Files named Update.zip

www.launcherrg.mucarbono.site · Update.zip

//Update/

Brazil · Ecxon Datacenter LTDA

Yara detect_Redline_Stealer From AbuseCH by Varp0s

SHA1: 9bc6ce1cd7a78996e004534608003c40db0774bf
SHA256: da098936f03078e53a193d5e25da0fb2db13c39d0e694d56f20b46454e0028cb
application/zip
321.39MB
2026-09-26 16:42:14 +0000 UTC
www.launcherrg.mucarbono.site · Update.zip

//Update/

Brazil · Ecxon Datacenter LTDA

Yara detect_Redline_Stealer From AbuseCH by Varp0s

SHA1: 9bc6ce1cd7a78996e004534608003c40db0774bf
SHA256: da098936f03078e53a193d5e25da0fb2db13c39d0e694d56f20b46454e0028cb
application/zip
321.39MB
2026-09-26 16:42:14 +0000 UTC
www.launcherrg.relic-mu.com · Update.zip

//Update/

Canada · OVH SAS

SHA1: 212edac55faaf92b1ac529edfbea256166dcaa07
SHA256: 08f1a71d09ad36c70aff9625c9e94932a53e5872e5b33f9dbaa332078d6e3ac0
application/zip
568.70KB
2026-09-09 11:47:58 +0000 UTC
launcherrg.relic-mu.com · Update.zip

//Update/

Canada · OVH SAS

SHA1: 212edac55faaf92b1ac529edfbea256166dcaa07
SHA256: 08f1a71d09ad36c70aff9625c9e94932a53e5872e5b33f9dbaa332078d6e3ac0
application/zip
568.70KB
2026-09-09 11:47:58 +0000 UTC
launcherrg.relic-mu.com · Update.zip

//Update/

Canada · OVH SAS

SHA1: 212edac55faaf92b1ac529edfbea256166dcaa07
SHA256: 08f1a71d09ad36c70aff9625c9e94932a53e5872e5b33f9dbaa332078d6e3ac0
application/zip
568.70KB
2026-09-09 11:47:58 +0000 UTC
www.launcherrg.relic-mu.com · Update.zip

//Update/

Canada · OVH SAS

SHA1: 212edac55faaf92b1ac529edfbea256166dcaa07
SHA256: 08f1a71d09ad36c70aff9625c9e94932a53e5872e5b33f9dbaa332078d6e3ac0
application/zip
568.70KB
2026-09-09 11:47:58 +0000 UTC
www.launcherrg.mudeltaonline.com · Update.zip

//Update/

Brazil · Ecxon Datacenter LTDA

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 5e67e130bb4257fd2faf556fd0175840c4a4e20b
SHA256: 3a9446d5b84c60e1e5b8de6f2467d338e42146822eabfff277127b6528e3c8a0
application/zip
56.24MB
2026-09-15 13:04:15 +0000 UTC
www.launcherrg.mudeltaonline.com · Update.zip

//Update/

Brazil · Ecxon Datacenter LTDA

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: a7de426d832294f6b4467d90be05db2a24de1a5d
SHA256: 61805bfeb6bc49e57d626ebb44c7c59488d4d9664a3e0341f70ccf747adc2886
application/zip
56.24MB
2026-09-15 13:04:15 +0000 UTC
autokarlo.ddns.net · Update.zip

/mazda/Update/

Croatia · A1 Hrvatska d.o.o.

SHA1: 27ae4666fb19425f8190a2ada69fc92d209fc0b2
SHA256: af042db98b6f7d9f9287af66667c7241188391d3c4b4b2d64d7238023745d758
application/zip
1.04MB
2018-10-25 11:19:51 +0000 UTC
autokarlo.ddns.net · Update.zip

/mazda/Update/

Croatia · A1 Hrvatska d.o.o.

SHA1: 27ae4666fb19425f8190a2ada69fc92d209fc0b2
SHA256: af042db98b6f7d9f9287af66667c7241188391d3c4b4b2d64d7238023745d758
application/zip
1.04MB
2018-10-25 11:19:51 +0000 UTC
launcherrg.mupirata.net · Update.zip

//Update/

Canada · OVH SAS

SHA1: 64365a6e68835ccc39c60fc624443190b9e68a99
SHA256: 7bb503b1972594b7e984a973ceb98a6d05d463cb58a5878b262e813fe6a13208
application/zip
10.97MB
2026-09-03 13:31:02 +0000 UTC
www.launcherrg.mupirata.net · Update.zip

//Update/

Canada · OVH SAS

SHA1: 64365a6e68835ccc39c60fc624443190b9e68a99
SHA256: 7bb503b1972594b7e984a973ceb98a6d05d463cb58a5878b262e813fe6a13208
application/zip
10.97MB
2026-09-03 13:31:02 +0000 UTC
launcherrg.mupirata.net · Update.zip

//Update/

Canada · OVH SAS

SHA1: 64365a6e68835ccc39c60fc624443190b9e68a99
SHA256: 7bb503b1972594b7e984a973ceb98a6d05d463cb58a5878b262e813fe6a13208
application/zip
10.97MB
2026-09-03 13:31:02 +0000 UTC
www.launcherrg.mupirata.net · Update.zip

//Update/

Canada · OVH SAS

SHA1: 64365a6e68835ccc39c60fc624443190b9e68a99
SHA256: 7bb503b1972594b7e984a973ceb98a6d05d463cb58a5878b262e813fe6a13208
application/zip
10.97MB
2026-09-03 13:31:02 +0000 UTC
launcherrg.muyugi-oh.com.ar · Update.zip

//Update/

Canada · OVH SAS

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: fcd617131f4bd01c448551e081dbb995543c041c
SHA256: 93f1ebc552450a0ee4e46165ca0b3a36b2a06da3544c6666f874a3233223f135
application/zip
33.39MB
2026-09-22 01:43:00 +0000 UTC
www.launcherrg.muyugi-oh.com.ar · Update.zip

//Update/

Canada · OVH SAS

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: fcd617131f4bd01c448551e081dbb995543c041c
SHA256: 93f1ebc552450a0ee4e46165ca0b3a36b2a06da3544c6666f874a3233223f135
application/zip
33.39MB
2026-09-22 01:43:00 +0000 UTC
launcherrg.muyugi-oh.com.ar · Update.zip

//Update/

Canada · OVH SAS

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: fcd617131f4bd01c448551e081dbb995543c041c
SHA256: 93f1ebc552450a0ee4e46165ca0b3a36b2a06da3544c6666f874a3233223f135
application/zip
33.39MB
2026-09-22 01:43:00 +0000 UTC
www.launcherrg.muyugi-oh.com.ar · Update.zip

//Update/

Canada · OVH SAS

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: fcd617131f4bd01c448551e081dbb995543c041c
SHA256: 93f1ebc552450a0ee4e46165ca0b3a36b2a06da3544c6666f874a3233223f135
application/zip
33.39MB
2026-09-22 01:43:00 +0000 UTC
www.launcherrg.pegasusmu.com · Update.zip

//Update/

Canada · OVH SAS

SHA1: e404be74346f9be3d8b773099151114a81fb34a1
SHA256: ef19a9f6b38879ce2072fda3bdf8ecb33b5032ba65be0ed3ceb29f53f065a7a1
application/zip
36.25MB
2026-01-05 20:43:45 +0000 UTC
launcherrg.pegasusmu.com · Update.zip

//Update/

Canada · OVH SAS

SHA1: e404be74346f9be3d8b773099151114a81fb34a1
SHA256: ef19a9f6b38879ce2072fda3bdf8ecb33b5032ba65be0ed3ceb29f53f065a7a1
application/zip
36.25MB
2026-01-05 20:43:45 +0000 UTC