// Decompiled with JetBrains decompiler // Type: jf // Assembly: XobniService, Version=1.8.3.7917, Culture=neutral, PublicKeyToken=6298d2d1fcfb5d85 // MVID: EA9F7D71-4A8D-4739-A320-5F01FC76E972 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba.exe using Microsoft.Win32; using System; using System.Runtime.CompilerServices; internal static class jf { private static string a; [SpecialName] public static Guid b() { try { using (RegistryKey registryKey = Registry.LocalMachine.OpenSubKey("Software\\Xobni", false)) { if (registryKey != null) return new Guid((string) registryKey.GetValue("XMID", (object) string.Empty)); } } catch { } return Guid.Empty; } [SpecialName] public static string a() { if (jf.a != null) return jf.a; jf.a = jf.b().ToString("N").ToUpperInvariant(); return jf.a; } }