Files named main.exe

launcherrg.zonixmu.com · main.exe

//Update/

· CLOUDFLARENET

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 65295233c9a54223d94ae4dbb7006cd9a76653e1
SHA256: ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d
application/x-msdownload
3.45MB
2024-07-12 20:46:18 +0000 UTC
launcherrg.zonixmu.com · main.exe

//Update/

· CLOUDFLARENET

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 65295233c9a54223d94ae4dbb7006cd9a76653e1
SHA256: ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d
application/x-msdownload
3.45MB
2024-07-12 20:46:18 +0000 UTC
launcherrg2.mu-argentina.com · main.exe

//Update/

Brazil · Ecxon Datacenter LTDA

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 65295233c9a54223d94ae4dbb7006cd9a76653e1
SHA256: ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d
application/x-msdownload
3.45MB
2016-02-29 18:14:26 +0000 UTC
launcherrg2.mu-argentina.com · main.exe

//Update/

Brazil · Ecxon Datacenter LTDA

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 65295233c9a54223d94ae4dbb7006cd9a76653e1
SHA256: ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d
application/x-msdownload
3.45MB
2016-02-29 18:14:26 +0000 UTC
67.209.186.232 · main.exe

/sm/

United States · IT7NET

SHA1: 51feae8840dfc8808b183536e71fb0d130a37b3f
SHA256: ea2b2a780e3155484b50a60e9039ba61ea4f42ca7d89a0a74fbaae76bb15362b
application/octet-stream
8.30MB
2025-10-18 18:47:13 +0000 UTC
187.104.156.223 · main.exe

/update/

Brazil · Claro NXT Telecomunicacoes Ltda

SHA1: 8f68d8430e48cbc210a3a58ddf71e2b847e401b2
SHA256: ad96a79ffda7f8979cc0177c8b228e091e4dd2c1fdebd3064f04118825149e54
application/x-msdownload
2.84MB
2023-02-12 22:04:59 +0000 UTC
launcherrg.xtreme-mulatino.com · main.exe

//Update/

Canada · OVH SAS

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 65295233c9a54223d94ae4dbb7006cd9a76653e1
SHA256: ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d
application/x-msdownload
3.45MB
2016-02-29 16:14:26 +0000 UTC
www.launcherrg.xtreme-mulatino.com · main.exe

//Update/

Canada · OVH SAS

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 65295233c9a54223d94ae4dbb7006cd9a76653e1
SHA256: ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d
application/x-msdownload
3.45MB
2016-02-29 16:14:26 +0000 UTC
www.launcherrg.xtreme-mulatino.com · main.exe

//Update/

Canada · OVH SAS

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 65295233c9a54223d94ae4dbb7006cd9a76653e1
SHA256: ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d
application/x-msdownload
3.45MB
2016-02-29 16:14:26 +0000 UTC
launcherrg.xtreme-mulatino.com · main.exe

//Update/

Canada · OVH SAS

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 65295233c9a54223d94ae4dbb7006cd9a76653e1
SHA256: ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d
application/x-msdownload
3.45MB
2016-02-29 16:14:26 +0000 UTC
exm.spearstudios.com.br · main.exe

/Update/

Brazil · Hostinger International Limited

SHA1: 92842c19c02c14b4d3128a95d0ef1443979a5c76
SHA256: 7fc42c379fbc88e36bffc8846dbde318047bac5ae0be6ac8f9f98f02e08d052f
application/x-msdos-program
25.28MB
2025-12-02 19:00:59 +0000 UTC
exm.spearstudios.com.br · main.exe

/Update/

Brazil · Hostinger International Limited

SHA1: 92842c19c02c14b4d3128a95d0ef1443979a5c76
SHA256: 7fc42c379fbc88e36bffc8846dbde318047bac5ae0be6ac8f9f98f02e08d052f
application/x-msdos-program
25.28MB
2025-12-02 19:00:59 +0000 UTC
www.email-qiye.com · main.exe

/

United Kingdom · ORACLE-BMC-31898

SHA1: dd131ebc8ba5556d554e50975c0eddbc9ded1dfb
SHA256: a16cb1247515b6724d774b17836f983f5f86df6b5024d87c607ad4b0bd0c748c
application/x-msdos-program
8.98MB
2025-05-01 22:12:48 +0000 UTC
email-qiye.com · main.exe

/

United Kingdom · ORACLE-BMC-31898

SHA1: dd131ebc8ba5556d554e50975c0eddbc9ded1dfb
SHA256: a16cb1247515b6724d774b17836f983f5f86df6b5024d87c607ad4b0bd0c748c
application/x-msdos-program
8.98MB
2025-05-01 22:12:48 +0000 UTC
www.launcher.mulatino.online · main.exe

//MiniUpdate/

Canada · OVH SAS

SHA1: 81abfaeacbc35a434af1b3fd0e62345ad69e589e
SHA256: cd9211e2a8f2b5e361e817cb876180cbbd3be9895943db15692ffec0ccb7c015
application/x-msdownload
10.49MB
2021-03-17 06:08:44 +0000 UTC
www.launcher.mulatino.online · main.exe

//MiniUpdate/

Canada · OVH SAS

SHA1: 81abfaeacbc35a434af1b3fd0e62345ad69e589e
SHA256: cd9211e2a8f2b5e361e817cb876180cbbd3be9895943db15692ffec0ccb7c015
application/x-msdownload
10.49MB
2021-03-17 06:08:44 +0000 UTC
launcher.mulatino.online · main.exe

//MiniUpdate/

Canada · OVH SAS

SHA1: 81abfaeacbc35a434af1b3fd0e62345ad69e589e
SHA256: cd9211e2a8f2b5e361e817cb876180cbbd3be9895943db15692ffec0ccb7c015
application/x-msdownload
10.49MB
2021-03-17 06:08:44 +0000 UTC
launcher.mulatino.online · main.exe

//MiniUpdate/

Canada · OVH SAS

SHA1: 81abfaeacbc35a434af1b3fd0e62345ad69e589e
SHA256: cd9211e2a8f2b5e361e817cb876180cbbd3be9895943db15692ffec0ccb7c015
application/x-msdownload
10.49MB
2021-03-17 06:08:44 +0000 UTC
remote.firepower.cloud · main.exe

/server/

United Kingdom · VeloxServ Communications Ltd

SHA1: dbd63c3fd955acaecc0ca25eca6f9b93559d3147
SHA256: 4df32f6cc38f8a5891513073c7640528ee8c38eac38cb2b329fae1246f06b05c
application/x-msdos-program
12.96MB
2025-08-13 21:24:15 +0000 UTC
cloud.utopia-informatique.com · main.exe

/Download/

France · OVH SAS

SHA1: 513bdb53cfb6132171586165f18d8da269102337
SHA256: 53cc35d4eab51e5bd7740a953ce5db59a1a66669a18275be472575b5414185bc
application/x-msdownload
24.34MB
2025-03-28 11:09:48 +0000 UTC