Got this in my sabnzbd instance and had to do .exe rules there too. An exe in a linux container…very smart.

I’m as upset as OP, get a job skid.

It's by far the most common on public torrent trackers, but I occasionally see it on usenet too. Never bothered to check which indexers they tend to come from.