Verifying access…

Scans

EXE — Scantime

Static scan of a signed application bundle. Verified clean across all Kleenscan engines at analysis time.

0 detections
View scan results

Telegram Channel

Updates, releases, and support — join the Sericious community.

Join channel
Most advanced offensive security tool

Welcome back

What you get

Cryptographically Unique Builds

  • Every artifact has its own fingerprint
  • No two customers share signatures
  • Operational privacy baked in

Works With Any Payload

  • .NET assemblies handled natively
  • Native x64 PE executables supported
  • Auto-detects payload type for you

Enterprise-Grade Hardening

  • Memory hardening & runtime guards
  • Debugger and tracing detection
  • Sandbox & instrumentation probes

No Build Quota

  • Zero caps on build volume
  • Generate as many variants as needed
  • You own every artifact you produce

Long-Lived Builds

  • Designed for weeks of clean runtime
  • No constant rebuild treadmill
  • Predictable, reliable behavior

Instant Rebuild On Demand

  • One click to regenerate fresh
  • New bytes, new hash, same flow
  • Stay operational at all times

SmartScreen Bypass

  • Walks past Windows SmartScreen
  • No red "downloaded from internet" prompt
  • Browsers hand the file off clean

Anti-Analysis Suite

  • Sandbox and VM evasion built-in
  • Debugger & tracer detection on by default
  • Anti-forensics features built-in

99.9% FUD Rate

  • Clean across the top AV engines
  • Tested on 70+ vendors before release
  • Near-perfect undetected rate

Real Signed Executables

  • Genuine publisher signatures, not forged
  • Trusted, real-world software hosts
  • Your payload rides trusted software

Anti Machine Learning

  • Our encryptions are coded from scratch
  • Every output uses totally different methods
  • Defeats AI/ML heuristic and signature detections
ULTRA

AV/EDR Killer

  • Stops endpoint security products before your payload runs
  • Keeps them from coming back after a reboot
  • Runs as a pre-stage, ahead of your payload
★ EV-Signed Sideload Hosts

Supported build outputs

EV Sideload hosts and script wrappers available on this server. Open Build to produce one.

Why Sericious Protector

Straightforward comparison with off-the-shelf crypter services.

Feature
Sericious Protector
Other crypters
Scan-verified FUD
rare
Build time
< 60s
several minutes
Real signed application bundles
8+ hosts
Real EV-signed application bundles
PDF readers, Word, Excel, many video players, and more
random unknown apps — looks sus to victims when you spread
Delivery packaging
single-file experience — looks like one .exe to the recipient
multiple loose files alongside the .exe
Polymorphic output
every build unique
partial
Encryption methods
fully custom encryptions coded from scratch
xor, rc4, aes, and weak known ones
Encrypted download (password-protected ZIP)
Standalone EXE + application bundle outputs
.exe only
Anti-analysis / anti-sandbox
rare
Runtime scanner bypass
partial
Deep runtime bypass
no memory patching, no telemetry traces
patches memory — flagged by modern AVs
Bypass EDRs / XDRs
CrowdStrike, SentinelOne, Cortex — verified clean on runtime scans
AV-only focus — flagged by enterprise telemetry
Windows Defender and weak AVs like it
bypasses it forever — no false positives at all
1–2 weeks max, a false-positive detection fires
AV/EDR Killer
Ultra / MAX — clears endpoint protection before payload launch; stays cleared after reboot
not offered — most competitors don't ship kernel-mode killers
Crypto-only payments (no KYC)
mixed
Pick a plan · pay in crypto · build in under a minute.

Subscriptions

Unlock builder access

Current Testium

Testium

Entry tier. Standalone EXE plus unlimited script & MSI wrapper builds.

$150/mo

30 days of access

  • 2 compile builds / day
  • Unlimited wrapper builds
  • JS / VBS / VBE / JSE wrappers
  • WSF / HTA / BAT / MSI wrappers
  • Advanced persistence
  • Full anti-analysis suite
  • Priority build queue
  • SmartScreen bypass
  • Enterprise-grade protection
  • EV-signed application bundles
  • Standalone EXE
  • AV/EDR Kernel Killer (Ultra / MAX)
Current Best value

Plus

Every signed application bundle, higher daily quota, and unlimited wrapper builds.

$425/mo

30 days of access

  • 5 compile builds / day
  • Unlimited wrapper builds
  • JS / VBS / VBE / JSE wrappers
  • WSF / HTA / BAT / MSI wrappers
  • Advanced persistence
  • Full anti-analysis suite
  • Priority build queue
  • SmartScreen bypass
  • Enterprise-grade protection
  • All EV-signed application bundles unlocked
  • Standalone EXE
  • AV/EDR Kernel Killer (Ultra / MAX)
Current MAX

MAX

Everything unlocked — Auto Structural Metamorph, Killer, all carriers, dropper, wrappers, and persistence.

$1,300/mo

30 days of access

  • Unlimited compile builds / day
  • Unlimited wrapper builds
  • JS / VBS / VBE / JSE wrappers
  • WSF / HTA / BAT / MSI wrappers
  • Advanced persistence
  • Full anti-analysis suite
  • Priority build queue
  • SmartScreen bypass
  • Enterprise-grade protection
  • All EV-signed application bundles unlocked
  • Standalone EXE
  • ★ AV/EDR Killer — unlocked
  • ★ Persistent endpoint-protection disable
  • ★ Auto Structural Metamorphism
  • ★ Every builder feature unlocked
  • ★ Broad endpoint-protection coverage
  • ◆ Auto Structural Metamorphism — every build unique at binary level

Plus features on this instance: checking…

Remote suite

ByteRat licensing

Dedicated access tiers for ByteRat 2.0—billed separately from Sericious Protector builder plans. Crypto or manual invoicing can be arranged with your operator.

Starter

1 month

Full feature access for thirty days. Ideal for short engagements.

$100

30 days · renews on request

  • ByteRat 2.0 core
  • HVNC stack
  • Browser recovery tooling
Quarter

3 months

Better per-month economics with the same full capability set.

$225

90 days · single payment

  • Everything in monthly
  • Priority refresh window
  • Stability-focused cadence
Best value

Annual

Twelve months of access with predictable cost for long-running ops.

$425

365 days · best value vs. monthly

  • Full ByteRat surface
  • Seasonal update drops
  • Operator-backed onboarding
Elite

Lifetime

One-time purchase including ongoing updates while the product line is maintained.

$725

Lifetime · updates included

  • All channels & modules
  • Update stream while active
  • Long-horizon deployments

ByteRat tiers use the same on-chain checkout as builder plans. Paid ByteRat time is stored on your account separately from the Sericious Protector builder subscription.

Operator control panel

Live build queue, daily quotas, active subscriptions, and full account control. Operator-only.

Payload build
Idle
SFX pack
Idle
APK crypt
Idle
Build queue
0 waiting
    Live refresh: off
    Username Tier Status Expires Builds today Left today Custom limit Activity Carriers Actions

    Dashboard

    Select an output format, configure options, upload your file, and run the build. Progress and downloadable artifacts appear below when the run finishes.

    Builds today
    Resets at midnight server time.
    Output formats
    KMPlayer
    x64

    KMPlayer EV Sideload

    Loads your file via the same EV-signed KMPlayer app.

    payload.dll
    PDF Reader
    x86

    PDF Reader EV Sideload

    Loads your file via the same EV-signed PDF Reader app.

    payload.dll
    VS Code
    x86

    VS Code EV Sideload

    Loads your file via the same EV-signed VS Code app.

    payload.dll
    Word
    x64

    Word EV Sideload

    Loads your file via the same EV-signed Word app.

    MSVCR100.dll
    Excel
    x64

    Excel EV Sideload (x64)

    Under updating.

    VCRUNTIME140.dll
    Excel
    x86

    Excel EV Sideload

    Loads your file via the same EV-signed Excel app.

    MSVCR100.dll
    Access
    x64

    Access EV Sideload

    Under updating.

    payload.dll
    Publisher
    x64

    Publisher EV Sideload

    Under updating.

    payload.dll
    OneNote
    x64

    OneNote EV Sideload

    Under updating.

    payload.dll
    PowerPoint
    x64

    PowerPoint EV Sideload

    Under updating.

    payload.dll
    VLC
    x64

    VLC EV Sideload

    Loads your file via the same EV-signed VLC app.

    payload.dll
    ProtonVPN
    x64

    ProtonVPN EV Sideload

    Loads your file via the same EV-signed ProtonVPN app.

    payload.dll
    x64

    Notepad3 EV Sideload

    Loads your file via the same EV-signed Notepad3 app.

    payload.dll
    x64

    Notepad++ EV Sideload

    Loads your file via the same EV-signed Notepad++ app.

    payload.dll
    Zoom
    x64

    Zoom EV Sideload

    Loads your file via the same EV-signed Zoom app.

    payload.dll
    DocuSign
    x64

    DocuSign EV Sideload

    Loads your file via the same EV-signed DocuSign app.

    payload.dll
    x64 x86

    Standalone Executable

    Universal standalone build — automatic architecture detection, hardened runtime, quiet delivery.

    payload.exe
    js
    wrap

    JS Wrapper

    payload.js
    jse
    wrap

    JSE Encoded Wrapper

    payload.jse
    vbs
    wrap

    VBS Wrapper

    payload.vbs
    vbe
    wrap

    VBE Encoded Wrapper

    payload.vbe
    wsf
    wrap

    WSF Wrapper

    payload.wsf
    hta
    wrap

    HTA Wrapper

    payload.hta
    bat
    wrap

    BAT Wrapper

    payload.bat
    cmd
    wrap

    CMD Wrapper

    payload.cmd
    cab
    wrap

    CAB Wrapper

    payload.cab
    msi
    wrap

    MSI Installer Wrapper

    payload.msi
    Payload
    📁

    Drop your payload here

    or browse files

    .exe, .dll, .bin, .msi (up to 2 GB)

    🛡

    Force Admin (Wrappers)

    Drops and runs the EXE with elevated privileges — UAC prompt on most systems

    Features & options scroll
    🔒

    Startup Persistence

    Auto-run payload on Windows startup (hidden)

    📦

    File Padding

    Enable only when you get browser detections (makes file bigger)

    MB

    Anti-Sandbox / VM (Recommended)

    Prevents execution in analysis environments

    Start Delay (Recommended)

    Delays execution to defeat AV sandboxes — wall-clock safety cap 120 seconds on slow PCs

    🛡

    UAC silent mode

    EXE: one elevation prompt via manifest, then HKLM never-notify policy. Persistence stays RunOnce (no Task Scheduler).

    Execution (DLL)

    Where to run payload: trusted system process or current host process

    📄

    Open document on start

    Bundle any file (PDF, TXT, DOCX, etc.) and open it when the loader runs (same folder, hidden)

    Build Options
    Startup Persistence
    Add payload to Windows startup (hidden)
    Anti-Debug Protection
    Enable runtime anti-debugging checks
    Runtime Scanner Bypass
    Disable Windows security telemetry
    Memory Protection
    Secure memory wipe after execution

    Building...

    0%
    [*] Initializing build process...

    Packer

    Pack your sideload builds into a single portable executable with silent execution.

    Files & options scroll

    📄 Select EXE File

    Choose the sideload executable file (.exe) to pack.

    📦 Select DLL File

    Choose the DLL file (.dll) to pack with the executable.

    ⚙️ Packing Options

    Maximum compression with silent execution.

    Engine: Built-in
    🗜️ Compression: Maximum
    🔇 Execution: Silent (no window)
    📂 Extract to: Temp folder
    🚀 Auto-run: EXE after extraction

    🎨 Custom Icon (Optional)

    Set a custom icon for your packed executable to make it look more legitimate.

    🖼️
    No icon selected
    Using default icon
    ByteRat dashboard screenshot

    ByteRat 2.0

    Remote operations, rebuilt for speed

    A focused control surface with modern browser coverage, low-friction recovery flows, and HVNC tuned for real-world latency—not a reskin of legacy panels.

    ByteRat 2.0

    Current-generation stream with hardened session handling and a UI crafted for dense operational review.

    V20 recovery · no UAC needed (UAC = Admin)

    Browser-grade extraction tuned for current Chromium, WebKit, and Gecko builds—fewer brittle edge cases on patched profiles.

    Vault-grade targets

    • Passwords
    • Cookies
    • Payment cards
    • Crypto wallets
    • Discord tokens

    HVNC · low latency

    Remote desktop path optimized for interactive work through embedded browser shells and common productivity apps.

    Browser & app coverage

    • Google Chrome
    • Brave
    • Mozilla Firefox
    • Opera GX & Opera
    • Discord
    • Microsoft Outlook

    And more

    Additional carriers, automations, and situational modules ship on the same update cadence—see pricing for term options.

    Is this SilverRat?

    No. SilverRat carries a reputation for instability and stale dependencies. ByteRat is a separate codebase and release line; any visual similarity here reflects a custom interface layered on this project—not SilverRat binaries or services.