Exploit Launcher Setup.zip
- SHA256 94f04077a18564eb9b1f88a21ec5856e22269bba88ef3024823cad9a2b81b816
Overview
overview
10Static
static
3Exploit La...up.zip
windows10-2004-x64
1Exploit La...up.zip
windows11-21h2-x64
1Exploit La...up.exe
windows10-2004-x64
10Exploit La...up.exe
windows11-21h2-x64
10$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1locales/mr.ps1
windows10-2004-x64
3locales/mr.ps1
windows11-21h2-x64
3resources/...ddon.h
windows10-2004-x64
3resources/...ddon.h
windows11-21h2-x64
3resources/...ed.cpp
windows10-2004-x64
3resources/...ed.cpp
windows11-21h2-x64
3resources/...e3.dll
windows10-2004-x64
1resources/...e3.dll
windows11-21h2-x64
1resources/...act.js
windows10-2004-x64
3resources/...act.js
windows11-21h2-x64
3resources/...ing.js
windows10-2004-x64
3resources/...ing.js
windows11-21h2-x64
3resources/...te3.js
windows10-2004-x64
3resources/...te3.js
windows11-21h2-x64
3resources/...ace.js
windows10-2004-x64
3resources/...ace.js
windows11-21h2-x64
3resources/...kup.js
windows10-2004-x64
3resources/...kup.js
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Exploit Launcher Setup.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Exploit Launcher Setup.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Exploit Launcher Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Exploit Launcher Setup.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
locales/mr.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
locales/mr.ps1
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
resources/app.asar.unpacked/node_modules/datavault-win/src/dpapi_addon.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
resources/app.asar.unpacked/node_modules/datavault-win/src/dpapi_addon.h
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
resources/app.asar.unpacked/node_modules/datavault-win/src/dpapi_not_supported.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
resources/app.asar.unpacked/node_modules/datavault-win/src/dpapi_not_supported.cpp
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
resources/app.asar.unpacked/node_modules/sqlite3/build/Release/node_sqlite3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
resources/app.asar.unpacked/node_modules/sqlite3/build/Release/node_sqlite3.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
resources/app.asar.unpacked/node_modules/sqlite3/deps/extract.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
resources/app.asar.unpacked/node_modules/sqlite3/deps/extract.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
resources/app.asar.unpacked/node_modules/sqlite3/lib/sqlite3-binding.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
resources/app.asar.unpacked/node_modules/sqlite3/lib/sqlite3-binding.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
resources/app.asar.unpacked/node_modules/sqlite3/lib/sqlite3.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
resources/app.asar.unpacked/node_modules/sqlite3/lib/sqlite3.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
resources/app.asar.unpacked/node_modules/sqlite3/lib/trace.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
resources/app.asar.unpacked/node_modules/sqlite3/lib/trace.js
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
resources/app.asar.unpacked/node_modules/sqlite3/src/backup.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
resources/app.asar.unpacked/node_modules/sqlite3/src/backup.js
Resource
win11-20260513-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/$PLUGINSDIR/StdUtils.dll |
| unpack002/$PLUGINSDIR/System.dll |
| unpack002/$PLUGINSDIR/UAC.dll |
| unpack002/$PLUGINSDIR/WinShell.dll |
| unpack003/ffmpeg.dll |
| unpack003/libEGL.dll |
| unpack003/libGLESv2.dll |
| unpack003/resources/app.asar.unpacked/node_modules/@primno/dpapi/prebuilds/win32-x64/node.napi.node |
| unpack003/resources/app.asar.unpacked/node_modules/datavault-win/prebuilds/win32-x64/node.napi.node |
| unpack003/resources/app.asar.unpacked/node_modules/sqlite3/build/Release/node_sqlite3.node |
| unpack003/vk_swiftshader.dll |
| unpack003/vulkan-1.dll |
| unpack002/$PLUGINSDIR/nsDialogs.dll |
| unpack002/$PLUGINSDIR/nsExec.dll |
| unpack002/$PLUGINSDIR/nsProcess.dll |
| unpack002/$PLUGINSDIR/nsis7z.dll |
| unpack006/$PLUGINSDIR/StdUtils.dll |
| unpack006/$PLUGINSDIR/System.dll |
| unpack006/$PLUGINSDIR/UAC.dll |
| unpack006/$PLUGINSDIR/WinShell.dll |
| unpack006/$PLUGINSDIR/nsDialogs.dll |
| unpack006/$PLUGINSDIR/nsExec.dll |
| unpack006/$PLUGINSDIR/nsProcess.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Exploit Launcher Setup.exe |
| unpack003/OblivionPath.exe |
| unpack003/resources/elevate.exe |
| unpack002/$R0/Uninstall OblivionPath.exe |
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2026
CN=Rapid Inc. Development
May 22, 2026
CN=Rapid Inc. Development
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=3, id=4, version=8047,
count=4, id=14, version=7299,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=83, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=4, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2026
CN=Rapid Inc. Development
May 22, 2026
CN=Rapid Inc. Development
Sep 30, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=146, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=60, id=261, version=27316,
count=1, id=260, version=27316,
count=30, id=259, version=30795,
count=222, id=261, version=30795,
count=55, id=260, version=30795,
count=1, id=256, version=30795,
count=136, id=264, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=259, version=30795,
count=135, id=261, version=30795,
count=10, id=260, version=30795,
count=1, id=253, version=31935,
count=14, id=260, version=31935,
count=9, id=259, version=31935,
count=42, id=261, version=31935,
count=5, id=257, version=30795,
count=130, id=1, productName=Unmarked objects,
count=3, id=265, version=32217,
count=1, id=256, version=32217,
count=1, id=255, version=32217,
count=1, id=258, version=32217,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=259, version=30795,
count=135, id=261, version=30795,
count=10, id=260, version=30795,
count=1, id=253, version=31935,
count=14, id=260, version=31935,
count=9, id=259, version=31935,
count=42, id=261, version=31935,
count=5, id=257, version=30795,
count=130, id=1, productName=Unmarked objects,
count=3, id=265, version=32217,
count=1, id=256, version=32217,
count=1, id=255, version=32217,
count=1, id=258, version=32217,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=259, version=30795,
count=148, id=261, version=30795,
count=33, id=260, version=30795,
count=14, id=260, version=32533,
count=9, id=259, version=32533,
count=42, id=261, version=32533,
count=3, id=257, version=30795,
count=212, id=1, productName=Unmarked objects,
count=6, id=265, version=32826,
count=1, id=256, version=32826,
count=1, id=255, version=32826,
count=1, id=258, version=32826,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2026
CN=Rapid Inc. Development
May 22, 2026
CN=Rapid Inc. Development
count=9, id=241, version=40116,
count=119, id=243, version=40116,
count=24, id=242, version=40116,
count=17, id=259, version=23907,
count=30, id=261, version=23907,
count=17, id=260, version=23907,
count=7, id=203, version=65501,
count=89, id=1, productName=Unmarked objects,
count=1, id=264, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=46, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=25, id=1, productName=Unmarked objects,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=259, version=26213,
count=152, id=261, version=26213,
count=35, id=261, version=26706,
count=16, id=260, version=26706,
count=20, id=259, version=26706,
count=19, id=260, version=26213,
count=15, id=257, version=26213,
count=190, id=1, productName=Unmarked objects,
count=43, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=131, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2026
CN=Rapid Inc. Development
May 22, 2026
CN=Rapid Inc. Development
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=3, id=4, version=8047,
count=4, id=14, version=7299,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=83, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=4, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=46, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=25, id=1, productName=Unmarked objects,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,