Loader.rar
- SHA256 c65800dccff32c6d9161482b3bcc3aaa6b51757c217ef0e5aab9af38310cbe88
Overview
overview
10Static
static
5Loader.rar
windows10-2004-x64
10Loader.rar
windows11-21h2-x64
1Loader/Lib...re.dll
windows10-2004-x64
3Loader/Lib...re.dll
windows11-21h2-x64
3Loader/Lib/Qt5Gui.dll
windows10-2004-x64
3Loader/Lib/Qt5Gui.dll
windows11-21h2-x64
3Loader/Lib...ia.dll
windows10-2004-x64
3Loader/Lib...ia.dll
windows11-21h2-x64
3Loader/Lib...ck.dll
windows10-2004-x64
3Loader/Lib...ck.dll
windows11-21h2-x64
3Loader/Lib...rk.dll
windows10-2004-x64
3Loader/Lib...rk.dll
windows11-21h2-x64
3Loader/Lib...ng.dll
windows10-2004-x64
3Loader/Lib...ng.dll
windows11-21h2-x64
3Loader/Lib/msIso.dll
windows10-2004-x64
3Loader/Lib...40.dll
windows10-2004-x64
3Loader/Lib...40.dll
windows11-21h2-x64
3Loader/Lib...00.dll
windows10-2004-x64
3Loader/Lib...00.dll
windows11-21h2-x64
3Loader/Lib...20.dll
windows10-2004-x64
3Loader/Lib...20.dll
windows11-21h2-x64
3Loader/Lib/npcap.sys
windows10-2004-x64
1Loader/Lib...sw.dll
windows10-2004-x64
3Loader/Lib...sw.dll
windows11-21h2-x64
3Loader/Lib...s5.dll
windows10-2004-x64
3Loader/Lib...s5.dll
windows11-21h2-x64
3Loader/Loa...er.exe
windows10-2004-x64
10Loader/Loa...er.exe
windows11-21h2-x64
10Static task
static1
Behavioral task
behavioral1
Sample
Loader.rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Loader.rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Loader/Lib/Qt5Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Loader/Lib/Qt5Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Loader/Lib/Qt5Gui.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Loader/Lib/Qt5Gui.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Loader/Lib/Qt5Multimedia.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Loader/Lib/Qt5Multimedia.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Loader/Lib/Qt5MultimediaQuick.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Loader/Lib/Qt5MultimediaQuick.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Loader/Lib/Qt5Network.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Loader/Lib/Qt5Network.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Loader/Lib/Qt5Positioning.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Loader/Lib/Qt5Positioning.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Loader/Lib/msIso.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
Loader/Lib/msvcp140.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral17
Sample
Loader/Lib/msvcp140.dll
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
Loader/Lib/msvcr100.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral19
Sample
Loader/Lib/msvcr100.dll
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
Loader/Lib/msvcr120.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral21
Sample
Loader/Lib/msvcr120.dll
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
Loader/Lib/npcap.sys
Resource
win10v2004-20260130-en
Behavioral task
behavioral23
Sample
Loader/Lib/opengl32sw.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Loader/Lib/opengl32sw.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Loader/Lib/proxy922s5.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Loader/Lib/proxy922s5.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Loader/Loader by Sexsoldier.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Loader/Loader by Sexsoldier.exe
Resource
win11-20260130-en
File was altered after it was signed.
| resource |
|---|
| unpack001/Loader/Lib/Qt5Core.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Loader/Lib/msIso.dll |
| unpack001/Loader/Loader by Sexsoldier.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Loader/Lib/Qt5Positioning.dll |
Codesign digest Mismatch
File was altered after it was signed.
Nov 17, 2021
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=26706,
count=4, id=199, version=41118,
count=28, id=261, version=26706,
count=10, id=260, version=26706,
count=14, id=259, version=26706,
count=2, id=260, version=26715,
count=1, id=262, version=26715,
count=23, id=257, version=26715,
count=329, id=1, productName=Unmarked objects,
count=45, id=260, version=27034,
count=240, id=261, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=151,
count=1, id=258, version=27034,
Nov 17, 2021
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=26706,
count=12, id=259, version=26706,
count=23, id=261, version=26706,
count=4, id=257, version=26706,
count=8, id=257, version=26715,
count=3, id=257, version=27034,
count=1521, id=1, productName=Unmarked objects,
count=15, id=260, version=27034,
count=344, id=261, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=151,
count=1, id=258, version=27034,
Nov 18, 2021
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=257, version=26715,
count=20, id=261, version=26706,
count=10, id=260, version=26706,
count=6, id=259, version=26706,
count=7, id=257, version=27034,
count=473, id=1, productName=Unmarked objects,
count=116, id=261, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=151,
count=1, id=258, version=27034,
Nov 18, 2021
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=257, version=26715,
count=20, id=261, version=26706,
count=10, id=260, version=26706,
count=2, id=259, version=26706,
count=9, id=257, version=27034,
count=364, id=1, productName=Unmarked objects,
count=12, id=261, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=151,
count=1, id=258, version=27034,
Nov 17, 2021
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=26706,
count=4, id=259, version=26706,
count=24, id=261, version=26706,
count=4, id=257, version=26706,
count=12, id=257, version=26715,
count=3, id=257, version=27034,
count=995, id=1, productName=Unmarked objects,
count=129, id=261, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=151,
count=1, id=258, version=27034,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 1, 2026
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,ST=Oulu,C=FI
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=25203,
count=3, id=259, version=24123,
count=11, id=260, version=24123,
count=4, id=257, version=24123,
count=22, id=261, version=24123,
count=3, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=340, id=1, productName=Unmarked objects,
count=36, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
count=68, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=253, version=26213,
count=4, id=259, version=26213,
count=255, id=1, productName=Unmarked objects,
count=5, id=257, version=26213,
count=7, id=261, version=26213,
count=1, id=256, version=26213,
count=64, id=270, version=26213,
count=21, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
Mar 19, 2024
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=239, version=40116,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=191, id=1, productName=Unmarked objects,
count=3, id=257, version=26706,
count=8, id=259, version=26706,
count=78, id=260, version=26706,
count=76, id=261, version=26706,
count=1, id=256, version=26706,
count=1, id=255, version=26706,
count=1, id=258, version=26706,
Mar 19, 2024
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=179, id=1, productName=Unmarked objects,
count=490, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=85, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=52, id=175, version=40219,
count=184, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Mar 19, 2024
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=3, id=203, version=65501,
count=176, id=1, productName=Unmarked objects,
count=686, id=224, productName=VS2013 build 21005, version=21005,
count=97, id=223, productName=VS2013 build 21005, version=21005,
count=54, id=229, version=21005,
count=184, id=225, productName=VS2013 build 21005, version=21005,
count=1, id=220, productName=VS2013 build 21005, version=21005,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 build 21005, version=21005,
Dec 13, 2022
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Dec 7, 2022
SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=9, id=257, version=29395,
count=128, id=1, productName=Unmarked objects,
count=6, id=262, version=29395,
count=5, id=259, version=29395,
count=9, id=260, version=29395,
count=6, id=264, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Sep 11, 2024
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=49, id=241, version=40116,
count=166, id=243, version=40116,
count=59, id=242, version=40116,
count=6, id=199, version=41118,
count=40, id=259, version=23907,
count=54, id=261, version=23907,
count=32, id=260, version=23907,
count=13, id=239, version=40116,
count=182, id=1, productName=Unmarked objects,
count=6, id=260, productName=VS2015 UPD2 build 23918, version=23918,
count=492, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=577, id=264, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Apr 7, 2025
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3157599,CN=FIRENET LIMITED,O=FIRENET LIMITED,L=Wan Chai,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.