Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
WolferVPN.exe

Overview

General Information

Sample Name:WolferVPN.exe
Analysis ID:1352257
MD5:6434ceafa88a3afa1f8351bc6890b2a5
SHA1:700b43db6881bc83c6d7acb0d020283dca4fa7ba
SHA256:db230e271893be37515e7bf1403352d99a5f8ac441c2df589551ee399dea7315
Tags:BbyStealerexe
Infos:

Detection

Score:68
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Multi AV Scanner detection for domain / URL
Multi AV Scanner detection for dropped file
Drops PE files to the startup folder
Drops large PE files
Tries to harvest and steal browser information (history, passwords, etc)
Uses 32bit PE files
Drops files with a non-matching file extension (content does not match file extension)
Queries the volume information (name, serial number etc) of a device
Drops PE files
Very long cmdline option found, this is very uncommon (may be encrypted or packed)
PE file contains sections with non-standard names
Creates a start menu entry (Start Menu\Programs\Startup)
Queries keyboard layouts
Enables security privileges
Stores files to the Windows start menu directory
PE file contains more sections than normal
Found dropped PE file which has not been started or loaded
Creates a process in suspended mode (likely to inject code)
IP address seen in connection with other malware
Searches for user specific document files

Classification

Process Tree

  • System is w10x64
  • WolferVPN.exe (PID: 1416 cmdline: C:\Users\user\Desktop\WolferVPN.exe MD5: 6434CEAFA88A3AFA1F8351BC6890B2A5)
  • WolferVPN.exe (PID: 6732 cmdline: "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" MD5: 4AD8066DFB8E65195E5733DDFD8A1AC7)
    • WolferVPN.exe (PID: 2328 cmdline: "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1680 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2 MD5: 4AD8066DFB8E65195E5733DDFD8A1AC7)
    • cmd.exe (PID: 7072 cmdline: C:\Windows\system32\cmd.exe /d /s /c "tasklist" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
      • conhost.exe (PID: 1224 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
      • tasklist.exe (PID: 2708 cmdline: tasklist MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)
    • WolferVPN.exe (PID: 1616 cmdline: "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --mojo-platform-channel-handle=2204 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8 MD5: 4AD8066DFB8E65195E5733DDFD8A1AC7)
    • cmd.exe (PID: 6536 cmdline: C:\Windows\system32\cmd.exe /d /s /c "tasklist" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
      • conhost.exe (PID: 936 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
      • tasklist.exe (PID: 4800 cmdline: tasklist MD5: D0A49A170E13D7F6AEBBEFED9DF88AAA)
  • Updater.exe (PID: 1948 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe" MD5: 4AD8066DFB8E65195E5733DDFD8A1AC7)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Multi AV Scanner detection for domain / URL
Source: rufflesrefined.comVirustotal: Detection: 16%Perma Link
Multi AV Scanner detection for dropped file
Source: C:\Users\user\AppData\Local\Temp\b1c3f10e-540e-46f8-9bee-83879b20c9f6.tmp.nodeReversingLabs: Detection: 40%
Source: C:\Users\user\AppData\Local\Temp\b1c3f10e-540e-46f8-9bee-83879b20c9f6.tmp.nodeVirustotal: Detection: 40%Perma Link
Source: WolferVPN.exeStatic PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\LICENSE.electron.txtJump to behavior
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\LICENSE.electron.txtJump to behavior
Source: C:\Users\user\Desktop\WolferVPN.exeRegistry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9c1054f2-f2ad-5af7-8c3f-0bca1902f573Jump to behavior
Source: WolferVPN.exeStatic PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppDataJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Programs\WolferVPNJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\LocalJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\userJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\ProgramsJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Programs\WolferVPN\resourcesJump to behavior
Source: Joe Sandbox ViewIP Address: 172.64.41.3 172.64.41.3
Source: unknownNetwork traffic detected: HTTP traffic on port 57084 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50693 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52633 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50211 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50452 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52874 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51548 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50440 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52862 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51777 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54802 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53717 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51524 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53730 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52645 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50464 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57096 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52404 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51319 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50439 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53729 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52608 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54814 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51789 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53958 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51320 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50235 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52416 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53934 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51512 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51753 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53754 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50656 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50247 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51561 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54609 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57047 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52898 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55923 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53946 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51765 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52886 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52825 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55911 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49896 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51103 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50259 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51307 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51500 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51573 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57035 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52621 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 56180 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53742 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52428 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50644 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54863 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52516
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53848
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52517
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53847
Source: unknownNetwork traffic detected: HTTP traffic on port 51115 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52514
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53846
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52515
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53845
Source: unknownNetwork traffic detected: HTTP traffic on port 56803 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52518
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52519
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53849
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53840
Source: unknownNetwork traffic detected: HTTP traffic on port 50632 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52512
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53844
Source: unknownNetwork traffic detected: HTTP traffic on port 50873 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52513
Source: unknownNetwork traffic detected: HTTP traffic on port 53537 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53843
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53842
Source: unknownNetwork traffic detected: HTTP traffic on port 53778 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52510
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52511
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53841
Source: unknownNetwork traffic detected: HTTP traffic on port 57023 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57264 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52527
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53859
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52528
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53858
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52525
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53857
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52526
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53856
Source: unknownNetwork traffic detected: HTTP traffic on port 57276 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52529
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53851
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52520
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53850
Source: unknownNetwork traffic detected: HTTP traffic on port 52453 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49872 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51957 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52523
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53855
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52524
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53854
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52521
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53853
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52522
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53852
Source: unknownNetwork traffic detected: HTTP traffic on port 53910 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 56815 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52200 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50885 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51207
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52538
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51208
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52539
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53869
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51205
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52536
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53868
Source: unknownNetwork traffic detected: HTTP traffic on port 57011 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51206
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52537
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53867
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51209
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52530
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53862
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51200
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52531
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53861
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53860
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51203
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52534
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53866
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51204
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52535
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53865
Source: unknownNetwork traffic detected: HTTP traffic on port 54851 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 56192 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51201
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52532
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53864
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51202
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52533
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53863
Source: unknownNetwork traffic detected: HTTP traffic on port 57252 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53766 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50861 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55731 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50620 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53525 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51218
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52549
Source: unknownNetwork traffic detected: HTTP traffic on port 53922 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51219
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51216
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52547
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53879
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51217
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52548
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53878
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51210
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52541
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53873
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51211
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52542
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53872
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53871
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52540
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53870
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51214
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52545
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53877
Source: unknownNetwork traffic detected: HTTP traffic on port 50897 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51215
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52546
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53876
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52543
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51212
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53875
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51213
Source: unknownNetwork traffic detected: HTTP traffic on port 52212 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52544
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53874
Source: unknownNetwork traffic detected: HTTP traffic on port 56827 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53791 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53880
Source: unknownNetwork traffic detected: HTTP traffic on port 57288 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52837 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49884 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52441 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51945 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51127 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53804
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53803
Source: unknownNetwork traffic detected: HTTP traffic on port 51140 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53802
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53801
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53808
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53807
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53806
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53805
Source: unknownNetwork traffic detected: HTTP traffic on port 49859 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55502 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55743 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51933 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53800
Source: unknownNetwork traffic detected: HTTP traffic on port 52477 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54838 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55299 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53809
Source: unknownNetwork traffic detected: HTTP traffic on port 50607 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53815
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53814
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53813
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53812
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53819
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53818
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53817
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53816
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53811
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53810
Source: unknownNetwork traffic detected: HTTP traffic on port 51139 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52849 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53501 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50476 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53826
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53825
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53824
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53823
Source: unknownNetwork traffic detected: HTTP traffic on port 51790 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53829
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53828
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53827
Source: unknownNetwork traffic detected: HTTP traffic on port 55287 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53822
Source: unknownNetwork traffic detected: HTTP traffic on port 50619 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53821
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53820
Source: unknownNetwork traffic detected: HTTP traffic on port 50223 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49860 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51921 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54826 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52465 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52505
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53837
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52506
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53836
Source: unknownNetwork traffic detected: HTTP traffic on port 54430 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53835
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52503
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52504
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53834
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52509
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52507
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53839
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52508
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53838
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52501
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53833
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52502
Source: unknownNetwork traffic detected: HTTP traffic on port 53513 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53832
Source: unknownNetwork traffic detected: HTTP traffic on port 50488 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53831
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52500
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53830
Source: unknownNetwork traffic detected: HTTP traffic on port 53909 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55755 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52850 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51536 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51144
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52475
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51145
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52476
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51142
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52473
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51143
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52474
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51148
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52479
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51149
Source: unknownNetwork traffic detected: HTTP traffic on port 57215 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52477
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51146
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51147
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52478
Source: unknownNetwork traffic detected: HTTP traffic on port 54201 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 56623 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 56864 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51176 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51151
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52482
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51152
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52483
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52480
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51150
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52481
Source: unknownNetwork traffic detected: HTTP traffic on port 53598 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53357 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51164 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53116 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54178 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57203 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53345 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51155
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52486
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51156
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52487
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51153
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52484
Source: unknownNetwork traffic detected: HTTP traffic on port 57685 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51154
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52485
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51159
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51157
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52488
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51158
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52489
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52490
Source: unknownNetwork traffic detected: HTTP traffic on port 54442 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51162
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52493
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51163
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52494
Source: unknownNetwork traffic detected: HTTP traffic on port 57456 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51160
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52491
Source: unknownNetwork traffic detected: HTTP traffic on port 49823 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50812 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51161
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52492
Source: unknownNetwork traffic detected: HTTP traffic on port 55034 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50080 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57227 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 56635 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55046 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51166
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52497
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51167
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52498
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51164
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52495
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51165
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52496
Source: unknownNetwork traffic detected: HTTP traffic on port 53369 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51152 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51168
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52499
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51169
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51170
Source: unknownNetwork traffic detected: HTTP traffic on port 54191 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51173
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51174
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51171
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51172
Source: unknownNetwork traffic detected: HTTP traffic on port 57673 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49847 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 56852 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50824 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57444 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51177
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51178
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51175
Source: unknownNetwork traffic detected: HTTP traffic on port 53104 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51176
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51179
Source: unknownNetwork traffic detected: HTTP traffic on port 50079 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51180
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51181
Source: unknownNetwork traffic detected: HTTP traffic on port 54225 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51184
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51185
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51182
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51183
Source: unknownNetwork traffic detected: HTTP traffic on port 53333 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49811 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 53562 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54454 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51108
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52439
Source: unknownNetwork traffic detected: HTTP traffic on port 56576 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51109
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51106
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52437
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53769
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51107
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52438
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53768
Source: unknownNetwork traffic detected: HTTP traffic on port 55984 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54395 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51100
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52431
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53763
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51101
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52432
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53762
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53761
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52430
Source: unknownNetwork traffic detected: HTTP traffic on port 50055 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53760
Source: unknownNetwork traffic detected: HTTP traffic on port 57420 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51104
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52435
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53767
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52436
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51105
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53766
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51102
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52433
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53765
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51103
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52434
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53764
Source: unknownNetwork traffic detected: HTTP traffic on port 56839 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53770
Source: unknownNetwork traffic detected: HTTP traffic on port 55058 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50848 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57503 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51119
Source: unknownNetwork traffic detected: HTTP traffic on port 56659 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51117
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52448
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53779
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52449
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51118
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51111
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52442
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53774
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51112
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53773
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52440
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53772
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51110
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52441
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53771
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51115
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52446
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53778
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51116
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52447
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53777
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51113
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52444
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53776
Source: unknownNetwork traffic detected: HTTP traffic on port 54466 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51114
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52445
Source: unknownNetwork traffic detected: HTTP traffic on port 53550 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53775
Source: unknownNetwork traffic detected: HTTP traffic on port 56564 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 56588 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 51704 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53781
Source: unknownNetwork traffic detected: HTTP traffic on port 55996 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53780
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52450
Source: unknownNetwork traffic detected: HTTP traffic on port 54142 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50067 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 57240 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54213 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51128
Source: unknownNetwork traffic detected: HTTP traffic on port 51188 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52459
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51129
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51122
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52453
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53785
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51123
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52454
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53784
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51120
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52451
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53783
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51121
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52452
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53782
Source: unknownNetwork traffic detected: HTTP traffic on port 57493 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51126
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52457
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53789
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51127
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52458
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53788
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51124
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52455
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53787
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51125
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52456
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53786
Source: unknownNetwork traffic detected: HTTP traffic on port 56840 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50836 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54008 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52460
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53792
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51130
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52461
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 53791
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://blog.izs.me)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://blog.izs.me/)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://digitalbazaar.com/
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://dominictarr.com)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://evanjones.ca/)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://feross.org
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://github.com/walling/unorm.git
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://jsperf.com/arraybuffer-to-string-apply-performance/2
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://jsperf.com/converting-a-uint8array-to-a-string/2
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://n8.io/)
Source: WolferVPN.exe, 00000000.00000000.2162028231.000000000040A000.00000008.00000001.01000000.00000003.sdmpString found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://seclists.org/fulldisclosure/2009/Sep/394
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://stackoverflow.com/a/1068308/13216
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://stuartk.com/jszip
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://stuk.github.io/jszip/documentation/howto/read_zip.html
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://substack.net
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://unicode.org/reports/tr15/
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://unix.stackexchange.com/questions/14705/the-zip-formats-external-file-attribute
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://webrsa.cvs.sourceforge.net/viewvc/webrsa/Client/RSAES-OAEP.js?content-type=text%2Fplain:
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://wiki.ecmascript.org/doku.php?id=harmony:specification_drafts#november_8_2013_draft_rev_21
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://wiki.ecmascript.org/doku.php?id=strawman:concurrency&rev=1308776521#allfulfilled
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.apache.org/licenses/
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/52/13.html
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/65/16.html
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/66/16.html
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.exodus.io)
Source: WolferVPN.exe, 00000000.00000003.2261017258.0000000006460000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.fossil-scm.org/
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.futurealoof.com)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.gnu.org/licenses/gpl-2.0-standalone.html
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.ietf.org/rfc/rfc2315.txt):
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.info-zip.org/FAQ.html#backslashes
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.joyent.com
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.netdealing.com
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.openssl.org
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.openssl.org/docs/crypto/EVP_BytesToKey.html
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.rsa.com/rsalabs/node.asp?id=2125
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.tero.co.uk/des/
Source: WolferVPN.exe, 00000000.00000003.2261017258.0000000006460000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.unicode.org
Source: WolferVPN.exe, 00000000.00000003.2248611287.0000000005650000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.unicode.org/copyright.html
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.webtoolkit.info/
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://zlib.net/manual.html#Advanced
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://zlib.net/manual.html#Advanced)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://aka.ms/opensource/security/bounty)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://aka.ms/opensource/security/cvd).
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://aka.ms/opensource/security/definition)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://aka.ms/opensource/security/msrc).
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://aka.ms/opensource/security/pgpkey).
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://datatracker.ietf.org/doc/html/rfc7468#section-7
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Operators/Bitwise_Operators
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/window.crypto.getRandomValues
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/endsWith
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/includes
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/startsWith
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://feross.org
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://feross.org/opensource
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://feross.org/support
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/Azure)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/Microsoft)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/Microsoft/tslib.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/Mostafa-Samir/zip-local.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/Mostafa-Samir/zip-local/blob/master/LICENSE
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/PeculiarVentures/webcrypto-core#readme
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/PeculiarVentures/webcrypto-core.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/RyanZim/universalify#readme
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/RyanZim/universalify.git
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/TooTallNate
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/TooTallNate/util-deprecate
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/agnat
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/aspnet)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/bnoordhuis
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/brett19
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/crypto-browserify/md5.js
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/crypto-browserify/md5.js.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/crypto-browserify/randombytes
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/crypto-browserify/ripemd160
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/crypto-browserify/sha.js
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/cryptocoinjs/base-x
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/dchest/tweetnacl-js
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/defunctzombie/node-util
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/digitalbazaar/forge
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/digitalbazaar/forge/blob/master/lib/asn1.js#L542
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/dominictarr/rc.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/dominictarr/varstruct
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/dominictarr/varstruct.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/dotnet)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/electron/node-abi#readme
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/electron/node-abi.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/exodusmovement/seco-file#readme
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/exodusmovement/seco-file.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/exodusmovement/secure-container#readme
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/exodusmovement/secure-container.git
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/fanatid)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/feross/safe-buffer
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/feross/simple-concat
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/feross/simple-get
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/inspiredware/napi-build-utils#napi-build-utils).
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/inspiredware/napi-build-utils#readme
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/inspiredware/napi-build-utils.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/isaacs/yallist.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/joyent/node
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/kjur/jsjws/blob/master/rsa.js:
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/kkaefer/node-zlib
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/kkoopa
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/libuv/libuv/commit/92fb84b751e18f032c02609467f44bfe927b80c5
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mafintosh/end-of-stream
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mafintosh/mkdirp-classic
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mafintosh/mkdirp-classic.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mafintosh/pump
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mafintosh/tar-fs
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mafintosh/tar-fs.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mafintosh/tar-stream
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mafintosh/tar-stream.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mikeal/tunnel-agent
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/minimistjs/minimist
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/mkrufky
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodeca/pako/
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodeca/pako/blob/master/LICENSE
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/TSC/blob/master/Moderation-Policy.md
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/nan
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/nan#wg-members--collaborators
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/nan/blob/master/LICENSE.md
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/nan/issues/832.
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/nan/pull/811#discussion_r224594980.
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/node/blob/master/CODE_OF_CONDUCT.md
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/node/blob/master/lib/internal/crypto/random.js#L48
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/node/blob/v10.8.0/lib/internal/errors.js
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/nodejs/string_decoder
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/npm/node-semver.git
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/npm/node-tar/blob/51b6627a1f357d2eb433e7378e5f05e83b7aa6cd/lib/header.js#L349
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/npm/wrappy
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/prebuild/prebuild#prebuild)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/rvagg
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/sponsors/feross
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/sponsors/ljharb
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/sponsors/sindresorhus
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/trevnorris
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/v8/v8/wiki/Embedder%27s%20Guide#handles-and-garbage-collection).
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/v8/v8/wiki/Embedder%27s-Guide#templates)
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/xamarin)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/yetingli
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://hackage.haskell.org/package/base/docs/Data-Maybe.html.
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://nodejs.org/api/addons.html#addons_wrapping_c_objects)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://nodejs.org/api/http.html#http_class_http_incomingmessage
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://nodejs.org/api/n-api.html#n_api_n_api)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://nodejs.org/dist/latest-v9.x/docs/api/async_hooks.html
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://nodejs.org/dist/latest-v9.x/docs/api/n-api.html#n_api_custom_asynchronous_operations
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://raw.github.com/Stuk/jszip/master/LICENSE.markdown.
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://semver.org/
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://sindresorhus.com
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://sindresorhus.com)
Source: WolferVPN.exe, 00000000.00000003.2260749105.0000000006060000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://sqlite.org/forum/forumpost/83cb4a95a0
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://sqlite.org/lang_savepoint.html
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://sqlite.org/wal.html#ckpt
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://tools.ietf.org/html/rfc8032
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://tools.ietf.org/html/rfc8410#section-10.3
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8.dev/docs/embed#accessors).
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8.dev/docs/embed#exceptions)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8.dev/docs/embed#handles-and-garbage-collection).
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8.dev/docs/embed#interceptors).
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-0.12/db/d85/classv8_1_1_object.html#acfbdfd7427b516ebdb5c47c4df5e
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-16.0/db/d84/classv8_1_1_script_origin.html#pub-methods)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-4.8/d3/d32/classv8_1_1_array.html#a1d3a878d4c1c7cae974dd50a163924
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d1/d83/classv8_1_1_data.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d2/d78/classv8_1_1_persistent.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d2/db3/classv8_1_1_string.html#a5264d50b96d2c896ce525a734dc1
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d2/db3/classv8_1_1_string.html#a7c1bc8886115d7ee46f1d571dd6e
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d3/d95/classv8_1_1_handle_scope.html).
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d4/d1b/classv8_1_1_string_1_1_utf8_value.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d4/dc6/classv8_1_1_try_catch.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d4/dca/classv8_1_1_persistent_base.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/d40/classv8_1_1_global.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/d54/classv8_1_1_function.html#a9c3d0e4e13ddd7721fce238aa5
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/d54/classv8_1_1_function.html#ae477558b10c14b76ed00e8dbab
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a045d7754e62fa0ec72ae6c259b2
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a24647f61d6b41f69668094bdcd6
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a542d67e85089cb3f92aadf032f9
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a5593ac74687b713095c38987e59
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a580f976e4290cead62c2fc4dd39
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a5f72c7cda21415ce062bbe5c58a
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a6dbef303603ebdb03da6998794e
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a7acadfe7965997e9c386a05f098
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a81c7a1ed7001ae2a65e89107f75
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#aabd223436bc1100a787dadaa024
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#ad6a2a02657f5425ad460060652a
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#ad7f5dc559866343fe6cd8db1f13
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#adca9294555a3908e9f23c7bb0f0
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#ae1a59cac60409d3922582c4af67
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#aeb420b690bc2c216882d6fdd00d
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d7/dc5/classv8_1_1_property_callback_info.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d8/d06/classv8_1_1_weak_callback_info.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d8/d7d/classv8_1_1_maybe_local.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d8/d83/classv8_1_1_function_template.html#a56d904662a86eca78
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d8/d83/classv8_1_1_function_template.html#ab7574b298db3c27fb
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d9/d28/classv8_1_1_message.html#a60ede616ba3822d712e44c7a744
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d9/d28/classv8_1_1_message.html#a849f7a6c41549d83d8159825efc
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d9/d28/classv8_1_1_message.html#aaa004cf19e529da980bc19fcb76
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d9/d28/classv8_1_1_message.html#adbe46c10a88a6565f2732a2d2ad
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d9/d4b/classv8_1_1_maybe.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/d9/db3/classv8_1_1_string_1_1_external_one_byte_string_resou
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/da/d5c/structv8_1_1_copyable_persistent_traits.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/da/d6a/classv8_1_1_exception.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/da/d6f/classv8_1_1_j_s_o_n.html#a44b255c3531489ce43f61102091
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/da/d6f/classv8_1_1_j_s_o_n.html#a936310d2540fb630ed37d3ee3ff
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/da/d6f/classv8_1_1_j_s_o_n.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/da/da5/classv8_1_1_script_compiler.html#a93f5072a0db55d881b9
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/da/da7/classv8_1_1_return_value.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d5f/classv8_1_1_object_template.html#a33b3ebd7de641f6cc64
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d5f/classv8_1_1_object_template.html#a5e9612fc80bf6db8f2d
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d5f/classv8_1_1_object_template.html#ac89f06d634add0e8904
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d5f/classv8_1_1_object_template.html#aca0ed196f8a9adb1f68
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d5f/classv8_1_1_object_template.html#ad605a7543cfbc5dab54
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a138bb32a304f3982be02ad499693
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a169f2da506acbec34deadd9149a1
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a2565f03e736694f6b1e1cf22a0b4
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a442706b22fceda6e6d1f632122a9
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a48e4a19b2cedff867eecc73ddb7d
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a50d571de50d0b0dfb28795619d07
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a580ea84afb26c005d6762eeb9e3c
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a67604ea3734f170c66026064ea80
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a6f76b2ed605cb8f9185b92de0033
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a79a6e4d66049b9aa648ed4dfdb23
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a84471a824576a5994fdd0ffcbf99
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a8700b1862e6b4783716964ba4d5e
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a9b898894da3d1db2714fd9325a54
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ab3c3d89ea7c2f9afd08965bd7299
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ab3c57184263cf29963ef0017bec8
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ab7a92b4dcf822bef72f6c0ac6fea
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ab7b7245442ca6de1e1c145ea3fd6
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ace1769b0f3b86bfe9fda10109163
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#aced885270cfd2c956367b5eedc7f
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ad3ffc36f3dfc3592ce2a96bc047e
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ad8b80a59c9eb3c1e6c3cd6c84571
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ae91b3b56b357f285288c89fbddc4
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#af68a0b98066cfdeb8f943e98a40b
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#af743b7ea132b89f84d34d164d066
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#af94fc1135a5e74a2193fb72c3a1b
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/df7/classv8_1_1_template.html#a2db6a56597bf23c59659c0659e
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/db/df7/classv8_1_1_template.html#ae3fbaff137557aa6a0233bc7e5
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/dc/d0a/classv8_1_1_value.html#a08fba1d776a59bbf6864b25f9152c
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/dc/d0a/classv8_1_1_value.html#a2f9770296dc2c8d274bc8cc0dca24
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/dc/d0a/classv8_1_1_value.html#acc5bbef3c805ec458470c0fcd6f13
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/dd/d0d/classv8_1_1_function_callback_info.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/de/d73/classv8_1_1_non_copyable_persistent_traits.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://v8docs.nodesource.com/node-8.16/de/deb/classv8_1_1_local.html)
Source: WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2011/february/double-hmac-verificati
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.patreon.com/feross
Source: WolferVPN.exe, 00000000.00000003.2260749105.0000000006060000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.sqlite.org/src/info/bba7b69f9849b5bf
Source: WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.typescriptlang.org/
Source: unknownHTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message
Source: unknownDNS traffic detected: queries for: rufflesrefined.com

System Summary

barindex
Drops large PE files
Source: C:\Users\user\Desktop\WolferVPN.exeFile dump: WolferVPN.exe.0.dr 163343360Jump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile dump: WolferVPN.exe0.0.dr 163343360Jump to dropped file
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile dump: Updater.exe.5.dr 163343360Jump to dropped file
Source: WolferVPN.exeStatic PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
Source: C:\Users\user\Desktop\WolferVPN.exeProcess token adjusted: SecurityJump to behavior
Source: vulkan-1.dll0.0.drStatic PE information: Number of sections : 11 > 10
Source: Updater.exe.5.drStatic PE information: Number of sections : 15 > 10
Source: libEGL.dll.0.drStatic PE information: Number of sections : 11 > 10
Source: libGLESv2.dll.0.drStatic PE information: Number of sections : 11 > 10
Source: vk_swiftshader.dll0.0.drStatic PE information: Number of sections : 11 > 10
Source: vk_swiftshader.dll.0.drStatic PE information: Number of sections : 11 > 10
Source: libGLESv2.dll0.0.drStatic PE information: Number of sections : 11 > 10
Source: vulkan-1.dll.0.drStatic PE information: Number of sections : 11 > 10
Source: WolferVPN.exe0.0.drStatic PE information: Number of sections : 15 > 10
Source: WolferVPN.exe.0.drStatic PE information: Number of sections : 15 > 10
Source: libEGL.dll0.0.drStatic PE information: Number of sections : 11 > 10
Source: C:\Users\user\Desktop\WolferVPN.exeFile read: C:\Users\user\Desktop\WolferVPN.exeJump to behavior
Source: WolferVPN.exeStatic PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\Desktop\WolferVPN.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
Source: unknownProcess created: C:\Users\user\Desktop\WolferVPN.exe C:\Users\user\Desktop\WolferVPN.exe
Source: unknownProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe"
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1680 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "tasklist"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\tasklist.exe tasklist
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --mojo-platform-channel-handle=2204 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "tasklist"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\tasklist.exe tasklist
Source: unknownProcess created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe"
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1680 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "tasklist"Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --mojo-platform-channel-handle=2204 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "tasklist"Jump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\tasklist.exe tasklistJump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\tasklist.exe tasklist
Source: C:\Users\user\Desktop\WolferVPN.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32Jump to behavior
Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1224:120:WilError_03
Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:936:120:WilError_03
Source: C:\Users\user\Desktop\WolferVPN.exeMutant created: \Sessions\1\BaseNamedObjects\9c1054f2-f2ad-5af7-8c3f-0bca1902f573
Source: C:\Windows\System32\tasklist.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
Source: C:\Windows\System32\tasklist.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\ProgramsJump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\tasklist.exe tasklist
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr9663.tmpJump to behavior
Source: classification engineClassification label: mal68.adwa.spyw.winEXE@17/107@3/2
Source: C:\Users\user\Desktop\WolferVPN.exeFile read: C:\Users\desktop.iniJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
Source: WolferVPN.exeStatic file information: File size 74280552 > 1048576
Source: C:\Users\user\Desktop\WolferVPN.exeRegistry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9c1054f2-f2ad-5af7-8c3f-0bca1902f573Jump to behavior
Source: WolferVPN.exeStatic PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: libGLESv2.dll.0.drStatic PE information: section name: .00cfg
Source: libGLESv2.dll.0.drStatic PE information: section name: .gxfg
Source: libGLESv2.dll.0.drStatic PE information: section name: .retplne
Source: libGLESv2.dll.0.drStatic PE information: section name: _RDATA
Source: vk_swiftshader.dll.0.drStatic PE information: section name: .00cfg
Source: vk_swiftshader.dll.0.drStatic PE information: section name: .gxfg
Source: vk_swiftshader.dll.0.drStatic PE information: section name: .retplne
Source: vk_swiftshader.dll.0.drStatic PE information: section name: _RDATA
Source: vulkan-1.dll.0.drStatic PE information: section name: .00cfg
Source: vulkan-1.dll.0.drStatic PE information: section name: .gxfg
Source: vulkan-1.dll.0.drStatic PE information: section name: .retplne
Source: vulkan-1.dll.0.drStatic PE information: section name: _RDATA
Source: WolferVPN.exe.0.drStatic PE information: section name: .00cfg
Source: WolferVPN.exe.0.drStatic PE information: section name: .gxfg
Source: WolferVPN.exe.0.drStatic PE information: section name: .retplne
Source: WolferVPN.exe.0.drStatic PE information: section name: .rodata
Source: WolferVPN.exe.0.drStatic PE information: section name: CPADinfo
Source: WolferVPN.exe.0.drStatic PE information: section name: LZMADEC
Source: WolferVPN.exe.0.drStatic PE information: section name: _RDATA
Source: WolferVPN.exe.0.drStatic PE information: section name: malloc_h
Source: ffmpeg.dll.0.drStatic PE information: section name: .00cfg
Source: ffmpeg.dll.0.drStatic PE information: section name: .gxfg
Source: ffmpeg.dll.0.drStatic PE information: section name: .retplne
Source: ffmpeg.dll.0.drStatic PE information: section name: _RDATA
Source: libEGL.dll.0.drStatic PE information: section name: .00cfg
Source: libEGL.dll.0.drStatic PE information: section name: .gxfg
Source: libEGL.dll.0.drStatic PE information: section name: .retplne
Source: libEGL.dll.0.drStatic PE information: section name: _RDATA
Source: libGLESv2.dll0.0.drStatic PE information: section name: .00cfg
Source: libGLESv2.dll0.0.drStatic PE information: section name: .gxfg
Source: libGLESv2.dll0.0.drStatic PE information: section name: .retplne
Source: libGLESv2.dll0.0.drStatic PE information: section name: _RDATA
Source: vk_swiftshader.dll0.0.drStatic PE information: section name: .00cfg
Source: vk_swiftshader.dll0.0.drStatic PE information: section name: .gxfg
Source: vk_swiftshader.dll0.0.drStatic PE information: section name: .retplne
Source: vk_swiftshader.dll0.0.drStatic PE information: section name: _RDATA
Source: vulkan-1.dll0.0.drStatic PE information: section name: .00cfg
Source: vulkan-1.dll0.0.drStatic PE information: section name: .gxfg
Source: vulkan-1.dll0.0.drStatic PE information: section name: .retplne
Source: vulkan-1.dll0.0.drStatic PE information: section name: _RDATA
Source: WolferVPN.exe0.0.drStatic PE information: section name: .00cfg
Source: WolferVPN.exe0.0.drStatic PE information: section name: .gxfg
Source: WolferVPN.exe0.0.drStatic PE information: section name: .retplne
Source: WolferVPN.exe0.0.drStatic PE information: section name: .rodata
Source: WolferVPN.exe0.0.drStatic PE information: section name: CPADinfo
Source: WolferVPN.exe0.0.drStatic PE information: section name: LZMADEC
Source: WolferVPN.exe0.0.drStatic PE information: section name: _RDATA
Source: WolferVPN.exe0.0.drStatic PE information: section name: malloc_h
Source: ffmpeg.dll0.0.drStatic PE information: section name: .00cfg
Source: ffmpeg.dll0.0.drStatic PE information: section name: .gxfg
Source: ffmpeg.dll0.0.drStatic PE information: section name: .retplne
Source: ffmpeg.dll0.0.drStatic PE information: section name: _RDATA
Source: libEGL.dll0.0.drStatic PE information: section name: .00cfg
Source: libEGL.dll0.0.drStatic PE information: section name: .gxfg
Source: libEGL.dll0.0.drStatic PE information: section name: .retplne
Source: libEGL.dll0.0.drStatic PE information: section name: _RDATA
Source: Updater.exe.5.drStatic PE information: section name: .00cfg
Source: Updater.exe.5.drStatic PE information: section name: .gxfg
Source: Updater.exe.5.drStatic PE information: section name: .retplne
Source: Updater.exe.5.drStatic PE information: section name: .rodata
Source: Updater.exe.5.drStatic PE information: section name: CPADinfo
Source: Updater.exe.5.drStatic PE information: section name: LZMADEC
Source: Updater.exe.5.drStatic PE information: section name: _RDATA
Source: Updater.exe.5.drStatic PE information: section name: malloc_h
Source: b1c3f10e-540e-46f8-9bee-83879b20c9f6.tmp.node.5.drStatic PE information: section name: _RDATA
Source: 8aa2ec43-5e03-40f0-b44b-d7dcf4df059c.tmp.node.5.drStatic PE information: section name: _RDATA
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\b1c3f10e-540e-46f8-9bee-83879b20c9f6.tmp.nodeJump to dropped file
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\8aa2ec43-5e03-40f0-b44b-d7dcf4df059c.tmp.nodeJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\libGLESv2.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\vulkan-1.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\SpiderBanner.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\WolferVPN.exeJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\vk_swiftshader.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\StdUtils.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\d3dcompiler_47.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\System.dllJump to dropped file
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exeJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\libGLESv2.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\vulkan-1.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\libEGL.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\ffmpeg.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\libEGL.dllJump to dropped file
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\b1c3f10e-540e-46f8-9bee-83879b20c9f6.tmp.nodeJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\resources\elevate.exeJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\d3dcompiler_47.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\vk_swiftshader.dllJump to dropped file
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\8aa2ec43-5e03-40f0-b44b-d7dcf4df059c.tmp.nodeJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\ffmpeg.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\nsis7z.dllJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\LICENSE.electron.txtJump to behavior
Source: C:\Users\user\Desktop\WolferVPN.exeFile created: C:\Users\user\AppData\Local\Programs\WolferVPN\LICENSE.electron.txtJump to behavior

Boot Survival

barindex
Drops PE files to the startup folder
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exeJump to dropped file
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exeJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exeJump to behavior
Source: C:\Users\user\Desktop\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\Desktop\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\Desktop\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\tasklist.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\tasklist.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\tasklist.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\tasklist.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\tasklist.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\tasklist.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\tasklist.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\tasklist.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeKey opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeKey opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809Jump to behavior
Source: C:\Users\user\Desktop\WolferVPN.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\resources\elevate.exeJump to dropped file
Source: C:\Users\user\Desktop\WolferVPN.exeProcess information queried: ProcessInformationJump to behavior
Source: C:\Users\user\Desktop\WolferVPN.exeFile Volume queried: C:\ FullSizeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppDataJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Programs\WolferVPNJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\LocalJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\userJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\ProgramsJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Programs\WolferVPN\resourcesJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "c:\users\user\appdata\local\programs\wolfervpn\wolfervpn.exe" --type=gpu-process --user-data-dir="c:\users\user\appdata\roaming\wolfervpn" --gpu-preferences=waaaaaaaaadgaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaaaeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=1680 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=sparerendererforsiteperprocess,winretrievesuggestionsonlyondemand /prefetch:2
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "c:\users\user\appdata\local\programs\wolfervpn\wolfervpn.exe" --type=utility --utility-sub-type=network.mojom.networkservice --lang=en-gb --service-sandbox-type=none --user-data-dir="c:\users\user\appdata\roaming\wolfervpn" --mojo-platform-channel-handle=2204 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=sparerendererforsiteperprocess,winretrievesuggestionsonlyondemand /prefetch:8
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "c:\users\user\appdata\local\programs\wolfervpn\wolfervpn.exe" --type=gpu-process --user-data-dir="c:\users\user\appdata\roaming\wolfervpn" --gpu-preferences=waaaaaaaaadgaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaaaeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=1680 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=sparerendererforsiteperprocess,winretrievesuggestionsonlyondemand /prefetch:2Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "c:\users\user\appdata\local\programs\wolfervpn\wolfervpn.exe" --type=utility --utility-sub-type=network.mojom.networkservice --lang=en-gb --service-sandbox-type=none --user-data-dir="c:\users\user\appdata\roaming\wolfervpn" --mojo-platform-channel-handle=2204 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=sparerendererforsiteperprocess,winretrievesuggestionsonlyondemand /prefetch:8Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1680 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "tasklist"Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe "C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --mojo-platform-channel-handle=2204 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "tasklist"Jump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\tasklist.exe tasklistJump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\tasklist.exe tasklist
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\ VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Programs VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Programs\WolferVPN VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Programs\WolferVPN\resources VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Programs\WolferVPN\resources\app.asar VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Credentials VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Feeds VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Feeds Cache VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\FontCache VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\GameDVR VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\input VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\InputPersonalization VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Internet Explorer VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Media Player VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Office VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\OneDrive VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\PenWorkspace VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\PlayReady VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\RMSLocalStorage VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\TokenBroker VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Vault VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Windows VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Windows Sidebar VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\WindowsApps VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0absryc3.default VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Credentials VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Feeds VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Feeds Cache VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\FontCache VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\GameDVR VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\input VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\InputPersonalization VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Internet Explorer VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Media Player VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Office VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\OneDrive VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\PenWorkspace VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\PlayReady VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\RMSLocalStorage VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\TokenBroker VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Vault VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Windows VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Windows Sidebar VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\WindowsApps VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\Desktop VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\Downloads VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\Documents VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32 VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Credentials VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Feeds VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Feeds Cache VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\FontCache VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\GameDVR VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\input VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\InputPersonalization VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Internet Explorer VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Media Player VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Office VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\OneDrive VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\PenWorkspace VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\PlayReady VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\RMSLocalStorage VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\TokenBroker VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Vault VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Windows VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Windows Sidebar VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\WindowsApps VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings VolumeInformationJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformationJump to behavior

Stealing of Sensitive Information

barindex
Tries to harvest and steal browser information (history, passwords, etc)
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\ProfilesJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0absryc3.defaultJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\CookiesJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shmJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login DataJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldbJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web DataJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies.bbyJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data.bbyJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-walJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqliteJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.dbJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-releaseJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data.bbyJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data.bbyJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login DataJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\DefaultJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqliteJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.logJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension SettingsJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\NetworkJump to behavior
Source: C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exeDirectory queried: C:\Users\user\DocumentsJump to behavior

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpactResource DevelopmentReconnaissance
Valid Accounts1
Windows Management Instrumentation		1
Windows Service		1
Windows Service		11
Masquerading		1
OS Credential Dumping		1
Security Software Discovery		Remote Services11
Data from Local System		Exfiltration Over Other Network Medium1
Encrypted Channel		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationAbuse Accessibility FeaturesAcquire InfrastructureGather Victim Identity Information
Default Accounts1
Command and Scripting Interpreter		12
Registry Run Keys / Startup Folder		11
Process Injection		11
Process Injection		LSASS Memory2
Process Discovery		Remote Desktop ProtocolData from Removable MediaExfiltration Over Bluetooth2
Non-Application Layer Protocol		SIM Card SwapObtain Device Cloud BackupsNetwork Denial of ServiceDomainsCredentials
Domain AccountsAtLogon Script (Windows)12
Registry Run Keys / Startup Folder		Obfuscated Files or InformationSecurity Account Manager1
Remote System Discovery		SMB/Windows Admin SharesData from Network Shared DriveAutomated Exfiltration3
Application Layer Protocol		Data Encrypted for ImpactDNS ServerEmail Addresses
Local AccountsCronLogin HookLogin HookBinary PaddingNTDS12
File and Directory Discovery		Distributed Component Object ModelInput CaptureTraffic DuplicationProtocol ImpersonationData DestructionVirtual Private ServerEmployee Names
Cloud AccountsLaunchdNetwork Logon ScriptNetwork Logon ScriptSoftware PackingLSA Secrets23
System Information Discovery		SSHKeyloggingScheduled TransferFallback ChannelsData Encrypted for ImpactServerGather Victim Network Information

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1352257 Sample: WolferVPN.exe Startdate: 02/12/2023 Architecture: WINDOWS Score: 68 52 rufflesrefined.com 2->52 56 Multi AV Scanner detection for domain / URL 2->56 58 Multi AV Scanner detection for dropped file 2->58 8 WolferVPN.exe 12 2->8         started        13 WolferVPN.exe 11 192 2->13         started        15 Updater.exe 2->15         started        signatures3 process4 dnsIp5 54 rufflesrefined.com 172.67.218.203, 443, 49720, 49721 CLOUDFLARENETUS United States 8->54 34 C:\Users\user\AppData\Roaming\...\Updater.exe, PE32+ 8->34 dropped 36 b1c3f10e-540e-46f8...879b20c9f6.tmp.node, PE32+ 8->36 dropped 38 C:\Users\user\AppData\...\Login Data.bby, SQLite 8->38 dropped 46 4 other files (3 malicious) 8->46 dropped 60 Drops PE files to the startup folder 8->60 62 Tries to harvest and steal browser information (history, passwords, etc) 8->62 64 Drops large PE files 8->64 17 WolferVPN.exe 1 8->17         started        20 cmd.exe 1 8->20         started        22 cmd.exe 8->22         started        24 WolferVPN.exe 1 8->24         started        40 C:\Users\user\AppData\Local\...\vulkan-1.dll, PE32+ 13->40 dropped 42 C:\Users\user\AppData\...\vk_swiftshader.dll, PE32+ 13->42 dropped 44 C:\Users\user\AppData\Local\...\libGLESv2.dll, PE32+ 13->44 dropped 48 16 other files (5 malicious) 13->48 dropped file6 signatures7 process8 dnsIp9 50 chrome.cloudflare-dns.com 172.64.41.3 CLOUDFLARENETUS United States 17->50 26 tasklist.exe 1 20->26         started        28 conhost.exe 20->28         started        30 tasklist.exe 1 22->30         started        32 conhost.exe 22->32         started        process10

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
WolferVPN.exe0%ReversingLabs
WolferVPN.exe0%VirustotalBrowse

Dropped Files

SourceDetectionScannerLabelLink
C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe0%ReversingLabs
C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe1%VirustotalBrowse
C:\Users\user\AppData\Local\Programs\WolferVPN\d3dcompiler_47.dll0%ReversingLabs
C:\Users\user\AppData\Local\Programs\WolferVPN\d3dcompiler_47.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Programs\WolferVPN\ffmpeg.dll0%ReversingLabs
C:\Users\user\AppData\Local\Programs\WolferVPN\ffmpeg.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Programs\WolferVPN\libEGL.dll0%ReversingLabs
C:\Users\user\AppData\Local\Programs\WolferVPN\libEGL.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Programs\WolferVPN\libGLESv2.dll0%ReversingLabs
C:\Users\user\AppData\Local\Programs\WolferVPN\libGLESv2.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Programs\WolferVPN\vk_swiftshader.dll0%ReversingLabs
C:\Users\user\AppData\Local\Programs\WolferVPN\vk_swiftshader.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Programs\WolferVPN\vulkan-1.dll0%ReversingLabs
C:\Users\user\AppData\Local\Programs\WolferVPN\vulkan-1.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\8aa2ec43-5e03-40f0-b44b-d7dcf4df059c.tmp.node0%ReversingLabs
C:\Users\user\AppData\Local\Temp\8aa2ec43-5e03-40f0-b44b-d7dcf4df059c.tmp.node0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\b1c3f10e-540e-46f8-9bee-83879b20c9f6.tmp.node41%ReversingLabsWin64.Trojan.Generic
C:\Users\user\AppData\Local\Temp\b1c3f10e-540e-46f8-9bee-83879b20c9f6.tmp.node40%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\WolferVPN.exe0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\d3dcompiler_47.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\ffmpeg.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\libEGL.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\libGLESv2.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\resources\elevate.exe0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\vk_swiftshader.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\vulkan-1.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\SpiderBanner.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\StdUtils.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\System.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\nsis7z.dll0%ReversingLabs
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe0%ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

SourceDetectionScannerLabelLink
rufflesrefined.com17%VirustotalBrowse
chrome.cloudflare-dns.com0%VirustotalBrowse

URLs

SourceDetectionScannerLabelLink
http://pajhome.org.uk/crypt/md50%URL Reputationsafe
https://v8.dev/docs/embed#exceptions)0%VirustotalBrowse
https://v8.dev/docs/embed#interceptors).0%VirustotalBrowse
https://v8.dev/docs/embed#interceptors).0%Avira URL Cloudsafe
http://stuartk.com/jszip0%Avira URL Cloudsafe
https://v8.dev/docs/embed#exceptions)0%Avira URL Cloudsafe
http://www.netdealing.com0%VirustotalBrowse
http://www.netdealing.com0%Avira URL Cloudsafe
http://digitalbazaar.com/0%Avira URL Cloudsafe
http://stuartk.com/jszip0%VirustotalBrowse
http://digitalbazaar.com/0%VirustotalBrowse

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
rufflesrefined.com
172.67.218.203
truefalseunknown
chrome.cloudflare-dns.com
172.64.41.3
truefalseunknown

URLs from Memory and Binaries

NameSourceMaliciousAntivirus DetectionReputation
http://www.netdealing.comWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
  • 0%, Virustotal, Browse
  • Avira URL Cloud: safe
unknown
https://v8docs.nodesource.com/node-8.16/dc/d0a/classv8_1_1_value.html#a08fba1d776a59bbf6864b25f9152cWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
    		high
    https://github.com/TooTallNateWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
      		high
      https://github.com/nodejs/node/blob/v10.8.0/lib/internal/errors.jsWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
        		high
        https://github.com/mafintosh/mkdirp-classic.gitWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
          		high
          https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a6f76b2ed605cb8f9185b92de0033WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
            		high
            https://v8docs.nodesource.com/node-8.16/d5/d54/classv8_1_1_function.html#a9c3d0e4e13ddd7721fce238aa5WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
              		high
              https://v8docs.nodesource.com/node-8.16/d9/d28/classv8_1_1_message.html#adbe46c10a88a6565f2732a2d2adWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                		high
                http://seclists.org/fulldisclosure/2009/Sep/394WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                  		high
                  https://github.com/PeculiarVentures/webcrypto-core.gitWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                    		high
                    https://github.com/v8/v8/wiki/Embedder%27s%20Guide#handles-and-garbage-collection).WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                      		high
                      https://v8docs.nodesource.com/node-8.16/de/d73/classv8_1_1_non_copyable_persistent_traits.html)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                        		high
                        https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ab7b7245442ca6de1e1c145ea3fd6WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                          		high
                          http://www.rsa.com/rsalabs/node.asp?id=2125WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                            		high
                            https://github.com/nodejs/string_decoderWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                              		high
                              https://v8.dev/docs/embed#interceptors).WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                              • 0%, Virustotal, Browse
                              • Avira URL Cloud: safe
                              		unknown
                              https://github.com/PeculiarVentures/webcrypto-core#readmeWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                		high
                                https://v8docs.nodesource.com/node-8.16/da/da5/classv8_1_1_script_compiler.html#a93f5072a0db55d881b9WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                  		high
                                  https://tools.ietf.org/html/rfc8410#section-10.3WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                    		high
                                    https://www.patreon.com/ferossWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                      		high
                                      https://github.com/TooTallNate/util-deprecateWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                        		high
                                        https://github.com/crypto-browserify/md5.js.gitWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                          		high
                                          https://github.com/digitalbazaar/forgeWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                            		high
                                            https://sqlite.org/wal.html#ckptWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                              		high
                                              https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#aabd223436bc1100a787dadaa024WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                		high
                                                https://github.com/dchest/tweetnacl-jsWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                  		high
                                                  https://github.com/kkoopaWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                    		high
                                                    https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a542d67e85089cb3f92aadf032f9WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                      		high
                                                      https://v8docs.nodesource.com/node-8.16/db/d5f/classv8_1_1_object_template.html#a5e9612fc80bf6db8f2dWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                        		high
                                                        https://semver.org/WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                          		high
                                                          https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#af743b7ea132b89f84d34d164d066WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                            		high
                                                            https://v8docs.nodesource.com/node-8.16/d5/d54/classv8_1_1_function.html#ae477558b10c14b76ed00e8dbabWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                              		high
                                                              https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a2565f03e736694f6b1e1cf22a0b4WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                		high
                                                                https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#ad6a2a02657f5425ad460060652aWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                  		high
                                                                  https://v8docs.nodesource.com/node-8.16/da/d6a/classv8_1_1_exception.html)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                    		high
                                                                    https://github.com/electron/node-abi#readmeWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                      		high
                                                                      http://digitalbazaar.com/WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                      • 0%, Virustotal, Browse
                                                                      • Avira URL Cloud: safe
                                                                      		unknown
                                                                      https://datatracker.ietf.org/doc/html/rfc7468#section-7WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                        		high
                                                                        https://nodejs.org/api/addons.html#addons_wrapping_c_objects)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                          		high
                                                                          https://v8docs.nodesource.com/node-8.16/d3/d95/classv8_1_1_handle_scope.html).WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                            		high
                                                                            https://v8docs.nodesource.com/node-8.16/d8/d06/classv8_1_1_weak_callback_info.html)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                              		high
                                                                              https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/endsWithWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                		high
                                                                                https://github.com/dominictarr/varstruct.gitWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                  		high
                                                                                  https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a045d7754e62fa0ec72ae6c259b2WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                    		high
                                                                                    https://sqlite.org/lang_savepoint.htmlWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                      		high
                                                                                      http://stackoverflow.com/a/1068308/13216WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                        		high
                                                                                        https://v8docs.nodesource.com/node-8.16/d4/dca/classv8_1_1_persistent_base.html)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                          		high
                                                                                          https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ab7a92b4dcf822bef72f6c0ac6feaWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                            		high
                                                                                            https://github.com/fanatid)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                              		high
                                                                                              https://github.com/digitalbazaar/forge/blob/master/lib/asn1.js#L542WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                		high
                                                                                                https://v8docs.nodesource.com/node-0.12/db/d85/classv8_1_1_object.html#acfbdfd7427b516ebdb5c47c4df5eWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                  		high
                                                                                                  https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Operators/Bitwise_OperatorsWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                    		high
                                                                                                    https://github.com/kjur/jsjws/blob/master/rsa.js:WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                      		high
                                                                                                      http://www.openssl.orgWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                        		high
                                                                                                        https://github.com/mkrufkyWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                          		high
                                                                                                          https://v8docs.nodesource.com/node-8.16/d9/db3/classv8_1_1_string_1_1_external_one_byte_string_resouWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                            		high
                                                                                                            https://aka.ms/opensource/security/bounty)WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                              		high
                                                                                                              https://github.com/RyanZim/universalify#readmeWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                		high
                                                                                                                https://v8docs.nodesource.com/node-8.16/db/d5f/classv8_1_1_object_template.html#a33b3ebd7de641f6cc64WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                  		high
                                                                                                                  https://github.com/trevnorrisWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                    		high
                                                                                                                    https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a8700b1862e6b4783716964ba4d5eWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                      		high
                                                                                                                      http://www.unicode.org/copyright.htmlWolferVPN.exe, 00000000.00000003.2248611287.0000000005650000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                        		high
                                                                                                                        https://developer.mozilla.org/en-US/docs/Web/API/window.crypto.getRandomValuesWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                          		high
                                                                                                                          https://github.com/cryptocoinjs/base-xWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                            		high
                                                                                                                            https://github.com/RyanZim/universalify.gitWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                              		high
                                                                                                                              http://stuartk.com/jszipWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                              • 0%, Virustotal, Browse
                                                                                                                              • Avira URL Cloud: safe
                                                                                                                              		unknown
                                                                                                                              https://v8.dev/docs/embed#exceptions)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                              • 0%, Virustotal, Browse
                                                                                                                              • Avira URL Cloud: safe
                                                                                                                              		unknown
                                                                                                                              https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ace1769b0f3b86bfe9fda10109163WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                		high
                                                                                                                                https://v8docs.nodesource.com/node-8.16/d2/db3/classv8_1_1_string.html#a5264d50b96d2c896ce525a734dc1WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                  		high
                                                                                                                                  https://v8docs.nodesource.com/node-8.16/d4/dc6/classv8_1_1_try_catch.html)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                    		high
                                                                                                                                    https://v8docs.nodesource.com/node-8.16/da/d6f/classv8_1_1_j_s_o_n.html#a936310d2540fb630ed37d3ee3ffWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                      		high
                                                                                                                                      https://github.com/agnatWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                        		high
                                                                                                                                        https://github.com/nodejs/nan#wg-members--collaboratorsWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                          		high
                                                                                                                                          https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#aeb420b690bc2c216882d6fdd00dWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                            		high
                                                                                                                                            http://pajhome.org.uk/crypt/md5WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                            • URL Reputation: safe
                                                                                                                                            		unknown
                                                                                                                                            https://github.com/inspiredware/napi-build-utils#readmeWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                              		high
                                                                                                                                              http://unicode.org/reports/tr15/WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                		high
                                                                                                                                                http://www.joyent.comWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                  		high
                                                                                                                                                  https://v8docs.nodesource.com/node-8.16/db/d5f/classv8_1_1_object_template.html#ad605a7543cfbc5dab54WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                    		high
                                                                                                                                                    https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#ad8b80a59c9eb3c1e6c3cd6c84571WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                      		high
                                                                                                                                                      https://v8docs.nodesource.com/node-8.16/d2/d78/classv8_1_1_persistent.html)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                        		high
                                                                                                                                                        https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a5f72c7cda21415ce062bbe5c58aWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                          		high
                                                                                                                                                          https://v8docs.nodesource.com/node-8.16/d9/d28/classv8_1_1_message.html#a60ede616ba3822d712e44c7a744WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                            		high
                                                                                                                                                            https://github.com/sponsors/ferossWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                              		high
                                                                                                                                                              https://github.com/rvaggWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                		high
                                                                                                                                                                https://github.com/xamarin)WolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                  		high
                                                                                                                                                                  https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a50d571de50d0b0dfb28795619d07WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                    		high
                                                                                                                                                                    https://github.com/crypto-browserify/md5.jsWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                      		high
                                                                                                                                                                      http://www.info-zip.org/FAQ.html#backslashesWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                        		high
                                                                                                                                                                        https://hackage.haskell.org/package/base/docs/Data-Maybe.html.WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                          		high
                                                                                                                                                                          https://github.com/mafintosh/pumpWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                            		high
                                                                                                                                                                            https://sindresorhus.comWolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                              		high
                                                                                                                                                                              http://www.gnu.org/licenses/gpl-2.0-standalone.htmlWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                		high
                                                                                                                                                                                https://github.com/mafintosh/tar-stream.gitWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                  		high
                                                                                                                                                                                  https://v8docs.nodesource.com/node-4.8/d3/d32/classv8_1_1_array.html#a1d3a878d4c1c7cae974dd50a163924WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                    		high
                                                                                                                                                                                    https://v8docs.nodesource.com/node-8.16/dd/d0d/classv8_1_1_function_callback_info.html)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                      		high
                                                                                                                                                                                      https://v8docs.nodesource.com/node-8.16/d7/dc5/classv8_1_1_property_callback_info.html)WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                        		high
                                                                                                                                                                                        https://v8docs.nodesource.com/node-8.16/db/d85/classv8_1_1_object.html#a169f2da506acbec34deadd9149a1WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                          		high
                                                                                                                                                                                          https://github.com/mafintosh/end-of-streamWolferVPN.exe, 00000000.00000003.2260475006.0000000005250000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                            		high
                                                                                                                                                                                            https://github.com/inspiredware/napi-build-utils#napi-build-utils).WolferVPN.exe, 00000000.00000003.2260205445.0000000004A50000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                              		high

                                                                                                                                                                                              World Map of Contacted IPs

                                                                                                                                                                                              • No. of IPs < 25%
                                                                                                                                                                                              • 25% < No. of IPs < 50%
                                                                                                                                                                                              • 50% < No. of IPs < 75%
                                                                                                                                                                                              • 75% < No. of IPs

                                                                                                                                                                                              Public IPs

                                                                                                                                                                                              IPDomainCountryFlagASNASN NameMalicious
                                                                                                                                                                                              172.67.218.203
                                                                                                                                                                                              		rufflesrefined.comUnited States
                                                                                                                                                                                              		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                              172.64.41.3
                                                                                                                                                                                              		chrome.cloudflare-dns.comUnited States
                                                                                                                                                                                              		13335CLOUDFLARENETUSfalse

                                                                                                                                                                                              General Information

                                                                                                                                                                                              Joe Sandbox Version:38.0.0 Ammolite
                                                                                                                                                                                              Analysis ID:1352257
                                                                                                                                                                                              Start date and time:2023-12-02 22:03:31 +01:00
                                                                                                                                                                                              Joe Sandbox Product:CloudBasic
                                                                                                                                                                                              Overall analysis duration:0h 10m 11s
                                                                                                                                                                                              Hypervisor based Inspection enabled:false
                                                                                                                                                                                              Report type:full
                                                                                                                                                                                              Cookbook file name:default.jbs
                                                                                                                                                                                              Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                                                                                                                                              Number of analysed new started processes analysed:18
                                                                                                                                                                                              Number of new started drivers analysed:0
                                                                                                                                                                                              Number of existing processes analysed:0
                                                                                                                                                                                              Number of existing drivers analysed:0
                                                                                                                                                                                              Number of injected processes analysed:0
                                                                                                                                                                                              Technologies:
                                                                                                                                                                                              • HCA enabled
                                                                                                                                                                                              • EGA enabled
                                                                                                                                                                                              • AMSI enabled
                                                                                                                                                                                              Analysis Mode:default
                                                                                                                                                                                              Analysis stop reason:Timeout
                                                                                                                                                                                              Sample file name:WolferVPN.exe
                                                                                                                                                                                              Detection:MAL
                                                                                                                                                                                              Classification:mal68.adwa.spyw.winEXE@17/107@3/2
                                                                                                                                                                                              EGA Information:Failed
                                                                                                                                                                                              HCA Information:
                                                                                                                                                                                              • Successful, ratio: 100%
                                                                                                                                                                                              • Number of executed functions: 0
                                                                                                                                                                                              • Number of non-executed functions: 0
                                                                                                                                                                                              Cookbook Comments:
                                                                                                                                                                                              • Found application associated with file extension: .exe

                                                                                                                                                                                              Warnings

                                                                                                                                                                                              • Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
                                                                                                                                                                                              • Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
                                                                                                                                                                                              • Excluded IPs from analysis (whitelisted): 172.253.122.94
                                                                                                                                                                                              • Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, www.gstatic.com, fe3cr.delivery.mp.microsoft.com
                                                                                                                                                                                              • Not all processes where analyzed, report is missing behavior information
                                                                                                                                                                                              • Report size exceeded maximum capacity and may have missing network information.
                                                                                                                                                                                              • Report size getting too big, too many NtAllocateVirtualMemory calls found.
                                                                                                                                                                                              • Report size getting too big, too many NtDeviceIoControlFile calls found.
                                                                                                                                                                                              • Report size getting too big, too many NtOpenKeyEx calls found.
                                                                                                                                                                                              • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                                                                                                                                                              • Report size getting too big, too many NtQueryValueKey calls found.
                                                                                                                                                                                              • Report size getting too big, too many NtQueryVolumeInformationFile calls found.
                                                                                                                                                                                              • Report size getting too big, too many NtSetInformationFile calls found.

                                                                                                                                                                                              Simulations

                                                                                                                                                                                              Behavior and APIs

                                                                                                                                                                                              TimeTypeDescription
                                                                                                                                                                                              22:04:43API Interceptor14x Sleep call for process: WolferVPN.exe modified
                                                                                                                                                                                              22:05:01AutostartRun: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe

                                                                                                                                                                                              Joe Sandbox View / Context

                                                                                                                                                                                              IPs

                                                                                                                                                                                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                              172.67.218.203EnchantedRealms.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                Portal-Souls-1.0.5.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                  SephioneInstallerx64.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                    SephioneInstallerx64.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                      172.64.41.3GameSetup.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                        https://pdfcastle.azureedge.net/PDFCastle.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                          SecuriteInfo.com.Trojan.Siggen1.42086.18549.5643.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                            http://trackmaster.ccGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                              AI_Digital_Marketing_v1.1.3_Installation.msiGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                Super-Game.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                  file.exeGet hashmaliciousRedLine, SmokeLoaderBrowse
                                                                                                                                                                                                                    2019-06-12_16h24_41.webpGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                      z30PO1028930.exeGet hashmaliciousAsyncRAT, StormKitty, VenomRATBrowse
                                                                                                                                                                                                                        Portal-Souls-1.0.5.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                          daticert.xmlGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                            SecuriteInfo.com.Trojan.DownLoader45.55850.31523.3941.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                              RuntimeBroker.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                61L 2022.msgGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                  KatalonSetup.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                    iyi.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                      iyi.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                        https://s3.amazonaws.com/production.jobspeaker.com/processor_jobspeaker_com-jobspeaker/asset/document/92241/Health_Care_Asst.docGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                          GoogleAI_Pro_for_PC_Installation_v1.0.msiGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                            installScheduler_sumon.xmlGet hashmaliciousUnknownBrowse

                                                                                                                                                                                                                                              Domains

                                                                                                                                                                                                                                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                                                                              chrome.cloudflare-dns.comGameSetup.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              https://pdfcastle.azureedge.net/PDFCastle.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              SecuriteInfo.com.Trojan.Siggen1.42086.18549.5643.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              EnchantedRealms.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 162.159.61.3
                                                                                                                                                                                                                                              http://trackmaster.ccGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 162.159.61.3
                                                                                                                                                                                                                                              AI_Digital_Marketing_v1.1.3_Installation.msiGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              SSL_Certificate_Install.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 162.159.61.3
                                                                                                                                                                                                                                              Super-Game.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              2019-06-12_16h24_41.webpGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              z30PO1028930.exeGet hashmaliciousAsyncRAT, StormKitty, VenomRATBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              Portal-Souls-1.0.5.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              PAGAMENTO_COMMISSIONI_MBS_Settembre_MGpdf.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 162.159.61.3
                                                                                                                                                                                                                                              daticert.xmlGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              SecuriteInfo.com.Win32.DropperX-gen.18132.23189.exeGet hashmaliciousAsyncRAT, Clipboard Hijacker, zgRATBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              SecuriteInfo.com.Trojan.DownLoader45.55850.31523.3941.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              RuntimeBroker.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              DLL_Injector_Resou_nls..scr.exeGet hashmaliciousAsyncRAT, zgRATBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              61L 2022.msgGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              https://s3.amazonaws.com/production.jobspeaker.com/processor_jobspeaker_com-jobspeaker/asset/document/92241/Health_Care_Asst.docGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              GoogleAI_Pro_for_PC_Installation_v1.0.msiGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 162.159.61.3
                                                                                                                                                                                                                                              rufflesrefined.comGameSetup.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 104.21.24.126
                                                                                                                                                                                                                                              EnchantedRealms.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.67.218.203
                                                                                                                                                                                                                                              Super-Game.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 104.21.24.126
                                                                                                                                                                                                                                              Portal-Souls-1.0.5.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.67.218.203
                                                                                                                                                                                                                                              Bonkers.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 104.21.24.126
                                                                                                                                                                                                                                              SephioneInstallerx64.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.67.218.203
                                                                                                                                                                                                                                              SephioneInstallerx64.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.67.218.203

                                                                                                                                                                                                                                              ASNs

                                                                                                                                                                                                                                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                                                                              CLOUDFLARENETUSGameSetup.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              #U00d6deme_Transfer_Dekontu.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.137.232
                                                                                                                                                                                                                                              sipari#U015f_formu_831519.exeGet hashmaliciousSnake KeyloggerBrowse
                                                                                                                                                                                                                                              • 172.67.177.134
                                                                                                                                                                                                                                              PO_YTWHDF3432.exeGet hashmaliciousFormBookBrowse
                                                                                                                                                                                                                                              • 172.67.184.73
                                                                                                                                                                                                                                              PO_CCTEB77.exeGet hashmaliciousFormBookBrowse
                                                                                                                                                                                                                                              • 172.67.184.73
                                                                                                                                                                                                                                              #U00d6deme_Transfer_Dekontu.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.136.232
                                                                                                                                                                                                                                              04251452615625625.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.135.232
                                                                                                                                                                                                                                              Sat#U0131n_alma_emri_-_41026723.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.128.233
                                                                                                                                                                                                                                              42#U0435.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.136.232
                                                                                                                                                                                                                                              5b5erB7O9O.exeGet hashmaliciousFormBookBrowse
                                                                                                                                                                                                                                              • 104.21.39.249
                                                                                                                                                                                                                                              s6n00Z3C86.exeGet hashmaliciousBabuk, Clipboard Hijacker, DCRat, Djvu, RedLine, SmokeLoader, zgRATBrowse
                                                                                                                                                                                                                                              • 104.21.65.24
                                                                                                                                                                                                                                              JYAtBufpV4.exeGet hashmaliciousDCRat, Djvu, RedLine, SmokeLoader, zgRATBrowse
                                                                                                                                                                                                                                              • 104.21.65.24
                                                                                                                                                                                                                                              WrB1gNS1fN.exeGet hashmaliciousHTMLPhisher, Glupteba, Petite Virus, onlyLoggerBrowse
                                                                                                                                                                                                                                              • 104.21.93.225
                                                                                                                                                                                                                                              DU0WstQRiO.exeGet hashmaliciousRedLineBrowse
                                                                                                                                                                                                                                              • 172.67.34.170
                                                                                                                                                                                                                                              BRvptajioG.exeGet hashmaliciousRedLine, SmokeLoader, StealcBrowse
                                                                                                                                                                                                                                              • 172.67.137.48
                                                                                                                                                                                                                                              kcMfqkA8kH.exeGet hashmaliciousHTMLPhisher, Glupteba, Petite Virus, onlyLoggerBrowse
                                                                                                                                                                                                                                              • 104.21.93.225
                                                                                                                                                                                                                                              P61h5UFLcq.exeGet hashmaliciousXmrigBrowse
                                                                                                                                                                                                                                              • 172.67.34.170
                                                                                                                                                                                                                                              DU0WstQRiO.exeGet hashmaliciousRedLineBrowse
                                                                                                                                                                                                                                              • 172.67.34.170
                                                                                                                                                                                                                                              CSSHJQpPTD.exeGet hashmaliciousBabuk, Djvu, RedLine, SmokeLoader, VidarBrowse
                                                                                                                                                                                                                                              • 104.21.65.24
                                                                                                                                                                                                                                              JgFgdY52fi.exeGet hashmaliciousBabuk, Clipboard Hijacker, Djvu, RedLine, SmokeLoader, VidarBrowse
                                                                                                                                                                                                                                              • 172.67.139.220
                                                                                                                                                                                                                                              CLOUDFLARENETUSGameSetup.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                              • 172.64.41.3
                                                                                                                                                                                                                                              #U00d6deme_Transfer_Dekontu.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.137.232
                                                                                                                                                                                                                                              sipari#U015f_formu_831519.exeGet hashmaliciousSnake KeyloggerBrowse
                                                                                                                                                                                                                                              • 172.67.177.134
                                                                                                                                                                                                                                              PO_YTWHDF3432.exeGet hashmaliciousFormBookBrowse
                                                                                                                                                                                                                                              • 172.67.184.73
                                                                                                                                                                                                                                              PO_CCTEB77.exeGet hashmaliciousFormBookBrowse
                                                                                                                                                                                                                                              • 172.67.184.73
                                                                                                                                                                                                                                              #U00d6deme_Transfer_Dekontu.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.136.232
                                                                                                                                                                                                                                              04251452615625625.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.135.232
                                                                                                                                                                                                                                              Sat#U0131n_alma_emri_-_41026723.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.128.233
                                                                                                                                                                                                                                              42#U0435.exeGet hashmaliciousAgentTeslaBrowse
                                                                                                                                                                                                                                              • 162.159.136.232
                                                                                                                                                                                                                                              5b5erB7O9O.exeGet hashmaliciousFormBookBrowse
                                                                                                                                                                                                                                              • 104.21.39.249
                                                                                                                                                                                                                                              s6n00Z3C86.exeGet hashmaliciousBabuk, Clipboard Hijacker, DCRat, Djvu, RedLine, SmokeLoader, zgRATBrowse
                                                                                                                                                                                                                                              • 104.21.65.24
                                                                                                                                                                                                                                              JYAtBufpV4.exeGet hashmaliciousDCRat, Djvu, RedLine, SmokeLoader, zgRATBrowse
                                                                                                                                                                                                                                              • 104.21.65.24
                                                                                                                                                                                                                                              WrB1gNS1fN.exeGet hashmaliciousHTMLPhisher, Glupteba, Petite Virus, onlyLoggerBrowse
                                                                                                                                                                                                                                              • 104.21.93.225
                                                                                                                                                                                                                                              DU0WstQRiO.exeGet hashmaliciousRedLineBrowse
                                                                                                                                                                                                                                              • 172.67.34.170
                                                                                                                                                                                                                                              BRvptajioG.exeGet hashmaliciousRedLine, SmokeLoader, StealcBrowse
                                                                                                                                                                                                                                              • 172.67.137.48
                                                                                                                                                                                                                                              kcMfqkA8kH.exeGet hashmaliciousHTMLPhisher, Glupteba, Petite Virus, onlyLoggerBrowse
                                                                                                                                                                                                                                              • 104.21.93.225
                                                                                                                                                                                                                                              P61h5UFLcq.exeGet hashmaliciousXmrigBrowse
                                                                                                                                                                                                                                              • 172.67.34.170
                                                                                                                                                                                                                                              DU0WstQRiO.exeGet hashmaliciousRedLineBrowse
                                                                                                                                                                                                                                              • 172.67.34.170
                                                                                                                                                                                                                                              CSSHJQpPTD.exeGet hashmaliciousBabuk, Djvu, RedLine, SmokeLoader, VidarBrowse
                                                                                                                                                                                                                                              • 104.21.65.24
                                                                                                                                                                                                                                              JgFgdY52fi.exeGet hashmaliciousBabuk, Clipboard Hijacker, Djvu, RedLine, SmokeLoader, VidarBrowse
                                                                                                                                                                                                                                              • 172.67.139.220

                                                                                                                                                                                                                                              JA3 Fingerprints

                                                                                                                                                                                                                                              ⊘No context

                                                                                                                                                                                                                                              Dropped Files

                                                                                                                                                                                                                                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                                                                              C:\Users\user\AppData\Local\Programs\WolferVPN\d3dcompiler_47.dllGameSetup.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                EnchantedRealms.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                  Super-Game.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                    file.exeGet hashmaliciousRedLine, SmokeLoaderBrowse
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousGlupteba, RedLine, SmokeLoaderBrowse
                                                                                                                                                                                                                                                        Portal-Souls-1.0.5.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                          FigmaSetup.exeGet hashmaliciousBazaLoaderBrowse
                                                                                                                                                                                                                                                            FigmaSetup.exeGet hashmaliciousBazaLoaderBrowse
                                                                                                                                                                                                                                                              privacy.sexy-Setup-0.12.5.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                FigmaSetup.exeGet hashmaliciousBazaLoaderBrowse
                                                                                                                                                                                                                                                                  FigmaSetup.exeGet hashmaliciousBazaLoaderBrowse
                                                                                                                                                                                                                                                                    pdf-mensal-688368525791-75.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                      pdf-mensal-688368525791-75.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                        papel-162254_736.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                          papel-162254_736.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                            https://nuts.vysor.io/download/win32Get hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                              Nexthink_Collector_Silent.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                                Nexthink_Collector_Silent.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                                  pdf-fornec-34299-07893#U00ac.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                                                    pdf-fornec-34299-07893#U00ac.exeGet hashmaliciousUnknownBrowse

                                                                                                                                                                                                                                                                                      Created / dropped Files

                                                                                                                                                                                                                                                                                      (copy)

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:JSON data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):413
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.622417211407826
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12:YKWSg99rrt+UWikSdiO8CXBETpFFELTiJwrTM+Yi:YKWfrrtRKSIWxETpYUap
                                                                                                                                                                                                                                                                                      MD5:2B7F19F2FC201FE27C212FD1632F5DDA
                                                                                                                                                                                                                                                                                      SHA1:88D959B59438F87DCCE44257EF05F9F38FF4C407
                                                                                                                                                                                                                                                                                      SHA-256:CEF41FE2D16205892A1DF22A2C88832466ED75A076638D012BD29A5959E5E820
                                                                                                                                                                                                                                                                                      SHA-512:26F89D0351A7E37A1530056FFE60909A3384B5F3968DF3D5CFB7AEB6D72179DDE3479F69A3C2C82532CD3FF92994DF2B31B9F020ECED448C1EA796058FE93296
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Reputation:low
                                                                                                                                                                                                                                                                                      Preview:{"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABSjLU7zYUkRIPDR3IKCUEYEAAAABIAAABDAGgAcgBvAG0AaQB1AG0AAAAQZgAAAAEAACAAAAAeMaPdqvU3Xbi0T02ZH5wtD6AJW8AlOVF7SGt257dJiAAAAAAOgAAAAAIAACAAAACrL85c9u6IBijPt91xlpUc9rxSaZ6fliLLRvB9E3wFYTAAAACALkhxWEeKdqOMLlkOrfGrQrslxxZx8G5wcvHtbGo2wEGeS1HHQN+nCHXfGbnY7TdAAAAAkxRJQLgHWJXOsC1ikz3GGcODiAJQkgw7OiQcZmYu6NaIuMFYO+KW4VjEkWZcTkFNCwB7H51Z8RKSyYH/uoRqlQ=="}}

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data.bby

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):40960
                                                                                                                                                                                                                                                                                      Entropy (8bit):0.8553638852307782
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
                                                                                                                                                                                                                                                                                      MD5:28222628A3465C5F0D4B28F70F97F482
                                                                                                                                                                                                                                                                                      SHA1:1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
                                                                                                                                                                                                                                                                                      SHA-256:93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
                                                                                                                                                                                                                                                                                      SHA-512:C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Reputation:high, very likely benign file
                                                                                                                                                                                                                                                                                      Preview:SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies.bby

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):20480
                                                                                                                                                                                                                                                                                      Entropy (8bit):0.8508558324143882
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
                                                                                                                                                                                                                                                                                      MD5:933D6D14518371B212F36C3835794D75
                                                                                                                                                                                                                                                                                      SHA1:92D056D912B3C0260D379330D3CC0359B57A322B
                                                                                                                                                                                                                                                                                      SHA-256:55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
                                                                                                                                                                                                                                                                                      SHA-512:EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Preview:SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data.bby

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):106496
                                                                                                                                                                                                                                                                                      Entropy (8bit):1.136471148832945
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
                                                                                                                                                                                                                                                                                      MD5:37B1FC046E4B29468721F797A2BB968D
                                                                                                                                                                                                                                                                                      SHA1:50055EF1C50E4C1A7CCF7D00620E95128E4C448B
                                                                                                                                                                                                                                                                                      SHA-256:7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
                                                                                                                                                                                                                                                                                      SHA-512:1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Preview:SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data.bby

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 2
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):51200
                                                                                                                                                                                                                                                                                      Entropy (8bit):0.8745947603342119
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:96:aZ8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:W8yLG7IwRWf4
                                                                                                                                                                                                                                                                                      MD5:378391FDB591852E472D99DC4BF837DA
                                                                                                                                                                                                                                                                                      SHA1:10CB2CDAD4EDCCACE0A7748005F52C5251F6F0E0
                                                                                                                                                                                                                                                                                      SHA-256:513C63B0E44FFDE2B4E511A69436799A8B59585CB0EB5CCFDA7A9A8F06BA4808
                                                                                                                                                                                                                                                                                      SHA-512:F099631BEC265A6E8E4F8808270B57FFF28D7CBF75CC6FA046BB516E8863F36E8506C7A38AD682132FCB1134D26326A58F5B588B9EC9604F09FD7155B2AEF2DA
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Preview:SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies.bby

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):20480
                                                                                                                                                                                                                                                                                      Entropy (8bit):0.6732424250451717
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
                                                                                                                                                                                                                                                                                      MD5:CFFF4E2B77FC5A18AB6323AF9BF95339
                                                                                                                                                                                                                                                                                      SHA1:3AA2C2115A8EB4516049600E8832E9BFFE0C2412
                                                                                                                                                                                                                                                                                      SHA-256:EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
                                                                                                                                                                                                                                                                                      SHA-512:0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data.bby

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):196608
                                                                                                                                                                                                                                                                                      Entropy (8bit):1.1239949490932863
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
                                                                                                                                                                                                                                                                                      MD5:271D5F995996735B01672CF227C81C17
                                                                                                                                                                                                                                                                                      SHA1:7AEAACD66A59314D1CBF4016038D3A0A956BAF33
                                                                                                                                                                                                                                                                                      SHA-256:9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
                                                                                                                                                                                                                                                                                      SHA-512:62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\LICENSE.electron.txt

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:ASCII text
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):1096
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.13006727705212
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24:36DiJHxRHuyPP3GtIHw1Gg9QH+sUW8Ok4F+d1o36qjFD:36DiJzfPvGt7ICQH+sfIte36AFD
                                                                                                                                                                                                                                                                                      MD5:4D42118D35941E0F664DDDBD83F633C5
                                                                                                                                                                                                                                                                                      SHA1:2B21EC5F20FE961D15F2B58EFB1368E66D202E5C
                                                                                                                                                                                                                                                                                      SHA-256:5154E165BD6C2CC0CFBCD8916498C7ABAB0497923BAFCD5CB07673FE8480087D
                                                                                                                                                                                                                                                                                      SHA-512:3FFBBA2E4CD689F362378F6B0F6060571F57E228D3755BDD308283BE6CBBEF8C2E84BEB5FCF73E0C3C81CD944D01EE3FCF141733C4D8B3B0162E543E0B9F3E63
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:Copyright (c) Electron contributors.Copyright (c) 2013-2020 GitHub Inc...Permission is hereby granted, free of charge, to any person obtaining.a copy of this software and associated documentation files (the."Software"), to deal in the Software without restriction, including.without limitation the rights to use, copy, modify, merge, publish,.distribute, sublicense, and/or sell copies of the Software, and to.permit persons to whom the Software is furnished to do so, subject to.the following conditions:..The above copyright notice and this permission notice shall be.included in all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,.EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF.MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND.NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE.LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION.OF CONTRACT, TORT OR OTHERWISE, ARISIN

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\LICENSES.chromium.html

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:HTML document, ASCII text
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):8245721
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.70761969468716
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
                                                                                                                                                                                                                                                                                      MD5:0E3E4362F785AFF0B9E1852B1064C0F1
                                                                                                                                                                                                                                                                                      SHA1:A42CCB51E72BDCB5BB905A62EFAA28857DEF3A17
                                                                                                                                                                                                                                                                                      SHA-256:BD3EE49A5AB19D15DDC44B421B0BDEFCE587790786989AE77CF3DDF1E6A2BA8D
                                                                                                                                                                                                                                                                                      SHA-512:193B57EFC5F5971FBD9E4EA1A80B34AADCC2A814FF49C4C06AFE972BF327E98FF0498217A8BDEF984B10FDEC6E7858A6FB88C0B14936E0C6B404387A426B87F2
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview: Generated by licenses.py; do not edit. --><!doctype html>.<html>.<head>.<meta charset="utf-8">.<meta name="viewport" content="width=device-width">.<meta name="color-scheme" content="light dark">.<title>Credits</title>.<link rel="stylesheet" href="chrome://resources/css/text_defaults.css">.<link rel="stylesheet" href="chrome://credits/credits.css">.</head>.<body>.<span class="page-title" style="float:left;">Credits</span>.<a id="print-link" href="#" style="float:right;" hidden>Print</a>.<div style="clear:both; overflow:auto;"> Chromium <3s the following projects -->.<div class="product">.<span class="title">2-dim General Purpose FFT (Fast Fourier/Cosine/Sine Transform) Package</span>.<span class="homepage"><a href="http://www.kurims.kyoto-u.ac.jp/~ooura/fft.html">homepage</a></span>.<input type="checkbox" hidden id="0">.<label class="show" for="0" tabindex="0"></label>.<div class="licence">.<pre>Copyright(C) 1997,2001 Takuya OOURA (email: ooura@kurims.kyoto-u.ac.jp)..You may us

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):163343360
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.732960636432368
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:1572864:VOehMi9HmQapOF/wcuOG/KTlWoqYtUMogmhQXoqAfIgrWAdBb9pTHPe3HdYYGQc1:4ZK9PUddCvs
                                                                                                                                                                                                                                                                                      MD5:4AD8066DFB8E65195E5733DDFD8A1AC7
                                                                                                                                                                                                                                                                                      SHA1:8225752BBC6C6720F92B8890117A76576AB5D951
                                                                                                                                                                                                                                                                                      SHA-256:BB3651F02D8CDBC962EC910EC5E6DE3BAD9DD94CBB811DA098116E19C4BE7C0F
                                                                                                                                                                                                                                                                                      SHA-512:BA5951A9455A06060AA349F66D2AF97227E5617B2D6867CA3AB0AA1082D3528D0AE43481F0C8FFD489A84B748CCCC88FE5AAD805F753E339B691F836B2905C5D
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 1%, Browse
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........."..........f.......j%........@..........................................`..........................................[..'...^.h................'A..............L..p.Q.....................PzQ.(... ...@.............^.`....@[......................text............................... ..`.rdata....n.......n.................@..@.data.....C...b.......b.............@....pdata...'A......(A...j.............@..@.00cfg..0..........................@..@.gxfg...pA.......B.................@..@.retplne..... ...........................rodata......0....... .............. ..`.tls.........P.......2..............@...CPADinfo8....`.......8..............@...LZMADEC......p.......:.............. ..`_RDATA..\............L..............@..@malloc_h.............N.............. ..`.rsrc................P..............@..@.reloc...L.......N..................@..B................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\chrome_100_percent.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):135956
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.91603970812188
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:bKzwJCcIe4woKmWVlBL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:bKzwjIe41KmWVlNK18Gb0OV8ld0GecQu
                                                                                                                                                                                                                                                                                      MD5:443C58245EEB233D319ABF7150B99C31
                                                                                                                                                                                                                                                                                      SHA1:F889CE6302BD8CFBB68EE9A6D8252E58B63E492D
                                                                                                                                                                                                                                                                                      SHA-256:99CA6947D97DF212E45782BBD5D97BFB42112872E1C42BAB4209CEEDF66DC760
                                                                                                                                                                                                                                                                                      SHA-512:081F3EE4A5E40FDC8BB6F16F2CFD47EDDE2BD8F3B5349775526092A770B090C05308D4289ECDDA3D541CF7F0579AC64B529930FD128EDAD9B0991DFA00B0E9BC
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..................#.....:.....`.....a.~...b.....c.k...d.....e.....f.....g.\...h.V...i.....j.....k.o"..l..$..m.//..n..9..o..<..p..@..q.DD..r..F..s..G..t.,K..u..M..v.LO..w..S..x..V.....Y.....[.....\.....^....*_....De.....j.....l....`n.....n.....o.....q.....r.....u.....x.....{................]....'....M..........................K.....I..........Y....\............................................&.....#...d*...",....0....4....>...:A...I...vM....W...Na...e....g....o...ex...My...z...|.........p.................@...........{.................-.....y...........$............................................(.....).U...*.7...+.....,.=...-........../.....0.....1.....2.....3.d...4.....5.....6.....7.....8.....9.r...;.6...<.....=.....>.....?.[...@.$...A.....B.....C.....D.....G...................o...........d...........[.................K............... .....!.....".X...#.....$.[...%.....&.q...'.....(.....*.....+.g...,.....-.A........./."...0.....1.....2.g...3...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\chrome_200_percent.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):195935
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.941514552320428
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:A4DQYaE/N6gbrvy/+JPnKmWVlBafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+Hxf:A4DQYaSN6gnvyWnKmWVlSgx5GMRejnbA
                                                                                                                                                                                                                                                                                      MD5:81B5B74FE16C7C81870F539D5C263397
                                                                                                                                                                                                                                                                                      SHA1:27526CC2B68A6D2B539BD75317A20C9C5E43C889
                                                                                                                                                                                                                                                                                      SHA-256:CB4FD141A5C4D188A3ECB203E9D41A3AFCA648724160E212289ADCAC666FBFF4
                                                                                                                                                                                                                                                                                      SHA-512:B2670E2DFA495CCC7874C21D0413CFBEBFD4A2F14FC0217E823EC6A16AC1181F8E06BFE7C2D32543167BC3A2E929C7F0AF1A5F90182E95913BA2292FA7CADB80
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..................#.....:.....`.@...a.O...b.3...c.....d.6...e.1...f..%..g.++..h.;...i..5..j..9..k.?B..l..F..m..Z..n.[o..o..t..p..~..q.:...r....s.s...t.....u.....v.....w....x.................r..........l...................................*...........?.....3.....8.....w...........j....................................s............H...._R...$U....Y....c....e...Th....m....x...az..................l....N...................4....`............`.................a...................................3...........n.....E..............................!....#%.... ,....>/....W6.....=....IA....zh....pi....Pn..(.3s..).at..*.{v..+..w..,.Zx..-..y....`{../..|..0.d~..1.....2.....3.d...4.R...5.3...6.....7.,...8.2...9....;.....<.....=.....>.0...?.T...@.u...A.i...B.=...C....D.....G._.....Y.................v.....!.....W.....0.................D............... .....!.....".....#.....$.....%.?...&.....'.p...(.....*.....+.....,.....-.k........./.....0.G...1.....2.E...3...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\d3dcompiler_47.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):4916712
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.398049523846958
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
                                                                                                                                                                                                                                                                                      MD5:2191E768CC2E19009DAD20DC999135A3
                                                                                                                                                                                                                                                                                      SHA1:F49A46BA0E954E657AAED1C9019A53D194272B6A
                                                                                                                                                                                                                                                                                      SHA-256:7353F25DC5CF84D09894E3E0461CEF0E56799ADBC617FCE37620CA67240B547D
                                                                                                                                                                                                                                                                                      SHA-512:5ADCB00162F284C16EC78016D301FC11559DD0A781FFBEFF822DB22EFBED168B11D7E5586EA82388E9503B0C7D3740CF2A08E243877F5319202491C8A641C970
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                                                                                                                                                                                      Joe Sandbox View:
                                                                                                                                                                                                                                                                                      • Filename: GameSetup.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: EnchantedRealms.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: Super-Game.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: Portal-Souls-1.0.5.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: FigmaSetup.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: FigmaSetup.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: privacy.sexy-Setup-0.12.5.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: FigmaSetup.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: FigmaSetup.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: pdf-mensal-688368525791-75.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: pdf-mensal-688368525791-75.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: papel-162254_736.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: papel-162254_736.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: , Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: Nexthink_Collector_Silent.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: Nexthink_Collector_Silent.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: pdf-fornec-34299-07893#U00ac.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      • Filename: pdf-fornec-34299-07893#U00ac.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........|3..]...]...]..e\...]...\.5.]..e...]..wX...]..wY...]..e^...]..eX.y.]..eY...]..e]...]..eU./.]..e....]..e_...].Rich..].................PE..d...^.}`.........." ......8..........<).......................................K.....:FK...`A........................................`%G.x....(G.P.....J.@.....H.......J..%....J.....p.D.p....................S<.(...pR<.@............S<.(............................text.....8.......8................. ..`.rdata...F....8..P....8.............@..@.data...`....@G......@G.............@....pdata........H......@H.............@..@.rsrc...@.....J......@J.............@..@.reloc........J......PJ.............@..B........................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\ffmpeg.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):2880000
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.6993392201014155
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:49152:AZ2KxYmwFfgQQs0ShPrF0/zO6R0gRhPj3hTUctrRhuwSnKxqgI5IN8N3lzl3hqzv:Uofp1Pyi54wnKxqg4INhh9
                                                                                                                                                                                                                                                                                      MD5:2A7C224800F0A752DB6EAF3AB7CAE796
                                                                                                                                                                                                                                                                                      SHA1:B718B4B7AE938A10042BCDB2AEC45894E76E21DA
                                                                                                                                                                                                                                                                                      SHA-256:6D0F59C9E75CA6B16FF63A005045E33E201BFF2F9D4900B9256CF2F7032722D5
                                                                                                                                                                                                                                                                                      SHA-512:D2301BBBBE3E882D34BDCA48A3B9C89AE8457A38000AFC9B8B23EC797FA50642316E33C79DBE9F1954BAC39F66531D9792C65D02524E444E3B7B7FE4E49CF8DB
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." ......".................................................. B...........`A..........................................*.......*.(.............@...............A..4....).......................).(...."#.@...........H.*.P............................text....."......."................. ..`.rdata........#.......#.............@..@.data.........*.."....*.............@....pdata........@.......*.............@..@.00cfg..8....pA.......+.............@..@.gxfg....,....A.......+.............@..@.retplne......A.......+..................tls..........A.......+.............@..._RDATA..\.....A.......+.............@..@.reloc...4....A..6....+.............@..B........................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\icudtl.dat

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):10544880
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.276833777601164
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:98304:GKPBQYOo+ddlymOk25flQCUliXUxiG9Ha93Whla6ZGdnp/8j:GKPBhORjOhCliXUxiG9Ha93Whla6ZGr4
                                                                                                                                                                                                                                                                                      MD5:2134E5DBC46FB1C46EAC0FE1AF710EC3
                                                                                                                                                                                                                                                                                      SHA1:DBECF2D193AE575ABA4217194D4136BD9291D4DB
                                                                                                                                                                                                                                                                                      SHA-256:EE3C8883EFFD90EDFB0FF5B758C560CBCA25D1598FCB55B80EF67E990DD19D41
                                                                                                                                                                                                                                                                                      SHA-512:B9B50614D9BAEBF6378E5164D70BE7FE7EF3051CFFF38733FE3C7448C5DE292754BBBB8DA833E26115A185945BE419BE8DD1030FC230ED69F388479853BC0FCB
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:...'........CmnD........ Copyright (C) 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html .Q....B.......B...#...B.. $...B..p$...B...$...B...%...B..`P...C...P...C...Q..(C......<C.....OC......bC..@...uC.......C..P....C.......C.......C..p....C.. ....C.......C.......D..p... D.....3D..0...FD.....YD.....lD.......D......D..0....D.......D..p....D......D..@....D.......E......E..@...*E.....=E..P...NE......bE.....rE..@....E.......E.......E..P....E.......E......E..@....F.......F.....'F..0...7F..P...JF......aF......qF...G...F.. H...F..`K...F...K...F...L...F...-...F...c...G....'.'G....'.>G..@.'.UG..0.'.oG....'..G...!'..G...!'..G..P&'..G...)'..G..@*'..H..`.(..H...e).7H..0.).VH...)*.xH....*..H....*..H...P+..H...Y+..H...Z+..I...]+. I..`^+.9I.. .+.UI....+.lI....+..I..P.-..I...=...I.......I.......I.. ....J..p....J......-J..p...EJ......ZJ......rJ..`....J..@....J.......J.......J..0....J.......J.......J..0....K..@....K..../.2K...,/.GK..../.\K..

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\libEGL.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):480256
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.336558815218672
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:s4itlpEJVqKqK5Z5UibKsBHI0Sfnx+lXGpeOQHA93Gb3sm:s4itlpAqKqK5Z5U+jBolfnjIyG
                                                                                                                                                                                                                                                                                      MD5:45EF2DF5F6AAF1BA9ECDDBFA0F07574C
                                                                                                                                                                                                                                                                                      SHA1:0F93C5B9775AD32D342963F4DD27BB0CDAADD793
                                                                                                                                                                                                                                                                                      SHA-256:22BA0C9ACF55F4FA5DF7098B70D020D65619703A282D45B288632F248CD23B4E
                                                                                                                                                                                                                                                                                      SHA-512:99423F92EEDA8E907D0E2C0A2A7DA5A89E64B7B4B4D5F93EE48C91C9F2A0D415377B373FA656386F1FC0D6C8556E57CE2D4001650A47F5F6F4D5CA217D5FADBB
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." ..... ................................................................`A........................................P"......f0..(.......x........B..............................................(...@1..@............3...............................text...]........ .................. ..`.rdata..D....0.......$..............@..@.data....K..........................@....pdata...B.......D..................@..@.00cfg..8....`......................@..@.gxfg...`$...p...&..................@..@.retplne.............:...................tls....!............<..............@..._RDATA..\............>..............@..@.rsrc...x............@..............@..@.reloc...............F..............@..B................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\libGLESv2.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):7418880
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.464871257930227
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:49152:x2b3imtb1uWsvZRUCXQNMBbGUa/XFfOpvQnDwX+xjA7LAIgRg37QiI+id3pFJs7y:x7RWft4NV+sduHox6gWE5lHoFX
                                                                                                                                                                                                                                                                                      MD5:0BC536DDA0CC8195F58A48B9500E3D48
                                                                                                                                                                                                                                                                                      SHA1:D1FD4FFA994B497FF927C2851660E929F3079AEF
                                                                                                                                                                                                                                                                                      SHA-256:4E7AFC3A650CF414DEBA33AB4D755F601624A8E24934B43A958ECA933D65D8EA
                                                                                                                                                                                                                                                                                      SHA-512:372B5E9890EDA267097DD92ACD407D422C3621452C19720C510C44A3D468779D12D5A3D557C2CA64F0BB86C6766665E2BC100CA465FCF604DF2ED950F406A636
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." .....hV...........J......................................@r...........`A..........................................h.......i.d....Pq.......n.TR...........`q.....\=h.....................0<h.(.....V.@.............i..... .h.@....................text...egV......hV................. ..`.rdata..L.....V......lV.............@..@.data........pj......Pj.............@....pdata..TR....n..T....m.............@..@.00cfg..8.....p......(p.............@..@.gxfg....+....p..,...*p.............@..@.retplne..... q......Vp..................tls....:....0q......Xp.............@..._RDATA..\....@q......Zp.............@..@.rsrc........Pq......\p.............@..@.reloc.......`q......bp.............@..B................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\resources.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):5193850
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.9952704707488165
                                                                                                                                                                                                                                                                                      Encrypted:true
                                                                                                                                                                                                                                                                                      SSDEEP:98304:qg1zetaMcKWPxgWMp1W/ywNAWsh11fHcMtyrwr+oxPf0yO1WODHxSkLyz7ai6y:qgVetWxWF1pkshH8M4krFPf0FIG27sy
                                                                                                                                                                                                                                                                                      MD5:043DBE3EAF0BDE424185A3843E321F83
                                                                                                                                                                                                                                                                                      SHA1:580AC5FDE14E6D177D6F45D2E40D435CC7EDC8D0
                                                                                                                                                                                                                                                                                      SHA-256:0C967CB604D5066F1AB609E81895C1271475A2E1B4B3D5930EEA720FC218781B
                                                                                                                                                                                                                                                                                      SHA-512:44814AAEC681922594528D0ED1A4D2E935045220D09E065647B53455931EAEB3B737C87032B611D7EAD621379AE653A9C5D6D87C828C1961C54129124234EBC3
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............f........).....+....b/...8.A...8.J...8.M...8.`...8-i...8Hp...8.r...8-y...8.{...80}...8s....8e....8.....8.....8....8+....8W....8)....8....8.....8|....8.....8;....8H....8.....8.....8y....8o....8z....8.....8.....8^....8.....9.....9.....9.....99....9.....9.....9\"...9.B...9kD...9.I...9.S...9.U...9.V...9|W...9.Z...9.Z...9R[...9.`...9.f...9.w...9.....9x....9.....@.....@.....@....@.....@.....@.....@.....@`....@&....@.....@.....@.....@....8E....9EB...:EV...;E....<E."..=Eu-..>E....?E./..@E.0..AEQH..BEL....FSD...F.G...U4....UH....U/....U.....U.....U....U.....U5....U.....U.....U.....U.....U6....U.....U.....U.....U.....U.....U.....U.....VM....V^....V.....V.!...V.+...VJ2...V0A...V.D...V.J...Vi]...V.e...V.j...VK~...V....V.....Vn..."V....#Ve...$V,...%V....&V....'V(...(V....)V....*V>...+V@....W.....WUP...W}T.....V.....Y..........C.....y..........y.....j...........6N.....V....L^....Rc....$e....Dj.....o....1w...............................-.........../....0.....2.....3.....4.....5.4.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\snapshot_blob.bin

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):259202
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.177720672914121
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:1536:N8eVec2PhNMqkPhmpILx3FtscrrDKrVTT9gXA4SuoveydoBaDEtu/wMHOdxpMKrF:76N6PkpILxHscrXeQZb0G0mvY6T
                                                                                                                                                                                                                                                                                      MD5:3A4095538E021B84396B3CE25AFFAFC3
                                                                                                                                                                                                                                                                                      SHA1:CFC20771227B3C1F3197FF6A91CEE68555AFB247
                                                                                                                                                                                                                                                                                      SHA-256:C1C9145735032BFF20B2FFF50A4B92AE9CF47290F433E3F3B32E3B232D610C59
                                                                                                                                                                                                                                                                                      SHA-512:7B71083180F237F5F37CBE7A9755F6606708B959986562F9C5880CCCEA17B80A5187649FC0CB6965A8B40526BCB2CB6D980D364BE528465290658B4D9084348E
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:.........J.&11.4.183.29-electron.0..........................................h...B%...Y..........a........a........a........ar.......a........a..............].D.......M....`$.......m.D.......=....`$.......D.......M....`$.......u.D.......M....`$.........D.......A....`D.........D.......M....`$.......M.D.......M....`$.......D.......M....`$.......D.!.....M....`$.......q.D.%.....E....`$.......D.).....M....`$......ID.-.....M....`$.......D.1.....M....`$.......D.5.....M....`$....(Jb...(L.....@..F^......`.....(Jb...,P.....@..F^..`.....H...IDa........Db............D`.......D`.....D]D....D`......WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa............L...........................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\v8_context_snapshot.bin

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):578034
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.245532016724801
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:alKQ1+Ku6X5O8QgZbNg8zvEjbwTBH32jezyjPX:aV1oeLvs4mCG
                                                                                                                                                                                                                                                                                      MD5:5DB8A5BB87C7999343F30128979057A1
                                                                                                                                                                                                                                                                                      SHA1:C4177C2FE973A495DB59B6228AC26264EEC46A4D
                                                                                                                                                                                                                                                                                      SHA-256:5B1F69F39F3D5865DCE13EE3BDBC1AF2938F5CC4C056DC9F9E213E9AF346AD4B
                                                                                                                                                                                                                                                                                      SHA-512:DA2D516251376952729A33DE2CD23764290D400FAFC49642F2CCD799E3F989CCE4D5561A76D380A950B77B53B50148DEC9089C30DE6C3DC38666237E196E569B
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........ .R.11.4.183.29-electron.0...........................................p......*....y.........@p..a........a........aT.......ar.......a........a..............].D.......M....`$.......m.D.......=....`$.......D.......M....`$.......u.D.......M....`$.........D.......A....`D.........D.......M....`$.......M.D.......M....`$.......D.......M....`$.......D.!.....M....`$.......q.D.%.....E....`$.......D.).....M....`$......ID.-.....M....`$.......D.1.....M....`$.......D.5.....M....`$....(Jb...(L.....@..F^......`.....(Jb...,P.....@..F^..`.....H...IDa........Db............D`.......D`.....D]D....D`......WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa............L...................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\vk_swiftshader.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):5251072
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.341324832913826
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:49152:Ab03fn3GIdr1DO1N8jvfWSrvOuyEE0+w7rz77gpxbhk0H4t38mvttDpSHUoeygs4:d3v3xDvRTGVgt38mvt1pSH0adU
                                                                                                                                                                                                                                                                                      MD5:516C5B93B1C13AF0AD393BFF6AA4E259
                                                                                                                                                                                                                                                                                      SHA1:A8823263EE4C2B7CED5AEA055E6F4105DF09E478
                                                                                                                                                                                                                                                                                      SHA-256:2377FD655C1E0B6275F109258F3AF70161996F6CCBF8D67BB654D3A9EDF6D5B9
                                                                                                                                                                                                                                                                                      SHA-512:B976C2373525DD1AC9493D281EC5A1685D1C63B41C44DB6F0DF10915A6C97A2E041D3F00485AADF7B52695C901D5AB1FE2FFE0CAA7AEEAE6874065B185D81A22
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." ......?..z........9.......................................Q...........`A.........................................zK.~...f.K.P.....Q......@O.._........... Q.h}...8K......................7K.(...@.?.@.............K.P............................text.....?.......?................. ..`.rdata........?.......?.............@..@.data.........L......pL.............@....pdata..._...@O..`....N.............@..@.00cfg..8.....P......fO.............@..@.gxfg....,....P......hO.............@..@.retplne......P.......O..................tls....Q.....P.......O.............@..._RDATA..\.....Q.......O.............@..@.rsrc.........Q.......O.............@..@.reloc..h}... Q..~....O.............@..B................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\vk_swiftshader_icd.json

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:JSON data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):106
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.724752649036734
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3:YD96WyV18tzsmyXLVi1rTVWSCwW2TJHzeZ18rY:Y8WyV18tAZLVmCwXFiZ18rY
                                                                                                                                                                                                                                                                                      MD5:8642DD3A87E2DE6E991FAE08458E302B
                                                                                                                                                                                                                                                                                      SHA1:9C06735C31CEC00600FD763A92F8112D085BD12A
                                                                                                                                                                                                                                                                                      SHA-256:32D83FF113FEF532A9F97E0D2831F8656628AB1C99E9060F0332B1532839AFD9
                                                                                                                                                                                                                                                                                      SHA-512:F5D37D1B45B006161E4CEFEEBBA1E33AF879A3A51D16EE3FF8C3968C0C36BBAFAE379BF9124C13310B77774C9CBB4FA53114E83F5B48B5314132736E5BB4496F
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:{"file_format_version": "1.0.0", "ICD": {"library_path": ".\\vk_swiftshader.dll", "api_version": "1.0.5"}}

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Programs\WolferVPN\vulkan-1.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):931840
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.56671155058839
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24576:FoHDVVdrfQ09CPKuy0O0Q6Z5W0DYsHA6g3P0zAk7m+:FuVdrI0GKuy066Z5W0DYsHA6g3P0zAk5
                                                                                                                                                                                                                                                                                      MD5:D1F1609B93993A1C74872FAF7694B01D
                                                                                                                                                                                                                                                                                      SHA1:4237815549B77F3509EE99F8ED6A86DE6C15AA20
                                                                                                                                                                                                                                                                                      SHA-256:D0615DC92873F5FC92A74CDED1E0EC34A702D6A3E671778C841BE20DA2CD4549
                                                                                                                                                                                                                                                                                      SHA-512:CD80B50476C4358E06736789B99C5F8C97F3FA5C7DEE85610EED26A5EA42189F6475F97FF00B7D11C15DBE72B9B7734EB01732275A1B510D13663DC775EFF81B
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." .....x................................................................`A........................................0...<!..l...P................o..............L...<....................... ...(...@...@............................................text....v.......x.................. ..`.rdata...............|..............@..@.data....L....... ...d..............@....pdata...o.......p..................@..@.00cfg..8....@......................@..@.gxfg...P(...P...*..................@..@.retplne............. ...................tls................."..............@..._RDATA..\............$..............@..@.rsrc................&..............@..@.reloc..L............*..............@..B................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\8aa2ec43-5e03-40f0-b44b-d7dcf4df059c.tmp.node

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):1648128
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.563147955168653
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24576:tUgSe+M9LbxN3FbrbcP8w40RBvle2M0BsbHO9wn0eRu2vL/qDi/jZHFf:T+M9B08Mvle2fBsRD
                                                                                                                                                                                                                                                                                      MD5:22587652E488CAE64A03C8038A44A259
                                                                                                                                                                                                                                                                                      SHA1:9359EECF5F15A97C5ADE7B1086B5B5097928AA2E
                                                                                                                                                                                                                                                                                      SHA-256:5AC0D196837E9C6E7CD779235AB4F45738DFD25178FE58EF4DAF66AB5705F356
                                                                                                                                                                                                                                                                                      SHA-512:C590CF0FD56A3CB68DB65DD973AAF76972A6F44658B1E2FD0FA60E12DC69F76199A3794460694A3C4FF9D370CC99BF4134AC1A43B99CDEFD7EE4D66584F4DCC9
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......[a....xY..xY..xY.r{X..xY.r}X..xY.r|X=.xYMu|X..xYMu{X..xYMu}X6.xY.ryX..xY..yY..xY.uqX..xY.uxX..xY.u.Y..xY.uzX..xYRich..xY................PE..d....bLe.........." .....4................................................................`.............................................`...P...(....`.......`...............p..........p............................)..8............P..........@....................text....3.......4.................. ..`.rdata.......P.......8..............@..@.data...`h.......R..................@....pdata.......`......."..............@..@_RDATA.......P......................@..@.rsrc........`......................@..@.reloc.......p......................@..B................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\b1c3f10e-540e-46f8-9bee-83879b20c9f6.tmp.node

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):152576
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.214761833394253
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:Bi9h7qgZQj5hsmCi1REPUuxHi8r2qlakV1lKaea:BiDqes5hYiwPlxHiopK3
                                                                                                                                                                                                                                                                                      MD5:A24B00648797927AF983B1736F53C258
                                                                                                                                                                                                                                                                                      SHA1:5FB4F066C89E6F7F4E185E9D908F48AEA88832EA
                                                                                                                                                                                                                                                                                      SHA-256:1ABF0289710A7B8A886653CCE8BD7D69D869074809E8A9AC8926070BA16888EE
                                                                                                                                                                                                                                                                                      SHA-512:19A3A868BA7E1DDF96FF4C8FC1E35D9948DBA5D92A7F819DDC75D2A6A0068CD5E6DFA272009AD3880D11AB357CCE4238CFBB4C21CECFDC78CE80638503344CF4
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 41%
                                                                                                                                                                                                                                                                                      • Antivirus: Virustotal, Detection: 40%, Browse
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........t..~'..~'..~'/.}&..~'/.{&v.~'/.z&..~'X.z&.~'X.}&..~'X.{&.~'/..&..~'...'..~'..w&..~'..'..~'..|&..~'Rich..~'........PE..d.....Ve.........." ...$.j................................................................`..................................................-..<............`...................... ...p...........................`...@....................$..@....................text....j.......j.................. ..`.rdata..B............n..............@..@.data........@.......&..............@....pdata.......`.......2..............@..@_RDATA..\............H..............@..@.rsrc................J..............@..@.reloc...............L..............@..B................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\LICENSE.electron.txt

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:ASCII text
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):1096
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.13006727705212
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24:36DiJHxRHuyPP3GtIHw1Gg9QH+sUW8Ok4F+d1o36qjFD:36DiJzfPvGt7ICQH+sfIte36AFD
                                                                                                                                                                                                                                                                                      MD5:4D42118D35941E0F664DDDBD83F633C5
                                                                                                                                                                                                                                                                                      SHA1:2B21EC5F20FE961D15F2B58EFB1368E66D202E5C
                                                                                                                                                                                                                                                                                      SHA-256:5154E165BD6C2CC0CFBCD8916498C7ABAB0497923BAFCD5CB07673FE8480087D
                                                                                                                                                                                                                                                                                      SHA-512:3FFBBA2E4CD689F362378F6B0F6060571F57E228D3755BDD308283BE6CBBEF8C2E84BEB5FCF73E0C3C81CD944D01EE3FCF141733C4D8B3B0162E543E0B9F3E63
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:Copyright (c) Electron contributors.Copyright (c) 2013-2020 GitHub Inc...Permission is hereby granted, free of charge, to any person obtaining.a copy of this software and associated documentation files (the."Software"), to deal in the Software without restriction, including.without limitation the rights to use, copy, modify, merge, publish,.distribute, sublicense, and/or sell copies of the Software, and to.permit persons to whom the Software is furnished to do so, subject to.the following conditions:..The above copyright notice and this permission notice shall be.included in all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,.EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF.MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND.NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE.LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION.OF CONTRACT, TORT OR OTHERWISE, ARISIN

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\LICENSES.chromium.html

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:HTML document, ASCII text
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):8245721
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.70761969468716
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
                                                                                                                                                                                                                                                                                      MD5:0E3E4362F785AFF0B9E1852B1064C0F1
                                                                                                                                                                                                                                                                                      SHA1:A42CCB51E72BDCB5BB905A62EFAA28857DEF3A17
                                                                                                                                                                                                                                                                                      SHA-256:BD3EE49A5AB19D15DDC44B421B0BDEFCE587790786989AE77CF3DDF1E6A2BA8D
                                                                                                                                                                                                                                                                                      SHA-512:193B57EFC5F5971FBD9E4EA1A80B34AADCC2A814FF49C4C06AFE972BF327E98FF0498217A8BDEF984B10FDEC6E7858A6FB88C0B14936E0C6B404387A426B87F2
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview: Generated by licenses.py; do not edit. --><!doctype html>.<html>.<head>.<meta charset="utf-8">.<meta name="viewport" content="width=device-width">.<meta name="color-scheme" content="light dark">.<title>Credits</title>.<link rel="stylesheet" href="chrome://resources/css/text_defaults.css">.<link rel="stylesheet" href="chrome://credits/credits.css">.</head>.<body>.<span class="page-title" style="float:left;">Credits</span>.<a id="print-link" href="#" style="float:right;" hidden>Print</a>.<div style="clear:both; overflow:auto;"> Chromium <3s the following projects -->.<div class="product">.<span class="title">2-dim General Purpose FFT (Fast Fourier/Cosine/Sine Transform) Package</span>.<span class="homepage"><a href="http://www.kurims.kyoto-u.ac.jp/~ooura/fft.html">homepage</a></span>.<input type="checkbox" hidden id="0">.<label class="show" for="0" tabindex="0"></label>.<div class="licence">.<pre>Copyright(C) 1997,2001 Takuya OOURA (email: ooura@kurims.kyoto-u.ac.jp)..You may us

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\WolferVPN.exe

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):163343360
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.732960636432368
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:1572864:VOehMi9HmQapOF/wcuOG/KTlWoqYtUMogmhQXoqAfIgrWAdBb9pTHPe3HdYYGQc1:4ZK9PUddCvs
                                                                                                                                                                                                                                                                                      MD5:4AD8066DFB8E65195E5733DDFD8A1AC7
                                                                                                                                                                                                                                                                                      SHA1:8225752BBC6C6720F92B8890117A76576AB5D951
                                                                                                                                                                                                                                                                                      SHA-256:BB3651F02D8CDBC962EC910EC5E6DE3BAD9DD94CBB811DA098116E19C4BE7C0F
                                                                                                                                                                                                                                                                                      SHA-512:BA5951A9455A06060AA349F66D2AF97227E5617B2D6867CA3AB0AA1082D3528D0AE43481F0C8FFD489A84B748CCCC88FE5AAD805F753E339B691F836B2905C5D
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........."..........f.......j%........@..........................................`..........................................[..'...^.h................'A..............L..p.Q.....................PzQ.(... ...@.............^.`....@[......................text............................... ..`.rdata....n.......n.................@..@.data.....C...b.......b.............@....pdata...'A......(A...j.............@..@.00cfg..0..........................@..@.gxfg...pA.......B.................@..@.retplne..... ...........................rodata......0....... .............. ..`.tls.........P.......2..............@...CPADinfo8....`.......8..............@...LZMADEC......p.......:.............. ..`_RDATA..\............L..............@..@malloc_h.............N.............. ..`.rsrc................P..............@..@.reloc...L.......N..................@..B................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\chrome_100_percent.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):135956
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.91603970812188
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:bKzwJCcIe4woKmWVlBL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:bKzwjIe41KmWVlNK18Gb0OV8ld0GecQu
                                                                                                                                                                                                                                                                                      MD5:443C58245EEB233D319ABF7150B99C31
                                                                                                                                                                                                                                                                                      SHA1:F889CE6302BD8CFBB68EE9A6D8252E58B63E492D
                                                                                                                                                                                                                                                                                      SHA-256:99CA6947D97DF212E45782BBD5D97BFB42112872E1C42BAB4209CEEDF66DC760
                                                                                                                                                                                                                                                                                      SHA-512:081F3EE4A5E40FDC8BB6F16F2CFD47EDDE2BD8F3B5349775526092A770B090C05308D4289ECDDA3D541CF7F0579AC64B529930FD128EDAD9B0991DFA00B0E9BC
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..................#.....:.....`.....a.~...b.....c.k...d.....e.....f.....g.\...h.V...i.....j.....k.o"..l..$..m.//..n..9..o..<..p..@..q.DD..r..F..s..G..t.,K..u..M..v.LO..w..S..x..V.....Y.....[.....\.....^....*_....De.....j.....l....`n.....n.....o.....q.....r.....u.....x.....{................]....'....M..........................K.....I..........Y....\............................................&.....#...d*...",....0....4....>...:A...I...vM....W...Na...e....g....o...ex...My...z...|.........p.................@...........{.................-.....y...........$............................................(.....).U...*.7...+.....,.=...-........../.....0.....1.....2.....3.d...4.....5.....6.....7.....8.....9.r...;.6...<.....=.....>.....?.[...@.$...A.....B.....C.....D.....G...................o...........d...........[.................K............... .....!.....".X...#.....$.[...%.....&.q...'.....(.....*.....+.g...,.....-.A........./."...0.....1.....2.g...3...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\chrome_200_percent.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):195935
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.941514552320428
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:A4DQYaE/N6gbrvy/+JPnKmWVlBafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+Hxf:A4DQYaSN6gnvyWnKmWVlSgx5GMRejnbA
                                                                                                                                                                                                                                                                                      MD5:81B5B74FE16C7C81870F539D5C263397
                                                                                                                                                                                                                                                                                      SHA1:27526CC2B68A6D2B539BD75317A20C9C5E43C889
                                                                                                                                                                                                                                                                                      SHA-256:CB4FD141A5C4D188A3ECB203E9D41A3AFCA648724160E212289ADCAC666FBFF4
                                                                                                                                                                                                                                                                                      SHA-512:B2670E2DFA495CCC7874C21D0413CFBEBFD4A2F14FC0217E823EC6A16AC1181F8E06BFE7C2D32543167BC3A2E929C7F0AF1A5F90182E95913BA2292FA7CADB80
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..................#.....:.....`.@...a.O...b.3...c.....d.6...e.1...f..%..g.++..h.;...i..5..j..9..k.?B..l..F..m..Z..n.[o..o..t..p..~..q.:...r....s.s...t.....u.....v.....w....x.................r..........l...................................*...........?.....3.....8.....w...........j....................................s............H...._R...$U....Y....c....e...Th....m....x...az..................l....N...................4....`............`.................a...................................3...........n.....E..............................!....#%.... ,....>/....W6.....=....IA....zh....pi....Pn..(.3s..).at..*.{v..+..w..,.Zx..-..y....`{../..|..0.d~..1.....2.....3.d...4.R...5.3...6.....7.,...8.2...9....;.....<.....=.....>.0...?.T...@.u...A.i...B.=...C....D.....G._.....Y.................v.....!.....W.....0.................D............... .....!.....".....#.....$.....%.?...&.....'.p...(.....*.....+.....,.....-.k........./.....0.G...1.....2.E...3...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\d3dcompiler_47.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):4916712
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.398049523846958
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
                                                                                                                                                                                                                                                                                      MD5:2191E768CC2E19009DAD20DC999135A3
                                                                                                                                                                                                                                                                                      SHA1:F49A46BA0E954E657AAED1C9019A53D194272B6A
                                                                                                                                                                                                                                                                                      SHA-256:7353F25DC5CF84D09894E3E0461CEF0E56799ADBC617FCE37620CA67240B547D
                                                                                                                                                                                                                                                                                      SHA-512:5ADCB00162F284C16EC78016D301FC11559DD0A781FFBEFF822DB22EFBED168B11D7E5586EA82388E9503B0C7D3740CF2A08E243877F5319202491C8A641C970
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........|3..]...]...]..e\...]...\.5.]..e...]..wX...]..wY...]..e^...]..eX.y.]..eY...]..e]...]..eU./.]..e....]..e_...].Rich..].................PE..d...^.}`.........." ......8..........<).......................................K.....:FK...`A........................................`%G.x....(G.P.....J.@.....H.......J..%....J.....p.D.p....................S<.(...pR<.@............S<.(............................text.....8.......8................. ..`.rdata...F....8..P....8.............@..@.data...`....@G......@G.............@....pdata........H......@H.............@..@.rsrc...@.....J......@J.............@..@.reloc........J......PJ.............@..B........................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\ffmpeg.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):2880000
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.6993392201014155
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:49152:AZ2KxYmwFfgQQs0ShPrF0/zO6R0gRhPj3hTUctrRhuwSnKxqgI5IN8N3lzl3hqzv:Uofp1Pyi54wnKxqg4INhh9
                                                                                                                                                                                                                                                                                      MD5:2A7C224800F0A752DB6EAF3AB7CAE796
                                                                                                                                                                                                                                                                                      SHA1:B718B4B7AE938A10042BCDB2AEC45894E76E21DA
                                                                                                                                                                                                                                                                                      SHA-256:6D0F59C9E75CA6B16FF63A005045E33E201BFF2F9D4900B9256CF2F7032722D5
                                                                                                                                                                                                                                                                                      SHA-512:D2301BBBBE3E882D34BDCA48A3B9C89AE8457A38000AFC9B8B23EC797FA50642316E33C79DBE9F1954BAC39F66531D9792C65D02524E444E3B7B7FE4E49CF8DB
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." ......".................................................. B...........`A..........................................*.......*.(.............@...............A..4....).......................).(...."#.@...........H.*.P............................text....."......."................. ..`.rdata........#.......#.............@..@.data.........*.."....*.............@....pdata........@.......*.............@..@.00cfg..8....pA.......+.............@..@.gxfg....,....A.......+.............@..@.retplne......A.......+..................tls..........A.......+.............@..._RDATA..\.....A.......+.............@..@.reloc...4....A..6....+.............@..B........................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\icudtl.dat

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):10544880
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.276833777601164
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:98304:GKPBQYOo+ddlymOk25flQCUliXUxiG9Ha93Whla6ZGdnp/8j:GKPBhORjOhCliXUxiG9Ha93Whla6ZGr4
                                                                                                                                                                                                                                                                                      MD5:2134E5DBC46FB1C46EAC0FE1AF710EC3
                                                                                                                                                                                                                                                                                      SHA1:DBECF2D193AE575ABA4217194D4136BD9291D4DB
                                                                                                                                                                                                                                                                                      SHA-256:EE3C8883EFFD90EDFB0FF5B758C560CBCA25D1598FCB55B80EF67E990DD19D41
                                                                                                                                                                                                                                                                                      SHA-512:B9B50614D9BAEBF6378E5164D70BE7FE7EF3051CFFF38733FE3C7448C5DE292754BBBB8DA833E26115A185945BE419BE8DD1030FC230ED69F388479853BC0FCB
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:...'........CmnD........ Copyright (C) 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html .Q....B.......B...#...B.. $...B..p$...B...$...B...%...B..`P...C...P...C...Q..(C......<C.....OC......bC..@...uC.......C..P....C.......C.......C..p....C.. ....C.......C.......D..p... D.....3D..0...FD.....YD.....lD.......D......D..0....D.......D..p....D......D..@....D.......E......E..@...*E.....=E..P...NE......bE.....rE..@....E.......E.......E..P....E.......E......E..@....F.......F.....'F..0...7F..P...JF......aF......qF...G...F.. H...F..`K...F...K...F...L...F...-...F...c...G....'.'G....'.>G..@.'.UG..0.'.oG....'..G...!'..G...!'..G..P&'..G...)'..G..@*'..H..`.(..H...e).7H..0.).VH...)*.xH....*..H....*..H...P+..H...Y+..H...Z+..I...]+. I..`^+.9I.. .+.UI....+.lI....+..I..P.-..I...=...I.......I.......I.. ....J..p....J......-J..p...EJ......ZJ......rJ..`....J..@....J.......J.......J..0....J.......J.......J..0....K..@....K..../.2K...,/.GK..../.\K..

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\libEGL.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):480256
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.336558815218672
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:s4itlpEJVqKqK5Z5UibKsBHI0Sfnx+lXGpeOQHA93Gb3sm:s4itlpAqKqK5Z5U+jBolfnjIyG
                                                                                                                                                                                                                                                                                      MD5:45EF2DF5F6AAF1BA9ECDDBFA0F07574C
                                                                                                                                                                                                                                                                                      SHA1:0F93C5B9775AD32D342963F4DD27BB0CDAADD793
                                                                                                                                                                                                                                                                                      SHA-256:22BA0C9ACF55F4FA5DF7098B70D020D65619703A282D45B288632F248CD23B4E
                                                                                                                                                                                                                                                                                      SHA-512:99423F92EEDA8E907D0E2C0A2A7DA5A89E64B7B4B4D5F93EE48C91C9F2A0D415377B373FA656386F1FC0D6C8556E57CE2D4001650A47F5F6F4D5CA217D5FADBB
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." ..... ................................................................`A........................................P"......f0..(.......x........B..............................................(...@1..@............3...............................text...]........ .................. ..`.rdata..D....0.......$..............@..@.data....K..........................@....pdata...B.......D..................@..@.00cfg..8....`......................@..@.gxfg...`$...p...&..................@..@.retplne.............:...................tls....!............<..............@..._RDATA..\............>..............@..@.rsrc...x............@..............@..@.reloc...............F..............@..B................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\libGLESv2.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):7418880
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.464871257930227
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:49152:x2b3imtb1uWsvZRUCXQNMBbGUa/XFfOpvQnDwX+xjA7LAIgRg37QiI+id3pFJs7y:x7RWft4NV+sduHox6gWE5lHoFX
                                                                                                                                                                                                                                                                                      MD5:0BC536DDA0CC8195F58A48B9500E3D48
                                                                                                                                                                                                                                                                                      SHA1:D1FD4FFA994B497FF927C2851660E929F3079AEF
                                                                                                                                                                                                                                                                                      SHA-256:4E7AFC3A650CF414DEBA33AB4D755F601624A8E24934B43A958ECA933D65D8EA
                                                                                                                                                                                                                                                                                      SHA-512:372B5E9890EDA267097DD92ACD407D422C3621452C19720C510C44A3D468779D12D5A3D557C2CA64F0BB86C6766665E2BC100CA465FCF604DF2ED950F406A636
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." .....hV...........J......................................@r...........`A..........................................h.......i.d....Pq.......n.TR...........`q.....\=h.....................0<h.(.....V.@.............i..... .h.@....................text...egV......hV................. ..`.rdata..L.....V......lV.............@..@.data........pj......Pj.............@....pdata..TR....n..T....m.............@..@.00cfg..8.....p......(p.............@..@.gxfg....+....p..,...*p.............@..@.retplne..... q......Vp..................tls....:....0q......Xp.............@..._RDATA..\....@q......Zp.............@..@.rsrc........Pq......\p.............@..@.reloc.......`q......bp.............@..B................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\af.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):390307
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.42897416012883
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:qu8SyRtgbfbjR985DhdxQ+ICGSBsjA636Zi2Jynq4UtUKnpgmhqxox7sfxSC2C8l:Ry0zbjREda+ICTsjA636Zi2Jynq4UtBz
                                                                                                                                                                                                                                                                                      MD5:B293CC5EA7DB02649BD7D386B8FA0624
                                                                                                                                                                                                                                                                                      SHA1:32169B9D009B7A0FB7ECDAF650C989E956291772
                                                                                                                                                                                                                                                                                      SHA-256:7BB75ADEF02D28819F1BD3B42FA46ED56D6DFBEAE072341997B09B8C1F52D8DC
                                                                                                                                                                                                                                                                                      SHA-512:496BC72E7B798D02E453EB96D20566B91405BAB774521527EF882C1FCB58F25E2D0718013DDC0D23F7FAD883F4CDE93B57C6CAAEBA8CD18A09665C9F6245F557
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........=.h.N...i.V...j.b...k.q...l.|...n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.........................".....*.....1.....8.....?.....@.....A.....F.....s.............................................................................G.....Z.....z...........................................................,.....2.....<.....J.....Z.....h.......................................................................%.....@.....X.....q.......................................................................6.....F.....V.....r...........................................................$.....7.....E....._.....t.................................................................6.....j.....r.....................................................".....&.....5.....M.....b.....................................................%......... .7...".D...%.j...(.....*.....+.....,.........../.....0.....1.#...3./...4.Q...5.l...6.....7.....8.....9.....<.....=.....>.....?.....@.-...A.^...C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\am.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):634666
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.90303732149975
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:ihHb86uYwT8xiT1XF/gpwozFQd529+lV5ru4yPpx30jH8+A:MbIT8xCXFopwozFQd529+lV5nyPN
                                                                                                                                                                                                                                                                                      MD5:4CB4B30911E9FBFE6C1DE688CCA821AB
                                                                                                                                                                                                                                                                                      SHA1:58CC2D8E954B5C74A902F13C522D1F6836769623
                                                                                                                                                                                                                                                                                      SHA-256:685ECDFF01D4AE92BE1D900EF00FD8632616BC41F18A56E682528F312D4A5167
                                                                                                                                                                                                                                                                                      SHA-512:6629AF841C52463C46DBEB03E3B4B1CAD550C2DB790C75365D63512E039B3369CDD9F18316E9C50DCF3AA77AA4D2BECB6A87570F3B538B456AF3041D60393434
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........$.%.h.~...i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z. ...|.&...}.8.....@.....E.....M.....U.....].....d.....k.....r.....s.....t.....y...................................0.....Z.....m.....u...................................#.....G.....S...................................*.....=.....m.........................................N.....r.....~...............................................2.....K.............................*.....0.....8.....?.....K.....^.....q.............................#.....<.....x.......................2.....N.....g...................................E.....e.................................................................].......................`............................................... .....).....I.....y.................*.....g.........................................1... .I...".n...%.....(.....*.....+.....,.".....3.../.U...0.o...1.....3.....4.....5.S...6.....7.....8.....9./...;.K...<.\...=.s...>.....?.....@.....A.....C.U.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ar.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):696385
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.9097761802335675
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:DpJ+LHvZtD9JAO08vYU3X1Y9kbMf5MNi/+det13zMgSENR5:tMqta45F+K
                                                                                                                                                                                                                                                                                      MD5:7294148BA219909A4909613381EA45AC
                                                                                                                                                                                                                                                                                      SHA1:A8A70E589760B5EAEAE1A95FE51723CCE48FCA87
                                                                                                                                                                                                                                                                                      SHA-256:ACC1B352EA206C25AFE88A614346B468F4F78BF23F886883A38DAE905D121DC0
                                                                                                                                                                                                                                                                                      SHA-512:CABF320E827067EF8EFB7C021FF098430054D125FB50540C06D12167C7D1C6D08449E6A1B33FA4A092CE6C81A600415711005E100B1B756A199E05CA18DBF3B7
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........].h.....i.....j.%...k.4...l.?...n.G...o.L...p.Y...r._...s.p...t.y...v.....w.....y.....z.....|.....}...................................................................I.....b.........................................'.....M.....................................................0.....P.....g...............................................4.....O.....o...................................2.....<.....M.....W.............................*.....U...............................................7.....k.....{.............................1.........................................?.....B.....].....|.................................................................(.....v.................-.............................8.....\.....y.........................................\.....~.............................%.....:.....\.....m... .....".....%.....(.....*.m...+.p...,.........../.....0.....1.!...3.6...4.]...5.....6.....7.....8.=...9.V...;.q...<.....=.....>.....?.....@.....A.....C.%...D.8...E.y...F...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\bg.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):723752
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.668436211737206
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:L83VytDqWwQkDmLlYMdAs1aQUtjtaVVnFH2mFxadnra35rKN3yoSiVD1BbCeSKnd:LoytDq/DIlYMdAs1aQUVGCa35rKsoSiF
                                                                                                                                                                                                                                                                                      MD5:080CFFA1D4032B7D4BFA217AA00C4F47
                                                                                                                                                                                                                                                                                      SHA1:525CF2BAF62EC4C90E3A1D89CCE37C9F433C61E1
                                                                                                                                                                                                                                                                                      SHA-256:3FD27D562E32F1A052E924B6C468486ACF0B2AF42DD1AD2270E83D115D4B3F65
                                                                                                                                                                                                                                                                                      SHA-512:9470EA433A7C08331FF26DF00170C81309E72145E6F32C16E7C2C1E53C54B3974B991EA128E636138F8212E276A2FDF94C344D9AB7FCEE35EC231543E08196B0
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........3.h.b...i.j...j.v...k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.......!.....&...........6.....>.....E.....L.....S.....T.....U.....Z...................................0.....`.....l.....v...................................;.....w...................................:.....R.....|...................................B.....].............................0....._.....e.....s............................._.......................#.....5.....=.....D.....N.....t.............................c.....~.......................4...................................'.....*.....^.............................Q.....X.....[.....\.....p.............................N...........h.....t...........?.....d.......................*.....>.....R.....\.......................].................9.....e.....w........................... .....".D...%.{...(.....*.....+.....,.......F.../.t...0.}...1.....3.....4.?...5.t...6.....7.....8.B...9.f...;.....<.....=.....>.....?.....@.....A.j...C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\bn.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):933489
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.282415724780387
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:MtVVy6YHuQ4qxkVxCp2tUkbBb5OMDK5f0Xl+IP:GVVMH5ECAt5Bb5i5IlR
                                                                                                                                                                                                                                                                                      MD5:BEA57AB3921250FF4DADC9F42F8202D9
                                                                                                                                                                                                                                                                                      SHA1:ACE7FC0579A946D32419E8C5FF9BC64D40E53364
                                                                                                                                                                                                                                                                                      SHA-256:2BB70DC94361267E755169DDE430EA31AA21B4DAF31B5EED78901B27BC596A2E
                                                                                                                                                                                                                                                                                      SHA-512:164F5C081BF23DEF7378450DFAF4DB1CEB49595351DE5D933375D9B1B409F7BC2DC96C4F228A7F024B7AC891A27603EC174EE8B3A7937BF678D61FDCD3E4C7A8
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........9.h.V...i.g...j.s...k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.............$.....,.....4.....9.....A.....H.....O.....V.....W.....X.....].................<.....g.....y.............................C...................................".....T.............................E.....s.................6.....L.....[.....}.................K...................................'.....*.....6.....c................. .....`...................................#...../.....[.....w.................C.............................;...........).....B.....n.............................4.....c.........................................&.....9.....d.....{...........3..........._.....w.................J...................................-.....?.....n.............................!.............................;.....i......... .....".....%.3...(.o...*.....,.........../.!...0.(...1.....3.....4.....5.}...6.....7.9...8.....9.....;.....<.....=.9...>.q...?.....@.....A.#...C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ca.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):440995
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.425459727706433
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:q86RFXgkI0h7nyRhIs3cSlFEYLCJBqB3nbhjJOtJuwlwSGMwFdLbpuQ16BtryBtE:r6wkj0RpTHpEMNJ82kLI25exte
                                                                                                                                                                                                                                                                                      MD5:2CDDD012546CAF0AED6775CDF5CFDEE9
                                                                                                                                                                                                                                                                                      SHA1:CACCE951770FEEFD1BCF89DE5BE97BB39606E7EE
                                                                                                                                                                                                                                                                                      SHA-256:02D60B97F70C31F5C5003108321FC3AC3C79BF39A36392C3ADAF7735B9CC1C1D
                                                                                                                                                                                                                                                                                      SHA-512:B75D9B2946B11B9FC7430C5773835422AAE6E716504D7841C1B08413EC18D454D9D6FAA5ED63E19C59AB2E1EE919822283FD7E21A97F54482685D541E4DD2519
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........8.h.X...i.`...j.l...k.{...l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}...................$.....,.....4.....;.....B.....I.....J.....K.....M.....v.....................................................@.....^.....`.....d.....................................................%.....?.....O.....m............................................... .....,.....?.....O.....R.....U.....^.....r.........................................)...........6.....=.....O.....^.....o...............................................A.....b.....k.....|...................................................../.....C.....J.....M.....N.....W.....`.....h.....n.......................F.....N.................................../.....4.....>.....I.....N.....d...................................?.....X.....].....g.....x............... .....".....%.....(.....*.....+."...,.@.....j.../.....0.....1.....3.....4.....5.....6.K...7.\...8.p...9.....;.....<.....=.....>.....?.....@.....A.....C.7...D.@...E.t.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\cs.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):452001
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.861977668406352
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:Ym4rbeY08bI70wXaNA2MXQC5t8VNDKNDZs1X8Qb:AraWbE0wqUXQC5t8VNGNDab
                                                                                                                                                                                                                                                                                      MD5:6D43974C98037EECEE8691520DE4D63E
                                                                                                                                                                                                                                                                                      SHA1:E15672B3AB22A059B976D245EA3F59D35C3387D1
                                                                                                                                                                                                                                                                                      SHA-256:C1020222B90558A6A8A07F24756B183594641EF77562D35E7899E1489D0EBD8E
                                                                                                                                                                                                                                                                                      SHA-512:64E76499D56C3E32CC013BD05E2D3EAF5618527B8035BD5A37F5018A1E6072CDE4A06F7C66921B9B087E60FF686ED63B7321F0295A34451443797FFA8E5CEA35
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........G.h.:...i.B...j.N...k.]...l.h...n.p...o.u...p.....r.....s.....t.....v.....w.....y.....z.....|.....}...........................................$.....+.....,.....-...../.....i.....y...............................................B.....W.....Y.....].....................................................*.....F.....V.....o.....~.................................................................=.....C.....M.....T.....n...........................................................$.....*.....:.....S.....i.....t.........................................;.....`.....f.....r.....~.................................................................!....."...../.....<.....C.....N.....Z.................)...../.........................................).....6.....?.....I....._...................................N.....j.....q.....{..................... .....".....%.....(.....*.(...+.+...,.I.....f.../.}...0.....1.....3.....4.....5.....6.J...7.^...8.t...9.....<.....=.....>.....?.....@.....A.....C.>...D.P.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\da.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):410088
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.4699188226784
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:+/1dB4b3HibjZWsnZwlFkuJwZjUEbUSovDHv50Sr+zOUPOd40TWwd:IBa3HibtW23UtR5DrJT1
                                                                                                                                                                                                                                                                                      MD5:BA54E3345D61D5CF431DB6A0D649F792
                                                                                                                                                                                                                                                                                      SHA1:32B2EDC19DF7E14E6567E0FAF671C038F78A65DA
                                                                                                                                                                                                                                                                                      SHA-256:DAB543BCC1A8ABF057F720F9F448E45CA5CFD1C424826BCE8933174BB2ECCAD7
                                                                                                                                                                                                                                                                                      SHA-512:5F858C4C876E1D15D4929464B7D9BC2CC497EEA93D887C3CF0CC1C651A0F5A81D75F04F7A0B4277DC43BD9DEB148D147D35FA1AA2DD218D404FA2C8C389ECB5D
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........!.(.h.x...i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z. ...|.&...}.8.....@.....E.....M.....U.....].....d.....k.....r.....s.....t.....v...........................................................8.....Q.....S.....W.................................................................,.....C.....S.....Y.....a.....q.................................................................!.....;.....R.....i.............................................................................".....5.....e.....n.....................................................).....,.....9.....F.....Q.....e.....w.................................................................;.....y.....}...................................#.....(.....2.....4.....:.....H.....e.....|.............................,.....0.....9.....H.....[.....e... .i...".q...%.....(.....*.....+.....,.........../.'...0.1...1._...3.k...4.....5.....6.....7.....8.....9.....;.....<.....=.#...>.7...?.@...@.N...A.....C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\de.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):438111
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.526975973295078
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:uozFfPighra5V8U/x6P3T7H2mAyRc5rRRNnOIyCLM:umagpaov7H295d9yCLM
                                                                                                                                                                                                                                                                                      MD5:46A45FB8E7880802E1624DF86D254973
                                                                                                                                                                                                                                                                                      SHA1:13778B3BF0101C3894FCB228080C25EBD47DC046
                                                                                                                                                                                                                                                                                      SHA-256:6283EC48CDDD08C387A36EC71FFF87C2AB0EF27449E8971EBA2D76A6136B1708
                                                                                                                                                                                                                                                                                      SHA-512:FFA8EBAEBB3F057440176F123442B13B6F96842B9688EFE6633C0014F0DCDE982E667B0F2DC84A1F6450E310A8E05A13E35DDC24B1DE8D25BA5A711D8B07D357
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.'...v.<...w.I...y.O...z.^...|.d...}.v.....~...................................................................................#.....+.....4.....M.....U.....^.....................................................$...........7.....C.....k...........................................................V.....j.....q.....|.....................................................+.....T.....}.......................................................................U.....f...............................................&.....=.....@.....S.....i.....}.......................................................................].......................+.....A.....k.................................................................F.....d................................................... .....".'...%.O...(.l...*.....+.....,.........../.....0.....1.....3.....4.9...5.U...6.....7.....8.....9.....;.....<.....=.....>.....?.....@.3...A.\...C.{...D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\el.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):793613
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.758129188588161
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24576:rolquNwPB02/grQWjs6dJoaEA3HsiEcBCJ7391Qf26tKMaBlSEf5xXbW1rk2Pcjb:rMquNgB02/grQWjs6dJoaEA3HsiEcBCF
                                                                                                                                                                                                                                                                                      MD5:7F92F844B9D8BEF68DADBDB85A084BD6
                                                                                                                                                                                                                                                                                      SHA1:96C508FC2B624FE9C2945E2D673A645FE39AD3F2
                                                                                                                                                                                                                                                                                      SHA-256:87F0A26D73FEA2EBB5017A95E937E08D7C347BAECBE93514C1B866C1E28DEA32
                                                                                                                                                                                                                                                                                      SHA-512:D47EB475F9CA60BC1E7EC33FE2E2A395BB8EF3F109BC4B769FC2E03E2DDC04BB3391B10F1B382B7497555E36EF02FCA31CD47F67C03DE43D275BBDDC3BD8E7AC
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........1.h.f...i.n...j.x...k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.......#.....(.....0.....8.....@.....G.....N.....U.....V.....W.....Y.......................@.....T.....}.............................9.....;.....?.....g.............................J....._.....v.......................D.....j...................................]...............................................%.....Y.......................L.......................!.....).....0.....]...................................h.............................l...................................M.....P.....s.............................J.....Q.....T.....U.....q.............................b.......................8.....l.................2.....e.....~.............................6.....].................@.......................#.....J............... .....".....%.....(.\...*.....+.....,.........../.:...0.a...1.....3.....4.O...5.....6.....7.....8.k...9.....;.....<.....=.....>.:...?.K...@.l...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\en-GB.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):356704
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.538284738283312
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:ZYAo1l9QMP9eKZwdfaY0tQWj5izSiBHXV:i5QMTZwctV5USsV
                                                                                                                                                                                                                                                                                      MD5:A32F3F357725FF256BE9026398A1CD06
                                                                                                                                                                                                                                                                                      SHA1:CF492E3E5C18E9E8C8CDD6B964E987541CC46505
                                                                                                                                                                                                                                                                                      SHA-256:914B7BEC10C1E8C2A9E461EDAA498B2B344AADC130A30321D4116CE0C4C99AD3
                                                                                                                                                                                                                                                                                      SHA-512:A96B2B00AD6883C205224770BC2CFCC93A5CF29B41BC8169117771F36264A8A89AD4E5BDDC0C50F85C0979F3355188BA86C915F0B3B1013B3ECAC9383FA8B192
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........|...h.....i.<...j.H...k.W...l.b...n.j...o.o...p.|...r.....s.....t.....v.....w.....y.....z.....|.....}.................................................%.....&.....'.....,.....T.....a.....p.......................................................................).....@.....D.....O....._.....f.....r.................................................................<.....O.....S.....[.....g.....t.....x.....{.......................................................................$.....).....2.....=.....Z.....a.....p.........................................+.....4.....=.....G.....U.....h.....k.....|.........................................................................................8.....e.................................................................!.....%.....5.....P.....i...........................................................%... .)...".2...%.R...(.i...*.....+.....,.........../.....0.....1.....3.....4.!...5.8...6.j...7.z...8.....9.....;.....<.....=.....>.....?.....@.....A...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\en-US.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):359427
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.527720379525449
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:hVewV1XEsUrS0MP9eurM9faYkuiEB53bS3nwgfwi:BQo0MPrMsuD5LSjfwi
                                                                                                                                                                                                                                                                                      MD5:06D28839EA0B3AAB4597BA8646A53A96
                                                                                                                                                                                                                                                                                      SHA1:9C6A74AAE8C783546D613C6F38CBFC8F5E3736F1
                                                                                                                                                                                                                                                                                      SHA-256:69C1A2E1B30D83612DECF1A8DD7B124A04F58E9F2465876726F02F7F7D5EB54A
                                                                                                                                                                                                                                                                                      SHA-512:A432542DC98795CE0EA6FA4A6BBCBAE8BA126F1FDA025A9AD6FF3FA67EEE85DCF7AFC6678F5100BB1543C4D00AC75043EA92E64B65C9EF6BD946CE3DC4D5AE71
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y. ...z./...|.5...}.G.....O.....T.....\.....d.....l.....s.....z...................................................................................3.....D.....F.....J.....r.................................................................!.....4.....8.....>.....N....._.....h............................................................................. .....5.....H.....].....i.....n.....v.....}...........................................................&.....6.....d....................................................................... .....4.....;.....>.....?.....F.....N.....V.....].....b.....m...................................+.....6.....Q.....W.....i.....m.....w.....|...............................................;.....P.....T.....[.....f.....x......... .....".....%.....(.....*.....+.....,.........../.....0.&...1.Y...3.g...4.{...5.....6.....7.....8.....9.....;.....<.....=.....>./...?.7...@.F...A.s.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\es-419.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):435501
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.403603956967449
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:gZ/k72wvCDFb9D8jzsHYrtdy58d8pdxkoHQ7o0wryQ1KOP/5+lBFy0GLFL5RRIHm:gZ/k7dCRb9DVYzkpx/rT5aqLFL512Rdq
                                                                                                                                                                                                                                                                                      MD5:C753CB5296CC411AE72964735CE0DE78
                                                                                                                                                                                                                                                                                      SHA1:4151545BC2CB9FE4330F3B238AEB28E9FF0DBD6C
                                                                                                                                                                                                                                                                                      SHA-256:5FCF21564CEEC93EB64D2002DE165A55C1875859975E0BF9035CBE96F258B50D
                                                                                                                                                                                                                                                                                      SHA-512:5688E1F406125F939840E8308D950A741A02EF24A006FD3619F3E943595630CE32010B51BB7A37768F1C595F4C77B104BB7483CA24FF599EB04434974D894C1D
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........-...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.!...z.0...|.6...}.H.....P.....U.....].....e.....m.....t.....{.......................................................................#.....+.....O.....f.....h.....l...................................................../.....?.....P.....p...............................................8.....>.....K.....a.....v.....|...............................................C.....h.....x.....~.....................................................%.....2.....N.....Z.................................................................A.....Y.....q.................................................................X.............................*.....[.....j.....................................................0.....R.....q............................................. .....".,...%.P...(.i...*.....+.....,.........../.....0.....1.)...3.=...4.[...5.~...6.....7.....8.....9.....;.....<.....=.-...>.I...?.S...@.h...A.....C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\es.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):435652
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.372028150641041
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:XJi0HwWCjWU7xXF6++uTtgcRzpJ2xP3n/j35f6UrC7JKoWeM66PZqC:X0qwWCjWAQMn9pcxP3/j35HrfoW5GC
                                                                                                                                                                                                                                                                                      MD5:C9E0B58F2D9E087B2E8E92D31BE2A3E6
                                                                                                                                                                                                                                                                                      SHA1:59A43B7021860DB2D2A7FE8CED8FD1A4B0C8322C
                                                                                                                                                                                                                                                                                      SHA-256:468E0143C978A948C62D4A3DC743099A4147D39773A6112B303692D0E335810E
                                                                                                                                                                                                                                                                                      SHA-512:16160E6375FDDE1EC2E17BA8622C9C953A46372143D0B09A33EE55852B2B9F037C1C16DD5BB6BD1F2454559DCB172C8317AA8B6C6B26D44E8DA706EB16EC5F07
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........%.$.h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.%...}.7.....?.....D.....L.....T.....\.....c.....j.....q.....r.....s.....u............................................... .....(.....L.....d.....f.....j...........................................................>.....N.....l...............................................#.....).....6.....C.....X.....^.....a.....g.....~...................................R.....b.....h.....p.....w.....................................................5.....H.....x...........................................................0.....H.....`.....t.....{.....~...............................................P.............................'.....[.....j...........................................................H.....d............................................. .....".....%.6...(.S...*.r...+.u...,.........../.....0.....1.....3.....4.5...5.T...6.....7.....8.....9.....;.....<.....=.....>."...?.,...@.A...A.t...C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\et.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):393348
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.481895721213982
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:5zlBfny9yawR8+qH2LxVu03ybwXfNYJYT/RyTKiYGT5Yjz43BvLCsPQ5bm:plBIy2HQllIT5YjtC
                                                                                                                                                                                                                                                                                      MD5:CCD361017778964DE23BF1D741CB888A
                                                                                                                                                                                                                                                                                      SHA1:5B0305538762987901B7A8332635F3D7996C09DD
                                                                                                                                                                                                                                                                                      SHA-256:41883AF1E49CC180FB48E02659E75B0169D974D77373CF7BB2A4EA02DD654E26
                                                                                                                                                                                                                                                                                      SHA-512:A9D7C99C07229D382E8BA7CC3199BC66FC39DF5FD9B58E6A76E423B865F8C05F53398125A17A20C27462B2DB595F3D778B4D94B1853121D8447B771F9284E5C5
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.%...y.+...z.:...|.@...}.R.....Z....._.....g.....o.....w.....~.......................................................................+.....5.....K.................................................................$...../.....S.....c.....u.......................................................................,.....<.....@.....C.....J.....^.....q.......................................................................2.....H.....S....._...............................................$.....0.....>.....Q.....T.....d.....t.............................................................................3.....s.............................!.....U.....a.....l.....p.....z...............................................*.....S.....m.....r.....z..................... .....".....%.....(.....*.;...+.>...,.\.....v.../.....0.....1.....3.....4.....5.....6.>...7.U...8.n...9.....;.....<.....=.....>.....?.....@.....A.....C.6...D.E.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\fa.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):644205
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.0379329694685175
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:YbNHatX0nuyabufwH0wNUWGOufStQ4vy1BeFtDmxJVIwjwMTAKzIxRAQiHedNu3v:YJbuyabufwUwNUWGOufStQ4vy1BeFtD6
                                                                                                                                                                                                                                                                                      MD5:87A2305436BAD7556FE7ABB68767802A
                                                                                                                                                                                                                                                                                      SHA1:0EDAD3677B0872321A1F8F3D391C17AB373ABA17
                                                                                                                                                                                                                                                                                      SHA-256:9068DC6C71FD8BBC1A4F3B2009689472D1FD2C096B7E8AFB3E089A46B98D8B38
                                                                                                                                                                                                                                                                                      SHA-512:6C32B1C83E03B553843FAABB5A9C1B63C769B13DE60841D2BC81F2C9514B30EBF16551ACF33262EF8ABAA4A5AA3955600A35A045B0FD446964109C58A2734969
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........p.h.....i.....j.....k.....l.....n.!...o.&...p.3...r.9...s.J...t.S...v.h...w.u...y.{...z.....|.....}...................................................................+.....E.....a.........................................2.....Y.....\.....d.........................................*.....W.........................................2.....I.....b............................. .....<.....B.....Q.....W.............................,.....f...................................................../.....;.....Q...................................R.....................................................E.....b...................................................................................^.....q.......................h...............................................:.....[.......................<.....a.....k.....q..................... .....".....%.-...(.W...*.....+.....,.........../.....0.....1.]...3.l...4.....5.....6./...7.g...8.....9.....;.....<.....=.....>.....?.....@.8...A.....C.....D.....E...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\fi.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):401959
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.449269956526462
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:MYecIeTKohFeI4OsOSFOEi3paUXJLY5gYuyHsEl18OWUcl0wwPKNbX1wAEb:1eT0Z15av5gY1HsEl18OWUkzEb
                                                                                                                                                                                                                                                                                      MD5:F87A1CCBCF3DB6988E95E94333BC5A4F
                                                                                                                                                                                                                                                                                      SHA1:E85F8446EB74D8BD4318354EC98135C17AFE3248
                                                                                                                                                                                                                                                                                      SHA-256:052A72C9D6F2BB55F02FB1C5C4C68525A32B8CC9120C270D07D7B813D604F7DC
                                                                                                                                                                                                                                                                                      SHA-512:C4A7EE0552B343010FCE8CEEEF70620ACF672C9AB56FC24CCFB88ABDBAD23AAC4CEE65C8B241C594B7EC92D0841087485AEDA583D2E887CF4C823A10B2E7CD3C
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........r.h.....i.....j.....k.....l.....n.#...o.(...p.5...r.;...s.L...t.U...v.j...w.w...y.}...z.....|.....}...............................................................................!.....2.....E.....K.....T.....q.....x.........................................!.....>.....C.....Q.....[.....j.....v...........................................................<.....I.....Q.....X.....j...........................................................7.....S.....].....b.....j.....q.....}...........................................................K.....m.....u....................................................................... .....#.....$.....-.....5.....<.....C.....R................./.....7.....~...........................................................(.....D.....`.....................................................(.....0... .;...".N...%.z...(.....*.....+.....,.........../.....0.....1.V...3.d...4.....5.....6.....7.....8.....9.&...;.L...<.\...=.h...>.~...?.....@.....A.....C.....D.....E.4.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\fil.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):453534
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.215241054251821
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:IHFro0m4qhQiy6DQejOQ5V/xe8zGUZ3Lms5IXmJlLATyiH:IHhrm4q5/5T8s5Imq
                                                                                                                                                                                                                                                                                      MD5:2E6A6728BD5A09339AC01A38BF686310
                                                                                                                                                                                                                                                                                      SHA1:619E27F30C99EFF8F2DF3BA2287C6F7FE0B5B063
                                                                                                                                                                                                                                                                                      SHA-256:E8F03C2E9C88ADB04648EF93F9EA3CFF87641638AC97C9A6752B751E7F7A8A20
                                                                                                                                                                                                                                                                                      SHA-512:0452AC74EAFCF971265DE92041659C006B5E559919B895B41795BB1307EE7C302E873440B006485B7CFFCDAB0F6B908A119683FAB40A664D5BF3591239427C00
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............h.H...i.^...j.j...k.y...l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}...................".....*.....2.....9.....@.....G.....H.....I.....N.....u...........................................................1.....3.....7.....`.....s.....................................................'.....J.....].....e.....o...............................................4.....G.....O.....R.....X.....p.........................................!.....&...........5.....<.....M.....[.....x.........................................$.....W.................................................................E.....^.....y.................................................................Z.............................$.....N.....V.....j.....n.....{.........................................5.....U............................................. .....".....%.J...(.c...*.....+.....,.........../.....0.....1.....3.....4.;...5.\...6.....7.....8.....9.....;.....<.....=.....>.&...?.....@.A...A.v.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\fr.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):470901
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.402862426852591
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:DVJxu/lk6QuamV1ilzaWO8ZQMYnYMFQaBIWKe5Xxkq20wCszvZL2vULN1oThXn5r:rxUjVrszc5jn
                                                                                                                                                                                                                                                                                      MD5:8E21CEC6CB5732FD2BAA28F3E572EF7D
                                                                                                                                                                                                                                                                                      SHA1:778228DEE97F5475B9982375740D6F90E8E5FE0C
                                                                                                                                                                                                                                                                                      SHA-256:CD21CAE54EB6CB115771D1AFE14D17822E13332759F8710D6386A6E4277C11C8
                                                                                                                                                                                                                                                                                      SHA-512:07726AFA312F6104E3D92C6BE13FC4B0E728A4A21F643C9552A961784063D3C8A9C52E5649FFAA9FD6A083DC5DE37316E0D2CC10CD1A6FBEB83789C385AE990B
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........C.h.B...i.S...j._...k.n...l.y...n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}...............................'...........5.....<.....=.....>.....@.....e.....u.................................................................!.....I.....\.....z.....................................................A.....]....._.....r...............................................".....%.....(.....1.....I.....[.....l.....................................................%.....3.....F.....e.....m.....}...................................=.....f.....x.................................................................?.....F.....I.....J.....R.....Z.....c.....j.....}.................A.....H.....................................................#.....'.....A.....f.............................P.....g.....n.....w..................... .....".....%.....(.....*.*...+.-...,.K.....b.../.....0.....1.....3.....4.....5.#...6.o...7.....8.....9.....;.....<.....=.....>.....?.....@.&...A.e...C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\gu.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):907786
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.3275112767972574
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:+Np5emhl6KNyUrBh8PITmKMaW4eeenbssMhmksd4t+0+z20QmuOAl5dUjvawWnhG:+NpXl7gHJxt8sW5cZhcxl+
                                                                                                                                                                                                                                                                                      MD5:0C33E2A35EAAED3572F31E7B24D4493B
                                                                                                                                                                                                                                                                                      SHA1:278498568109EA7D6CB34C634316F95B04155B64
                                                                                                                                                                                                                                                                                      SHA-256:0F0FEE8A2F22F80A0C4A758E7F4FD90D40BE4048DCAB0D824135CAA5E92EFD5D
                                                                                                                                                                                                                                                                                      SHA-512:4EEBF9BE5A8C317D2D2E8E9B1E607774F5C7C35AF7D8BD6C80326FE3C6E2E05089F04485EEDDE8BE8C7B71A7B49E407289F361361D86802C0463C5B6B296F2A4
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........4.h.`...i.z...j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.).....1.....6.....>.....F.....N.....U.....\.....c.....d.....e.....j.................+.....V.....k.............................Q...................................(.....^.............................,.....T.....w.............................9.....b.....~...........?.....K.....d.........................................P.....{.................T...............................................1......................./.....E.....w.................j.............................K.....u.....x.............................*.....Q.....X.....[.....].....v.............................n.......................3.....y...........(.....K.....k.....t.............................<.....u...........*.....a.......................P.....s............... .....".....%.?...(.....*.....+.....,.........../.W...0.....1.....3.....4.+...5.a...6.....7.....8.R...9.z...;.....<.....=.....>.....?.!...@.V...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\he.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):562875
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.640306106556615
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:NiYE4ErOOFmTj2/1cH47n60/AfOX4neQCapHT5fJmodGMIv55lmi2DnwmIQgQ:Nci5EoF
                                                                                                                                                                                                                                                                                      MD5:8B3957DDA3C9FD903D2C4B8A5F686475
                                                                                                                                                                                                                                                                                      SHA1:36E45B4D30FD1E59ECAFE095F405E0722A814A17
                                                                                                                                                                                                                                                                                      SHA-256:AD20B3D634130C247F4FF954F1A5C56687523E5610F2EC6085E257126C4513A4
                                                                                                                                                                                                                                                                                      SHA-512:1DD54CE0A1F30BA087A9D09B9AA2928DEC3070788D7DB3DC2BBD27FA6126F70FA1E05106A1503602B203FA76BE914210A38D5DC9C6BB56C56857EF08C528C4F2
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........W.h.....i.+...j.7...k.F...l.Q...n.Y...o.^...p.k...r.q...s.....t.....v.....w.....y.....z.....|.....}.........................................................................h.....................................................3.....P.....R.....V.....~.........................................0.....r.....................................................&.....w.....................................................4.....Y.....u.......................5.....J.....T.....\.....c.....o...................................".....5.....Q.....t.............................0.....L.....g.......................................................................!.....6.....@.....K....._...........$.............................=.....u...............................................$.....<.....p.............................8.....B.....S.....z......... .....".....%.....(.....*.!...+.$...,.B.....S.../.s...0.....1.....3.....4.....5.%...6.i...7.....8.....9.....;.....<.....=.....>.....?.....@.3...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\hi.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):950376
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.316812155330309
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:SIYvII2+N6GbSJWbkXSvc4QAEm5dmGhsYK/GR3J+P8N06bxdYnLsuSQdnPtg83cf:SIKII9kGmJzl5d58Jy2
                                                                                                                                                                                                                                                                                      MD5:4EB5C501AECB647FA81FB4B65B0CB6D6
                                                                                                                                                                                                                                                                                      SHA1:5154741CCEB272352F0814850E75B517F7F8A023
                                                                                                                                                                                                                                                                                      SHA-256:71830814B8C7028A114A53A4E715FFA8DA12F01D920455242A0CBC35FEF48E6B
                                                                                                                                                                                                                                                                                      SHA-512:2BF32962D4F018959281F6F09D149AADD901C21131EF25AA1199ECD73DC16E2377EEEB67352E030198AA280AC1FD5962EB226FC6481C654D8D332751A20329D8
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........f.h.....i.....j.....k.(...l.3...n.;...o.@...p.M...r.S...s.d...t.m...v.....w.....y.....z.....|.....}.......................................................................................................,.....Y.....|.................&.....(.....,.....T.............................;.....N.......................4...................................8.....c...........9.....R.....a...................................#.....i.................#...............................................D.....d.......................l...............................................%.....U.....~..................................._.....................................................?.....`.................B.....X...........-.....j.............................(.....K.....].................;.................J....................... .....F.....n......... .....".....%.....(.O...*.....+.....,.........../.7...0.N...1.....3.....4.,...5.Y...6.....7.....8.S...9.x...;.....<.....=.....>.....?.....@.Q...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\hr.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):438400
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.534888254866354
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:AVgFY01/7xHaZURnmgHqbKPOS+7Wr/5cIG0uPXQ1lF6Wk6DkYAiKbeM/MQbngt3a:AVYB1/7YKAOa5/58178pjcO
                                                                                                                                                                                                                                                                                      MD5:23FDDE99818BA28131A6BA81DECF2C1B
                                                                                                                                                                                                                                                                                      SHA1:C1A87661F80C7DDE9A08A360D2F5B72F58042076
                                                                                                                                                                                                                                                                                      SHA-256:08FC2B1E6B9652D809A7550F1343B3EE54EBCBAD0FE74B009AAB6EF926C0279B
                                                                                                                                                                                                                                                                                      SHA-512:0F53B131D142C7B88081AFA59F10E17BE489C342F2E328D0E7BCAA18B5DCFA599B37CA09317AA9AE564E52A3CEA06D79021EAC6AB5AB38A9C0EC99BDCE797E9E
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........5...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.&...w.3...y.9...z.H...|.N...}.`.....h.....m.....u.....}...................................................................................#.....7.....K.....p................................................................. .....B.....T.....c.....z.................................................................&.....:.....?.....B.....H.....\.....n.....~.....................................................&.....2.....H.....\.....g.....~.........................................@.....L.....].....h.....|.......................................................................).....5.....:.....B.....N.......................%.....q...............................................'.....-.....B.....l.............................".....6.....>.....H.....V.....x......... .....".....%.....(.....*.....+.....,. .....9.../.K...0.Q...1.....3.....4.....5.....6.....7.-...8.G...9.f...;.t...<.....=.....>.....?.....@.....A.....C.&.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\hu.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):472048
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.652811013920142
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:xaFSpYjWPSoLaIAetky1+n5QgsZfGRtgY6mHHPSim7WwQGeDCd5gRRVJtGNvw2nZ:UxiPLAZn5QgZrH+7UdCd5v1Z
                                                                                                                                                                                                                                                                                      MD5:2FEF83993A62F73F8E4B40A6E28A085C
                                                                                                                                                                                                                                                                                      SHA1:8BAE181F3EED8D5EA8FB0F912C679E608EE7C008
                                                                                                                                                                                                                                                                                      SHA-256:CA4B4C7C7BE45EA0871ABF7D5668AB948F712A02FACDC1D6BBC189B1B3522446
                                                                                                                                                                                                                                                                                      SHA-512:6EED29ACD38B662F62381A5C00EBFB254915A57DE6FDE8E6DA77F60DFFD13D4846B26B1897D710EF852BCEC5728A4460BECAED2367F1A06A066DA77521701324
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........K.h.2...i.C...j.M...k.\...l.g...n.o...o.t...p.....r.....s.....t.....v.....w.....y.....z.....|.....}...........................................#.....*.....+.....,.....1.....p.....................................................<.....P.....R.....V.....~...............................................0.....@.....Q.....|...............................................5.....;.....E.....].....|...............................................<.....d.......................................................................[.....f.....~...............................................5.....8.....P.....e.......................................................................,.................Y....._.......................!...........G.....O.....].....e.....k.............................*.....b............................................. .....".0...%.Y...(.v...*.....+.....,.........../.....0.....1.1...3.=...4.Z...5.|...6.....7.....8.....9.....;.%...<.-...=.7...>.L...?.Y...@.l...A.....C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\id.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):386866
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.400536677864927
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:Cul7Z20J6S8lZMGqv00FU/XfjDVnjHFTRmPbUK1E5+shlvtmZSVsEaQm:jyI6SmMq0iXVnjHFNmDUsE5+shPm
                                                                                                                                                                                                                                                                                      MD5:0DCB56F6B196199F7ED802C06B774037
                                                                                                                                                                                                                                                                                      SHA1:F62EDD5E814D05CC4AEB5574FC63ACFDEFFB6010
                                                                                                                                                                                                                                                                                      SHA-256:BD512E36A88F0D7E6FECC0B559ADB2761589947FEF9C253DC350CD8D6EA889F2
                                                                                                                                                                                                                                                                                      SHA-512:E03474255BCE20004788475EE1F546EE7830E9B9960023B15210D88347032B5376848AEADEF3E953EC654D3905BAEE37279BFAA287AF7669CA66E382A4B1344C
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........7.h.Z...i.k...j.w...k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.......".....'...../.....7.....?.....F.....M.....T.....U.....V.....X.....{.............................................................................8.....H.....i.....q.......................................................................'.....5.....F.....q.............................................................................+.....H.....f.....t.....y...........................................................!.....0.....K.....Z...........................................................".....1.....H.....].....n.....u.....x.....y.....................................................=.....A.....v.......................................................................6.....[.....p................................................... .....".!...%.F...(.a...*.z...+.}...,.........../.....0.....1.....3.....4.#...5.5...6.k...7.~...8.....9.....;.....<.....=.....>.....?.....@.....A...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\it.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):427761
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.3083167597834064
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:7G169R9ACcto0SgqRrhsO1F+RT9TeexAGT95ELRqbKYT9fLwdQ2Yoi4Z8Hr21GWg:7A69RCi7eZh48CfilwLq58zoP
                                                                                                                                                                                                                                                                                      MD5:47C89F9BA4993E7CB6640C23F444E9CD
                                                                                                                                                                                                                                                                                      SHA1:0E3755D2835742B7AA4E1D5245454F7CF22A2D47
                                                                                                                                                                                                                                                                                      SHA-256:95BBF94625CF0476124763CEBEDCF5EE46148BB6B5C006F86540A02E8D8C883C
                                                                                                                                                                                                                                                                                      SHA-512:948E4DA235CF7D0272FD7A99E7238596E5D50913886FC73FE35F9AF17D1087F550A3CC3251EE6595F9872EF0B88E75725405382E6AEA4850088E068D5B80922D
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........2.h.d...i.u...j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.$.....,.....1.....9.....A.....I.....P.....W.....^....._.....`.....b...........................................................(.....9.....;.....?.....g.....z...........................................................8.....N.....R.....g.....}............................................... .....#.....*.....>.....T.....h...........................................................(.....7.....N.....V.....d.........................................1.....=.....D.....P.....c.....x.....{.................................................................!.....+.....1.....A.............................^.....s...........................................................#.....<.....o.............................................../.....;... .>...".H...%.l...(.....*.....+.....,.........../.....0.....1.8...3.L...4.l...5.....6.....7.....8.....9.....;.(...<.5...=.D...>.o...?.z...@.....A.....C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ja.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):523066
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.701694810920732
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:I5Q+c9x+7+YqFkl+cDWSJ7sZDs29v3rbP5BgLTxVx:I5Q5yqCl/JsZDs29v3f5BgLN
                                                                                                                                                                                                                                                                                      MD5:AFD423713E28B3980392443F31DBDA7B
                                                                                                                                                                                                                                                                                      SHA1:926560B21AF422F22E1CCA1A4A2948FF988BC6D9
                                                                                                                                                                                                                                                                                      SHA-256:88383DDCCACB53F3CE5918CD80B5DAFB16B3CF1FAB295E230CC15490600615E4
                                                                                                                                                                                                                                                                                      SHA-512:1544F7A91B4B63BB80F651833A931204E44745BB0BCCFB5564EE9AF3149218F140B6ADFB6D4EBB5CE5E82F5C345C098CAE8A0637B274C42F6711AA53877B0BD4
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........d...h.....i.....j.....k.#...l.,...m.4...o.I...p.V...v.\...w.i...y.o...z.~...|.....}.....................................................................................2.....K.....i.........................................@.....a.....c.....g...............................................;.....b.....r.....................................................w.....................................................'.....Q.....{.......................;.....K.....T.....\.....c.....l...................................$.....Z.....{...................................8.....\....._.....n...................................!.....$.....-.....6.....<.....I.....\...........2.......................&.....>.....q...........................................................O.....g.............................&.....;.....[.....a... .j...".|...%.....(.....*.!...+.$...,.F.....b.../.....0.....1.....3.....4.....5.-...6.....7.....8.....9.....;.....<.....=.#...>.R...?.\...@.q...A.....C.....D.....E.....F.H...G.r.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\kn.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):1047678
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.233435530912806
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:3jIXOpf5AEb7XtwKG20PSjNlB2DPVX1EB/lthEVGkcVw27zidmaZXH0r2AxiYRpv:3cHS7XxRPaEjJ2j7q5DPUc+vB+13d
                                                                                                                                                                                                                                                                                      MD5:74F0E9C7C670A981D3651E0D189DFC47
                                                                                                                                                                                                                                                                                      SHA1:A2FD3037311F36AAA348805D57172F9E9B0680C6
                                                                                                                                                                                                                                                                                      SHA-256:0C8E0B6A8398D7B9AB9CAC634E4A7CE4453540358E79AC6E9C5633EFB4182FE9
                                                                                                                                                                                                                                                                                      SHA-512:2C555439F7DE3902B2B1A940CD43977558C4D9239C449105FC24777952AF8DE592BA86A7476567D190719C66D38F7A7982C9B94278C0594DE1B427DC546F2D89
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........6...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.(...w.5...y.;...z.J...|.P...}.b.....j.....o.....w.....................................................5.....l....................... .....t.......................j.....l.....x.................1.....L.......................<......................._..........................................................._...................................Z.................X...........-.....[.....s.....{.............................3.....H.....w.................C.................7.............................8.............................6.....s.........................................3.....Q.....d...........%...........P.....k.................V.............................-.....?.....K.................N...........%.....e...........8.....M.....k..................... .....".e...%.....(.....*.f...+.i...,.........../.....0.....1.....3.....4.....5.]...6.....7.....8.\...9.....;.....<.....=.....>.7...?.J...@.....A.....C.a...D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ko.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):439630
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.085011350313488
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:4ysgl3zGY/cUXcfyC8OhOJhmHCqq5A72eEd8MtKq7hUoXAj:l32WJ75z8AAj
                                                                                                                                                                                                                                                                                      MD5:C90A42BB27BCBF1BD345DC998F9E410E
                                                                                                                                                                                                                                                                                      SHA1:66F8BB72DB6B38E2D288959BCEE3C43CAEFDC59A
                                                                                                                                                                                                                                                                                      SHA-256:56100D20A59FE6CB333F57FFDEF90157324AE1B90194E852478DAA8C46D29DE9
                                                                                                                                                                                                                                                                                      SHA-512:B5912C895A6A3B391555EFC10B15D45FE9A84473C8687327B7D2FA033711E437E2F160345DAEFD554374357E0AFBAEDA4A25F4F69CA74E498D7081062F299B46
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........H...h.....i.....j.....k.....l.....m.....o.....p.....r.....s.#...t.,...y.A...z.P...|.V...}.h.....p.....u.....}.......................................................................$.....-.....:.....T.....a.....i.........................................).....5.....B.....R.....Y.....s.................................................................Z.....p.....v.................................................................<.....`.......................................................................V.....l.....y....................... .....,.....B.....O.....d.....x.....{.............................................................................n...........:.....C...................................,...../.....B.....H.....Q.....h...................................T.....d.....m.....s..................... .....".....%.....(.....*.C...+.F...,.w........./.....0.....1.....3.....4.+...5.S...6.....7.....8.....9.....;.....<.....=.....>.....?.%...@.9...A.g...C.....D.....E.....F.....G...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\lt.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):474696
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.648556930784026
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:mGUgXQKlF4q4RmoBkzMbI0COOeQ0AI7U5FJzvnhJalV9Jx62cJ2I96Sut:maQK4NnbhCOOe495PzvnUJx6nP6Sut
                                                                                                                                                                                                                                                                                      MD5:06D8DB8AAB68C565AF14BFE408AE4DAF
                                                                                                                                                                                                                                                                                      SHA1:0898FD0EE4D7380B93B8FB3D4A1816EB810EA9A7
                                                                                                                                                                                                                                                                                      SHA-256:ECB4ECBD96575F6F984F60E85AB1EBB0067E73174FF9912941EE1AAA28516D93
                                                                                                                                                                                                                                                                                      SHA-512:1EBC04CCA7E3BF005F9BEFAD5A81736FC572383A636C7237E4206E75B05BEFE49F967427F912C97758AA392F9CC2DCBDF07C471562CB4CCC90F7D8E951C3AB9F
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........".'.h.z...i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z."...|.(...}.:.....B.....G.....O.....W....._.....f.....m.....t.....u.....v.....x.........................................$.....0.....E.....d.....u.....w.....{...............................................$.....T.....f.....u.....................................................*...../.....9.....V.....t...............................................8.....^.................................................................+.....T.....g.....r...................................................../.....2.....H.....[.....m.......................................................................A.......................@.....^...................................................../.....h.....|.......................,.....C.....J.....R.....l............... .....".....%.....(.....*.'...+.*...,.H.....t.../.....0.....1.....3.....4.....5.....6.k...7.....8.....9.....;.....<.....=.....>.....?.....@.#...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\lv.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):472357
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.648594391725834
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:k6nCZt8n4UUaNHkt9NLtVFHrP47H4zRa9Y2b3L5fRZanVhE19AYFs4FjEA5FGlsW:FQMlVEzM74zWYOL5CE9DjYs18
                                                                                                                                                                                                                                                                                      MD5:F8A5403BD91F231DB58E77C9D4514E2F
                                                                                                                                                                                                                                                                                      SHA1:7D29E2D8459AF6FC3082CEC0D9638DAF5275BF3D
                                                                                                                                                                                                                                                                                      SHA-256:DFB9B5EE446977DC0435CFF4D66402D3A9426EDB106EFFDBB7D86379527C5956
                                                                                                                                                                                                                                                                                      SHA-512:F491CFFDC5CC588F7EC70F87BE84615AAF5B39E9C990CD9C835E65BEB27F26334517ABAC1AF7419F2B7B18F94C369037C8DF4C1C8E26A5FED4288D477DC0874E
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........:...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.0...w.=...y.C...z.R...|.X...}.j.....r.....w...............................................................................................G.....Q.....Y................................................................. .....2.....Z.....m.....................................................0.....B.....J.....S.....d.....z...........................................................'.....@.....H.....P.....W.....i.....u.........................................&.....@.....J.....................................................).....<.....N.....g.......................................................................i.......................-.....M.................................................................M.....l.........................................(.....5... .>...".O...%.u...(.....*.....+.....,.........../.....0.....1.S...3.d...4.z...5.....6.....7.....8.....9. ...<.+...=.5...>.S...?.[...@.k...A.....C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ml.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):1091460
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.270211892148615
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:CnO59wW3g+Z/47/ZmQkg3sKMmWDcZubSAI51jy03eGhd5R/7d9gf3co:COXZdKg03eI5R/7Mf31
                                                                                                                                                                                                                                                                                      MD5:FB1A6E31DFB4F4C78A50B4DBECE0E1C1
                                                                                                                                                                                                                                                                                      SHA1:367C506478380F8BAB411747A906F8F8C60DF30A
                                                                                                                                                                                                                                                                                      SHA-256:A7AFB3EBFA8F4D2E35DFDD5554FF2702182E73DAD0FD82F8B4207A61563ED134
                                                                                                                                                                                                                                                                                      SHA-512:18AFB816E974C9F0D669AF7CB6A5D8761E1C5AF69317E6EA293559876549692BAF1567657B356BA9D52ECDF4D117B7EE7FE003D1820286470D43AF89321E3F6D
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........9...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.;...y.A...z.P...|.V...}.h.....p.....u.....}...........................................................N.............................k.................Y...................................X.............................I.................+.............................B.....e...........).....p.......................<.....H.....K.....o.................>.................f...................................2.....].......................S.......................B.....t...........f.......................*.....Y.....\.................#.....V...............................................L.....h...........P.......................V.........................................6.....E.....T...........).................`.............................K..................... .....".8...%.....(.....*.....+.....,.........../.@...0.P...1.....3.....4.J...5.....6.D...7.....8.....9.J...;.....<.....=.....>.....?.....@.G...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\mr.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):891781
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.3007658045691715
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:ryyL/Ti/fQDFJEm1VhkrXspg2GLXFEMUAG3GRa3RQR3Kz/YYxi4noc4AmHwpVuQ4:pTi/fSLIje5DDcJ01V55ipWLYb
                                                                                                                                                                                                                                                                                      MD5:1675668911FD3063E092FE34579C210C
                                                                                                                                                                                                                                                                                      SHA1:D1D09041778599002D07A89848DDD79CF5F4F4DB
                                                                                                                                                                                                                                                                                      SHA-256:436EFBDBCE605C23F855644A9FF1B04D9A3ECA37DE3B18DE8C3E589930D54096
                                                                                                                                                                                                                                                                                      SHA-512:61C7AABB00700773BB55522E7AE9482D1D97ACE936C9BBFEAEF3215A976C411A51F41A2D5AA05F2B286B0D112B5616215B9FA3632EAEE38B1EC090DFB29391B1
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........T.h. ...i.:...j.F...k.U...l.`...n.h...o.m...p.z...r.....s.....t.....v.....w.....y.....z.....|.....}.................................................#.....$.....%.....*...................................;.....k.....}.................D.....F.....J.....r.......................0.....b.....x.......................=...................................$.....C.......................#.....E.....z...................................).....w.................O.....r.........................................+.....:.....h.......................R.................>.....T...................................(.....D.....c.....................................................4.....K.....h.................:.....I...........+.....G...............................................6.................M.....|.................\.....k........................... .!...".F...%.....(.....*.....+.....,.1.....q.../.....0.....1.0...3.G...4.{...5.....6. ...7.N...8.....9.....;.....<.#...=.@...>.l...?.....@.....A.....C.I.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ms.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):404856
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.277592243066906
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:D0DH30N8CXsxdu2kulaBGY/H3IUv5sf3UwMM3KbI:DGjfxdflasKHL5UUDML
                                                                                                                                                                                                                                                                                      MD5:2C4056D84B980267FAADD69D52C17086
                                                                                                                                                                                                                                                                                      SHA1:3B3C5FCF182D86A170C8F35C041BF3869A82B362
                                                                                                                                                                                                                                                                                      SHA-256:163EB7BA5F0C61ACB6443709C24E38CA6370A33F89A12E13D0A57C258A87CA16
                                                                                                                                                                                                                                                                                      SHA-512:47285AB42B46CF7D6556EAC2A8F7AFB9A9C9ABE8CB026FE847B2504E4DBDDD481A98C1EA959C74E31F195ECDBB618A3D93DF8F20B797411A8BF2B3856FC9B963
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........;...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.)...w.6...y.<...z.K...|.Q...}.c.....k.....p.....x.........................................................................................>.....J.....X.....{...........................................................(.....=.....Y.....e.....s.................................................................".....4.....A.....E.....H.....S.....d.....s..........................................................."...........<.....W.....^.....p.........................................+.....9.....B.....M.....c.....w.....z.......................................................................!.....)...../.....;.....h.............................+.....<.....^.....i.....{.....................................................%.....=.....k....................................... .....".....%.....(.....*.,...+./...,.M.....^.../.t...0.~...1.....3.....4.....5.....6.-...7.D...8.`...9.s...;.....<.....=.....>.....?.....@.....A...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\nb.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):396020
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.443726777531974
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:0t4+Y0qilKh+7Op7fCFegnmKQ7PpWS6j25OB4Y6GOQzMh:u4+Y0FKh+7Op7fCFkP8Vi5OB4NQzMh
                                                                                                                                                                                                                                                                                      MD5:23ECCE10DB7753622FD7CD956AA55212
                                                                                                                                                                                                                                                                                      SHA1:52AFFC68E91448D8AECF2396F02EDE77D4EA664F
                                                                                                                                                                                                                                                                                      SHA-256:29F38D3720C948FD261A2AEA7D195E861A73A1313071BD2CBF1EBCBBA77C63E6
                                                                                                                                                                                                                                                                                      SHA-512:553543BEF496052995E33E2F3E8BD66AC845351CD292623479A303261900C393CEC35AF3E0ECD57DB84197E6F7653FFA4EEAF4950647AE2D5304F961890DEBA1
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........&.#.h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.!...z.0...|.6...}.H.....P.....U.....].....e.....m.....t.....{.............................................................................".....E.....\.....^.....b...........................................................+.....<.....Z.....i.....o.....u.................................................................!.....&.....E.....X.....m.......................................................................&...........;.....k.....v...........................................................).....,.....;.....H.....S.....e.....u.................................................................9.....j.....n.............................&.....6.....H.....R.....V.....[.....l...................................".....5.....9.....B.....O.....g.....r... .w...".....%.....(.....*.....+.....,.........../. ...0.%...1.T...3.`...4.z...5.....6.....7.....8.....9.....;.....<.$...=./...>.C...?.H...@.T...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\nl.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):408303
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.386796049452319
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:IZobt+gAv/5SfHepaMs3B+qnCv+659tuxMGpe/hWUP6C:QLgAv/5SJTb659tuxMGpe/hbP6C
                                                                                                                                                                                                                                                                                      MD5:54817BE286DBFD9DE461F42304EB72CC
                                                                                                                                                                                                                                                                                      SHA1:79386881A11E6C7D49F2D117822C29D7631F3830
                                                                                                                                                                                                                                                                                      SHA-256:3C682E37DF71CC036C2B5E91064407FED8091C0306A856121E28C19E7110E1E4
                                                                                                                                                                                                                                                                                      SHA-512:D8F922B028B03C6379911308CF240D104B40A9C46F67A6DDBBFCD20110C287E8106376CD6E8295915D054E05B2A8A045B3AB8D98932C1BE97B1F258525DB1A68
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........<.h.P...i.a...j.m...k.|...l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}...................%.....-.....5.....<.....C.....J.....K.....L.....N.....|.......................................................................!.....I.....a.....}...................................................../.....I.....N.....W.....f.....v...........................................................'.....>.....S.....k...........................................................".....2.....I.....P.....e...................................$.....7.....G.....Q....._.....~.......................................................................$...........8.....I.............................K.....`.....x...........................................................0.....S.....h................................................... .....".....%.0...(.K...*.d...+.g...,.........../.....0.....1.....3.....4.....5.0...6.j...7.....8.....9.....;.....<.....=.....>.....?.....@.....A.?...C.X...D.b.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\pl.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):455672
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.786204955993163
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:XEmjSoGU/h+XgvqiWHbdvP/CUd9e3maUXl0hmhF1Qhwkd54Mz4c6W/:0Zl+I1QhX5qa
                                                                                                                                                                                                                                                                                      MD5:41CB68DE75D011281C7936194EF8457F
                                                                                                                                                                                                                                                                                      SHA1:6BD3EFBF5142769C6FBE8478185EDF89F471716A
                                                                                                                                                                                                                                                                                      SHA-256:D52358B8FD70F1F18B3F8ECC4AA9C791591DBB698EF8D8670312E50F024DB451
                                                                                                                                                                                                                                                                                      SHA-512:CEB90FA9F723C3D8D522A401CB46545C72A2DDD1D04F091E9D7CA5212CEDCC641C54CB8FE19595E9C823B2ED374757E5BA7D1813CD763BBD8D726B1E2EBE0407
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........$.%.h.~...i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.$...|.*...}.<.....D.....I.....Q.....Y.....a.....h.....o.....v.....w.....x.....z.....................................................$.....L.....a.....c.....g.....................................................&.....1.....@.....Y.....j.....p.....v...........................................................!.....*...../.....D.....Y.....n.................................................................%.....7.....B.....R.........................................(.....2.....C.....L.....\.....|...................................................................................".....3.....y.......................h...............................................$.....).....>.....c.....}....................... .....7.....>.....H....._.....y......... .....".....%.....(.....*.....+.....,.......A.../.V...0.b...1.....3.....4.....5.....6.....7.-...8.F...9.W...;.f...<.q...=.{...>.....?.....@.....A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\pt-BR.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):429297
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.444204703419543
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:Zj1SlkigJpsehea53NBXBLm+9nnI1iys55nfJkW++sRgltp:Zjj9pseAaLnN5fJLnsRcD
                                                                                                                                                                                                                                                                                      MD5:4F3F65F6639AE1905FA37B9B6EE2E4D4
                                                                                                                                                                                                                                                                                      SHA1:07553F41C4F8F3D105EB92B65497C4976449A6B4
                                                                                                                                                                                                                                                                                      SHA-256:B4E0A6064DCFE876C819EC4B00F9857B84FF52CD3E845BD0C48E31AD43A23DB9
                                                                                                                                                                                                                                                                                      SHA-512:85CFCAED8FA2026C13735E7D4B6852BF794DD4A8AC078889D5EF46EC2FF7173AE443ADDCB0B0C711F6A31F80469FC1DF5AF1A78DA6397D9DF5E33CABB354FBA2
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:......../...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.'...y.-...z.<...|.B...}.T.....\.....a.....i.....q.....y...................................................................................:.....B.....l.......................................................................:.....S.....m.....................................................G.....M.....X.....h.....u.....y.....|...............................................*.....=.....C.....K.....R.....X.....c.....q...............................................>.....`.....j.....z...........................................................+.....2.....5.....6.....?.....H.....Q.....X.....h.............................R.....g.....~...........................................................).....Z.....s................................................... .#...".6...%.U...(.k...*.....+.....,.........../.....0.....1.....3.....4.:...5.S...6.....7.....8.....9.....;.....<.....=.....>.....?.....@.%...A.\...C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\pt-PT.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):430550
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.422681845738878
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:WPh4tRdLtMRieJVJJxhzOhxcNR8f5W75BKbSR8u:ih4tRdxU/ND75BKbSRl
                                                                                                                                                                                                                                                                                      MD5:7074036013BE3839E218EC7B15D49215
                                                                                                                                                                                                                                                                                      SHA1:7711AE4E96EFD4F4676A3C0281A92AF56329DEEE
                                                                                                                                                                                                                                                                                      SHA-256:342381F89058BEDD809991A0B416F48642DF3C71AEA10BB13E13BC15EAAF46C8
                                                                                                                                                                                                                                                                                      SHA-512:8A1E9CEFB8A64B3664D9496E2D2F76E2281B3C427FE24ECB70EE74F78778D94DEF66787A7E35CCDE6037EC061E29A6AC7FD8B4010F77B13945780E1316BB16E0
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........?...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.%...v.:...w.G...y.M...z.\...|.b...}.t.....|.........................................................................................%...........K.....W....._.......................................................................+.....O....._.....r...............................................!.....:.....B.....M.....].....j.....n.....q.....x.........................................5.....E.....K.....S.....Z.....`.....k.....y.....................................................J.....l.....w...........................................................*.....>.....E.....H.....I.....R.....[.....d.....k.....|.................0.....8.....t...........................................................&.....G.....^.........................................$.....0.....N.....V... .Z...".n...%.....(.....*.....+.....,.........../.....0.....1.E...3.X...4.|...5.....6.....7.....8.....9. ...;.4...<.C...=.O...>.s...?.~...@.....A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ro.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):445082
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.481204880062455
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:wvnUEfoHLgfnNaLF33GKoZQoA02M5Hg2obs20/qulUy:wsEaLgfnoF33GKoZQod2M5HLoA/Iy
                                                                                                                                                                                                                                                                                      MD5:E66343D1AF0B8F483116AD7689E7FABA
                                                                                                                                                                                                                                                                                      SHA1:A245B6AA9309A7C10ACA8502CBD10D9DCBD5D8DE
                                                                                                                                                                                                                                                                                      SHA-256:B7B56396806412AC1721D2648FA98A89A069D1F58D359D8E90DD1C6B8473B9A2
                                                                                                                                                                                                                                                                                      SHA-512:9F6517AAE57F3D8A65D4F9B354B7ED9923C1BAB8A414B78347F4DC375707907D16D458D9D458D8FBD28F065E268E092770FBC198833315CE14E6EECFC0D3F0AA
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........0.h.h...i.y...j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.&...........3.....;.....C.....K.....R.....Y.....`.....a.....b.....d...........................................................,.....>.....@.....D.....l...............................................".....2.....E.....g.....~...................................".....).....2.....L.....h.....l.....w...................................'.....U.....x.................................................................'.....6.....D.....e.....u.........................................(.....+.....<.....N.....a.....|.................................................................?.......................A.....V.....l.....................................................4.....K.....y...................................(.....?.....].....i... .s...".....%.....(.....*.....+.....,.........../.+...0.<...1.h...3.y...4.....5.....6.....7.....8."...9.2...;.E...<.Q...=.b...>.}...?.....@.....A.....C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ru.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):728605
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.848404287210581
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:FKYfeXN2hnO3j/HkwzvM/sWAhwxxe8P/XvFGGJbM3cFaPuLzUFCpWNFHWajfr69R:FtVy56687
                                                                                                                                                                                                                                                                                      MD5:6092FF0430736682E24595B37B3C018D
                                                                                                                                                                                                                                                                                      SHA1:9D2B9822556AB1F33861C45B2F7F4236B3EA5F05
                                                                                                                                                                                                                                                                                      SHA-256:C5264FA2B485326E91D4DF7A6E39122554ED632C0C17FA1F130205ED50E2D6B9
                                                                                                                                                                                                                                                                                      SHA-512:FDD960F3295C280CC57915F7CABD7FFDE0C0CDF4CF6B671748A6F5B8B39376141F2A552AFCE3E2A428BA18057FB9890DA9B95FC6B8367DBDA5430E1B205A08CF
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............h.>...i.O...j.[...k.j...l.u...n.}...o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}...............................#.....*.....1.....8.....9.....:.....<...................................#.....J.....T.....^.........................................C.....O.....n...................................3.....j...................................[.....................................................!.....:.....U.............................?.....M.....U.....c.........................................`.....p.......................;.....\.....o...................................6.....T.....v...................................................................................1.....X.............................-.....A.....V.....d.......................x.................<.....m................................. .....".....%.D...(.....*.....+.....,.........../.R...0.c...1.....3.....4.....5.:...6.....7.....8.....9.....;./...<.I...=.]...>.....?.....@.....A.E...C.}...D.....E.....F...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\sk.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):459341
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.83612791387238
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:WhktQ05fPaV1kP1OOygitJeKqsf2d/5hK7LtHEMEGLxGg:WGSW41+NygiqKqsf2B5hK7LtHJJL/
                                                                                                                                                                                                                                                                                      MD5:B88EC1F7BBDCF1B6690F2698B3DFF738
                                                                                                                                                                                                                                                                                      SHA1:C5975DE1D66827087BBF8CF0F4B3BDA816A723E1
                                                                                                                                                                                                                                                                                      SHA-256:04B179B5C3A5468F495A0620A2DBC6E312EBD76BA32B98D8CC7DAAFB46EDC21E
                                                                                                                                                                                                                                                                                      SHA-512:EF30AC14B17B71F5659F33778D8C4B017127C3C5BFB593DCA919A80320A66DCF5E0A3F228DCF62B05DF5D4D6929EB5401BA9C369AFFE89CF541633BB743553F0
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........'.".h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y. ...z./...|.5...}.G.....O.....T.....\.....d.....l.....s.....z.......................................................................*.....?.....n.................................................................-....._.....m.....}.....................................................:.....B.....O....._.....e.....s.....~.........................................).....9.....A.....I.....P.....X.....i.....x................................... .....1.....Y.....~.................................................................0.....F.....M.....P.....Q....._.....m.....u.......................;............................. .....a.....q.....................................................;.....].........................................&.....0... .:...".N...%.r...(.....*.....+.....,.........../.....0.....1.8...3.F...4.f...5.....6.....7.....8.....9.....;.....<.....=.(...>.=...?.G...@.Z...A.....C.....D.....E...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\sl.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):443886
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.505235500325453
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:4O8DqTPKIM7B2zi2i+ennbANjdnPMAm4ocyxPbPDTmAu1pHHGfXjQLO25QlhDc/6:H4qy7B2kZSSl25ytc/1rg/J1i/fzUZqk
                                                                                                                                                                                                                                                                                      MD5:1B02B0834B8BBD12A77F7FFF09E1D81A
                                                                                                                                                                                                                                                                                      SHA1:1898CFEDDE55AAE307F7578B88CB0BCAF61E1D52
                                                                                                                                                                                                                                                                                      SHA-256:B36E1FE2405CC4B9F34587E30DA2FEADAA6F03124769B02F79333ADACADDB49B
                                                                                                                                                                                                                                                                                      SHA-512:B1006053ACE6F8842E9436C94934B2E7D1B502E3DF9ECD1FE59AB39AE35E69E8F0DCFF8728AEE2C35A3A1EB7A27F0146D6113B4DE0632DBAB20EB0A37942BC4C
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........7.h.Z...i.k...j.u...k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}....... .....%.....-.....5.....=.....D.....K.....R.....S.....T.....V...........................................................C.....V.....X.....\..........................................................."...../.....E.....R.....Z.....c.....r.............................................................................H.....a.....{.....................................................*.....N.....a.....l.....|.........................................9.....J.....Y.....e.....t.............................................................................$.....*.....2.....=.............................d.....................................................%.....8.....c.....{...................................5.....<.....I.....d.....p... .z...".....%.....(.....*.....+.....,......./.../.L...0.V...1.....3.....4.....5.....6.....7.....8.4...9.T...;.a...<.m...=.w...>.....?.....@.....A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\sr.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):682487
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.76829773436016
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:EmiMMe1Knu/SyI4cH1ANLVsewp6035sp1xAx7oC+37ZJSk/k/o:EnMMeqk9k35WxAG
                                                                                                                                                                                                                                                                                      MD5:4D1EE9487F4DDFDC4471366D3965293F
                                                                                                                                                                                                                                                                                      SHA1:4E53084FE0D4BF4F46EA980F7423787084152FF2
                                                                                                                                                                                                                                                                                      SHA-256:B75A222DB70C3F5734A75042718DA599881D5E84CC52B332E9162F78B32F4819
                                                                                                                                                                                                                                                                                      SHA-512:A44A448203CC9388D8DF4C39BE9DB5436546FA17ADD0975C18CE01EA0A5CBA142692660CE6EFBF00699793CA98AF8E392E41A07DCD9C183FE03414574389609C
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........1...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.+...y.1...z.@...|.F...}.X.....`.....e.....m.....u.....}.....................................................2.....W.....q.............................H.....}.........................................".....E.....\.....v.............................6.....B.....N.....v.......................E.....O....._.....x...............................................P...................................!.....(.....C.....Z.....|.......................(.....A.....S.....v.......................6.....S.....c.........................................>.....\.....|.....................................................i.......................7.....a.............................).....5.....P.....Z.....~.................F.......................0.....<.....P.....e............... .....".....%.#...(.U...*.....+.....,.........../.....0.....1.d...3.{...4.....5.....6.T...7.|...8.....9.....;.....<.....=.....>.Q...?.b...@.....A.....C.#.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\sv.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):398582
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.563134029307162
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:lWebObjmSPLUfHxd8cAkxbMUK4NLXmXQMLSOzDE/xWcqpvPb5BN5Bngbd:lWebo2Aa25P5Be
                                                                                                                                                                                                                                                                                      MD5:094D69544816535E4D040EF0CE923100
                                                                                                                                                                                                                                                                                      SHA1:5891CDC73BC4C112855D099EE112DA0C3E9CEA81
                                                                                                                                                                                                                                                                                      SHA-256:110112C2F7FF5D3C8599036669D156E96EC19E70515FBBA3BBCB2043AB994680
                                                                                                                                                                                                                                                                                      SHA-512:023037077A3482A3BF2AC076B5C00922D7039BFC2098797275465138142FEA0F97C1E003F77DE71B9AB88F786B7401182618603610C51F634AD17A123FAF5BD4
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........N.h.,...i.=...j.I...k.X...l.c...n.k...o.p...p.}...r.....s.....t.....v.....w.....y.....z.....|.....}.................................................&.....'.....(.....*.....T.....e.....w.................................................................8.....Q.....i.....o........................................................... .....&.....4.....C.....K.......................................................................+.....J.....k.......................................................................#.....X.....`.....k..................................................... .....#.....3.....A.....N.....`.....q.................................................................R...................................).....4.....E.....N.....V.....X.....^.....p...................................C.....].....c.....m.....}............... .....".....%.....(.....*.....+.....,.#...../.../.C...0.]...1.....3.....4.....5.....6.....7.....8.)...9.8...;.I...<.Q...=._...>.v...?.....@.....A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\sw.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):418265
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.358226259602233
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:dmnKF5TzfMUxbQufAaRO8VUZgNArc5m3HZ+bAoe4Fahk:dmsB5mw
                                                                                                                                                                                                                                                                                      MD5:BC771A0E8398E14653D9A4373A73496A
                                                                                                                                                                                                                                                                                      SHA1:6E844C7DAA666640AC3093D5E51276886A0F5A66
                                                                                                                                                                                                                                                                                      SHA-256:7A5D056FD317B7B60A4FBF0DF39DFDD21829F2245393A21E1DDCCF1A4E3B61FE
                                                                                                                                                                                                                                                                                      SHA-512:79B916C737BC44051E6B4C0A9AFDFBA26928536034C5A5149586594454855B7074F6F8FDAEB98F0B7BDE5C3DA36D66988F683DE8961E13C9C82301676F942998
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........&.#.h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.$...|.*...}.<.....D.....I.....Q.....Y.....a.....h.....o.....v.....w.....x.....}...........................................................>.....U.....W.....[..................................................... .....2.....=.....Z.....k.....u.....{.....................................................5.....9.....<.....A.....R.....l...............................................$.....+.....5.....B.....S.....u.....|.........................................T...........................................................!.....5.....K.....[.....b.....e.....f.....s.....z...............................................3.....l.................................................................5.....S...............................................$.....D.....O... .W...".g...%.....(.....*.....+.....,.........../.....0.....1.V...3.l...4.....5.....6.....7.....8.....9.....;.#...<.1...=.?...>.S...?.\...@.w...A...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ta.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):1078050
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.0511544413469025
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:/IFTT2M16QygBwVWhphfT5hB7zNtRaKcA2/:/cf2GDwVWhphfT5zzNtRBcA2/
                                                                                                                                                                                                                                                                                      MD5:ABF95E05D798043ABF4F2F514C0517A9
                                                                                                                                                                                                                                                                                      SHA1:B8C6C1CDCBFEA03FB106C7A44385A3A8E6806AA6
                                                                                                                                                                                                                                                                                      SHA-256:9CD624A97493282AFED3B9B1E848B12639234FA54C04B22128169924F9C92777
                                                                                                                                                                                                                                                                                      SHA-512:AACD7439DF84EC76A3D0C69C39341B51031B66B24BE53C87F3FFBCED989B38FEE416B19DB2C3B36904EAF88F98B24E1E26F070BCC8DFB4ECC99DC7BB6F6B911F
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........O.h.*...i.;...j.G...k.V...l.a...n.i...o.n...p.{...r.....s.....t.....v.....w.....y.....z.....|.....}.................................................$.....%.....&.....+.................!.....a.................................................................W.......................E.....d.................<.....^.............................D.....m.........................................L.....[.....^.....p.......................U.................c...............................................h.......................&.....D.....w...........\.......................K.....n.......................&.....i.........................................6.....T.....i.....|.................2...........2.................B.................G.....\.............................M...........0.....h...........A.............................%.....I... .X...".....%.....(.a...*.....+.....,.........../.>...0.W...1.....3.....4.o...5.....6.....7.....8.1...9.\...;.....<.....=.....>.!...?.4...@.h...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\te.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):997284
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.300315130198989
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:4hk/xBJ3p1F96/iTlw2cTgTNFOpnr/p54JqQJgwgtaJCb8+58XfX0DDq9OyJoTA1:45kz5sMBD
                                                                                                                                                                                                                                                                                      MD5:51356402AF92C1912F185B6BC9AA9026
                                                                                                                                                                                                                                                                                      SHA1:60CCD65D7EF35E5219F2BD1ECED66E1BA984A8CB
                                                                                                                                                                                                                                                                                      SHA-256:11DF9EAA9216B091FAB01F66FD77BCB17C0BEA0DB3EA7A803BDF5DC6C6E18322
                                                                                                                                                                                                                                                                                      SHA-512:8DDC7946A9445A832B4B3B254D24E12D66C42AF8CF7DC13ADD4CD3A9AE50B83E5178830300C0B08AA145D55D79B868EFA9D95A116623044D7DF8EAC1A6556632
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........7...h.....i.....j.....k.....l.....n.....o.....p.....r.....s.....t.....v.3...w.@...y.F...z.U...|.[...}.m.....u.....z.................................................................e.............................Q.....r.................f.....h.....t.......................-.....d.......................p.................V...................................C................./.....V...................................h.................f...........5.........................................@.....b.......................w.......................5.................C.....z.............................:.....\.....~.................).....0.....3.....5.....Z.........................................a...........8...........E................./.....a.....m.............................~...........k...................................-.....m............... .....".....%.u...(.....*.....+.....,.<.....s.../.....0.....1.....3.....4.....5.;...6.....7.....8.L...9.....;.....<.....=.....>.....?.0...@.g...A...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\th.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):836855
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.34610730153968
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:XeYsml39by4s3/5UidrLRflssB/j86qGv0loIG2EeuLADq7Kle9dAv7y3KH409X9:XJuI5j5N
                                                                                                                                                                                                                                                                                      MD5:2376DC182234C3F1188DC0D6E1840453
                                                                                                                                                                                                                                                                                      SHA1:2DD35D89E79512E37B721FA697CB2E9E07A1D1CF
                                                                                                                                                                                                                                                                                      SHA-256:610A440605110F1AA18B1134D116C66CD2050DA53E0360924A3171D0850C27FC
                                                                                                                                                                                                                                                                                      SHA-512:7C81FE0C2172FF49B6AD9236762FE81E0A786991CA6C6E3549BD66F9CBA3C14D96F8560E01BF3681355D6155A0B1B9CB5FA0177137F71BA3D8A1FB6FDED29E38
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........Z...h.....i.....j.....k.....l.....o.....p.'...r.-...s.>...t.G...v.\...w.i...y.o...z.~...|.....}...............................................................................2.....V.............................\.....z...................................E.....r.............................&.....M.............................;.....V.....h.................1.............................+.....L.....X.....[.....j.......................2.....e...............................................&.....E.....~.................&.....Y.....t.................O.............................0.....3.....W.....x.........................................".....C.....U.....h.......................3.....E.................D.............................".....=.....d.......................e.................H...................................+... .4...".I...%.....(.....*.'...+.*...,.;.....k.../.....0.....1.;...3.i...4.....5.....6.x...7.....8.....9.....;.....<.0...=.U...>.....?.....@.....A.*...C.o...D.....E...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\tr.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):425804
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.630152358236389
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:Vb44kEWcgMZ4ll7rSmilqnkdShlbh+krge5545/d+2i1TTvdzAQwiBXVx+:Vb4pMKlJe81lh+A545/T
                                                                                                                                                                                                                                                                                      MD5:418DC1CDD7CCC10679523665E1626280
                                                                                                                                                                                                                                                                                      SHA1:D4407BA9BC55153963150E6E30F23CC5B2304E30
                                                                                                                                                                                                                                                                                      SHA-256:26FD3317BEDD4080038D7A0003D73923FC0EDD40283EF11B5BA80BB27F946C13
                                                                                                                                                                                                                                                                                      SHA-512:4A907BF14DC9CD8ECB2F17152FF5EA0A6DC37034C95ED31A445395BCB9AD6FC23D4117E81F94AC82D767869B0B828738EACD33B810DF87DD41CC3EC2D5B92E94
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........N...h.....i.....j.....k.....l.....n.....o.....p.!...r.'...s.8...t.A...v.V...w.c...y.i...z.x...|.~...}...............................................................................!.....7.....L.....W.....e..................................................... .....4.....;.....P.....c.....m.........................................................../.....?.....x.......................................................................*.....D.....\.....v.................................................................4.....A.....].....l.....................................................".....2.....D.....[.....t.......................................................................R.................................../.....=.....M.....V.....`.....i.....p...................................A.....n....................................... .....".....%.....(.....*.;...+.>...,.\.....s.../.....0.....1.....3.....4.....5.....6.K...7.h...8.....9.....;.....<.....=.....>.....?.....@.....A. ...C.<.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\uk.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):728668
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.8790394136747866
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:XdGPBo+VgnayTBVsFQifnSo75uB3Ij5A9mERrEusLNiXElqBkyC:tGFV6cr5/E+
                                                                                                                                                                                                                                                                                      MD5:0ED34D4A274D21D3376CA37DF97B3017
                                                                                                                                                                                                                                                                                      SHA1:3DB12DCC6D1E85D4A497E4CB1CC8103F4A9565BE
                                                                                                                                                                                                                                                                                      SHA-256:0523B68C3320674D1565DEDAF0436EC821A7175A34AC673338D6447AAB20FD7A
                                                                                                                                                                                                                                                                                      SHA-512:6A5F4C02A23CABC79EC69738778A6C62685CDBE0D8CBECCD830CD75911E00CAAC4E1D0A1A2165F4CEC070E7C417D0AD13E03FE5D7E89C3352E6F2D25CB6E2F06
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........t.h.....i.....j.....k.....l.....n.....o.$...p.1...r.7...s.H...t.Q...v.f...w.s...y.y...z.....|.....}.........................................................................G.....d.....}...................................'.....j...................................+.....=.....V.....j...................................N.....o.....{.............................7.....c.....m.....}...............................................3.....l.............................(.....0.....>.....]...................................8.....K...................................:.....Q.....q...................................1.....S...........................................................i...........u........... .....Q.......................+.....J.....^.....r.............................c.................$.....O.....a.....u..................... .....".....%.P...(.....*.....+.....,.......<.../.j...0.|...1.....3.....4.2...5.a...6.....7.....8.....9.(...;.-...<.E...=.Y...>.....?.....@.....A.S...C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\ur.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):637231
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.148107468795065
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:9lhG4V8PzqSMeyeSD7J/5TZPEHbWC8cQYrUu7co/9NjjFpv/j:9Lz4a5mW2
                                                                                                                                                                                                                                                                                      MD5:8D6FA97205A1D2B371A54144AEA453CA
                                                                                                                                                                                                                                                                                      SHA1:11A77318F571D15DAF7AD047B06E1EC8A51C8F8C
                                                                                                                                                                                                                                                                                      SHA-256:578AEF61FC8B5C2E0F3765B1487F8AF9F72F6506050D501FEC9EDCBF93C7A3E4
                                                                                                                                                                                                                                                                                      SHA-512:9C8DBF1126B97BCA195C801B81AFDBD8F68E8F44EBD57C563D63F6C1A3F7FA08B1ABC76E25A28D1EB2CD8BC47C9438F23B72063F081F0BCE6B8F48BD90A56433
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........1.h.f...i.n...j.z...k.....l.....n.....o.....p.....r.....s.....t.....v.....w.....y.....z.....|.....}.......%.....*.....2.....:.....B.....I.....P.....W.....X.....Y.....^.......................$.....0.....A.....l.....x.........................................:.....`.....u.............................-.....I.....o.........................................3...................................!.....'.....*.....6.....^.............................E.....t...............................................1.....?.....i.............................*.........................................2.....5.....L.....g................................................................./.....Q...................................+.....?.....j...............................................6.....m.................#.....p....................................... .....".....%.c...(.....*.....+.....,.........../.....0.1...1.~...3.....4.....5.....6.P...7.....8.....9.....;.....<.....=.....>.%...?.2...@.T...A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\vi.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):504139
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.815093203386653
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:12288:fo4e5En2DYpgsHB30XBfwSPSoC39XPSw508ELDg4iW+U9Hzi8Bhf:w4e5ipgsHd0X9wS9e9b508wDHiW+U9TP
                                                                                                                                                                                                                                                                                      MD5:7B2CBB79992021E2FA2714AE9CDF0728
                                                                                                                                                                                                                                                                                      SHA1:A543C9B6D4DABD48C6B5D995CFA3C915A2B76433
                                                                                                                                                                                                                                                                                      SHA-256:326E44C27579796E4B55CC281C3E4C9BF5AD7AA87156530709CD6296350758AF
                                                                                                                                                                                                                                                                                      SHA-512:5C77C2DD9E5EE9D381A2524C733D3FFB55146160393BF919ED8855781D1E8ED0C4D707BD71554D7868FF53BC546344A415E846DC15F68F0E7630D49A94F14049
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..........~.h.....i.....j.....k.....l.....n.....o.....p.&...r.,...s.=...t.F...v.[...w.h...y.n...z.}...|.....}...........................................................................................A.....N.....W.....~.....................................................A.....K.....b...............................................4.....8.....=.....N.....`.....p.................................................................1.....G.....r...........................................................$.....L.....V.....u...................................X.....................................................5.....S.....c.....{.................................................................W...................................F.....Q.....a.....l.....w...................................N.....f...............................................(... .4...".M...%.s...(.....*.....+.....,.........../.....0.%...1.Y...3.f...4.....5.....6.....7.....8.....9.,...;.=...<.G...=.X...>.s...?.....@.....A.....C...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\zh-CN.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):365940
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.683312385277625
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:Iq8Dy2yBz8a8s7H+vlKVClmk3955CuKNP++DfIlX:Iq8WfqaV+vlKVCld55JKNP++a
                                                                                                                                                                                                                                                                                      MD5:D15FA5C75A835983AF2663466B5A8494
                                                                                                                                                                                                                                                                                      SHA1:6580F7C91E31491A296A039F681C93810281717C
                                                                                                                                                                                                                                                                                      SHA-256:B33B23552F8F76AA43671556676298C0AF54641E9F1DE27A8208750148E737CA
                                                                                                                                                                                                                                                                                      SHA-512:39A63DB44E1E2B67B1937AF803336B221BBE94D3BB31B2117530886FB9E66131EFD0EB3969C251D2EE264A7C07BDAECAC330C97B1CBE74B3988CAC6FF86F3BE5
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............h.r...i.z...j.}...k.....l.....m.....o.....p.....r.....s.....t.....v.....w.....|.....}.........................#.....2.....7.....?.....F.....M.....O.....T.................................................................%.....'.....+.....V.....k.................................................................(...........4.....@.....X.....d.......................................................................!.....9.....Q.....i.......................................................................).....5.....D.....\.....}...........................................................(.....:.....N.....b.....q.....x.....{.....}...............................................0.....].....c...........................................................#.....5.....G....._...............................................'.....;.....D... .J...".V...%.q...(.....*.....+.....,.........../.....0.....1.....3.?...4.T...5.u...6.....7.....8.....9.....;.....<.....=.,...>.K...?.[...@.s...A.....C.....D...

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\locales\zh-TW.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):361711
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.700067542410215
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:guDHX49O+9vE+J8RCV2qLulexKuhz050wzqCBxBZ/9yGTm:g6Ih9OchxKuhz050wzJd/q
                                                                                                                                                                                                                                                                                      MD5:C1C8F601F2D0BB06B49D870C80904907
                                                                                                                                                                                                                                                                                      SHA1:6237DF5D4580AFCCAA6A07F35729F9E2737C82A8
                                                                                                                                                                                                                                                                                      SHA-256:69D888BE9D5AFFC6086E901CF52936477101374ABD8186F8E8F6CC38AF826691
                                                                                                                                                                                                                                                                                      SHA-512:2D68F116CBFC77A17B9FB550ADDBDE95CA09F10CE1745D5AACBB9E76DD4D041D6DE8E423844266711C64FC6733BB805311A5C8838F576D049340F32D4E0ECCB2
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........{...h.,...i.=...j.A...k.P...l.[...n.c...o.h...p.p...r.v...s.....t.....v.....w.....y.....z.....|.....}.............................................................P.....Y.....e.....t.....z.....................................................3.....B.....Z.....`.....l.....{.............................................................................D.....V.....\.....e.....q.....}....................................................................... .....(...../.....;.....G.....T.....i.....u...............................................8.....A.....M.....Y.....k................................................................................... .....&.....0.....@.....m...................................0.....Q.....].....i.....o.....{...............................................0.....W.....f.....l.....r.....~............... .....".....%.....(.....*.....+.....,.@.....U.../.m...0.v...1.....3.....4.....5.....6."...7.7...8.I...9.U...;.g...<.w...=.....>.....?.....@.....A.....C.....D.$.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\resources.pak

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):5193850
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.9952704707488165
                                                                                                                                                                                                                                                                                      Encrypted:true
                                                                                                                                                                                                                                                                                      SSDEEP:98304:qg1zetaMcKWPxgWMp1W/ywNAWsh11fHcMtyrwr+oxPf0yO1WODHxSkLyz7ai6y:qgVetWxWF1pkshH8M4krFPf0FIG27sy
                                                                                                                                                                                                                                                                                      MD5:043DBE3EAF0BDE424185A3843E321F83
                                                                                                                                                                                                                                                                                      SHA1:580AC5FDE14E6D177D6F45D2E40D435CC7EDC8D0
                                                                                                                                                                                                                                                                                      SHA-256:0C967CB604D5066F1AB609E81895C1271475A2E1B4B3D5930EEA720FC218781B
                                                                                                                                                                                                                                                                                      SHA-512:44814AAEC681922594528D0ED1A4D2E935045220D09E065647B53455931EAEB3B737C87032B611D7EAD621379AE653A9C5D6D87C828C1961C54129124234EBC3
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............f........).....+....b/...8.A...8.J...8.M...8.`...8-i...8Hp...8.r...8-y...8.{...80}...8s....8e....8.....8.....8....8+....8W....8)....8....8.....8|....8.....8;....8H....8.....8.....8y....8o....8z....8.....8.....8^....8.....9.....9.....9.....99....9.....9.....9\"...9.B...9kD...9.I...9.S...9.U...9.V...9|W...9.Z...9.Z...9R[...9.`...9.f...9.w...9.....9x....9.....@.....@.....@....@.....@.....@.....@.....@`....@&....@.....@.....@.....@....8E....9EB...:EV...;E....<E."..=Eu-..>E....?E./..@E.0..AEQH..BEL....FSD...F.G...U4....UH....U/....U.....U.....U....U.....U5....U.....U.....U.....U.....U6....U.....U.....U.....U.....U.....U.....U.....VM....V^....V.....V.!...V.+...VJ2...V0A...V.D...V.J...Vi]...V.e...V.j...VK~...V....V.....Vn..."V....#Ve...$V,...%V....&V....'V(...(V....)V....*V>...+V@....W.....WUP...W}T.....V.....Y..........C.....y..........y.....j...........6N.....V....L^....Rc....$e....Dj.....o....1w...............................-.........../....0.....2.....3.....4.....5.4.

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\resources\app.asar

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):21753381
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.860076103068824
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:98304:4C74XVBntKRiyBdu6gtP6rvTAjAUoD3yWN8eVwgbA4eALFDIoZGcjy4nOsDhJZTn:H4zn1NtP6khKhkCLeR6
                                                                                                                                                                                                                                                                                      MD5:72EFD30991B8146BD6A4F97425878001
                                                                                                                                                                                                                                                                                      SHA1:A1378ECE6956285FEBE5DF15F9E927DE474CE66D
                                                                                                                                                                                                                                                                                      SHA-256:97DB379B5529C330D80FE9E6EA4C189D88A651527D9274A32176B494E2ADFD96
                                                                                                                                                                                                                                                                                      SHA-512:4C0D4C5C3633F2278F5CB38769DC60BCD8DE5171CB1C2E1346A8ED47C080252D30C4110606E3C2D12F1DFF11172DAB8E48C9D12649F699580D6B53DB4AFEDF8C
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:................{"files":{"icon.ico":{"size":20849,"integrity":{"algorithm":"SHA256","hash":"6b69fa073c3e7fdbcb22c727e6935453a0aa3407e302c2d917f9a8666b8abd1a","blockSize":4194304,"blocks":["6b69fa073c3e7fdbcb22c727e6935453a0aa3407e302c2d917f9a8666b8abd1a"]},"offset":"0"},"index.js":{"size":1011233,"integrity":{"algorithm":"SHA256","hash":"1910d8b7709e95c7ac67836126d5d782d05d1881398b66d6d7b769b1a9f980fe","blockSize":4194304,"blocks":["1910d8b7709e95c7ac67836126d5d782d05d1881398b66d6d7b769b1a9f980fe"]},"offset":"20849"},"package.json":{"size":506,"integrity":{"algorithm":"SHA256","hash":"396ea2c9f9490938ec21ef6faf4cba0fac6b16b2ef267e204567503c8bf15ee6","blockSize":4194304,"blocks":["396ea2c9f9490938ec21ef6faf4cba0fac6b16b2ef267e204567503c8bf15ee6"]},"offset":"1032082"},"node_modules":{"files":{"asynckit":{"files":{"LICENSE":{"size":1078,"integrity":{"algorithm":"SHA256","hash":"1953150d5d4b10c7542cee6f6e0c613b2682545233f069d75cfff1936386ce10","blockSize":4194304,"blocks":["1953150d5d4b10

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\resources\elevate.exe

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32 executable (console) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):107520
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.442687067441468
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
                                                                                                                                                                                                                                                                                      MD5:792B92C8AD13C46F27C7CED0810694DF
                                                                                                                                                                                                                                                                                      SHA1:D8D449B92DE20A57DF722DF46435BA4553ECC802
                                                                                                                                                                                                                                                                                      SHA-256:9B1FBF0C11C520AE714AF8AA9AF12CFD48503EEDECD7398D8992EE94D1B4DC37
                                                                                                                                                                                                                                                                                      SHA-512:6C247254DC18ED81213A978CCE2E321D6692848C64307097D2C43432A42F4F4F6D3CF22FB92610DFA8B7B16A5F1D94E9017CF64F88F2D08E79C0FE71A9121E40
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B..O..............h.......j.q.....k.....e......e......e.......zR........._...h......h.f.............h......Rich....................PE..L......W............................l........0....@.......................................@....................................P.......x.......................T.......p...............................@............0..$............................text............................... ..`.rdata...k...0...l..................@..@.data...............................@....gfids..............................@..@.rsrc...x...........................@..@.reloc..T...........................@..B........................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\snapshot_blob.bin

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):259202
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.177720672914121
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:1536:N8eVec2PhNMqkPhmpILx3FtscrrDKrVTT9gXA4SuoveydoBaDEtu/wMHOdxpMKrF:76N6PkpILxHscrXeQZb0G0mvY6T
                                                                                                                                                                                                                                                                                      MD5:3A4095538E021B84396B3CE25AFFAFC3
                                                                                                                                                                                                                                                                                      SHA1:CFC20771227B3C1F3197FF6A91CEE68555AFB247
                                                                                                                                                                                                                                                                                      SHA-256:C1C9145735032BFF20B2FFF50A4B92AE9CF47290F433E3F3B32E3B232D610C59
                                                                                                                                                                                                                                                                                      SHA-512:7B71083180F237F5F37CBE7A9755F6606708B959986562F9C5880CCCEA17B80A5187649FC0CB6965A8B40526BCB2CB6D980D364BE528465290658B4D9084348E
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:.........J.&11.4.183.29-electron.0..........................................h...B%...Y..........a........a........a........ar.......a........a..............].D.......M....`$.......m.D.......=....`$.......D.......M....`$.......u.D.......M....`$.........D.......A....`D.........D.......M....`$.......M.D.......M....`$.......D.......M....`$.......D.!.....M....`$.......q.D.%.....E....`$.......D.).....M....`$......ID.-.....M....`$.......D.1.....M....`$.......D.5.....M....`$....(Jb...(L.....@..F^......`.....(Jb...,P.....@..F^..`.....H...IDa........Db............D`.......D`.....D]D....D`......WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa............L...........................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\v8_context_snapshot.bin

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):578034
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.245532016724801
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:alKQ1+Ku6X5O8QgZbNg8zvEjbwTBH32jezyjPX:aV1oeLvs4mCG
                                                                                                                                                                                                                                                                                      MD5:5DB8A5BB87C7999343F30128979057A1
                                                                                                                                                                                                                                                                                      SHA1:C4177C2FE973A495DB59B6228AC26264EEC46A4D
                                                                                                                                                                                                                                                                                      SHA-256:5B1F69F39F3D5865DCE13EE3BDBC1AF2938F5CC4C056DC9F9E213E9AF346AD4B
                                                                                                                                                                                                                                                                                      SHA-512:DA2D516251376952729A33DE2CD23764290D400FAFC49642F2CCD799E3F989CCE4D5561A76D380A950B77B53B50148DEC9089C30DE6C3DC38666237E196E569B
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:........ .R.11.4.183.29-electron.0...........................................p......*....y.........@p..a........a........aT.......ar.......a........a..............].D.......M....`$.......m.D.......=....`$.......D.......M....`$.......u.D.......M....`$.........D.......A....`D.........D.......M....`$.......M.D.......M....`$.......D.......M....`$.......D.!.....M....`$.......q.D.%.....E....`$.......D.).....M....`$......ID.-.....M....`$.......D.1.....M....`$.......D.5.....M....`$....(Jb...(L.....@..F^......`.....(Jb...,P.....@..F^..`.....H...IDa........Db............D`.......D`.....D]D....D`......WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa...........WIa............L...................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\vk_swiftshader.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):5251072
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.341324832913826
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:49152:Ab03fn3GIdr1DO1N8jvfWSrvOuyEE0+w7rz77gpxbhk0H4t38mvttDpSHUoeygs4:d3v3xDvRTGVgt38mvt1pSH0adU
                                                                                                                                                                                                                                                                                      MD5:516C5B93B1C13AF0AD393BFF6AA4E259
                                                                                                                                                                                                                                                                                      SHA1:A8823263EE4C2B7CED5AEA055E6F4105DF09E478
                                                                                                                                                                                                                                                                                      SHA-256:2377FD655C1E0B6275F109258F3AF70161996F6CCBF8D67BB654D3A9EDF6D5B9
                                                                                                                                                                                                                                                                                      SHA-512:B976C2373525DD1AC9493D281EC5A1685D1C63B41C44DB6F0DF10915A6C97A2E041D3F00485AADF7B52695C901D5AB1FE2FFE0CAA7AEEAE6874065B185D81A22
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." ......?..z........9.......................................Q...........`A.........................................zK.~...f.K.P.....Q......@O.._........... Q.h}...8K......................7K.(...@.?.@.............K.P............................text.....?.......?................. ..`.rdata........?.......?.............@..@.data.........L......pL.............@....pdata..._...@O..`....N.............@..@.00cfg..8.....P......fO.............@..@.gxfg....,....P......hO.............@..@.retplne......P.......O..................tls....Q.....P.......O.............@..._RDATA..\.....Q.......O.............@..@.rsrc.........Q.......O.............@..@.reloc..h}... Q..~....O.............@..B................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\vk_swiftshader_icd.json

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:JSON data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):106
                                                                                                                                                                                                                                                                                      Entropy (8bit):4.724752649036734
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3:YD96WyV18tzsmyXLVi1rTVWSCwW2TJHzeZ18rY:Y8WyV18tAZLVmCwXFiZ18rY
                                                                                                                                                                                                                                                                                      MD5:8642DD3A87E2DE6E991FAE08458E302B
                                                                                                                                                                                                                                                                                      SHA1:9C06735C31CEC00600FD763A92F8112D085BD12A
                                                                                                                                                                                                                                                                                      SHA-256:32D83FF113FEF532A9F97E0D2831F8656628AB1C99E9060F0332B1532839AFD9
                                                                                                                                                                                                                                                                                      SHA-512:F5D37D1B45B006161E4CEFEEBBA1E33AF879A3A51D16EE3FF8C3968C0C36BBAFAE379BF9124C13310B77774C9CBB4FA53114E83F5B48B5314132736E5BB4496F
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:{"file_format_version": "1.0.0", "ICD": {"library_path": ".\\vk_swiftshader.dll", "api_version": "1.0.5"}}

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\7z-out\vulkan-1.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):931840
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.56671155058839
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:24576:FoHDVVdrfQ09CPKuy0O0Q6Z5W0DYsHA6g3P0zAk7m+:FuVdrI0GKuy066Z5W0DYsHA6g3P0zAk5
                                                                                                                                                                                                                                                                                      MD5:D1F1609B93993A1C74872FAF7694B01D
                                                                                                                                                                                                                                                                                      SHA1:4237815549B77F3509EE99F8ED6A86DE6C15AA20
                                                                                                                                                                                                                                                                                      SHA-256:D0615DC92873F5FC92A74CDED1E0EC34A702D6A3E671778C841BE20DA2CD4549
                                                                                                                                                                                                                                                                                      SHA-512:CD80B50476C4358E06736789B99C5F8C97F3FA5C7DEE85610EED26A5EA42189F6475F97FF00B7D11C15DBE72B9B7734EB01732275A1B510D13663DC775EFF81B
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........." .....x................................................................`A........................................0...<!..l...P................o..............L...<....................... ...(...@...@............................................text....v.......x.................. ..`.rdata...............|..............@..@.data....L....... ...d..............@....pdata...o.......p..................@..@.00cfg..8....@......................@..@.gxfg...P(...P...*..................@..@.retplne............. ...................tls................."..............@..._RDATA..\............$..............@..@.rsrc................&..............@..@.reloc..L............*..............@..B................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\SpiderBanner.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):9216
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.5347224014600345
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
                                                                                                                                                                                                                                                                                      MD5:17309E33B596BA3A5693B4D3E85CF8D7
                                                                                                                                                                                                                                                                                      SHA1:7D361836CF53DF42021C7F2B148AEC9458818C01
                                                                                                                                                                                                                                                                                      SHA-256:996A259E53CA18B89EC36D038C40148957C978C0FD600A268497D4C92F882A93
                                                                                                                                                                                                                                                                                      SHA-512:1ABAC3CE4F2D5E4A635162E16CF9125E059BA1539F70086C2D71CD00D41A6E2A54D468E6F37792E55A822D7082FB388B8DFECC79B59226BBB047B7D28D44D298
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........N.../../../..Wy./../../....../..Wi./..Wx./..W~./..W{./..Rich./..................PE..L...T{mW...........!................p!.......0...............................p............@..........................5..o...l1..P....P.......................`.......................................................0...............................text............................... ..`.rdata.......0......................@..@.data........@......................@....rsrc........P......................@..@.reloc..d....`....... ..............@..B........................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\StdUtils.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):102400
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.729923587623207
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
                                                                                                                                                                                                                                                                                      MD5:C6A6E03F77C313B267498515488C5740
                                                                                                                                                                                                                                                                                      SHA1:3D49FC2784B9450962ED6B82B46E9C3C957D7C15
                                                                                                                                                                                                                                                                                      SHA-256:B72E9013A6204E9F01076DC38DABBF30870D44DFC66962ADBF73619D4331601E
                                                                                                                                                                                                                                                                                      SHA-512:9870C5879F7B72836805088079AD5BBAFCB59FC3D9127F2160D4EC3D6E88D3CC8EBE5A9F5D20A4720FE6407C1336EF10F33B2B9621BC587E930D4CBACF337803
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........q....C...C...C...C...C...C...C...C...C...C...C...C...C.[.C...C.[.C...C.[.C...C.[.C...CRich...C........................PE..L...I..[...........!.....*...b...............@.......................................+....@..........................}..d....t..........X............................................................................@...............................text....).......*.................. ..`.rdata..TC...@...D..................@..@.data...l............r..............@....rsrc...X............x..............@..@.reloc..j............~..............@..B................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\System.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):12288
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.719859767584478
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
                                                                                                                                                                                                                                                                                      MD5:0D7AD4F45DC6F5AA87F606D0331C6901
                                                                                                                                                                                                                                                                                      SHA1:48DF0911F0484CBE2A8CDD5362140B63C41EE457
                                                                                                                                                                                                                                                                                      SHA-256:3EB38AE99653A7DBC724132EE240F6E5C4AF4BFE7C01D31D23FAF373F9F2EACA
                                                                                                                                                                                                                                                                                      SHA-512:C07DE7308CB54205E8BD703001A7FE4FD7796C9AC1B4BB330C77C872BF712B093645F40B80CE7127531FE6746A5B66E18EA073AB6A644934ABED9BB64126FEA9
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......qr*.5.D.5.D.5.D...J.2.D.5.E.!.D.....2.D.a0t.1.D.V1n.4.D..3@.4.D.Rich5.D.........PE..L....~.\...........!....."...........).......@...............................p............@..........................B.......@..P............................`.......................................................@..X............................text.... .......".................. ..`.rdata..c....@.......&..............@..@.data...x....P.......*..............@....reloc.......`.......,..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\app-64.7z

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:7-zip archive data, version 0.4
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):73740753
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.99999532622318
                                                                                                                                                                                                                                                                                      Encrypted:true
                                                                                                                                                                                                                                                                                      SSDEEP:1572864:+pHvAncNj5mA99v/X6s/WXct35tOfMIGKID0aJvi67YoKEiakmB1:8GcNF99Jys/WXOJtOfMIGKIwsUAh1
                                                                                                                                                                                                                                                                                      MD5:131FFD0B45842C73E285A0C5C45225A4
                                                                                                                                                                                                                                                                                      SHA1:1FFE03A17982A763B7E6FF84AFBE42A94C72876B
                                                                                                                                                                                                                                                                                      SHA-256:E016A44ACB9CF687512C75D18A5E12CFD4B710FD98BA5D7E3D6B8A8F2BC0ADDE
                                                                                                                                                                                                                                                                                      SHA-512:2179E50CB1B506722EE24982B063A1F60C22E71C156D368D75D24E829184FE1BBC1C2BBD65F749FC855CD524AEA18BF9EA31EC4DF0CFCE823FC444074D679797
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:7z..'.....z.1e.....%.......d..$.....]...6...E.."......(.Gg.Fy...J.]..........Q....L7.M..m.}....|.,.g-r....F*.U.......6#.$o.^.c..m.]..VD.PN2...&...}.....b.C..k...,..V.lM...I...crc....L...............l...G[..#..a.U.3........&.T.p.0.......d.x(n..,.....M.....5.g...C.\1..>.P..!{..b.&;u.t.{.:.XU...f,cD2....l.P.<..o..T.{Ih?.......V....0-X..7C.."....@..V...i]R....J4..=...>.s,....../3.....!...D.u...s...T..fJ'J..KdgOc...[J+D.d[].x.._[...-.z..?RV...%|yz. .. .C...P.S...zsK.C....a%..M1....4.:..MO.;..d....&.;..b..1..l..Z.r..nB.C]..A.......P]..f@y4.;..(....C\.%0...i...p!...(S..M.....Wp.gM..RK...0.Ak..zE...`.+ix.;.E......+..G!.;..#F..P.7....:..vU>}.9...]..Z..6ei......:m.7~.....nNZ.C..Z7.b...J<...`&..)..nqB..%!....8......<.C.1.o.W.#....[J8n...x..C5...|..G....Y.0....J.s....B.g...O.`_...q8.Z8...t.R.&.6....L....`...A-X...=,.\...6^....-..S.W.5.G}...w.gu......E]..\...../..;...........#.....<..iV.....j..,.#..?%.j.v.,W...J.3.]..S...a.(c.$.Q..KJ{m..>. .

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\installerHeaderico.ico

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):20849
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.953304769058022
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:384:/9lGofD8RxJPfpRgSu4coDd17fK5jYEx9M3k+2JSuj:VZf+pmS/dDd+8EPMUdSuj
                                                                                                                                                                                                                                                                                      MD5:0E8D6A0503159E79700DCA57869BB657
                                                                                                                                                                                                                                                                                      SHA1:22FA8FF5ABF0446E4332E01385B3DC447F43FB24
                                                                                                                                                                                                                                                                                      SHA-256:6B69FA073C3E7FDBCB22C727E6935453A0AA3407E302C2D917F9A8666B8ABD1A
                                                                                                                                                                                                                                                                                      SHA-512:AF9AB898AA4D0B2FD8AF0C1E845DE1DA3D07ACAE621542ABC7B9429B75799FDE9368F61B8141CEBFD0F5BDFD46C16C4369FB7298AD00BC9B64046B1D596D23C6
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:............ .[Q.......PNG........IHDR.............\r.f....orNT..w...Q.IDATx..}.x......{.~.~....zQ!.3.5..R..H(!..R.w..*..4..{...E..HG...w...wfB....&y..g.Mvfv.=.S.S..N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q.....6CH.. .6.Eo...................)0T`.....{.S!..V.)........!.......\...(..k[......m.o-....<.L.h..W3...@..I.?j2..w~...0.*%.L....8q*.... ...4.f.8...?...d'..,.P.y...."..|..3.._!.....O.?#.W.g.=..w._#.C..|..c.#...!.E.\.9.......X1....Q..B#b....I.$.j....U.....L....Y..B.....8.'._*......P.B.@..i.....A.....K.N....d....'.5.`....&2.%.P.>.....C^.|J..?...{. ..|.y3.h.z...B.`...0.........Av.jD....ZQ".._E.wC^.h./K.....z\B.<.-.,t_.0..G.Z;.C..R%n.p*cdD.8.,k<...O..@....T..._...)CB..._8.<S...2..?...(.....RK!!6...G4..l.[.62....NU..C. ._..+c.."......X.i....0)...@la...B.......A..n.-...3....m... ......K.H..$CdV..&e8..|.......`.J.......+..-SP.b.%......A|......|\...XM.._e.}!.e%j....kA.O..z-!..xh0w-..|.:.............{q....

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Local\Temp\nsr97EA.tmp\nsis7z.dll

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):434176
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.584811966667578
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
                                                                                                                                                                                                                                                                                      MD5:80E44CE4895304C6A3A831310FBF8CD0
                                                                                                                                                                                                                                                                                      SHA1:36BD49AE21C460BE5753A904B4501F1ABCA53508
                                                                                                                                                                                                                                                                                      SHA-256:B393F05E8FF919EF071181050E1873C9A776E1A0AE8329AEFFF7007D0CADF592
                                                                                                                                                                                                                                                                                      SHA-512:C8BA7B1F9113EAD23E993E74A48C4427AE3562C1F6D9910B2BBE6806C9107CF7D94BC7D204613E4743D0CD869E00DAFD4FB54AAD1E8ADB69C553F3B9E5BC64DF
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L.6a..X2..X2..X2m.[3..X2m.]3..X2Z.]3+.X2Z.\3..X2Z.[3..X2m.\3..X2m.Y3..X2..Y2..X2..\3#.X2..]3..X2..X3..X2...2..X2...2..X2..Z3..X2Rich..X2........PE..L.....\...........!......................... ...............................@............@..........................6.......7..d................................E.....................................@............ ...............................text............................... ..`.rdata..8"... ...$..................@..@.data........P... ...6..............@....rsrc................V..............@..@.reloc...E.......F...Z..............@..B........................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):163343360
                                                                                                                                                                                                                                                                                      Entropy (8bit):6.732960636432368
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:1572864:VOehMi9HmQapOF/wcuOG/KTlWoqYtUMogmhQXoqAfIgrWAdBb9pTHPe3HdYYGQc1:4ZK9PUddCvs
                                                                                                                                                                                                                                                                                      MD5:4AD8066DFB8E65195E5733DDFD8A1AC7
                                                                                                                                                                                                                                                                                      SHA1:8225752BBC6C6720F92B8890117A76576AB5D951
                                                                                                                                                                                                                                                                                      SHA-256:BB3651F02D8CDBC962EC910EC5E6DE3BAD9DD94CBB811DA098116E19C4BE7C0F
                                                                                                                                                                                                                                                                                      SHA-512:BA5951A9455A06060AA349F66D2AF97227E5617B2D6867CA3AB0AA1082D3528D0AE43481F0C8FFD489A84B748CCCC88FE5AAD805F753E339B691F836B2905C5D
                                                                                                                                                                                                                                                                                      Malicious:true
                                                                                                                                                                                                                                                                                      Antivirus:
                                                                                                                                                                                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                      Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...l.Ke.........."..........f.......j%........@..........................................`..........................................[..'...^.h................'A..............L..p.Q.....................PzQ.(... ...@.............^.`....@[......................text............................... ..`.rdata....n.......n.................@..@.data.....C...b.......b.............@....pdata...'A......(A...j.............@..@.00cfg..0..........................@..@.gxfg...pA.......B.................@..@.retplne..... ...........................rodata......0....... .............. ..`.tls.........P.......2..............@...CPADinfo8....`.......8..............@...LZMADEC......p.......:.............. ..`_RDATA..\............L..............@..@malloc_h.............N.............. ..`.rsrc................P..............@..@.reloc...L.......N..................@..B................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:data
                                                                                                                                                                                                                                                                                      Category:dropped
                                                                                                                                                                                                                                                                                      Size (bytes):32768
                                                                                                                                                                                                                                                                                      Entropy (8bit):0.017262956703125623
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:
                                                                                                                                                                                                                                                                                      MD5:B7C14EC6110FA820CA6B65F5AEC85911
                                                                                                                                                                                                                                                                                      SHA1:608EEB7488042453C9CA40F7E1398FC1A270F3F4
                                                                                                                                                                                                                                                                                      SHA-256:FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
                                                                                                                                                                                                                                                                                      SHA-512:D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                      C:\Users\user\AppData\Roaming\WolferVPN\70a796c8-78d6-49f5-8289-083fe8def8a7.tmp

                                                                                                                                                                                                                                                                                      Download File
                                                                                                                                                                                                                                                                                      Process:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      File Type:JSON data
                                                                                                                                                                                                                                                                                      Category:modified
                                                                                                                                                                                                                                                                                      Size (bytes):413
                                                                                                                                                                                                                                                                                      Entropy (8bit):5.622417211407826
                                                                                                                                                                                                                                                                                      Encrypted:false
                                                                                                                                                                                                                                                                                      SSDEEP:
                                                                                                                                                                                                                                                                                      MD5:2B7F19F2FC201FE27C212FD1632F5DDA
                                                                                                                                                                                                                                                                                      SHA1:88D959B59438F87DCCE44257EF05F9F38FF4C407
                                                                                                                                                                                                                                                                                      SHA-256:CEF41FE2D16205892A1DF22A2C88832466ED75A076638D012BD29A5959E5E820
                                                                                                                                                                                                                                                                                      SHA-512:26F89D0351A7E37A1530056FFE60909A3384B5F3968DF3D5CFB7AEB6D72179DDE3479F69A3C2C82532CD3FF92994DF2B31B9F020ECED448C1EA796058FE93296
                                                                                                                                                                                                                                                                                      Malicious:false
                                                                                                                                                                                                                                                                                      Preview:{"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABSjLU7zYUkRIPDR3IKCUEYEAAAABIAAABDAGgAcgBvAG0AaQB1AG0AAAAQZgAAAAEAACAAAAAeMaPdqvU3Xbi0T02ZH5wtD6AJW8AlOVF7SGt257dJiAAAAAAOgAAAAAIAACAAAACrL85c9u6IBijPt91xlpUc9rxSaZ6fliLLRvB9E3wFYTAAAACALkhxWEeKdqOMLlkOrfGrQrslxxZx8G5wcvHtbGo2wEGeS1HHQN+nCHXfGbnY7TdAAAAAkxRJQLgHWJXOsC1ikz3GGcODiAJQkgw7OiQcZmYu6NaIuMFYO+KW4VjEkWZcTkFNCwB7H51Z8RKSyYH/uoRqlQ=="}}

                                                                                                                                                                                                                                                                                      Static File Info

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      File type:PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
                                                                                                                                                                                                                                                                                      Entropy (8bit):7.999984252619177
                                                                                                                                                                                                                                                                                      TrID:
                                                                                                                                                                                                                                                                                      • Win32 Executable (generic) a (10002005/4) 99.96%
                                                                                                                                                                                                                                                                                      • Generic Win/DOS Executable (2004/3) 0.02%
                                                                                                                                                                                                                                                                                      • DOS Executable Generic (2002/1) 0.02%
                                                                                                                                                                                                                                                                                      • Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
                                                                                                                                                                                                                                                                                      File name:WolferVPN.exe
                                                                                                                                                                                                                                                                                      File size:74'280'552 bytes
                                                                                                                                                                                                                                                                                      MD5:6434ceafa88a3afa1f8351bc6890b2a5
                                                                                                                                                                                                                                                                                      SHA1:700b43db6881bc83c6d7acb0d020283dca4fa7ba
                                                                                                                                                                                                                                                                                      SHA256:db230e271893be37515e7bf1403352d99a5f8ac441c2df589551ee399dea7315
                                                                                                                                                                                                                                                                                      SHA512:d61648811d069b6b973c234b391704ac6bc714d808f48afff5a5c39705b320cb0cc8091e6c54d18368a8b0a4187fbb0f2444f99262121145d80281bf28b9ef6a
                                                                                                                                                                                                                                                                                      SSDEEP:1572864:5MpHvAncNj5mA99v/X6s/WXct35tOfMIGKID0aJvi67YoKEiakmB25:5+GcNF99Jys/WXOJtOfMIGKIwsUAhy
                                                                                                                                                                                                                                                                                      TLSH:15F73309C7C66311FB848BB9A59A7317D589F238EF8022643075831E3876FEFAD69507
                                                                                                                                                                                                                                                                                      File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf.*_9..Pf..Pg.LPf.*_;..Pf..sV..Pf..V`..Pf.Rich.Pf.........................PE..L......\.................h...8...@.

                                                                                                                                                                                                                                                                                      File Icon

                                                                                                                                                                                                                                                                                      Icon Hash:1739cd9f92613386

                                                                                                                                                                                                                                                                                      Static PE Info

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Entrypoint:0x40338f
                                                                                                                                                                                                                                                                                      Entrypoint Section:.text
                                                                                                                                                                                                                                                                                      Digitally signed:false
                                                                                                                                                                                                                                                                                      Imagebase:0x400000
                                                                                                                                                                                                                                                                                      Subsystem:windows gui
                                                                                                                                                                                                                                                                                      Image File Characteristics:RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
                                                                                                                                                                                                                                                                                      DLL Characteristics:DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
                                                                                                                                                                                                                                                                                      Time Stamp:0x5C157F86 [Sat Dec 15 22:26:14 2018 UTC]
                                                                                                                                                                                                                                                                                      TLS Callbacks:
                                                                                                                                                                                                                                                                                      CLR (.Net) Version:
                                                                                                                                                                                                                                                                                      OS Version Major:4
                                                                                                                                                                                                                                                                                      OS Version Minor:0
                                                                                                                                                                                                                                                                                      File Version Major:4
                                                                                                                                                                                                                                                                                      File Version Minor:0
                                                                                                                                                                                                                                                                                      Subsystem Version Major:4
                                                                                                                                                                                                                                                                                      Subsystem Version Minor:0
                                                                                                                                                                                                                                                                                      Import Hash:b34f154ec913d2d2c435cbd644e91687

                                                                                                                                                                                                                                                                                      Entrypoint Preview

                                                                                                                                                                                                                                                                                      Instruction
                                                                                                                                                                                                                                                                                      sub esp, 000002D4h
                                                                                                                                                                                                                                                                                      push ebx
                                                                                                                                                                                                                                                                                      push esi
                                                                                                                                                                                                                                                                                      push edi
                                                                                                                                                                                                                                                                                      push 00000020h
                                                                                                                                                                                                                                                                                      pop edi
                                                                                                                                                                                                                                                                                      xor ebx, ebx
                                                                                                                                                                                                                                                                                      push 00008001h
                                                                                                                                                                                                                                                                                      mov dword ptr [esp+14h], ebx
                                                                                                                                                                                                                                                                                      mov dword ptr [esp+10h], 0040A2E0h
                                                                                                                                                                                                                                                                                      mov dword ptr [esp+1Ch], ebx
                                                                                                                                                                                                                                                                                      call dword ptr [004080A8h]
                                                                                                                                                                                                                                                                                      call dword ptr [004080A4h]
                                                                                                                                                                                                                                                                                      and eax, BFFFFFFFh
                                                                                                                                                                                                                                                                                      cmp ax, 00000006h
                                                                                                                                                                                                                                                                                      mov dword ptr [0047AEECh], eax
                                                                                                                                                                                                                                                                                      je 00007F75F87CE5D3h
                                                                                                                                                                                                                                                                                      push ebx
                                                                                                                                                                                                                                                                                      call 00007F75F87D1885h
                                                                                                                                                                                                                                                                                      cmp eax, ebx
                                                                                                                                                                                                                                                                                      je 00007F75F87CE5C9h
                                                                                                                                                                                                                                                                                      push 00000C00h
                                                                                                                                                                                                                                                                                      call eax
                                                                                                                                                                                                                                                                                      mov esi, 004082B0h
                                                                                                                                                                                                                                                                                      push esi
                                                                                                                                                                                                                                                                                      call 00007F75F87D17FFh
                                                                                                                                                                                                                                                                                      push esi
                                                                                                                                                                                                                                                                                      call dword ptr [00408150h]
                                                                                                                                                                                                                                                                                      lea esi, dword ptr [esi+eax+01h]
                                                                                                                                                                                                                                                                                      cmp byte ptr [esi], 00000000h
                                                                                                                                                                                                                                                                                      jne 00007F75F87CE5ACh
                                                                                                                                                                                                                                                                                      push 0000000Ah
                                                                                                                                                                                                                                                                                      call 00007F75F87D1858h
                                                                                                                                                                                                                                                                                      push 00000008h
                                                                                                                                                                                                                                                                                      call 00007F75F87D1851h
                                                                                                                                                                                                                                                                                      push 00000006h
                                                                                                                                                                                                                                                                                      mov dword ptr [0047AEE4h], eax
                                                                                                                                                                                                                                                                                      call 00007F75F87D1845h
                                                                                                                                                                                                                                                                                      cmp eax, ebx
                                                                                                                                                                                                                                                                                      je 00007F75F87CE5D1h
                                                                                                                                                                                                                                                                                      push 0000001Eh
                                                                                                                                                                                                                                                                                      call eax
                                                                                                                                                                                                                                                                                      test eax, eax
                                                                                                                                                                                                                                                                                      je 00007F75F87CE5C9h
                                                                                                                                                                                                                                                                                      or byte ptr [0047AEEFh], 00000040h
                                                                                                                                                                                                                                                                                      push ebp
                                                                                                                                                                                                                                                                                      call dword ptr [00408044h]
                                                                                                                                                                                                                                                                                      push ebx
                                                                                                                                                                                                                                                                                      call dword ptr [004082A0h]
                                                                                                                                                                                                                                                                                      mov dword ptr [0047AFB8h], eax
                                                                                                                                                                                                                                                                                      push ebx
                                                                                                                                                                                                                                                                                      lea eax, dword ptr [esp+34h]
                                                                                                                                                                                                                                                                                      push 000002B4h
                                                                                                                                                                                                                                                                                      push eax
                                                                                                                                                                                                                                                                                      push ebx
                                                                                                                                                                                                                                                                                      push 00440208h
                                                                                                                                                                                                                                                                                      call dword ptr [00408188h]
                                                                                                                                                                                                                                                                                      push 0040A2C8h

                                                                                                                                                                                                                                                                                      Rich Headers

                                                                                                                                                                                                                                                                                      Programming Language:
                                                                                                                                                                                                                                                                                      • [EXP] VC++ 6.0 SP5 build 8804

                                                                                                                                                                                                                                                                                      Data Directories

                                                                                                                                                                                                                                                                                      NameVirtual AddressVirtual Size Is in Section
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_IMPORT0x86100xa0.rdata
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_RESOURCE0x19f0000x7330.rsrc
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_SECURITY0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_BASERELOC0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_DEBUG0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_TLS0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_IAT0x80000x2b0.rdata
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x00x0
                                                                                                                                                                                                                                                                                      IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

                                                                                                                                                                                                                                                                                      Sections

                                                                                                                                                                                                                                                                                      NameVirtual AddressVirtual SizeRaw SizeXored PEZLIB ComplexityFile TypeEntropyCharacteristics
                                                                                                                                                                                                                                                                                      .text0x10000x66270x6800False0.6646259014423077data6.450282348506287IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
                                                                                                                                                                                                                                                                                      .rdata0x80000x14a20x1600False0.4405184659090909data5.025178929113415IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                                                                                                                                                                                                                                      .data0xa0000x70ff80x600False0.5182291666666666data4.037117731448378IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                                                      .ndata0x7b0000x1240000x0False0empty0.0IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                                                      .rsrc0x19f0000x73300x7400False0.7661974676724138data7.150293516996489IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

                                                                                                                                                                                                                                                                                      Resources

                                                                                                                                                                                                                                                                                      NameRVASizeTypeLanguageCountryZLIB Complexity
                                                                                                                                                                                                                                                                                      RT_ICON0x19f4a80x515bPNG image data, 256 x 256, 8-bit/color RGBA, non-interlacedEnglishUnited States0.9935180294809622
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a46080x202dataEnglishUnited States0.4085603112840467
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a48100xf8dataEnglishUnited States0.6290322580645161
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a49080xeedataEnglishUnited States0.6260504201680672
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a49f80x1fadataEnglishUnited States0.40118577075098816
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a4bf80xf0dataEnglishUnited States0.6666666666666666
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a4ce80xe6dataEnglishUnited States0.6565217391304348
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a4dd00x1eedataEnglishUnited States0.38866396761133604
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a4fc00xe4dataEnglishUnited States0.6447368421052632
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a50a80xdadataEnglishUnited States0.6422018348623854
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a51880x1eedataEnglishUnited States0.3866396761133603
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a53780xe4dataEnglishUnited States0.6359649122807017
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a54600xdadataEnglishUnited States0.6376146788990825
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a55400x1f2dataEnglishUnited States0.39759036144578314
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a57380xe8dataEnglishUnited States0.6508620689655172
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a58200xdedataEnglishUnited States0.6486486486486487
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a59000x202dataEnglishUnited States0.42217898832684825
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a5b080xf8dataEnglishUnited States0.6653225806451613
                                                                                                                                                                                                                                                                                      RT_DIALOG0x1a5c000xeedataEnglishUnited States0.6512605042016807
                                                                                                                                                                                                                                                                                      RT_GROUP_ICON0x1a5cf00x14dataEnglishUnited States1.05
                                                                                                                                                                                                                                                                                      RT_VERSION0x1a5d080x1fcdataEnglishUnited States0.5039370078740157
                                                                                                                                                                                                                                                                                      RT_MANIFEST0x1a5f080x423XML 1.0 document, ASCII text, with very long lines (1059), with no line terminatorsEnglishUnited States0.5127478753541076

                                                                                                                                                                                                                                                                                      Imports

                                                                                                                                                                                                                                                                                      DLLImport
                                                                                                                                                                                                                                                                                      KERNEL32.dllSetEnvironmentVariableW, SetFileAttributesW, Sleep, GetTickCount, GetFileSize, GetModuleFileNameW, GetCurrentProcess, CopyFileW, SetCurrentDirectoryW, GetFileAttributesW, GetWindowsDirectoryW, GetTempPathW, GetCommandLineW, GetVersion, SetErrorMode, lstrlenW, lstrcpynW, GetDiskFreeSpaceW, ExitProcess, GetShortPathNameW, CreateThread, GetLastError, CreateDirectoryW, CreateProcessW, RemoveDirectoryW, lstrcmpiA, CreateFileW, GetTempFileNameW, WriteFile, lstrcpyA, MoveFileExW, lstrcatW, GetSystemDirectoryW, GetProcAddress, GetModuleHandleA, GetExitCodeProcess, WaitForSingleObject, lstrcmpiW, MoveFileW, GetFullPathNameW, SetFileTime, SearchPathW, CompareFileTime, lstrcmpW, CloseHandle, ExpandEnvironmentStringsW, GlobalFree, GlobalLock, GlobalUnlock, GlobalAlloc, FindFirstFileW, FindNextFileW, DeleteFileW, SetFilePointer, ReadFile, FindClose, lstrlenA, MulDiv, MultiByteToWideChar, WideCharToMultiByte, GetPrivateProfileStringW, WritePrivateProfileStringW, FreeLibrary, LoadLibraryExW, GetModuleHandleW
                                                                                                                                                                                                                                                                                      USER32.dllGetSystemMenu, SetClassLongW, EnableMenuItem, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongW, SetCursor, LoadCursorW, CheckDlgButton, GetMessagePos, LoadBitmapW, CallWindowProcW, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, OpenClipboard, ScreenToClient, GetWindowRect, GetDlgItem, GetSystemMetrics, SetDlgItemTextW, GetDlgItemTextW, MessageBoxIndirectW, CharPrevW, CharNextA, wsprintfA, DispatchMessageW, PeekMessageW, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, GetClientRect, FillRect, DrawTextW, EndDialog, RegisterClassW, SystemParametersInfoW, CreateWindowExW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, GetDC, SetTimer, SetWindowTextW, LoadImageW, SetForegroundWindow, ShowWindow, IsWindow, SetWindowLongW, FindWindowExW, TrackPopupMenu, AppendMenuW, CreatePopupMenu, EndPaint, CreateDialogParamW, SendMessageTimeoutW, wsprintfW, PostQuitMessage
                                                                                                                                                                                                                                                                                      GDI32.dllSelectObject, SetBkMode, CreateFontIndirectW, SetTextColor, DeleteObject, GetDeviceCaps, CreateBrushIndirect, SetBkColor
                                                                                                                                                                                                                                                                                      SHELL32.dllSHGetSpecialFolderLocation, ShellExecuteExW, SHGetPathFromIDListW, SHBrowseForFolderW, SHGetFileInfoW, SHFileOperationW
                                                                                                                                                                                                                                                                                      ADVAPI32.dllAdjustTokenPrivileges, RegCreateKeyExW, RegOpenKeyExW, SetFileSecurityW, OpenProcessToken, LookupPrivilegeValueW, RegEnumValueW, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegSetValueExW, RegQueryValueExW, RegEnumKeyW
                                                                                                                                                                                                                                                                                      COMCTL32.dllImageList_Create, ImageList_AddMasked, ImageList_Destroy
                                                                                                                                                                                                                                                                                      ole32.dllOleUninitialize, OleInitialize, CoTaskMemFree, CoCreateInstance

                                                                                                                                                                                                                                                                                      Possible Origin

                                                                                                                                                                                                                                                                                      Language of compilation systemCountry where language is spokenMap
                                                                                                                                                                                                                                                                                      EnglishUnited States

                                                                                                                                                                                                                                                                                      Network Behavior

                                                                                                                                                                                                                                                                                      Network Port Distribution

                                                                                                                                                                                                                                                                                      TCP Packets

                                                                                                                                                                                                                                                                                      TimestampSource PortDest PortSource IPDest IP
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.173693895 CET49720443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.173713923 CET44349720172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.173815012 CET49720443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.176538944 CET49721443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.176570892 CET44349721172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.176649094 CET49721443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.177963018 CET49722443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.177983046 CET44349722172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.178050041 CET49722443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.178590059 CET49723443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.178616047 CET44349723172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.178699970 CET49723443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.179224968 CET49724443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.179260969 CET44349724172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.179303885 CET49724443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.180560112 CET49725443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.180591106 CET44349725172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.180639029 CET49725443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.181195974 CET49726443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.181222916 CET44349726172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.181269884 CET49726443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.194216013 CET49720443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.194226027 CET44349720172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.200684071 CET49721443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.200699091 CET44349721172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.202045918 CET49722443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.202065945 CET44349722172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.204683065 CET49723443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.204701900 CET44349723172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.207865000 CET49724443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.207885981 CET44349724172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.211738110 CET49725443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.211766958 CET44349725172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.214864016 CET49726443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.214896917 CET44349726172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.472959995 CET44349722172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.473614931 CET49722443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.473637104 CET44349722172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.475410938 CET44349722172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.475508928 CET49722443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.478540897 CET44349725172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.478873014 CET49722443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.478928089 CET44349722172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.479074955 CET44349722172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.479146957 CET49722443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.479146957 CET49722443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.481540918 CET49725443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.481556892 CET44349725172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.482613087 CET44349725172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.482685089 CET49725443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.483414888 CET49725443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.483453989 CET44349725172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.483572006 CET44349725172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.483644962 CET49725443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.483663082 CET49725443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.520314932 CET44349720172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.521063089 CET44349721172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.521461964 CET49720443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.521471977 CET44349720172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.521665096 CET49721443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.521682024 CET44349721172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.522852898 CET44349720172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.522921085 CET49720443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.523288012 CET44349721172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.523355961 CET49721443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.523961067 CET49720443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.523997068 CET44349720172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.524064064 CET49720443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.528177977 CET49721443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.528223038 CET44349721172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.528287888 CET49721443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.531627893 CET44349723172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.531639099 CET44349724172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.532636881 CET44349726172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.553942919 CET49724443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.553953886 CET44349724172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.554162025 CET49723443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.554177999 CET44349723172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.554372072 CET49726443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.554394007 CET44349726172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.555140018 CET44349724172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.555207968 CET49724443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.555357933 CET44349723172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.555412054 CET49723443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.555481911 CET44349726172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.555536985 CET49726443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.573386908 CET49723443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.573457003 CET44349723172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.573545933 CET49723443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.574502945 CET49726443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.574565887 CET44349726172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:02.574623108 CET49726443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.689687967 CET49728443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.689718962 CET44349728172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.689780951 CET49728443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.690819979 CET49724443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.690934896 CET44349724172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.691005945 CET49724443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.692272902 CET49728443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.692285061 CET44349728172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.959475040 CET44349728172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.973095894 CET49728443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.973107100 CET44349728172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.974200010 CET44349728172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.974328995 CET49728443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.975502968 CET49728443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.975538969 CET44349728172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:03.975605965 CET49728443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:04.999169111 CET49729443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:04.999181032 CET44349729172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:04.999290943 CET49729443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:04.999816895 CET49730443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:04.999825001 CET44349730172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.000001907 CET49730443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.000555038 CET49731443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.000564098 CET44349731172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.000658035 CET49731443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.001446962 CET49732443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.001466990 CET44349732172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.001683950 CET49732443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.002022982 CET49733443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.002031088 CET44349733172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.002177954 CET49733443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.002820969 CET49729443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.002834082 CET44349729172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.003618002 CET49730443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.003629923 CET44349730172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.004086971 CET49731443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.004097939 CET44349731172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.004769087 CET49734443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.004777908 CET44349734172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.004930973 CET49734443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.005390882 CET49735443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.005399942 CET44349735172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.005530119 CET49735443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.005867958 CET49732443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.005901098 CET44349732172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.006956100 CET49733443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.006968975 CET44349733172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.007555008 CET49734443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.007570028 CET44349734172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.007900000 CET49735443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.007910967 CET44349735172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.039216995 CET49736443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.039228916 CET44349736172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.039324999 CET49736443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.040411949 CET49736443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.040425062 CET44349736172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.041021109 CET49737443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.041032076 CET44349737172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.041102886 CET49737443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.041692019 CET49738443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.041702032 CET44349738172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.041766882 CET49738443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.042182922 CET49739443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.042200089 CET44349739172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.042350054 CET49739443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.042723894 CET49740443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.042732000 CET44349740172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.042850971 CET49740443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.043283939 CET49737443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.043302059 CET44349737172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.043773890 CET49738443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.043785095 CET44349738172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.044217110 CET49739443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.044234991 CET44349739172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.044696093 CET49740443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.044707060 CET44349740172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.084500074 CET49741443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.084512949 CET44349741172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.084602118 CET49741443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.085001945 CET49742443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.085011959 CET44349742172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.085083961 CET49742443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.085473061 CET49743443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.085485935 CET44349743172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.085556030 CET49743443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.091461897 CET49741443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.091479063 CET44349741172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.092587948 CET49742443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.092600107 CET44349742172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.093614101 CET49743443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.093628883 CET44349743172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.094289064 CET49744443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.094306946 CET44349744172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.094461918 CET49744443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.094780922 CET49745443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.094789982 CET44349745172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.094919920 CET49745443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.099756002 CET49744443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.099770069 CET44349744172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.100291967 CET49745443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.100308895 CET44349745172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.275069952 CET44349729172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.275696993 CET49729443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.275706053 CET44349729172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.277101040 CET44349729172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.277265072 CET49729443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.279478073 CET49729443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.279517889 CET44349729172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.279654026 CET44349729172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.279723883 CET49729443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.279757977 CET49729443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.285032988 CET44349735172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.285689116 CET49735443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.285701036 CET44349735172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.286787033 CET44349735172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.286853075 CET49735443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.287786961 CET49735443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.287832975 CET44349735172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.287916899 CET49735443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.291115999 CET44349732172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.291702032 CET49732443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.291712046 CET44349732172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.292504072 CET44349731172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.292948961 CET49731443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.292963982 CET44349731172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.293433905 CET44349732172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.293490887 CET49732443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.294106007 CET44349731172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.294173956 CET49731443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.294287920 CET49732443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.294325113 CET44349732172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.294377089 CET49732443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.295780897 CET49731443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.295839071 CET44349731172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.295886040 CET49731443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.299398899 CET44349730172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.299820900 CET49730443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.299830914 CET44349730172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.300688028 CET44349730172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.300753117 CET49730443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.301645041 CET49730443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.301667929 CET44349730172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.301774025 CET44349730172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.301826954 CET49730443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.301841021 CET49730443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.310888052 CET44349734172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.311289072 CET49734443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.311297894 CET44349734172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.312855959 CET44349734172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.312975883 CET49734443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.313679934 CET49734443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.313785076 CET44349734172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.313836098 CET49734443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.316210985 CET44349733172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.317848921 CET49733443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.317861080 CET44349733172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.319664001 CET44349733172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.319665909 CET44349736172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.319778919 CET49733443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.319967031 CET49736443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.319984913 CET44349736172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.320560932 CET49733443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.320591927 CET44349733172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.320651054 CET49733443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.321037054 CET44349736172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.321120024 CET49736443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.321736097 CET49736443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.321783066 CET44349736172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.321830988 CET49736443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.393778086 CET44349740172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.394368887 CET49740443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.394392014 CET44349740172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.396238089 CET44349740172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.396331072 CET49740443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.397167921 CET49740443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.397208929 CET44349740172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.397423983 CET44349740172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.397486925 CET49740443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.397504091 CET49740443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.417200089 CET44349737172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.417784929 CET49737443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.417803049 CET44349737172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.419392109 CET44349737172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.419478893 CET49737443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.420268059 CET49737443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.420305967 CET44349737172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.420378923 CET49737443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.425738096 CET44349745172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.426115990 CET49745443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.426130056 CET44349745172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.427639961 CET44349745172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.427716017 CET49745443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.428240061 CET44349739172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.428494930 CET49745443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.428527117 CET44349745172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.428590059 CET49745443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.429210901 CET49739443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.429220915 CET44349739172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.429733992 CET44349738172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.430038929 CET49738443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.430047989 CET44349738172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.430676937 CET44349739172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.430753946 CET49739443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.431659937 CET49739443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.431669950 CET44349738172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.431696892 CET44349739172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.431741953 CET49738443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.431813955 CET49739443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.431819916 CET44349739172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.431879044 CET49739443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.432128906 CET44349741172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.432765007 CET49738443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.432797909 CET44349738172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.432914019 CET44349738172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.432970047 CET49738443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.433005095 CET49738443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.433342934 CET49741443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.433356047 CET44349741172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.434647083 CET44349741172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.434709072 CET49741443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.435323954 CET49741443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.435362101 CET44349741172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.435410976 CET49741443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.451813936 CET44349743172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.452399969 CET49743443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.452424049 CET44349743172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.454001904 CET44349743172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.454090118 CET49743443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.454808950 CET49743443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.454853058 CET44349743172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.454906940 CET49743443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.459558010 CET44349742172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.459877014 CET49742443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.459888935 CET44349742172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.459898949 CET44349744172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.460158110 CET49744443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.460172892 CET44349744172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.461025000 CET44349742172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.461091995 CET49742443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.461353064 CET44349744172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.461415052 CET49744443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.461689949 CET49742443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.461735964 CET44349742172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.461791992 CET49742443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.462781906 CET49744443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.462836027 CET44349744172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.462953091 CET44349744172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.463016987 CET49744443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:05.463032961 CET49744443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.288182974 CET49746443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.288214922 CET44349746172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.288288116 CET49746443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.288678885 CET49747443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.288707018 CET44349747172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.289443970 CET49746443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.289469004 CET44349746172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.289489985 CET49747443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290066004 CET49748443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290091038 CET44349748172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290162086 CET49748443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290468931 CET49749443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290555954 CET44349749172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290872097 CET49750443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290893078 CET44349750172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290893078 CET49749443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.290939093 CET49750443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.291301012 CET49748443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.291312933 CET44349748172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.291687012 CET49749443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.291747093 CET44349749172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.292043924 CET49750443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.292059898 CET44349750172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.292403936 CET49747443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.292414904 CET44349747172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.554836035 CET44349746172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.555313110 CET49746443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.555335999 CET44349746172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.556390047 CET44349746172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.556442022 CET49746443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.557286978 CET49746443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.557327986 CET44349746172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.557382107 CET49746443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.587007046 CET44349747172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.588722944 CET49747443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.588732958 CET44349747172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.589817047 CET44349747172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.589898109 CET49747443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.590595007 CET49747443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.590630054 CET44349747172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.590754032 CET44349747172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.590830088 CET49747443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.590857029 CET49747443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.607762098 CET44349748172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.609682083 CET49748443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.609694958 CET44349748172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.610982895 CET44349748172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.611044884 CET49748443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.611725092 CET49748443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.611771107 CET44349748172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.611892939 CET44349748172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.611944914 CET49748443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.613746881 CET49748443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.614166021 CET44349750172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.614305019 CET44349749172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.614475012 CET49750443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.614483118 CET44349750172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.614769936 CET49749443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.614784002 CET44349749172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.615554094 CET44349750172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.615619898 CET49750443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.615967989 CET44349749172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.616024017 CET49749443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.616302013 CET49750443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.616364956 CET44349750172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.616561890 CET44349750172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.616637945 CET49750443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.616694927 CET49750443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.617269993 CET49749443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.617305040 CET44349749172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:06.617355108 CET49749443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.811073065 CET49751443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.811120987 CET44349751172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.811270952 CET49751443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.812722921 CET49752443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.812745094 CET44349752172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.812798023 CET49752443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.819264889 CET49753443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.819307089 CET44349753172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.819402933 CET49753443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.820007086 CET49754443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.820039034 CET44349754172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.820106983 CET49754443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.820812941 CET49752443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.820831060 CET44349752172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.821260929 CET49751443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.821274042 CET44349751172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.825365067 CET49753443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.825397968 CET44349753172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.825822115 CET49754443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.825846910 CET44349754172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.828643084 CET49755443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.828680992 CET44349755172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.828749895 CET49755443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.829344034 CET49756443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.829370022 CET44349756172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.830163956 CET49756443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.832279921 CET49757443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.832305908 CET44349757172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.832432032 CET49757443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.833158970 CET49758443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.833224058 CET44349758172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.833292007 CET49758443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.833678007 CET49755443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.833694935 CET44349755172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.835361958 CET49759443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.835388899 CET44349759172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.835453033 CET49759443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.836385965 CET49760443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.836406946 CET44349760172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.837580919 CET49761443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.837608099 CET49760443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.837615013 CET44349761172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.837660074 CET49761443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.838620901 CET49762443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.838640928 CET44349762172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.839047909 CET49763443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.839063883 CET44349763172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.839071035 CET49762443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.839109898 CET49763443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.839468956 CET49756443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.839479923 CET44349756172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.839854956 CET49757443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.839870930 CET44349757172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.840162992 CET49758443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.840179920 CET44349758172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.840601921 CET49759443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.840616941 CET44349759172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.841108084 CET49764443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.841129065 CET44349764172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.841200113 CET49764443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.841602087 CET49765443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.841624975 CET44349765172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842052937 CET49766443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842073917 CET44349766172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842097998 CET49765443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842123032 CET49766443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842556953 CET49767443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842569113 CET44349767172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842921019 CET49768443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842933893 CET44349768172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.842979908 CET49768443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.843005896 CET49767443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.843632936 CET49769443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.843648911 CET44349769172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.843830109 CET49769443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.844348907 CET49770443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.844373941 CET44349770172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.844423056 CET49770443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.844824076 CET49771443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.844837904 CET44349771172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.845244884 CET49771443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.845249891 CET49772443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.845257044 CET44349772172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.845537901 CET49760443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.845549107 CET44349760172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.845563889 CET49772443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.845882893 CET49761443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.845911026 CET44349761172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.846180916 CET49762443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.846204042 CET44349762172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.846487999 CET49763443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.846503019 CET44349763172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.847162962 CET49764443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.847177029 CET44349764172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.847676992 CET49765443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.847688913 CET44349765172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.848104000 CET49766443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.848120928 CET44349766172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.848468065 CET49767443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.848480940 CET44349767172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.848792076 CET49768443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.848803997 CET44349768172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.849123955 CET49769443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.849140882 CET44349769172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.849425077 CET49770443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.849447966 CET44349770172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.849735975 CET49771443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.849766016 CET44349771172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.850064993 CET49772443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.850078106 CET44349772172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.911417961 CET49773443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.911448002 CET44349773172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.911525011 CET49773443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.912225008 CET49774443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.912257910 CET44349774172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.912355900 CET49774443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.912708998 CET49775443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.912729979 CET44349775172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.912858963 CET49775443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.914100885 CET49773443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.914112091 CET44349773172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.914783955 CET49774443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.914800882 CET44349774172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.915222883 CET49775443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.915235043 CET44349775172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.915817022 CET49776443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.915832043 CET44349776172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.915898085 CET49776443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.917355061 CET49777443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.917372942 CET44349777172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.917423964 CET49777443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.917804003 CET49776443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.917817116 CET44349776172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.918220997 CET49777443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.918229103 CET44349777172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.925996065 CET49778443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.926017046 CET44349778172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.926093102 CET49778443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.926424980 CET49779443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.926440954 CET44349779172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.926486015 CET49779443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.926928997 CET49780443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.926959991 CET44349780172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.927012920 CET49780443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.927345037 CET49781443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.927362919 CET44349781172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.927412033 CET49781443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.927902937 CET49778443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.927923918 CET44349778172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.928349972 CET49779443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.928363085 CET44349779172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.928710938 CET49780443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.928729057 CET44349780172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.929116964 CET49781443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.929128885 CET44349781172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.933363914 CET49782443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.933377028 CET44349782172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.933471918 CET49782443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.934103012 CET49783443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.934125900 CET44349783172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.934179068 CET49783443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.934711933 CET49784443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.934726000 CET44349784172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.934782028 CET49784443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.935199976 CET49785443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.935210943 CET44349785172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.935257912 CET49785443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.945842981 CET49782443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.945857048 CET44349782172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.947669983 CET49783443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.947683096 CET44349783172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.948009968 CET49784443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.948023081 CET44349784172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.948441982 CET49785443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.948458910 CET44349785172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.950109959 CET49786443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.950139046 CET44349786172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.950238943 CET49786443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.950952053 CET49787443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.950982094 CET44349787172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.951034069 CET49787443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.951622963 CET49788443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.951632023 CET44349788172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.951684952 CET49788443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.952048063 CET49789443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.952059031 CET44349789172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.952105999 CET49789443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.953109980 CET49790443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.953125000 CET44349790172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.953186035 CET49790443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.953697920 CET49791443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.953716993 CET44349791172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.953771114 CET49791443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.954163074 CET49792443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.954174995 CET44349792172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.954778910 CET49793443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.954787970 CET44349793172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.954807997 CET49792443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.954833984 CET49793443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.955472946 CET49794443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.955487013 CET44349794172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.956134081 CET49795443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.956155062 CET44349795172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.956165075 CET49794443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.956213951 CET49795443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.956610918 CET49796443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.956621885 CET44349796172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.957020044 CET49797443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.957027912 CET44349797172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.957048893 CET49796443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.957072973 CET49797443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.962598085 CET49786443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.962611914 CET44349786172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.963686943 CET49787443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.963700056 CET44349787172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.964051008 CET49788443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.964068890 CET44349788172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.964350939 CET49789443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.964361906 CET44349789172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.964721918 CET49790443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.964742899 CET44349790172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.965023041 CET49791443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.965039015 CET44349791172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.965328932 CET49792443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.965348005 CET44349792172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.965631962 CET49793443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.965643883 CET44349793172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.965970039 CET49794443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.965982914 CET44349794172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.966320992 CET49795443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.966339111 CET44349795172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.966579914 CET49796443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.966592073 CET44349796172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.966902971 CET49797443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.966917038 CET44349797172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.975270033 CET49798443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.975281954 CET44349798172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.975356102 CET49798443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.976074934 CET49799443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.976093054 CET44349799172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.976145029 CET49799443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.976818085 CET49800443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.976838112 CET44349800172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.976927042 CET49800443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.977291107 CET49801443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.977305889 CET44349801172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.977370977 CET49801443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.978538036 CET49798443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.978552103 CET44349798172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.978982925 CET49799443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.978995085 CET44349799172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.979602098 CET49800443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.979619026 CET44349800172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.980355978 CET49801443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.980366945 CET44349801172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.980899096 CET49802443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.980914116 CET44349802172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.980972052 CET49802443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.981308937 CET49803443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.981332064 CET44349803172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.981689930 CET49804443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.981698990 CET44349804172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.981712103 CET49803443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982122898 CET49805443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982137918 CET44349805172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982151031 CET49804443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982180119 CET49805443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982578039 CET49806443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982590914 CET44349806172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982970953 CET49807443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982985020 CET44349807172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.982995987 CET49806443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.983033895 CET49807443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.983397961 CET49802443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.983411074 CET44349802172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.983844995 CET49803443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.983855963 CET44349803172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.984364033 CET49804443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.984375000 CET44349804172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.984755993 CET49805443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.984772921 CET44349805172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.985150099 CET49806443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.985160112 CET44349806172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.986218929 CET49807443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.986233950 CET44349807172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.989773035 CET49808443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.989788055 CET44349808172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.989850998 CET49808443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.990351915 CET49809443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.990359068 CET44349809172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.990411043 CET49809443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.990835905 CET49808443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.990845919 CET44349808172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.991255045 CET49809443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.991265059 CET44349809172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.994756937 CET49810443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.994771957 CET44349810172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.994843006 CET49810443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.995388031 CET49811443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.995409012 CET44349811172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.995476961 CET49811443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.996062040 CET49811443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.996072054 CET44349811172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.996439934 CET49810443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.996453047 CET44349810172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.997020006 CET49812443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.997036934 CET44349812172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.997097969 CET49812443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.997602940 CET49812443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:07.997616053 CET44349812172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.285552025 CET44349759172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.286106110 CET49759443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.286120892 CET44349759172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.288367987 CET44349759172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.288489103 CET49759443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.289766073 CET49759443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.289803028 CET44349759172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.289899111 CET49759443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.309984922 CET44349774172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.311877966 CET49774443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.311892986 CET44349774172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.313291073 CET44349774172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.313385963 CET49774443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.314157963 CET49774443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.314193010 CET44349774172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.314235926 CET49774443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.314685106 CET44349782172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.315402985 CET49782443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.315412998 CET44349782172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.317153931 CET44349782172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.317250967 CET49782443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.317868948 CET49782443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.317924023 CET44349782172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.317987919 CET49782443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.323385954 CET44349770172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.323880911 CET49770443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.323928118 CET44349770172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.325613976 CET44349770172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.325669050 CET49770443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.326580048 CET49770443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.326652050 CET44349770172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.326711893 CET49770443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.333604097 CET44349775172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.334119081 CET49775443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.334130049 CET44349775172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.335915089 CET44349775172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.335994959 CET49775443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.336652994 CET49775443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.336685896 CET44349775172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.336755037 CET49775443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.336921930 CET44349758172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.337435961 CET49758443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.337455034 CET44349758172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.339529037 CET44349758172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.339602947 CET49758443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.340193987 CET49758443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.340240955 CET44349758172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.340296030 CET49758443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.366774082 CET44349780172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.367249012 CET49780443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.367274046 CET44349780172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.369211912 CET44349780172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.369317055 CET49780443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.370192051 CET49780443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.372323990 CET44349780172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.372387886 CET49780443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.373022079 CET44349795172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.373406887 CET49795443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.373415947 CET44349795172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.374113083 CET44349754172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.374636889 CET49754443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.374645948 CET44349754172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.374779940 CET44349795172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.374859095 CET49795443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.375850916 CET49795443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.375885963 CET44349795172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.375946999 CET49795443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.376429081 CET44349754172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.376497984 CET49754443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.377773046 CET49754443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.380749941 CET44349796172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.380805016 CET44349754172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.380876064 CET49754443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.381236076 CET49796443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.381251097 CET44349796172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.382601023 CET44349796172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.382695913 CET49796443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.383393049 CET49796443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.383446932 CET44349796172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.383522987 CET49796443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.407006025 CET44349752172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.407453060 CET49752443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.407463074 CET44349752172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.408427954 CET44349752172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.408510923 CET49752443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.410301924 CET49752443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.410334110 CET44349752172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.410382032 CET49752443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.430841923 CET44349802172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.431310892 CET49802443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.431320906 CET44349802172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.432332039 CET44349802172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.432485104 CET49802443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.433361053 CET49802443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.433401108 CET44349802172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.433465004 CET49802443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.460572004 CET44349797172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.463845015 CET49797443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.463860989 CET44349797172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.464946032 CET44349797172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.465015888 CET49797443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.465775013 CET49797443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.465811014 CET44349797172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.465960026 CET44349797172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.466012001 CET49797443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.466032028 CET49797443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.475203991 CET44349785172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.475886106 CET49785443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.475898981 CET44349785172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.476969957 CET44349785172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.477035999 CET49785443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.477752924 CET49785443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.477790117 CET44349785172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.477858067 CET49785443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.485665083 CET44349808172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.487941027 CET49808443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.487955093 CET44349808172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.488934040 CET44349808172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.489089966 CET49808443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.489670038 CET49808443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.489708900 CET44349808172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.489814043 CET44349808172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.489864111 CET49808443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.489885092 CET49808443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.496176958 CET44349794172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.499828100 CET49794443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.499838114 CET44349794172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.501132965 CET44349794172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.501219034 CET49794443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.501842022 CET49794443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.501893044 CET44349794172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.502006054 CET44349794172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.502067089 CET49794443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.502201080 CET44349783172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.502239943 CET49794443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.502465963 CET49783443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.502490044 CET44349783172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.503576040 CET44349783172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.503633976 CET49783443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.504319906 CET49783443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.504362106 CET44349783172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.504477024 CET44349783172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.504522085 CET49783443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.504540920 CET49783443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.509696960 CET44349788172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.511925936 CET49788443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.511943102 CET44349788172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.514322042 CET44349788172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.514400005 CET49788443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.515250921 CET44349786172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.515377998 CET49788443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.515420914 CET44349788172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.515463114 CET49788443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.516379118 CET49786443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.516387939 CET44349786172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.516947985 CET44349777172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.517445087 CET44349786172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.517515898 CET49786443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.517817020 CET49777443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.517824888 CET44349777172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.518399954 CET49786443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.518434048 CET44349786172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.518532991 CET44349786172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.518584013 CET49786443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.518635988 CET49786443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.518721104 CET44349777172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.518776894 CET49777443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.519491911 CET49777443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.519536972 CET44349777172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.519609928 CET49777443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.593226910 CET44349806172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.595931053 CET49806443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.595940113 CET44349806172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.598062992 CET44349806172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.598140001 CET49806443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.598990917 CET49806443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.599088907 CET44349806172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.599157095 CET49806443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.603734016 CET44349773172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.604279995 CET49773443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.604302883 CET44349773172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.606035948 CET44349773172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.606161118 CET49773443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.607222080 CET49773443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.607280970 CET44349773172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.607402086 CET49773443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.650582075 CET44349812172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.651115894 CET49812443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.651128054 CET44349812172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.652714014 CET44349812172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.652787924 CET49812443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.653686047 CET49812443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.653729916 CET44349812172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.653788090 CET49812443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.666560888 CET44349781172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.667079926 CET49781443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.667093992 CET44349781172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.669135094 CET44349781172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.669248104 CET49781443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.670767069 CET49781443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.670839071 CET44349781172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.671015024 CET44349781172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.671087027 CET49781443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.671111107 CET49781443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.690490007 CET44349767172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.691019058 CET49767443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.691042900 CET44349767172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.692457914 CET44349767172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.692611933 CET49767443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.693444967 CET49767443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.693489075 CET44349767172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.693602085 CET44349767172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.693676949 CET49767443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.693720102 CET49767443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.714349031 CET44349764172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.714982986 CET49764443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.714998007 CET44349764172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.718111038 CET44349764172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.718437910 CET49764443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.719552040 CET49764443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.719599962 CET44349764172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.719671965 CET49764443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.720149040 CET44349807172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.720769882 CET49807443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.720779896 CET44349807172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.721993923 CET44349807172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.722078085 CET49807443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.722776890 CET49807443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.722817898 CET44349807172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.723243952 CET44349807172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.723323107 CET49807443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.723345995 CET49807443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.727615118 CET44349791172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.730057955 CET49791443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.730068922 CET44349791172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.731879950 CET44349805172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.731982946 CET44349791172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.732069969 CET49791443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.732587099 CET49805443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.732599020 CET44349805172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.733664989 CET49791443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.733714104 CET44349791172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.733829975 CET44349791172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.733851910 CET49791443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.733880043 CET49791443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.734047890 CET44349805172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.734112024 CET49805443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.735490084 CET49805443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.735531092 CET44349805172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.735641956 CET44349805172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.735706091 CET49805443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.735737085 CET49805443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.743037939 CET44349751172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.745651007 CET49751443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.745659113 CET44349751172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.745963097 CET44349811172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.746557951 CET49811443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.746567965 CET44349811172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.752041101 CET44349751172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.752168894 CET49751443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.755825043 CET49751443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.755872965 CET44349751172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.755948067 CET49751443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.765384912 CET44349811172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.765453100 CET49811443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.766417027 CET49811443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.766463995 CET44349811172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.766561985 CET49811443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.768399000 CET44349798172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.769177914 CET49798443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.769190073 CET44349798172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.771928072 CET44349798172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.772598028 CET49798443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.772830009 CET49798443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.772897959 CET44349798172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.773000956 CET49798443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.780479908 CET44349766172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.781038046 CET49766443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.781053066 CET44349766172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.782646894 CET44349766172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.782727003 CET49766443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.783682108 CET49766443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.783729076 CET44349766172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.783797026 CET49766443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.788129091 CET44349799172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.788580894 CET49799443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.788599968 CET44349799172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.789675951 CET44349799172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.789762020 CET49799443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.789957047 CET44349769172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.790694952 CET49799443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.790731907 CET44349799172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.790813923 CET49799443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.791661978 CET49769443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.791676998 CET44349769172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.792711973 CET44349769172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.792777061 CET49769443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.793840885 CET49769443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.793876886 CET44349769172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.794023037 CET44349769172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.794080973 CET49769443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.794100046 CET49769443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.811414957 CET44349756172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.812114954 CET49756443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.812129021 CET44349756172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.813199043 CET44349756172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.813267946 CET44349803172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.813283920 CET49756443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.814192057 CET44349757172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.814219952 CET49756443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.814249039 CET44349756172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.814316034 CET49756443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.815327883 CET49803443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.815340996 CET44349803172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.815952063 CET49757443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.815960884 CET44349757172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.817852974 CET44349803172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.817928076 CET49803443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.819171906 CET49803443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.819324970 CET44349803172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.819386959 CET49803443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.819653034 CET44349757172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.819744110 CET49757443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.820175886 CET44349810172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.821847916 CET44349784172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.822704077 CET49757443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.822736979 CET44349757172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.822860956 CET44349757172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.823045969 CET49757443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.823097944 CET49757443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.823473930 CET49810443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.823487997 CET44349810172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.824052095 CET49784443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.824060917 CET44349784172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.825457096 CET44349784172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.825562000 CET49784443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.826179981 CET44349810172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.826247931 CET49810443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.826298952 CET49784443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.826334953 CET44349784172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.826462030 CET44349784172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.826503038 CET49784443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.826519966 CET49784443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.827177048 CET49810443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.827222109 CET44349810172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.827336073 CET44349810172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.827387094 CET49810443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.827402115 CET49810443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.828769922 CET44349804172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.829196930 CET49804443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.829214096 CET44349804172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.829256058 CET44349779172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.829690933 CET49779443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.829698086 CET44349779172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.830246925 CET44349804172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.830327034 CET49804443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.830873966 CET44349779172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.830970049 CET49779443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.831160069 CET49804443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.831192970 CET44349804172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.831248045 CET49804443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.832127094 CET49779443192.168.2.6172.67.218.203
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.832159996 CET44349779172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.832325935 CET44349779172.67.218.203192.168.2.6
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:08.832417011 CET49779443192.168.2.6172.67.218.203

                                                                                                                                                                                                                                                                                      DNS Queries

                                                                                                                                                                                                                                                                                      TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:04:58.641046047 CET192.168.2.61.1.1.10x40d6Standard query (0)rufflesrefined.comA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:09.658327103 CET192.168.2.61.1.1.10x6693Standard query (0)chrome.cloudflare-dns.comA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:09.658950090 CET192.168.2.61.1.1.10x35bbStandard query (0)chrome.cloudflare-dns.com65IN (0x0001)false

                                                                                                                                                                                                                                                                                      DNS Answers

                                                                                                                                                                                                                                                                                      TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:04:58.780168056 CET1.1.1.1192.168.2.60x40d6No error (0)rufflesrefined.com172.67.218.203A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:04:58.780168056 CET1.1.1.1192.168.2.60x40d6No error (0)rufflesrefined.com104.21.24.126A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:09.787301064 CET1.1.1.1192.168.2.60x6693No error (0)chrome.cloudflare-dns.com172.64.41.3A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:09.787301064 CET1.1.1.1192.168.2.60x6693No error (0)chrome.cloudflare-dns.com162.159.61.3A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                      Dec 2, 2023 22:05:09.789047956 CET1.1.1.1192.168.2.60x35bbNo error (0)chrome.cloudflare-dns.com65IN (0x0001)false

                                                                                                                                                                                                                                                                                      HTTPS Proxied Packets

                                                                                                                                                                                                                                                                                      Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                      0192.168.2.649833172.64.41.34431616C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                      2023-12-02 21:05:10 UTC245OUTPOST /dns-query HTTP/1.1
                                                                                                                                                                                                                                                                                      Host: chrome.cloudflare-dns.com
                                                                                                                                                                                                                                                                                      Connection: keep-alive
                                                                                                                                                                                                                                                                                      Content-Length: 128
                                                                                                                                                                                                                                                                                      Accept: application/dns-message
                                                                                                                                                                                                                                                                                      Accept-Language: *
                                                                                                                                                                                                                                                                                      User-Agent: Chrome
                                                                                                                                                                                                                                                                                      Accept-Encoding: identity
                                                                                                                                                                                                                                                                                      Content-Type: application/dns-message
                                                                                                                                                                                                                                                                                      2023-12-02 21:05:10 UTC128OUTData Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                      Data Ascii: wwwgstaticcom)TP
                                                                                                                                                                                                                                                                                      2023-12-02 21:05:10 UTC247INData Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 44 61 74 65 3a 20 53 61 74 2c 20 30 32 20 44 65 63 20 32 30 32 33 20 32 31 3a 30 35 3a 31 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 64 6e 73 2d 6d 65 73 73 61 67 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 36 38 0d 0a 43 46 2d 52 41 59 3a 20 38 32 66 36 38 36 63 37 33 39 66 66 35 38 35 61 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                      Data Ascii: HTTP/1.1 200 OKServer: cloudflareDate: Sat, 02 Dec 2023 21:05:10 GMTContent-Type: application/dns-messageConnection: closeAccess-Control-Allow-Origin: *Content-Length: 468CF-RAY: 82f686c739ff585a-IADalt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                                                      2023-12-02 21:05:10 UTC468INData Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 e8 00 04 ac fd 7a 5e 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                      Data Ascii: wwwgstaticcomz^)


                                                                                                                                                                                                                                                                                      Statistics

                                                                                                                                                                                                                                                                                      CPU Usage

                                                                                                                                                                                                                                                                                      Click to jump to process

                                                                                                                                                                                                                                                                                      Memory Usage

                                                                                                                                                                                                                                                                                      Click to jump to process

                                                                                                                                                                                                                                                                                      High Level Behavior Distribution

                                                                                                                                                                                                                                                                                      Click to dive into process behavior distribution

                                                                                                                                                                                                                                                                                      Behavior

                                                                                                                                                                                                                                                                                      Click to jump to process

                                                                                                                                                                                                                                                                                      System Behavior

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:0
                                                                                                                                                                                                                                                                                      Start time:22:04:25
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                      Commandline:C:\Users\user\Desktop\WolferVPN.exe
                                                                                                                                                                                                                                                                                      Imagebase:0x400000
                                                                                                                                                                                                                                                                                      File size:74'280'552 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:6434CEAFA88A3AFA1F8351BC6890B2A5
                                                                                                                                                                                                                                                                                      Has elevated privileges:true
                                                                                                                                                                                                                                                                                      Has administrator privileges:true
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:low
                                                                                                                                                                                                                                                                                      Has exited:true

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:5
                                                                                                                                                                                                                                                                                      Start time:22:04:54
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:"C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe"
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff65fa30000
                                                                                                                                                                                                                                                                                      File size:163'343'360 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:4AD8066DFB8E65195E5733DDFD8A1AC7
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Antivirus matches:
                                                                                                                                                                                                                                                                                      • Detection: 0%, ReversingLabs
                                                                                                                                                                                                                                                                                      • Detection: 1%, Virustotal, Browse
                                                                                                                                                                                                                                                                                      Reputation:low
                                                                                                                                                                                                                                                                                      Has exited:false

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:9
                                                                                                                                                                                                                                                                                      Start time:22:04:56
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:"C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1680 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff65fa30000
                                                                                                                                                                                                                                                                                      File size:163'343'360 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:4AD8066DFB8E65195E5733DDFD8A1AC7
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:low
                                                                                                                                                                                                                                                                                      Has exited:false

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:10
                                                                                                                                                                                                                                                                                      Start time:22:04:58
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Windows\System32\cmd.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff7d1270000
                                                                                                                                                                                                                                                                                      File size:289'792 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:high
                                                                                                                                                                                                                                                                                      Has exited:true

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:11
                                                                                                                                                                                                                                                                                      Start time:22:04:59
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff66e660000
                                                                                                                                                                                                                                                                                      File size:862'208 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:high
                                                                                                                                                                                                                                                                                      Has exited:true

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:12
                                                                                                                                                                                                                                                                                      Start time:22:05:00
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Windows\System32\tasklist.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:tasklist
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff714ba0000
                                                                                                                                                                                                                                                                                      File size:106'496 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:D0A49A170E13D7F6AEBBEFED9DF88AAA
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:moderate
                                                                                                                                                                                                                                                                                      Has exited:true

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:13
                                                                                                                                                                                                                                                                                      Start time:22:05:01
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:"C:\Users\user\AppData\Local\Programs\WolferVPN\WolferVPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\WolferVPN" --mojo-platform-channel-handle=2204 --field-trial-handle=1684,i,1620382105047154044,16004179749874181730,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff65fa30000
                                                                                                                                                                                                                                                                                      File size:163'343'360 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:4AD8066DFB8E65195E5733DDFD8A1AC7
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:low
                                                                                                                                                                                                                                                                                      Has exited:false

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:14
                                                                                                                                                                                                                                                                                      Start time:22:05:01
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Windows\System32\cmd.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff7d1270000
                                                                                                                                                                                                                                                                                      File size:289'792 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:high
                                                                                                                                                                                                                                                                                      Has exited:true

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:15
                                                                                                                                                                                                                                                                                      Start time:22:05:01
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff66e660000
                                                                                                                                                                                                                                                                                      File size:862'208 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:high
                                                                                                                                                                                                                                                                                      Has exited:true

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:16
                                                                                                                                                                                                                                                                                      Start time:22:05:01
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Windows\System32\tasklist.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:tasklist
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff714ba0000
                                                                                                                                                                                                                                                                                      File size:106'496 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:D0A49A170E13D7F6AEBBEFED9DF88AAA
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Reputation:moderate
                                                                                                                                                                                                                                                                                      Has exited:true

                                                                                                                                                                                                                                                                                      General

                                                                                                                                                                                                                                                                                      Target ID:17
                                                                                                                                                                                                                                                                                      Start time:22:05:10
                                                                                                                                                                                                                                                                                      Start date:02/12/2023
                                                                                                                                                                                                                                                                                      Path:C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe
                                                                                                                                                                                                                                                                                      Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                      Commandline:"C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe"
                                                                                                                                                                                                                                                                                      Imagebase:0x7ff6b7400000
                                                                                                                                                                                                                                                                                      File size:163'343'360 bytes
                                                                                                                                                                                                                                                                                      MD5 hash:4AD8066DFB8E65195E5733DDFD8A1AC7
                                                                                                                                                                                                                                                                                      Has elevated privileges:false
                                                                                                                                                                                                                                                                                      Has administrator privileges:false
                                                                                                                                                                                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                      Antivirus matches:
                                                                                                                                                                                                                                                                                      • Detection: 0%, ReversingLabs
                                                                                                                                                                                                                                                                                      Reputation:low
                                                                                                                                                                                                                                                                                      Has exited:false

                                                                                                                                                                                                                                                                                      Disassembly

                                                                                                                                                                                                                                                                                      ⊘No disassembly