvXHNgik
J6xqIMVz65VLo3ibUMw
wdDNNZBRMYsbOJoHvsD
CPZjf3BVEAMPSMmo8Z7
O6ah61BBac3tUyY8a2P
ra5l50B9cwpJoCbtlrv
HGhaB7BqVXl7tM25VKC
AC873yBv30SRZA9hWHl
BET0LUBUT1WEGcvegcW
XAwKcTBScTQKiRVm203
GfYC3tBbQEdFCrA26cE
AsUgtMBxTDuoHOL8vmi
etqkKpBNQUtrExpFKP3
SVvl0DBgoOQGwwEeXpT
d6owQ5BTi5q4Sp5EwAf
DownloadString
na51XgB5Z1ZRYgihf61
j90bkoB8rOiaiHvRIW1
Console
WriteLine
onsW9KBZLBev9k8S9X1
gaipXhB3gIEofYF6lHT
Liy4i6BDWjZMRFW2dhm
zsOBH8B6IOEg7bgaNGM
LxfcBwBpkgQpKfaomEH
KLLHA6B7PG7a8ehvH7m
ServicePointManager
set_ServerCertificateValidationCallback
HkaG1fBXxO5uS2ggxRs
SecurityProtocolType
set_SecurityProtocol
wJGpZpBmWl5ayjWYYO6
get_Headers
WebHeaderCollection
RRhMEOBQGmnOuAVeE45
NameValueCollection
System.Collections.Specialized
gXBm54BdGMFQUWVR8pP
DownloadData
x7mwOuBeEX42Mc3LNI0
set_CreateNoWindow
mPl8h7BwlGgA7Okks5l
Process
rNnjKPBsXrnWolOWyi8
get_Chars
pMbgXhBu1yYujV9s4vI
ToUpper
SPgA72BHOvcacjij5jP
I3RK2hBFPMyEt6DCgOZ
NewGuid
yJRtliBEf6adod98jqB
xeEdGqBjRtsW8n4SXVX
Directory
CreateDirectory
DirectoryInfo
PrKDagBKVBrK5XUrF74
S47sRvBOv48rlbBUDSD
<>9__8_0
<getResponse>b__8_0
X509Certificate
System.Security.Cryptography.X509Certificates
X509Chain
SslPolicyErrors
PFvjTxSq84oYXachioa
rEITO9SBPkQoHZK9EqA
YiZNqYS9Xu3DqjFxWos
YlQNTtSvNHHpXQ7drTa
modePublisher
modeUpdater
BGSNyxSbvIxPrGDau3y
W9DJ5sSxrWS3WUfcW30
yhB5mnSUMPWautVAMrp
r9UTcqSShKhHFbJCkVv
CS$<>8__locals1
eZBC6WSTHY9UWLEM8GO
D4W7SrS5hAIRXZE1pJH
ESNY2aSNWsvxBjn9ajW
GyVgorSgEMQt7m5yBoI
fullpath
randomName
folder
CS$<>8__locals2
<Zid_mazel_ye9bel>b__0
hKpBwsS3yclYwAwMyYu
ES5o9VSDWfRbGO2sRxi
ea1yk9S8B5c2Jpth6cc
FqQu1GSZjdmGJkruduO
oNIvRbS6DNSB9PjEHR5
JS0xlHSpLaIpHdjgNPc
A4OdcuS7wKVsuAPglhg
d7SokhSXTWNkOPEQkdV
EKM7C2Sm1q644chpc8i
cW35QySQ6kpIoci1Q0G
D5AcruSdintKiINpx6R
I6n27ZSepaRJvmSi5AY
QeWoq2Sw1Q4gsvNkXEc
vNZftlSsm7V8TbP1oq5
i5XOxPSuqfFX0k4w35O
tFGp7cSHA0bwfhFucsg
MwD6wFSFEaZZJMhNeAn
zh78kTSEnRkOxG7jun5
kOeLBlyiI
gZGiKEwMb
OjcHEoGQc
ICryptoTransform
System.Security.Cryptography
RijndaelManaged
MemoryStream
CryptoStream
CryptoStreamMode
RJNjylFJY
MXsgaEB0tMBJtgrG4ao
PaddingMode
SymmetricAlgorithm
set_Padding
bD14TsBycHnHfvsXela
CipherMode
set_Mode
sDxVlNBLBkchg2WQX03
set_KeySize
TlTqJ0BI8unpn1QU6U5
set_BlockSize
oPL8pyBCyMSrDchYpM0
Convert
FromBase64String
pRyNkaBhKw7saTlq919
CreateEncryptor
etkGQpBYUc4m9rSOV4k
Encoding
System.Text
get_ASCII
B6LW6lBPcTaVAsbOj5E
GetBytes
Qgx8i6BWdgf6Irkxy6V
kZMrZ5B4NCTfjxifjd4
FlushFinalBlock
rvg037BkLFIgQV9Zk6j
k2fwBHBaj5R3g76K2DI
ToBase64String
gEGLA2B1KSIC5W8F9jn
TaHdARBfwMAI8OTDgSG
NVRGJSBG0td4fMJiNbv
Q7R3LpBiKyhOgZp9Olu
pDqnEnBnXmm1X8WKQFS
CreateDecryptor
DPKVnOBlBOtv2gc6O0m
Y8xj4HB2wVtawua1ykn
TSAY0gBrZ4fq37sl1WB
nWpcI6BtptNBEQ1l3qO
hZG7QGyhx
R1m9oDGDf
KUrkSh5x9
IISsQx6k7
c6anlHgCd
NQ9pZBCID
zWP3TjTcy
EAWoPEBM2dW2EpSgNBM
V3Juk3BA1OBccCU9Frf
sfETl7BoGxejC2kdVAD
buvbUOBzVTo3kQahrGe
fr9Ph19RochjOj6ochk
OKn87FBcKaJTASNyDpe
j4meq4BJiNUaZYFgIdm
Kuf3dO9VYNpddpuRmE6
b7aJk19BNQPHlZrxEFJ
EFQEsr99Xf8B2TPx8px
QL6mvS9qyb27gUkpMwj
HO1hrY9vLaxZmnMo0Y8
get_ExitCode
nc30IX9UUYHvsM47Grf
we8MeB9S1B6rLQ2flih
AVoKLEC97
xKR4YEVTr
zfgT43AVS
K4XB9RUcR
URW18S9NlfWLo8GGvBj
IvYMy59guHH9nbSHlBT
epl8UO9T0rq43GgKhHh
sV5T1p95jAhgBBak9MI
nHcHfo98QEpXtHq9KUb
M1MSif9ZQkL348UIUBZ
wkKLW493KsdvhN4cNKq
tZPYYA9D4NuAQTGHQ3J
QjRKyL96IyKOv8QFTMS
reSfJy9pgaTw2hrsYt9
E4ck7N97hv5cTHM1dYK
umKXGp9X5tL2769MhP0
M233jJ9bLFlfHnrXY2A
MBfROi9xJynFd1aA4uI
wH17rH9mm5mdxKmpyBO
pOOYvV9Q79QyY0SM5Ao
A0iZBJ9dFKRSEHiJIOO
hOutC29eJjE1WYSxAQ8
anJjeh9wSf6FCJQgSss
D2yPwL9sQGuDSiB4bCf
mnpM1w9uEm5MVDJawKb
WPu1HRm7N
sI4AZ6RMy
J7oOJUiQm
c9CCbqd53
pwhoc96mu
LocalMachine
iDk21w9ENLEsy0jiioC
WrmDKe9HI9mqZhwhpFn
hpsC5c9Fs3TFS6GJ5PE
b80Jev9jRpjakfdmhoe
VIsZtx9Kb30bbnERWCH
TQg1dK9OlgnXstigwjV
FLsHZS918ihiiSMwWCh
fSUuxs9f3QmAVdVDING
d2xRCb900tseyfvFP0s
SSABie9ys0qD6oIVAWC
TvnnL89LcfIsQUNH76Y
xMeK9o9IxkhnNsK097E
CxJblBtHo
TAZcnmk0K
Win32Exception
DFwXq8g5r
HttpWebRequest
s9txMTsPF
b1VQtiBq1
PqdDD16MU
Random
bOnmN9PVA
YtmRey9YriSRMlRptje
ADovZB9PFe34yftjK8x
yLolGI9W6hKkmk1VUOT
jDv8xS9CrmdAj50l2Pg
SDL1lm9hUtl6mdqtgBh
tDExH894G9rqOp1Xs79
KTQ3y29kwxlHVxf4Ee7
set_UseShellExecute
zoMvDV9ay9QyKHUkQ3e
set_Verb
RgNRWT9GhD8Ly9DkNnn
Fmuhgk9iTBmiP5hVavi
set_Expect100Continue
palwqW9nkDpLBU36Y9Y
e0X7yq9lOigRwhmB6gP
VwPm5B92vg3YHcYT1DN
get_ResponseHeaders
Lsrq5u9rJhNblv3dpTe
HttpResponseHeader
get_Item
PuXYIy9tMLRu6DunXr0
WriteAllBytes
JK1wuu9c2FQhdPeomIY
myYJQg9JZCOKOUFASd4
UObZ0F9MLRc5TCxgE28
Collect
Fm5HHR9AWDy1dGvAbBe
get_ServerCertificateValidationCallback
fwAUwx9ot3ywSvea1b3
Delegate
MMUWyu9zenHMlvFdQs5
FYeTOjqRyVNkIDM6hIa
DownloadFile
x0cc5IqVHm8w4QTaYHj
WebRequest
Create
P5i3nMqB2Mj4286pV0n
set_Method
D4uBv4q9oEnkqMIVkY5
GetResponse
WebResponse
xrmI1WqqZBZUFS0HhYj
NSQowcqveBnrtHufXmN
BWHlGBqUP54hDjAm4xT
GetResponseStream
JDQJQkqSd8P2X2s6ZCf
y0yeDlqbk0hpQT1ce1k
W38K8jqxrj7BgVhJmpQ
pWxHtjqNvQ53uRrgCI2
RuntimeFieldHandle
RuntimeHelpers
InitializeArray
wcgAW1qgVmIyWUTXCP7
rwfriVqTCO2u9BfjUQ7
Insert
qWQdcDq5XCdWcwBTWJN
GetTempPath
hxTKfGq8eJ2d63tEaCJ
tgk5KnqZjxQG0nKGqeI
Exists
eV6iCEq3YwkBdHwa0GU
pZuoADqDd4a6UoRmpg9
ExOJ1sq64DhPc9Rmjx3
xbKF7OqpsFc8aXhL6R2
get_Size
jV1Okaq71t9BsA0UJ8W
GetEnvironmentVariable
jEeLq4qXoXHaIdDo6aV
GetDirectories
nQLViDqmIecGjvtAQiW
W1jDauqQBJJ0kDcvAWx
hdfkcQqdKXW0HfLu2tD
<>9__2_0
<DownloadFile>b__2_0
certificate
sslPolicyErrors
FervZ3SOyArvXH7OYpm
hS7ouwSjHtFgKvsMFft
F1dnPWSKqTOTnFZ8hKn
fIdRWuS1HMs0it7dl1O
ffOdccBks
DyP6REqeUNwQ6doxqdq
bflDu9qwdCHFyflWoeC
dmaVV6qs8XlRnpNDfXD
baPaNTMQ9Y
Q1G0653Dn
c2uzRyRKV
GetProcAddress
kernel32.dll
MiDa68ys2B
GetModuleHandle
RD6aa8DVoO
GetCurrentProcess
FxOalhyyfV
jJjaSFPiTK
IsWow64Process
nyaawKkFxZ
T86aJcj73c
hDOa2T31ZB
StringBuilder
RWTa8ACjfy
DateTime
get_Ticks
edNfqCqFRIEtG83sULQ
O4fBAMqEcZn5ZZETAda
Ro9NYSqjZkHJ5qTphKD
MEmUTjqKHYZHxxP63m7
yQiLUDquA5Dw2Kabexm
GgbXV0qHj15ObVGUBc9
mE6bjuqO3kvfJf3uueF
op_Equality
W3jbNkq18gCoFBWXQlK
op_Inequality
Tn8NjAqfbuV2OBmO62O
cwSlRTq0CjZbG5s62Sj
p48A2FqySlxtsGBZaL3
qx6HJ0qLCZWU9wYKFn4
eThoxGqIVkqZ021uNeY
uUP3ZeqCqv0EbSITGPC
jFWhMWqhkvh325Lunf8
X6R8QhqYKWOxN1Pev7n
IlRiaJqPCLDEB6SuFvj
Double
NextDouble
Yyi6fxqWNGMb1TEHcdM
IAvnnSq47SYBb76brSO
ToInt32
a5nPylqk0LIm71RyXOa
ToChar
bMZ4SwqaorN7oZ9YMKu
Append
TF35pRqGftPQ7IUCmxZ
AkuQ6tqigJSFuEYQLkv
SearchOption
YsKCglqnAJhLv3qMu9l
QpauTGql8dEpT3ixuQt
FileSystemInfo
get_FullName
CYYQHqq2dRobARLhgbW
d91NqEqrksbQ57x4NdR
wyMQUdqtvyYNPl1v59Z
xTGU59qcESY9BJgelen
To3u9rqJQNp3p2KjjiU
get_Now
s8BadcaWBR
WoYa0qnSOC
uUcamssKp7
InvokeMember
BindingFlags
Binder
BnI08RSyopQTAdMLWwm
m2YBQ8SLZUZERx9TBF8
Yt1ciISIbkk2cJq8xkl
pA2vZiSC292S37eQStR
DypBCXSh8e7x0LZWGHs
YrKLBuSfPlhByMjMbR4
d0wYePS0eQ9ZjLgMx8V
BSVA8JSY9HXs8AvBrqc
S9IiKRSPobwy3M8vJJA
GetTypeFromProgID
QQ1iVpSW665FxcmuAcF
Activator
CreateInstance
NAiSOWU99l
AmFSCf3uBG
yjESoIJdeu
nOWSbMeAFr
qs9SccLlpR
lUbSX8is8S
NK8Sxvk1n8
WQ8SQKsCHj
cmSSDqCyqt
h0xSm1m0Ls
pC9SdGrC2a
HSaS0SELrf
ammSzsSAhX
P2Xw6w5hcH
r6twab42Gg
mmowlSyfMA
HQ6wS66fMu
UTwww142Tg
WB2gISqoM4J3qs1s0eO
dgHm1wqzm89cANpZoaB
BaUkaZqMO8N38Btk6hP
aYq7ExqAadlH8ir9ZRl
rEul647BoI
DMWlaIqcaW
caRllHX4ac
qGJlSGm1g3
pgJlwLkVI3
bT8lJ3MsXg
zsVl2oIb8T
LFRl8kOumH
BWFlNtTBkO
hrkazv9U51
phXIfqSabobIyIjaEsU
mXSuUuSGsI8B4bTgOFl
MP79IqS4mhEMc92mhba
mPoZIfSkZTjEX8RT2do
VZ17oESiGHlfKORh4LM
dq8ow9SnCN7aHh7GDZh
nGjQUWSlJ6blUW6uoW3
pHClYFe9Re
CLclMtxiiU
AsLlqe9QKj
y9BleyFTsQ
wKRlhdJ7kP
GELlIrwrKv
gMMlrnOSwx
k3ylgk0sd8
aUwlfUj2vh
StreamReader
uHSlZGJLgb
iceYWYStymIub8a81HE
EgGVKoScV6va0Ho9IvW
RKRPV5S2B0ctECCwX3f
yaMDvwSrEvYJUuvXQ1p
TUoxlbSJKCX3LC4Q7Zu
sLvi91SMHlFipm9vXjY
Ibdd5YSAa1O0OoKBnP6
mMyLlhSoRKiT59kRGMC
DecompressionMethods
set_AutomaticDecompression
L0Q2y2SzsNQOhDXkHiZ
mj0jGGbRCqFOPAN1VEc
set_ContentType
jEsclEbV5MdUTsqtIVy
qIsjpxbBOdMkC4N3DES
aM8hhVb9xNTa9F8igDT
get_UTF8
yEOgEWbqFJUrVNScUBX
tPG7V9bvuh4DXsRKYXG
set_ContentLength
GinpLgbUmOvB9AEY6Gl
GetRequestStream
G5BMqVbSseksYwavG3f
F24KRDbbCi857wfybFh
VAH6v9bxKPwASWige01
nc5ATfbNpucWFJFw40a
TextReader
ReadToEnd
pZubVnbgaeJJijLDHrs
MeaWVybTlUQKm3oSOWI
Bn5wrIb5mPvJXlRfu03
xSoWOlb86w7a4ZCkT7I
UlaclPbZGesiem5qOgH
ErcBgmb3k2XmtdrTja7
RJlVyXbDh6TmZMa3FHB
JIZEDCb6U3BdqxAuesw
gFWtFSbpQLlvlgkNSFs
iN5xeWb7evhpUAtmWQu
k8Fd0xbX9TnPFg3orQt
oHjZCtbmek0Z8rV17nZ
yoMafUkCGw
TimeSpan
Subtract
get_TotalSeconds
iUDaZQ7Ubd
xf0dyEvB6rmoSaFBIYw
get_UtcNow
xhFQDlv9H83sDbDmLtS
Yj9DyyvqRV9mMFPIy1N
e1yq1uvvYvIB8hZxjkg
nlcbOivRGA9Y0v0V3y5
GpGLjVvVKw9B9SQxe2F
EyrONbvUP6jwPwx0fhq
gMimGAvSP3ThW7oHKF1
z04qwavb8x6jWqP7bVA
LKNaMEXSZm
X8OaqQFd0e
LbsaeDVy7k
lyyaYqmfBp
vWWlpKvgAJ7gt4d2Ot6
UeYLuyvT6cx32MspJfh
wByvM1vx7YDAEaNo3a1
gEuyONvNB4bLkZXe7La
Ti44Scv56KV8FpHZ639
nIsluJv8ZjYpV2KPYmI
KsrY2vvZKeLdqTJCsLY
TyKK2Sv33O6Wt84vdor
LjGmVuvDF5ONHtbKCUw
set_AutoSize
JrByp9v6LJgpNDp9FZj
cShNlyvph1pRC52Uujh
x99F9sv7xyyOL2DVglU
eg0E6rvXCb5gMyUbQ5n
g1UMjRvmZv99VaoIjqP
Gou42DvQFH4sac5T8jI
lG7k7Nvdt4oLBFPLGSS
g9G1KqveLnTJMY222GG
jo00OQvwJeODBSXFagL
Kt1EQavs1dvkkjHaQFi
WxC9J0vueHDqWvxTh8x
P9drkovHJgUnYVZtu87
qcYOUKvFQlDMm613gpT
efQggUvEwyFArRaUWce
P0qCGxvjhw4IX0rVRqv
IXSWKEvKYB0ZH8N6p0p
TMK58cvO6HtsLrpP4yU
RK6ZgOv1C28YtCkS3on
xU7ah8wqdl
SKMaIWF0sR
ClassesRoot
DmdarR4D4n
mXxagN82Yo
S4oaPUdBfJ
xGsaG61gFP
QAvZj8vy5vtcUjtvPyj
OiDYx3vL5BQZcrtJEgc
N29OievIY6PBDCAmIKA
yLYFD5vCSDgtrslJWmf
AYDBYwvhS2XuCvZO6B2
OHHDNnvf3I6wM6GL2QT
QRk7auv0Hyw93CyAByV
jb9ahsvYMU90TYiuV0O
AafCVZvPdN5DmGyqgA4
q9FuTEvWjOf9b5Qf68P
GetSubKeyNames
WvrQ1pv4ifVnBDvPxLR
jNmpu7vkUbUFQHSQ3YE
FSdItOva8OGgs1lC7wA
bjVAcCvGt46WcPBB6vl
Sel1P5viWFiVlQrvltr
RegexOptions
IsMatch
UV1y50vnoSW7vltUaTS
CusnJPvlmWT80GCo0wv
KbVgHVv2DoiMkcDPMgZ
wtL91NvrB8ND3VwoGxb
w4bKqJvtqhhPfij7jjv
StartsWith
x8K5hBvcEHHWUNCOKyQ
pA5C5SvJaEyLksioGti
fI2aENvMDbHLfEvQnUW
ivJA6tvAWOoFAo3oQDw
m9XYLPvoNhCBkIxOwQQ
xYvaErITgZ
mIca5KtTIk
JsqaF8DaDs
get_Assembly
MU1at5axwL
CultureInfo
System.Globalization
UjlavbP7tg
UApaVU5RPw
ySpfLQUVlg2I6kHU9xk
cJKOHdUBlX4qB3JHr8s
ixe2qcvzrUl9dkVbq4h
fvxI72URtWgua3Vf6rQ
F5p1FdU9TZochcxwrOO
cni8IxUqUiDGfr9J2SV
QHVKPPUvaqbqvJdYAyj
eF84tHUUG4ZSqNQdTvK
QLZKuxUS3cFRVonvPKh
yCiaW8oZ4O
W5eaR17LjB
defaultInstance
get_Default
nqmIsEUNOE83I4OlUh1
Oy1EuVUglRMn7KW1MDn
V2ERbuUbVrtnDUHLVkB
r3e6EwUxU3RYCT2xMkH
dBF0FuUTgQXCbCekrRP
SettingsBase
Synchronized
Default
bCoaUbgBNE
JsonConvert
NewtonsoftJson.Json
Newtonsoft.Json
DeserializeObject
zxKVeUUZUMDeAa48BDc
uKvgKLU3GvCP0MowrHV
xqQA0OUDbOwJux28upj
a3VOZpU6r2skSPbJjxI
CgTtB9Upvm1rGVEcPVu
Mq0x3XU7rNilAlt46fN
nauRIFUXqZ62WUsx1A2
gAxduXUm5bymQGCpce6
uhK7WCUQ4nR5aavdIGg
ppENuSUdergmRamLUUu
cvvmJLUeMUPm5hq2aqw
yjicZaUwoWvYtKUJL8w
ko9yhtUsbm5XEAESPJQ
jCLHNEUux440cOJvEkd
j8Ec1jUHSJW5bvHvuGD
sIYan6UF6rgbbTcNZ15
C7qQlFUEI6ZTfktEtoX
dKgZwcUjUcG28ZRnHOG
WHBqsLUKSxCvGbZD5Qo
e4b04mUOX7XUGZEEIyO
bBrxjeU5bY25MPefuKN
F0i9DQU8smaOTNBeuj6
OCIkrHU1fBe9UOjyOHw
wKbWb7UfqYyNo5PcYRt
<Ritual_xFKfUTaADxm4msAc_>b__0_0
RbVpEIbesxXCcu63KVN
UmeotWbQ33XwTC2beo8
XxwwcAbdnJ3MMN80qw9
FSqTUebwC4iZElTiyNA
j20ayQ9Pps
y4daHy3Mdt
mvxajdpQho
get_Link
set_Link
get_ExecParams
set_ExecParams
lgS5SyU0H0vJf3KjEje
jfoUftUy1IDgFnIkl0E
ftWDYxULO117Nf9cep7
K8BSRYUIX3QqurFFleL
ExecParams
C1VaLhlNk1
cUEaiAXiZS
lRRa3Cg2Fx
QN9a7W8Xq8
tFea9HCgeE
Illak5Q5R1
M1Das5cxu5
jneanTeSkk
GuNapYjv76
uGjaTXSriN
wOPaBlyK8V
TOnaKsdpSH
Kc3a4tF0TJ
DNAa1rcMG4
KEXaAHuvoT
TyvaODMVYy
gh1aCDep1b
t00ao2NWqf
XbpabMVRWl
dSEacPcYJp
qONaXCxF7l
ARdaxoh0kH
cHGaQlMkZQ
GRHaDlq7fg
get_country
set_country
get_ip
set_ip
get_partnerName
set_partnerName
get_productName
set_productName
get_excutionWidget
set_excutionWidget
get_buyingChannel
set_buyingChannel
get_discrepancy
set_discrepancy
get_PostBackUrl
set_PostBackUrl
get_userId
set_userId
get_prices
set_prices
get_salesChannel
set_salesChannel
get_active
set_active
get_ipLoggerCode
set_ipLoggerCode
get_modeUpdater
set_modeUpdater
get_modePublisher
set_modePublisher
get_paramsProduct
set_paramsProduct
get_ListProductInstall
set_ListProductInstall
get_UrlTrack
set_UrlTrack
get_trackPostVar
set_trackPostVar
get_dailycheck
set_dailycheck
get_TrackDecrPrmKey
set_TrackDecrPrmKey
get_TrackDecrPrmIv
set_TrackDecrPrmIv
get_tag
set_tag
By3VWOUCAsxxr1070q3
vUL2x7UhKrx643a1MJi
QNq9ejUYC8sRatybWW0
rdV0UMUPxs4iooEe5T2
country
partnerName
productName
excutionWidget
buyingChannel
discrepancy
PostBackUrl
userId
prices
salesChannel
active
ipLoggerCode
paramsProduct
ListProductInstall
UrlTrack
trackPostVar
dailycheck
TrackDecrPrmKey
TrackDecrPrmIv
5B709FBE04D94E0256927AA846FBA4740190F3DE
Ac8lP0o3pr
Hr1HuEhhRJHdT
typemdt
FieldInfo
MethodInfo
GetFields
Xp7hBnb1ohUEE8s5DxZ
Module
ResolveType
uK19InbfywgJSJDkF4r
MemberInfo
get_MetadataToken
QbHbGsb0XKkYrbMi0I0
ResolveMethod
MethodBase
eGJyTsby7vUpg1jGill
CreateDelegate
Y0cRW1bLWyxS3LbH8fs
JvFTQHbK7qYRfWLGWRh
N0xZetbO9t017qVjAJm
V65MS6bIdqf5cgssD2m
auox7PbC0RKD8xfB5lU
VGroE4bhrKgAVDxQaxB
unPZmJbYeSPK3ePje68
get_ManifestModule
object
method
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
CKSlCePTHy
Qt3lXSYVR8
UqwlQ9XCTL
I6dldm5Xa4
yEZSlv9mRV
WSBSS5R8uj
STgS2oXocl
GAaSNMUpVW
TA0SYaoM3U
YDpSMyNuH6
venSeif4Li
dDfShIN41Q
Ls5lcVcbor
rOkl0nygVN
DTIlzNeg4K
beZSwytLuX
PQMSfANPlS
KImlDPoNB1
C9ZlolK7H2
XrlSJnbwd4
qLslm6oASO
WQ6SZl4gv7
tyISqjDV4U
wy0S6Mp3DS
xj3S8e5ABn
Ii2lx3wOpF
JFglb5VcWp
UHrSaui2Kw
UInt32
SortedList
System.Collections
Hashtable
RSACryptoServiceProvider
set_UseMachineKeyStore
qSgHuEhLb0tu7
tnwlGMfjEr
UInt64
BitConverter
PivlFayOS4
UInt16
CYflWolEeS
OkMltVfKCI
rYhlvnQYyg
OF5lRfWKJq
xLulVgo6Dk
rybluUeBRD
AesCryptoServiceProvider
System.Core
ObjectHandle
System.Runtime.Remoting
Unwrap
BkllEOQdtL
CryptoConfig
get_AllowOnlyFipsAlgorithms
uO7l5WJjlX
MD5CryptoServiceProvider
HashAlgorithm
ComputeHash
LuLly2TqVx
Ng0lH6ghom
BinaryReader
jD3lja9ust
get_Unicode
q1jlLc0bWe
BDSli5f5iD
haVl3nc92l
Marshal
GetMethod
g9fl7BOmO8
get_Location
GetName
get_CodeBase
GetType
GetProperty
PropertyInfo
nY9l93F7sP
FileStream
FileMode
FileAccess
FileShare
elklk18REH
set_Key
set_IV
zoflsGKChm
GeylnOglAW
Snclphsw0F
hTDlTihfZG
rgNlB5TyQd
vGnlKtAgVJ
jjFl4ZfONx
gSgl1G7C6S
iThlA5gAbc
lUFlO3hrwg
R9wkcHZaWTq3HGqaf8
bFo2PHmt7PEMgL1llw
get_BaseStream
OYI5Y5EPrAakrYgsou
set_Position
cowUOxPXbn5eX0SiDK
m0ZX9Bft18jNyA0450
ReadBytes
WrFIcG5oW9VsH2NHx5
adt454tSjNFIJCQgnK
Reverse
PbHCZrTUiNgnFro748
mcUoClR0s65ClPGnH4
GetPublicKeyToken
lq0Dml9xYpcVH2v3Sp
zPD2e3Vh8hf6asIrH6
Mrvns9UucuvJxXwEEy
qdbArHWccdogjWcBLN
HQrnioqgNNKurThC4m
BGkjMBIJx8aFA78myB
hMBbvrbUP94pYmOaD9
XeeEidNATSH8ePLtft
S1ltJ1wDRaK2bvyNAH
dCR4pmlHR4hCY0rVTg
pcMx3NdLwxtVHKVVZT
NrUrbYxI67bDZXUFZG
r6bBfAb4UvIOFTUmVen
RF9kfGbkKPn4UniEPmI
fuUCJUbafKI6YwM5KpQ
ht3kTybGljn6rWeavRa
H5Ci8osZ4O4U15axwL
ce4DmfsmSrOT856tDgfrkMb
a4oSI8hSts
ps7xJ4blt80wqBqRerQ
HVYDTFb2sAxmiCo0Tqh
R6mlsBbrV2ge18wrR6L
aTQsMObtwUVTs9FxLOZ
cGkfwKbcJjNLFiFmGgi
In2VWNbJZQ1mRnQJQVh
hTQ3nXbM69C9AnL0j6p
Cf92dIbAanBWNfgso6n
IC5fDuboqYk8iFGhFsB
LK2BYxbzIQDv842fWDy
BXesR3xRI83NxcDyN0s
PUMFTtxVF1H6XIBkX2k
L0Wn1pxB6cTMlq3vyJU
w2IuqJx941apRwV1h0V
olleFnxqVplLP2F5Sx8
NOg02oxvBAo0mqj7m5j
jWxdPvxUe4PmnjsWkMX
Rdp01IxSJEO8p1wwyX7
jlqxXxxbh98I6wpuaDE
lj3KXNxxpN61WgK2i0S
classthis
nativeEntry
nativeSizeOfCode
xjjSrtL23N
nhUSgF7IL9
value__
kaXSP4F2Rp
vHWHuEhz3FiTA
xxRWb1x3TjKqQDOfgYn
WIqSvPmCny
mKKSRCuXb2
krnSVldjyJ
KhkSue2TPA
F5iSF0tBSh
MQoSWG2wom
GetManifestResourceNames
AddRange
Y1nSt9gwoP
add_ResourceResolve
kLjw4iIsCLsZtxc4lksN0j
FoDu9tELH5XUYOobJP
DktcZO42AK1XrOf2X0
deIPPs04LqMOPp8i4R
lgDuRxCxLjojN3uvso
yfwXbXpcJQ0Jm1yDUi
aMKfVtDeknDlKoMJH1
nnbCOAXUtEadSHNWOv
DuYAxOH3VrmeruPPnk
CQ7X43MMC7FSW3vnec
CqJ4tFlePGdSp3qFxY
g8Usd3aPBkQrFo1TBP
gtpSEeNobe
IsLittleEndian
gPlS5gbY1A
uF3SUx0pVy
D9oSyUZKsK
uOMSHR2Rhl
I1tSjc6uhO
eUdSL2gd8P
LjjSiR2E4E
NeRS3Q8OIu
m86S7ODKhw
qb3S9lRJVH
snYSk3W3rd
twpSsSZHMU
XO2SnkkxGk
s4oSpOdQej
hD2STc2YMl
lduSBHYrBW
LppSK3kiEa
TxPS4IUAiH
yPAS1QndqD
CTlSApmbSv
t0o2ecxseb8rapWbDHc
T7H7UBxuOXeyJdHDfHT
l4BmppxHuMOwcPfpRiG
OJBT4OxF54KG0I2jYeZ
WS6er7xEO4FCIIuv310
fYCQlwxjL5johQURnka
CG8EuNxKQtd7wl84vgN
PUvK1hxOovXFInM2lfC
gS1Zdux1RCFMJ7OLqEA
hx6dAdxfyBci6yKNZj3
j2eN3ix0e7Z2CGrcsxt
LBqhC7xydRMEY6uOHbL
H5KZhTxLcv5Nf2dKaov
laU4kTxIkiDCoN3Bw0y
ToUInt32
xe83KAxCKP9n8R1jfLf
DbTq28xhANf7FvT9wyn
y7RypSxYY87MPTfg1Jy
DpjOGsxPsr3Z40lHjji
BaZDZVxW6a3A4icVWTd
JnMUwyx42CQZaVcuF9O
ibnD0Rxk9XekO72pvZb
NsLSPfxaoPZ9gt2kTMG
sWWTEuxGXijvN0W2ACP
$$method0x6000007-1
$$method0x6000020-1
$$method0x6000020-2
$$method0x600002a-1
$$method0x600002a-2
$$method0x6000039-1
$$method0x600005f-1
$$method0x600027b-1
fpZkCMJtINn08TUXNB.a1MLbBnPV1tOJ1L9gO
LxasdrwHfTss8dQQey.H4WR0SbCkIo0PBDNGa
STAThreadAttribute
ReliabilityContractAttribute
System.Runtime.ConstrainedExecution
Consistency
SecurityCriticalAttribute
System.Security
SecuritySafeCriticalAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
CompilerGeneratedAttribute
EditorBrowsableAttribute
EditorBrowsableState
JsonPropertyAttribute
TypeLibTypeAttribute
DispIdAttribute
TypeLibFuncAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
FlagsAttribute
WrapNonExceptionThrows
pwroff_ZFubDnukJ9Y8fcFJ
$c5493878-ee42-467c-bdbe-9262475dd46d
3.3.3.3
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
3System.Resources.Tools.StronglyTypedResourceBuilder
15.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
15.9.0.0
ExecParams
country
partnerName
productName
excutionWidget
buyingChannel
discrepancy
PostBackUrl
userId
prices
salesChannel
active
ipLoggerCode
modeUpdater
modePublisher
paramsProduct
ListProductInstall
UrlTrack
trackPostVar
dailycheck
TrackDecrPrmKey
TrackDecrPrmIv
$F935DC23-1CF0-11D0-ADB9-00C04FD58A0B
dqdlcK7MWF0sRimdR4.UFd0eK3bsDVy7kuU78+W4neXx9N82Yoc4oUdB+iJEGs6k1gFPpsq8DaD`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
F/$8oX
&k,S9Ec
*ULtu-q
Q%odP$IO
NG"xYI{
Q83~_i
w Q%V8
osJ[y6
~jt/w6
? #'}4p
(B%)eJP
[gn]:O
ZqIZcC
?ztQ,G
o3r2(N
78ftrGh
%Di,.v/
0ZQq?'
]Ht>JR"
jhQFVu'
1@+?lQ~B
XOdWsI^h
n56*,!
4d'VAz
YVBi-'
AvC8bB
*/+M/z}
MzeWdp
YwieLW
d>$i6'
9`OvgM#
$Er{L?
#YZ:UH/
">uwdX#*d
;+\q=r5
ADO'h,m
t+5PnY
kX@O}Y
L$K,ww
F@qn$dQC[
FMi<7Mp
#*P1 >
sYRHf&w
Lw+)oJzA
,{"fv7
q~H:TY
hr)e4t
,:o{H1Vj
8VHDg6
kCo5wJ
,?F}p<nb
5\M$ig%
:APMT9
Ut1^$}&b
1exmYt
c#MMS3:S
NW&:g@Z[
pX_&\w
}&n4Ax
UUC:2?&
@0),Q[
0UGP*~
;%j;p&
!j4#v6^
m5+KL-1v
/GATd
Bzq8DT
Qw'UtT
`fA$X`u
iI"Y.@
"CdMra
o4bU|i1
VkvLH1gJ
$:h2R<
cW~UD-ea~
~vtp@&d
Z{6c=eC
ZUyOx6
5]r;sx
76i8b!
@~nZ&-
'}XcB1
XW7O(sH
QF@t*+5
E)UzC=
vGRR#=
!9cvQ,$m
DkW>b5
w,hJSb
7\p~^Jj
'{`:Ws
oE;DXU
%-gu8
{i+gRN
VX.LIko
kvLtF*
G%wHdJ
Vgn^sk
SL&T+M
kF~Dm;
S>#dGI"
KhFvcx
Y2nK:H
:`T^s]
iQyvz6
PB0\vD[
%Y`t7(n
3D#a>+
W0.34m,}gBY
<| rS
UNJ'Dm
J_j%vk
rKX!xm2
O{G,z_
~G&{ZZ
%f$8\
BYE(|o
z&So"5
fbKX-j
z*="VU|/y
j(o SN~
H:J"+\
sshn>#
]7VvHJCZM}
^`o3x"&
.A'qIZ_
D$DcEe
m-i7U/o
qw'>r~R
ul6-u
1N;5;E
oxePa<[
[oaBoFG
m3;khw
\-\*_|Zy
e!3t-O
o)O{Si
Um]G7=
;?a~}?
Fl*Okg
8z*$Hb
](5HWR:
JmRk`8
)1W]}M;z
v+0ZC>>
N>mS`rc
uB=JLc\Z
!y1a!}xH
FcX1JI
w*Qz6-
9g-Pjey<
nHo04*#
V#U>i"/
0-M5Q/
K^'M>Y
w'a6+n
9vXwTR
k \\Lx
gP2`6q
mK0Mr@^h
Vh]<cA
*q+a<6
w1|U4
]4v;r*
T0oS*p
j(gsXLp1$N
ZBp-&p
T^jndG
&fu-`!
k?/7f_:
I]#Vlznm
?!%z-X-
bL`y$7JC
30H3=d
L}_79}t
K2!V<7nQ
<X4j%|R
-z#Hh$
HerhO-
/u!y&D
[Oh`dK
Fj/K}{
&Xc%N\
dxr{&$
QLG!eq
1r4NM S
I)%6K7
M4P?>l6
,xA")3
"|i(A3
H*0Q&Q
}wUaP
(q*vYQ
72p>rl?
UKe_~2
^'e?/m
}i*/G
=XK\Sp
QmMH9_
)iv8"7
4bj'mX5s
Ak=u}2g
c@]N2}
BN;AQTF)
@;.-O&
6+g)S5Zy
xa21"s
Lv)fqp
@iIL0v
2.ov(}~z
aZZ-my
ka~"s?h&
l"]Ibs
.NF}&D
>uAnu{
x@GN,31:E
T.DJUd
oH>L]]
c/Jk6Y
{^SkyD
8 t?Nsv
U-{[(9M
AphMbP
#"y/%u
n9q>n4
:h,u2^aT
?5`{_
r8<-.G7
&0=+Np
Px9Ed_
mf|4q|.
u|I>
<j./HJ
/&Q<-0u,
@],:rh
T>TX^E
s}8iqmXi41x
B(Ob!@
CF6Jgc
xG@0?-
u4wZ>A
d*GpI}c@
#O$6y"
}W'b{,R
l~z/?{
TW,=o&*dCt`v
>;HLhE
s].'OT-
vU[yylp~N8(
a 8|"r
%49QT9t
IG8{cuB
IeyZi5
dU_ Q
r%$ uUNFk
zih;XK
euVA/q
#@z7#Mi7
i7NxuC
zo8'{7
if/q&{
"]f?r:
~tcV\
W5!qe
cV2nse
-xs_@wM%
mZWJJb
,#U"uLa
'Z/D^P?
<weViX
~h~d?D&
wA*|6
wpD~kP
b!lQ>&u
b)S["w
(f;7fj
S/yg!=
Qb"$6L
ls6dks
b,=9{Y
pD] -V
,Ige$Y
7P6ser
[HyceM
bCl|Q_
pQ3Z',
9tXX57
k<4p,]
@}5\B/
hK+gZC
MUEAndR
o/gbCk
3O-t7G
onTb%
|9!@TMA4
mh?V='
B"S:X/
6eai(ao
g_:Jh1h
iS3y<h
2j%&Si(
j&3&1a
$I.tJH
_\K3fl
g_Eja!
84)=D`
){fV"u:U
h/#Hum
#:jX$H
pD_:(fiAB
RbUl=2
s^in(5
9]TTje
SlN{9;
9X|71Vq
t"*6|o
JJn<KqM
FIL]O6J&e0
;4{r9Y
;wc_E%
-SG?|$
b:T_n}8
>H-+\.^
)"(XeOb.
YyC"nh
/sTcMU
L:2C?rD/;
,%Vj=
1WMI&C
/j]B9]|
]-`,V0
WwXmjk
MiDIe
d!\(EJj5
"Dz\H!
V*Zw5%
7aZ1R<
0TN,Od
:a.Xg(
mNE=X{
Gf]D b
Ctj-FEd>
|@igbD
8Wk2}R
_8Lg,7
Eh6*`7
S;= 5T
ODc1 Q}
'z5!!J
Bwoj@C
&.;`7]
,N1b%-
|jbO!O
6,"u,_
<t>i m
K @FkMCf
ci>%uUZ
CqYVez
Z<`g_4
/lx9m^
^~uWt[}
7xM;tK
22r@RRE
Vue]g7
OP~xIxo
KwqgAu
poweroff.pdb
_CorExeMain
mscoree.dll
Rfhn M
8nVDNR
#Rp!rAFV
;t-D_b
`] DDD
v X%?""2
&Ti7@N
}EDD&[
/""2=|
nMDDD.Q
Ge?"""
Rr'"""
EDDD&E
DDNpp|
yVW<>:d
9W{=>[X
$@DFy,
p#o3,Vs
mk-TUJ%2
__`?,;XoY%
<IC[{XlWcU`
#"2]bIPSU
{O?d,g
<g-/X/rV
cu^iP
!b" U
W.OSU6+
92<!xVb2
%kyN?t
&K qPn
a1qDZK
;=%F8-
=F)F6#
8wK2c8-K2
5VkV]G$=
q_d= L)Jcy<
8-K&YNi-
S~3!v-
t!0o[^,
3D:8.V\
BkJm(M
uF)Jc8
%F+Jk)m
Z2c8*$`
D+Ea,Gy
KTdM+E
};PI|^
P#0oZ^,
2%M@7E
IDAT?./x
-S(Rc(
4V)i{)
M(lBn-
i--A7(
2JQ&)O
:fYFn-VkB
<-K^L&
5{VFM|
~^0MSRc$
LVgbkzO
,!>;J)
ohn,{y
udZShC!
I]s\U,
%ZS&)e
052 l+6
7{s&IJb
3~:;#5
gdgng.
cTCPjhOiIT,PM
&ir^,9MS
fs^L&</'<
hLEK6Z
rBfmLM
z{C#>Q
UzO/M9
BcEeIV
{FyNw<
CP?-(g#@
jQ7,K>n
"xFYN7M
y?nr-nr=
IBg<&-
ex2_2(
Q5@,rV
$#NF#N
TDvqrO
>@c?C4
&)Z\j6
%IQ0.r
(HZE5Xlv
lvHVZL
s_2}2`
1+,C[|
y "_Um>
x}xfq c
KDvqrO
HPT]68
"r&"Oq
RDO VO
Uo_0f
!G$Ei(
KUzq*Q
d%i"#+o
%r+tGQ
@dImno
&cz_YQ
Fh[]Dn
2:iB+M
fDyF'Mi%
8XC\d=
CzYF;Iy
.;QD=I
Z/V~E0g
A@FN+M
z]Z:)p
"NSziB
IL/IhF
{m`fmc}
0$pNfI
v;<m5i
E9 &.r3
Ek8[%
104A@5"-
LVkx)r
s|)qW`
IDATVJ
,&VGon
nosmm
sJ3`FYT
B5+`7M
ro<1#~
sg<f?4#~
so2ag65w
!w&cvgS
M{r~G9#
!ou{\[[g#
!n/{Q'
")r&Iy
_~[1KS
\Bw|Z@
,"rZD>C
;.NN r
U~92R)
?/N. r
?::4|!
){=o"K
[DdBD
<_}+vz
iUk4fg
<?xml version="1.0" encoding="utf-8"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app" />
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel element will disable file and registry virtualization.
Remove this element if your application requires this virtualization for backwards
compatibility.
-->
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
</requestedPrivileges>
<applicationRequestMinimum>
<defaultAssemblyRequest permissionSetReference="Custom" />
<PermissionSet Unrestricted="true" ID="Custom" SameSite="site" />
</applicationRequestMinimum>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of the Windows versions that this application has been tested on
and is designed to work with. Uncomment the appropriate elements
and Windows will automatically select the most compatible environment. -->
<!-- Windows Vista -->
<!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />-->
<!-- Windows 7 -->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />-->
<!-- Windows 8 -->
<!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />-->
<!-- Windows 8.1 -->
<!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />-->
<!-- Windows 10 -->
<!--<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />-->
</application>
</compatibility>
<!-- Indicates that the application is DPI-aware and will not be automatically scaled by Windows at higher
DPIs. Windows Presentation Foundation (WPF) applications are automatically DPI-aware and do not need
to opt in. Windows Forms applications targeting .NET Framework 4.6 that opt into this setting, should
also set the 'EnableWindowsFormsHighDpiAutoResizing' setting to 'true' in their app.config. -->
<!--
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
</windowsSettings>
</application>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!--
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>
)S71SDASgQSgYSgaSgiSgqSgySg
.[l.cw.
.+J.CJ.KJ.3l.;JI
#"&%(')(*'+','-'.'1020435363738393:3
pwroff_ZFubDnukJ9Y8fcFJ.Properties.Resources
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
{11111-22222-10009-11112}
LxasdrwHfTss8dQQey.H4WR0SbCkIo0PBDNGa
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
MicroWorld-eScan Gen:Variant.Strictor.266701
FireEye Generic.mg.4ab4f24b913575f5
CAT-QuickHeal Clean
ALYac Gen:Variant.Strictor.266701
Malwarebytes Adware.Csdimonetize
VIPRE Gen:Variant.Strictor.266701
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Strictor.266701
K7GW Clean
Cybereason malicious.39f831
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Cyren W32/MSIL_Troj.BWA.gen!Eldorado
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Adware.CsdiMonetize.BC
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.MSIL.CSDI.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
TACHYON Clean
Emsisoft Gen:Variant.Strictor.266701 (B)
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine malicious.moderate.ml.score
CMC Clean
Sophos Generic ML PUA (PUA)
Ikarus Clean
GData Gen:Variant.Strictor.266701
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Strictor.D411CD
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.MSIL.CSDI.gen
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
McAfee Clean
MAX malware (ai score=88)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.36196.Nq0@a0i1atl
AVG Win32:AdwareX-gen [Adw]
Avast Win32:AdwareX-gen [Adw]
CrowdStrike win/malicious_confidence_70% (D)
No IRMA results available.