// Decompiled with JetBrains decompiler // Type:  // Assembly: crypted, Version=4.9.4.5, Culture=neutral, PublicKeyToken=null // MVID: 39ED6F8C-EF75-4E88-8706-EBD78B0ECCC1 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Injector.elwj-8012f8d9cbc27bdc5242e812bac1932349108916abac095e249196a1ff3b491d.exe using Microsoft.VisualBasic.CompilerServices; using System; using System.Security.Cryptography; using System.Text; [StandardModule] internal sealed class \u0006 { public static string \u0002(string _param0, string _param1) { TripleDESCryptoServiceProvider cryptoServiceProvider1 = new TripleDESCryptoServiceProvider(); MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider(); cryptoServiceProvider1.Key = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(_param1)); cryptoServiceProvider1.Mode = CipherMode.ECB; ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor(); byte[] inputBuffer = Convert.FromBase64String(_param0); return Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length)); } public static byte[] \u0002(byte[] _param0, string _param1) { TripleDESCryptoServiceProvider cryptoServiceProvider1 = new TripleDESCryptoServiceProvider(); MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider(); cryptoServiceProvider1.Key = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(_param1)); cryptoServiceProvider1.Mode = CipherMode.ECB; ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor(); byte[] inputBuffer = _param0; return decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length); } }