[bay.albatros]

-------------------------------------------------

All in one Tools

QUIMATROW APP

XLL BUILDER MODULE
"Generates custom Excel Add-in (.xll) files capable of seamlessly and silently downloading and executing embedded files or remote URL payloads in the background."

LNK BUILDER MODULE
"Creates customized Windows Shortcut (.lnk) files designed to silently fetch and run files from a target URL or execute embedded files flawlessly."

CHM BUILDER MODULE
"Compiles Compiled HTML Help (.chm) files that can stealthily extract and execute embedded files or silently download and run target URL payloads."

MSC BUILDER MODULE
"Builds custom Microsoft Management Console (.msc) snap-ins featuring the ability to silently download and execute embedded files or remote URL resources without interruption."

CPL BUILDER MODULE
"Develops custom Control Panel (.cpl) items that allow for the flawless, silent execution of embedded files or automated downloading and running from a specific URL."

EXE LAUNCHER MODULE
"A deployment utility that securely wraps standard executables, capable of silently downloading and executing URL-based payloads in the background."

JAR LAUNCHER MODULE
"Executes Java Archive (.jar) files seamlessly on target machines, functioning entirely independently without requiring Java (JRE/JDK) to be installed on the system."

XLL BUILDER MODULE
1 Month -------> 250$
3 Month ---------> 500$
6 Month -----------> 750$
12 Month -----------> 1000$
Lifetime --------------> 2000$

LNK BUILDER MODULE
1 Month --------> 200$
3 Month ----------> 400$
6 Month -----------> 600$
12 Month -----------> 800$
Lifetime --------------> 1500$

MSC BUILDER MODULE
1 Month ---------> 150$
3 Month ----------> 300$
6 Month -----------> 450$
12 Month -----------> 600$
Lifetime --------------> 1000$

CHM BUILDER MODULE
1 Month ---------> 150$
3 Month ----------> 300$
6 Month -----------> 450$
12 Month -----------> 600$
Lifetime --------------> 1000$

CLP BUILDER MODULE
1 Month ---------> 150$
3 Month ----------> 300$
6 Month -----------> 450$
12 Month -----------> 600$
Lifetime --------------> 1000$

EXE LAUNCHER MODULE
1 Month ---------> 200$
3 Month ----------> 400$
6 Month -----------> 600$
12 Month -----------> 800$
Lifetime --------------> 1500$

JAR LAUNCHER MODULE
1 Month ---------> 200$
3 Month ----------> 400$
6 Month -----------> 600$
12 Month -----------> 800$
Lifetime --------------> 1500$

ALL MODULES
1 Month ----------> 850$
3 Month -----------> 1600$
6 Month -------------> 2800$
12 Month -------------> 4000$
Lifetime ----------------> 7000$

-------------------------------------------------
Start Contract

[TEKNIX187]

Looks good man. Good luck with sales!

[jason123]

Does CHM work with windows that has no Internet Explorer?

[bay.albatros]

Does CHM work with windows that has no Internet Explorer?

----------------------

Yes, it works. Doesn't use Internet Explorer.

It uses the Help File within Windows.

[hoangdoan]

Look good brother
Is XXL a single file?
And is its extension XXL?
Do you have any videos showing how it works?
Download from the internet and execute.

[bay.albatros]

Look good brother
Is XXL a single file?
And is its extension XXL?
Do you have any videos showing how it works?
Download from the internet and execute.

--------------

XLL yes, single file
Extension: XLL
A video showing how all modules work is available on the page.

[Nick Elite]

Can I not do? Change it to mate.xll.exe and hide the .exe using promot and just share using mate.xll and it will be a standalone payload. Its old tricks right> from the ebooks?

[bay.albatros]

Can I not do? Change it to mate.xll.exe and hide the .exe using promot and just share using mate.xll and it will be a standalone payload. Its old tricks right> from the ebooks?

----------------------------

What you're talking about is a basic extension spoofing trick from 2010.
Any modern AV/EDR will instantly flag a renamed .exe file.
This module doesn't do cheap tricks; it compiles a genuine, native C/C++ XLL (DLL) file that executes directly within the trusted memory space of Excel (excel.exe).

Don't confuse script kiddie ebook tricks with actual native software engineering.

[Nick Elite]

----------------------------

What you're talking about is a basic extension spoofing trick from 2010.
Any modern AV/EDR will instantly flag a renamed .exe file.
This module doesn't do cheap tricks; it compiles a genuine, native C/C++ XLL (DLL) file that executes directly within the trusted memory space of Excel (excel.exe).

Don't confuse script kiddie ebook tricks with actual native software engineering.

Okay so its an executable within the execel compile, can you please add in a hex (example) that the file (virus) ran on the excel exe instead of just running on background and hiding it automatically, also without binding any excel ofcourse. It should run the exe in excel.exe and should then show as an error or a content cannot be found as the virus has no data of excel (as none of excel files are binded) but should work on the excel native hex as it would be a excel file. It will compile an error or file not found and then infect the machine imo.

[bay.albatros]

Okay so its an executable within the execel compile, can you please add in a hex (example) that the file (virus) ran on the excel exe instead of just running on background and hiding it automatically, also without binding any excel ofcourse. It should run the exe in excel.exe and should then show as an error or a content cannot be found as the virus has no data of excel (as none of excel files are binded) but should work on the excel native hex as it would be a excel file. It will compile an error or file not found and then infect the machine imo.

-----------------------

Your assumptions about how this module functions are technically incorrect.
The video demonstrates the exact execution flow and capabilities in full detail.
Please refer to the video for how it actually works.

[Nick Elite]

-----------------------

Your assumptions about how this module functions are technically incorrect.
The video demonstrates the exact execution flow and capabilities in full detail.
Please refer to the video for how it actually works.

I saw it, and it just renders it, there can be a random excel file inside and binded, as I can see when you clicked on the putty excel bind, it showed as addon - around like XLL addon I forgot. Make sure to hide that tho.

[bay.albatros]

I saw it, and it just renders it, there can be a random excel file inside and binded, as I can see when you clicked on the putty excel bind, it showed as addon - around like XLL addon I forgot. Make sure to hide that tho.

-------------------------

It is quite clear that you are confusing fundamental Windows file architectures. An XLL is not an XLS/XLSX document, nor is this tool a primitive 'binder' that simply drops an executable.

An XLL is actually a natively compiled Dynamic-Link Library (DLL) specifically built using the Microsoft Excel C API. When executed, Excel natively loads this DLL directly into its own process memory space via exported functions like xlAutoOpen. The reason it is identified as an 'Add-in' is because, architecturally, that is exactly what an XLL is—a legitimate Microsoft extension format. It doesn't rely on cheap tricks to 'hide' things; it utilizes native execution flow.

I highly recommend you research the Microsoft XLL SDK and the fundamentals of Windows PE architecture to understand the vast difference between simple file binders and native memory execution before commenting further.

[Nick Elite]

-------------------------

It is quite clear that you are confusing fundamental Windows file architectures. An XLL is not an XLS/XLSX document, nor is this tool a primitive 'binder' that simply drops an executable.

An XLL is actually a natively compiled Dynamic-Link Library (DLL) specifically built using the Microsoft Excel C API. When executed, Excel natively loads this DLL directly into its own process memory space via exported functions like xlAutoOpen. The reason it is identified as an 'Add-in' is because, architecturally, that is exactly what an XLL is—a legitimate Microsoft extension format. It doesn't rely on cheap tricks to 'hide' things; it utilizes native execution flow.

I highly recommend you research the Microsoft XLL SDK and the fundamentals of Windows PE architecture to understand the vast difference between simple file binders and native memory execution before commenting further.

Okay for this I'll bind the 0day papers on this. Just don't feel like sale trashing, genuine questions.

[julp]

Can u add DOCM and XLSM?

[bay.albatros]

Can u add DOCM and XLSM?

-----------------------------------

Adding DOCM and XLSM support is actually very simple, and I can easily do it. However, I intentionally choose not to.
Following recent Microsoft Office updates, VBA macros are strictly blocked by default.
They are highly unreliable and get detected easily.
For now, I don't trust macro-based execution;
My focus is on providing robust, native execution methods that actually work without relying on outdated macro tricks.