Date/Time: 4/12/2019 11:37:41 PM
Process: [3172]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [4248]C:\Users\gangosan\AppData\Local\Temp\VPN_BC0A\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_5D68\winfire_4E3F3447DBEA.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:37:41 PM
Process: [128]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [4248]C:\Users\gangosan\AppData\Local\Temp\VPN_BC0A\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_5D68\winfire_6F25FEC0AC39.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:23:29 PM
Process: [6640]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [6512]C:\Users\gangosan\AppData\Local\Temp\VPN_72A3\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_D07D\winfire_8662E404CDBE.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:23:29 PM
Process: [6636]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [6512]C:\Users\gangosan\AppData\Local\Temp\VPN_72A3\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_D07D\winfire_60354AA7A593.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:23:29 PM
Process: [6596]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [6512]C:\Users\gangosan\AppData\Local\Temp\VPN_72A3\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_D07D\winfire_8B772B9AE845.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:23:29 PM
Process: [6604]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [6512]C:\Users\gangosan\AppData\Local\Temp\VPN_72A3\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_D07D\winfire_4C1212C9EEDD.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:23:29 PM
Process: [6612]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [6512]C:\Users\gangosan\AppData\Local\Temp\VPN_72A3\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_D07D\winfire_7FE6B811D65B.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:23:29 PM
Process: [1980]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [6512]C:\Users\gangosan\AppData\Local\Temp\VPN_72A3\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_D07D\winfire_1EA65D4DF09B.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:18:34 PM
Process: [4556]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [6608]C:\Users\gangosan\AppData\Local\Temp\VPN_6ABA\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_ED84\winfire_7F4C17AEBECA.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:18:33 PM
Process: [6552]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [6608]C:\Users\gangosan\AppData\Local\Temp\VPN_6ABA\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_ED84\winfire_1D6FB3141CCD.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:10:45 PM
Process: [3644]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [4840]C:\Users\gangosan\AppData\Local\Temp\VPN_C046\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_38E7\winfire_C61A05BA9288.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:10:44 PM
Process: [4288]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [4840]C:\Users\gangosan\AppData\Local\Temp\VPN_C046\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_38E7\winfire_F2FD62F5B0D5.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High

Date/Time: 4/12/2019 11:10:44 PM
Process: [4492]C:\Windows\SysWOW64\cscript.exe
Process MD5 Hash: 41B81EF73218EC0EA0EC74F1C4C0F7B1
Parent: [4840]C:\Users\gangosan\AppData\Local\Temp\VPN_C046\vpnsetup.exe
Rule: BlockVbsScripts
Rule Name: Block execution of .vbs scripts
Command Line: C:\Windows\system32\cscript.exe "C:\Users\gangosan\AppData\Local\Temp\VPN_38E7\winfire_B93DC3223B44.vbs"
Signer:
Parent Signer: SoftEther Corporation
User/Domain: gangosan/gangosan-PC
System File: True
Parent System File: False
Integrity Level: High
Parent Integrity Level: High