Fake Blockchain Games Deliver RedLine Stealer & Realst Stealer - A New macOS Infostealer Malware

Intro

Last April, ReDzin asked me about a project named "Pearl Land Metaverse", which he found sketchy. The funny thing is that it's the same fake project I covered previously, PureLand, but with the name being changed.

Then in May, several individuals pinged about other projects: Destruction, Evolion, Olymp of Reptiles, and Brawl Earth. Later on, I found similar fake projects named RyzeX, Dawn Land MetaWorld, and WildWorld. An old fake project that I've been monitoring since last year has also followed the same patterns.

As usual, they distribute RedLine Stealer malware. Though what caught my interest the most was their macOS build. It's new, so there is no public intel about this...yet.

Lures, codes, and workers

The targets are lured into running the malicious applications by the workers via direct messaging them or by simply posting an advertisement.

Usually, they give out "access/referral codes" as the form on the website asks for it to be able to download the file/s.

There are instances where the download buttons are displayed on the website immediately.

The "access/referral codes" aim to identify which worker lured the target into downloading the malicious file/s. Here are some examples:

Pearl Metaverse Land code input

Once the target enters the code, a POST request is sent to the backend to check it.

Take note of the worker @MonkeyyDrainer, it is a Telegram username and we will see it again later. (Worth mentioning that a malicious actor known as "Monkey Drainer" operated a cryptocurrency wallet drainer as a service in the past. It is unknown whether @MonkeyyDrainer is a big fan or an alt account.)

One can also peek at the page's source to see what's happening, this shows the comments in Russian, Dropbox links, and methods to notify the malicious actors.

JavaScript (4-25-2023)

<script>
    var deviceInfo = {
        browser: "",
        version: "",
        platform: navigator.platform
    };

var ua = navigator.userAgent,
    browser = "";

if (ua.search(/Edge/) > -1) {
    browser = "Edge";
} else if (ua.search(/Firefox/) > -1) {
    browser = "Firefox";
} else if (ua.search(/Opera/) > -1) {
    browser = "Opera";
} else if (ua.search(/Chrome/) > -1) {
    browser = "Chrome";
} else if (ua.search(/MSIE/) > -1) {
    browser = "IE";
} else if (ua.search(/Safari/) > -1) {
    browser = "Safari";
} else {
    browser = "Other";
}

deviceInfo.browser = browser;
deviceInfo.version = (ua.indexOf("Chrome") !== -1) ? ua.substring(ua.indexOf("Chrome") + 7).split(" ")[0] : ((ua.indexOf("Safari") !== -1) ? ua.substring(ua.indexOf("Version") + 8).split(" ")[0] : "Unknown");
// form valid

async function validateForm() {
        const input1 = $('#input1').val().toUpperCase();
        const input2 = $('#input2').val().toUpperCase();
        const input3 = $('#input3').val().toUpperCase();
        const input4 = $('#input4').val().toUpperCase();
        const input5 = $('#input5').val().toUpperCase();
        const input6 = $('#input6').val().toUpperCase();
        const validationMessage = $('#validation-message');

        // Создание объекта FormData для отправки данных на сервер
        const formData = new FormData();
        formData.append('input1', input1);
        formData.append('input2', input2);
        formData.append('input3', input3);
        formData.append('input4', input4);
        formData.append('input5', input5);
        formData.append('input6', input6);

        // Отправка POST запроса на сервер для проверки значений
        const response = await fetch('check.php', {
            method: 'POST',
            body: formData,
        });

        // Обработка ответа от сервера
        if (response.ok) {
            const result = await response.json();
            if (result.result === 'success') {
                // Получение значений воркера, типа файла и адреса из ответа
                const worker = result.worker;
                const file = result.file;
                const address = result.address;
                const dataIpResponse = await fetch('hxxps[://]ipapi[.]co/json/');
                if (dataIpResponse.ok) {
                    const dataIp = await dataIpResponse.json();
                    $.ajax({
                        type: 'POST',
                        url: './js/send.php',
                        data: {
                            ip: dataIp.ip,
                            country_name: dataIp.country_name,
                            worker,
                            file,
                            deviceInfo
                        },
                        success: function(data) {
                            window.location.href = address;
                        },
                        error: function(xhr, status, error) {
                            window.location.href = address;
                        },
                    });
                }
            } else if (input1 + input2 + input3 + input4 + input5 + input6 == 'F9SEWR') {
                var file = "Launcher";
                var worker = "Special";
                var dataIp = await $.getJSON("hxxps[://]ipapi[.]co/json/");
                $.ajax({
                    type: "POST",
                    url: "../js/send.php",
                    data: {
                        ip: dataIp.ip,
                        country_name: dataIp.country_name,
                        worker,
                        file,
                        deviceInfo
                    },
                    success: function(data) {
                        window.location.href = "hxxps[://]www[.]dropbox[.]com/s/r09eesrdkwtg8mu/Pearl%20Land%20Launcher[.]exe?dl=1"
                    },
                    error: function(xhr, status, error) {
                        window.location.href = "hxxps[://]www[.]dropbox[.]com/s/r09eesrdkwtg8mu/Pearl%20Land%20Launcher[.]exe?dl=1"
                    },
                });
            } else if (input1 + input2 + input3 + input4 + input5 + input6 == 'F9SE2Q') {
                var file = "Archive";
                var worker = "Special";
                var dataIp = await $.getJSON("hxxps[://]ipapi[.]co/json/");
                $.ajax({
                    type: "POST",
                    url: "../js/send.php",
                    data: {
                        ip: dataIp.ip,
                        country_name: dataIp.country_name,
                        worker,
                        file,
                        deviceInfo
                    },
                    success: function(data) {
                        window.location.href = "hxxps[://]pearlmetaverse[.]io/"
                    },
                    error: function(xhr, status, error) {
                        window.location.href = "hxxps[://]pearlmetaverse[.]io/"
                    },
                });
            } else if (input1 + input2 + input3 + input4 + input5 + input6 == 'F9QF0R') {
                var file = "Mac";
                var worker = "Special";
                var dataIp = await $.getJSON("hxxps[://]ipapi[.]co/json/");
                $.ajax({
                    type: "POST",
                    url: "../js/send.php",
                    data: {
                        ip: dataIp.ip,
                        country_name: dataIp.country_name,
                        worker,
                        file,
                        deviceInfo
                    },
                    success: function(data) {
                        window.location.href = "hxxps[://]www[.]dropbox[.]com/s/8d6t95xu7x2qbpk/Pearl%20Land%20Launcher%20v3[.]pkg?dl=1"
                    },
                    error: function(xhr, status, error) {
                        window.location.href = "hxxps[://]www[.]dropbox[.]com/s/8d6t95xu7x2qbpk/Pearl%20Land%20Launcher%20v3[.]pkg?dl=1"
                    },
                });
            } else {
                validationMessage.show();
                $('#input1').css('border', '2px solid #F13F5F');
                $('#input2').css('border', '2px solid #F13F5F');
                $('#input3').css('border', '2px solid #F13F5F');
                $('#input4').css('border', '2px solid #F13F5F');
                $('#input5').css('border', '2px solid #F13F5F');
                $('#input6').css('border', '2px solid #F13F5F');
            }
            // Передача ответа от сервера на проверку значений в Index.php
            $('#response').html(result.result);
        } else {
            console.log('Error: ' + response.status);
        }
    } <
    </script>

Dawn Land MetaWorld code input

If you've noticed earlier, the page for the code input is similar to Pearl Metaverse Land. The JavaScript code is also similar.

JavaScript (5-21-2023)

var deviceInfo = {
    browser: "",
    version: "",
    platform: navigator.platform
};

var ua = navigator.userAgent,
    browser = "";

if (ua.search(/Edge/) > -1) {
    browser = "Edge";
} else if (ua.search(/Firefox/) > -1) {
    browser = "Firefox";
} else if (ua.search(/Opera/) > -1) {
    browser = "Opera";
} else if (ua.search(/Chrome/) > -1) {
    browser = "Chrome";
} else if (ua.search(/MSIE/) > -1) {
    browser = "IE";
} else if (ua.search(/Safari/) > -1) {
    browser = "Safari";
} else {
    browser = "Other";
}

deviceInfo.browser = browser;
deviceInfo.version = (ua.indexOf("Chrome") !== -1) ? ua.substring(ua.indexOf("Chrome") + 7).split(" ")[0] : ((ua.indexOf("Safari") !== -1) ? ua.substring(ua.indexOf("Version") + 8).split(" ")[0] : "Unknown");
// form valid

async function validateForm() {
    const input1 = $('#input1').val().toUpperCase();
    const input2 = $('#input2').val().toUpperCase();
    const input3 = $('#input3').val().toUpperCase();
    const input4 = $('#input4').val().toUpperCase();
    const input5 = $('#input5').val().toUpperCase();

    const validationMessage = $('#validation-message');

    // Создание объекта FormData для отправки данных на сервер
    const formData = new FormData();
    formData.append('input1', input1);
    formData.append('input2', input2);
    formData.append('input3', input3);
    formData.append('input4', input4);
    formData.append('input5', input5);


    // Отправка POST запроса на сервер для проверки значений
    const response = await fetch('check.php', {
        method: 'POST',
        body: formData,
    });

    // Обработка ответа от сервера
    if (response.ok) {
        const result = await response.json();
        if (result.result === 'success') {
            // Получение значений воркера, типа файла и адреса из ответа
            const worker = result.worker;
            const file = result.file;
            const address = result.address;
            const dataIpResponse = await fetch('hxxps[://]ipapi[.]co/json/');
            if (dataIpResponse.ok) {
                const dataIp = await dataIpResponse.json();
                $.ajax({
                    type: 'POST',
                    url: './assets/js/send.php',
                    data: {
                        ip: dataIp.ip,
                        country_name: dataIp.country_name,
                        worker,
                        file,
                        deviceInfo
                    },
                    success: function(data) {
                        window.location.href = address;
                    },
                    error: function(xhr, status, error) {
                        window.location.href = address;
                    },
                });
            }
        } else if (input1 + input2 + input3 + input4 + input5 == 'F9SEW') {
            var file = "Launcher";
            var worker = "Special";
            var dataIp = await $.getJSON("hxxps[://]ipapi[.]co/json/");
            $.ajax({
                type: "POST",
                url: "./assets/js/send.php",
                data: {
                    ip: dataIp.ip,
                    country_name: dataIp.country_name,
                    worker,
                    file,
                    deviceInfo
                },
                success: function(data) {
                    window.location.href = "hxxps[://]www[.]dropbox[.]com/s/6a68btb9zfhbuut/Dawn%20Land%20Launcher[.]exe?dl=1"
                },
                error: function(xhr, status, error) {
                    window.location.href = "hxxps[://]www[.]dropbox[.]com/s/6a68btb9zfhbuut/Dawn%20Land%20Launcher[.]exe?dl=1"
                },
            });
        } else if (input1 + input2 + input3 + input4 + input5 == 'F9SE2') {
            var file = "Archive";
            var worker = "Special";
            var dataIp = await $.getJSON("hxxps[://]ipapi[.]co/json/");
            $.ajax({
                type: "POST",
                url: "./assets/js/send.php",
                data: {
                    ip: dataIp.ip,
                    country_name: dataIp.country_name,
                    worker,
                    file,
                    deviceInfo
                },
                success: function(data) {
                    window.location.href = "dawnmeta.io"
                },
                error: function(xhr, status, error) {
                    window.location.href = "dawnmeta.io"
                },
            });
        } else if (input1 + input2 + input3 + input4 + input5 == 'F9QF0') {
            var file = "Mac";
            var worker = "Special";
            var dataIp = await $.getJSON("hxxps[://]ipapi[.]co/json/");
            $.ajax({
                type: "POST",
                url: "./assets/js/send.php",
                data: {
                    ip: dataIp.ip,
                    country_name: dataIp.country_name,
                    worker,
                    file,
                    deviceInfo
                },
                success: function(data) {
                    window.location.href = "hxxps[://]www[.]dropbox[.]com/s/ty0pyvkpc84i50m/Dawn%20Land%20Launcher[.]pkg?dl=1"
                },
                error: function(xhr, status, error) {
                    window.location.href = "hxxps[://]www[.]dropbox[.]com/s/ty0pyvkpc84i50m/Dawn%20Land%20Launcher[.]pkg?dl=1"
                },
            });
        } else {
            validationMessage.show();
            $('#input1').css('border', '2px solid #F13F5F');
            $('#input2').css('border', '2px solid #F13F5F');
            $('#input3').css('border', '2px solid #F13F5F');
            $('#input4').css('border', '2px solid #F13F5F');
            $('#input5').css('border', '2px solid #F13F5F');
        }
        // Передача ответа от сервера на проверку значений в Index.php
        $('#response').php(result.result);
    } else {
        console.log('Error: ' + response.status);
    }
}
$('#form-popup').submit(function(event) {
    event.preventDefault();
    validateForm();
});

Evolion code input

Once the code is entered and the download button is clicked, code.json is retrieved, which contains the id, code, worker, and download link.

JavaScript (5-1-2023)

// Открыть модальное окно
document.getElementById("open-modal-btn-one").addEventListener("click", function() {
    document.getElementById("my-modal").classList.add("open")
})

// Закрыть модальное окно
document.getElementById("close-my-modal-btn").addEventListener("click", function() {
    document.getElementById("my-modal").classList.remove("open")
})

// Закрыть модальное окно при нажатии на Esc
window.addEventListener('keydown', (e) => {
    if (e.key === "Escape") {
        document.getElementById("my-modal").classList.remove("open")
    }
});

// Закрыть модальное окно при клике вне его
document.querySelector("#my-modal .modal__box").addEventListener('click', event => {
    event._isClickWithInModal = true;
});
document.getElementById("my-modal").addEventListener('click', event => {
    if (event._isClickWithInModal) return;
    event.currentTarget.classList.remove('open');
});

// Открыть модальное окно
document.getElementById("open-modal-btn").addEventListener("click", function() {
    document.getElementById("my-modal").classList.add("open")
})

// Закрыть модальное окно
document.getElementById("close-my-modal-btn").addEventListener("click", function() {
    document.getElementById("my-modal").classList.remove("open")
})

// Закрыть модальное окно при нажатии на Esc
window.addEventListener('keydown', (e) => {
    if (e.key === "Escape") {
        document.getElementById("my-modal").classList.remove("open")
    }
});

// Закрыть модальное окно при клике вне его
document.querySelector("#my-modal .modal__box").addEventListener('click', event => {
    event._isClickWithInModal = true;
});
document.getElementById("my-modal").addEventListener('click', event => {
    if (event._isClickWithInModal) return;
    event.currentTarget.classList.remove('open');
});

document.querySelector('#signin').addEventListener('submit', e => {
   e.preventDefault()
   const input = e.target.querySelector('input')
   if (e.target.querySelector('input').value.trim()) {
      fetch(`/code.json?1=${Math.random()}`)
      .then(response => response.json())
      .then(data => {
         console.log(data)
         let flag = false;
         data.forEach(item => {
            if (item.code == input.value) {
               window.location.href = item.link
               flag = true

               fetch('/telegram_curl.php', {
                  method: 'post',
                  body: JSON.stringify({code: input.value}),
                  headers: {
                     'content-type': 'application/json'
                  }
               })

               return
            }
         })

         if (!flag) {
            input.classList.add('shakes')
            setTimeout(() => input.classList.remove('shakes'), 800)
            e.preventDefault()
            return
         }
      });
   }
})

code.json (5-1-2023)

[
    {
        "id": 1,
        "code": "JW1Q-O99P",
        "worker": "All RAR Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 2,
        "code": "L18N-VZZ0",
        "worker": "All MAC Code",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 3,
        "code": "AA98-1QMN",
        "worker": "All Launcher Code",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 4,
        "code": "ZZ19-W92L",
        "worker": "12jet3web - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 5,
        "code": "ZZ19-W913",
        "worker": "12jet3web - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 6,
        "code": "ZZ19-WZM1",
        "worker": "12jet3web - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 7,
        "code": "AQ6M-Y88N",
        "worker": "My code",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 8,
        "code": "MN21-TT1K",
        "worker": "12BillionCounter - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 9,
        "code": "MN21-TK99",
        "worker": "12BillionCounter - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 10,
        "code": "MN21-71HG",
        "worker": "12BillionCounter - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 11,
        "code": "OO19-Z8N0",
        "worker": "12Ombrre - Lauch",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 12,
        "code": "OO19-Z8QQ",
        "worker": "12Ombrre - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 14,
        "code": "GH11-D988",
        "worker": "12Nixer1339 - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 15,
        "code": "GH11-D9CM",
        "worker": "12Nixer1339 - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 16,
        "code": "GH11-K99Q",
        "worker": "12Nixer1339 - Launch",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 17,
        "code": "LI28-QAZ1",
        "worker": "12HeisenbergWolter - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 18,
        "code": "LI28-QAZZ",
        "worker": "12HeisenbergWolter - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 19,
        "code": "LI28-PO12",
        "worker": "12HeisenbergWolter - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 20,
        "code": "KL19-DJ21",
        "worker": "12Ombrre",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 21,
        "code": "OO19-Z88G",
        "worker": "12HeisenbergWolter - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 22,
        "code": "OO87-1CB6",
        "worker": "12purification999 - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 23,
        "code": "OO87-1C8L",
        "worker": "12purification999 - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 24,
        "code": "OO87-LO8P",
        "worker": "12purification999 - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 25,
        "code": "X21N-KL88",
        "worker": "12Askwkssk - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 26,
        "code": "X21N-LL90",
        "worker": "12Askwkssk - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 27,
        "code": "X21N-7IO1",
        "worker": "12Askwkssk - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 28,
        "code": "HG87-1VNM",
        "worker": "12wbsceva - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 29,
        "code": "HG87-1VK8",
        "worker": "12wbsceva - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 30,
        "code": "HG87-O71H",
        "worker": "12wbsceva - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 31,
        "code": "Z80B-ML1H",
        "worker": "12atom911 - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 32,
        "code": "Z80B-ML17",
        "worker": "12atom911 - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 33,
        "code": "Z80B-LPP1",
        "worker": "12atom911 - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 34,
        "code": "FG19-1LM7",
        "worker": "12glebredbull - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 35,
        "code": "FG19-1LVN",
        "worker": "12glebredbull - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 36,
        "code": "FG19-AQ11",
        "worker": "12glebredbull - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 37,
        "code": "QW89-1GOP",
        "worker": "12h0pefulrabbit - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 38,
        "code": "QW89-1Z8J",
        "worker": "12h0pefulrabbit - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 39,
        "code": "QW89-K3AA",
        "worker": "12h0pefulrabbit - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 40,
        "code": "H1C8-SAK9",
        "worker": "12bamboombam - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 41,
        "code": "H1C8-Z90N",
        "worker": "12bamboombam - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 42,
        "code": "H1C8-QQ9P",
        "worker": "12bamboombam - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 43,
        "code": "JQO2-RR67",
        "worker": "12SPAN4money - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 44,
        "code": "JQO2-RQ29",
        "worker": "12SPAN4money - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 45,
        "code": "JQO2-RL1K",
        "worker": "12SPAN4money - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 46,
        "code": "AL6M-YY28",
        "worker": "12wwwdew - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 47,
        "code": "AL6M-YQ6P",
        "worker": "12wwwdew - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 48,
        "code": "AL6M-N41G",
        "worker": "12wwwdew - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 49,
        "code": "V1LI-TW80",
        "worker": "12FlashHound4216 - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 50,
        "code": "V1LI-TWS4",
        "worker": "12FlashHound4216 - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 51,
        "code": "V1LI-AK2C",
        "worker": "12FlashHound4216 - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 52,
        "code": "BM8J-12QO",
        "worker": "12benfu18 - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 53,
        "code": "BM8J-12HL",
        "worker": "12benfu18 - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 54,
        "code": "BM8J-Q451",
        "worker": "12benfu18 - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 55,
        "code": "SO64-YRL1",
        "worker": "12bloodyaaron - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 56,
        "code": "SO64-YRVA",
        "worker": "12bloodyaaron - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 57,
        "code": "SO64-2LK8",
        "worker": "12bloodyaaron - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 58,
        "code": "KQ15-Z5KP",
        "worker": "12maisiewilens - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 59,
        "code": "KQ15-ZZK1",
        "worker": "12maisiewilens - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 60,
        "code": "KQ15-LO3A",
        "worker": "12maisiewilens - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 61,
        "code": "WY3J-EK11",
        "worker": "12fishingNFT - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 62,
        "code": "WY3J-EMM2",
        "worker": "12fishingNFT - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 63,
        "code": "WY3J-ELI6",
        "worker": "12fishingNFT - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 64,
        "code": "V8DD-F64N",
        "worker": "12nujenxanax - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 65,
        "code": "V8DD-F6F1",
        "worker": "12nujenxanax - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 66,
        "code": "V8DD-T9JJ",
        "worker": "12nujenxanax - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 67,
        "code": "BL1F-RR83",
        "worker": "12craaassshysh - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 68,
        "code": "BL1F-RA73",
        "worker": "12craaassshysh - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 69,
        "code": "BL1F-RCC0",
        "worker": "12craaassshysh - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 70,
        "code": "GLQ3-U59Z",
        "worker": "12azpunks - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 71,
        "code": "GLQ3-UV1M",
        "worker": "12azpunks - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 72,
        "code": "GLQ3-PI61",
        "worker": "12azpunks - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 73,
        "code": "SS73-IYL9",
        "worker": "12Marif1777 - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 74,
        "code": "SS73-IYHG",
        "worker": "12Marif1777 - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 75,
        "code": "SS73-IY1J",
        "worker": "12Marif1777 - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 76,
        "code": "UQ4J-RX22",
        "worker": "12NEVR2DEVTH - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 77,
        "code": "UQ4J-RZM8",
        "worker": "12NEVR2DEVTH - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 78,
        "code": "UQ4J-PO90",
        "worker": "12NEVR2DEVTH - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 79,
        "code": "DO7L-WWIN",
        "worker": "12number_oneBC - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 80,
        "code": "DO7L-WA62",
        "worker": "12number_oneBC - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 81,
        "code": "DO7L-LO8P",
        "worker": "12number_oneBC - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 82,
        "code": "SJ87-B91R",
        "worker": "12user12574 - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 83,
        "code": "SJ87-BUW1",
        "worker": "12user12574 - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 84,
        "code": "SJ87-BHQQ",
        "worker": "12user12574 - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 85,
        "code": "DH8L-ZX10",
        "worker": "12LiamDrain - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 86,
        "code": "DH8L-ZWU0",
        "worker": "12LiamDrain - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 87,
        "code": "DH8L-LI89",
        "worker": "12LiamDrain - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 88,
        "code": "BIG7-HH28",
        "worker": "12D3ViLBBY - Archive",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]rar"
    },
    {
        "id": 89,
        "code": "BIG7-H1JP",
        "worker": "12D3ViLBBY - Mac",
        "link": "hxxps[://]github[.]com/EvolionBeta/evolion/raw/main/Evolion[.]pkg"
    },
    {
        "id": 90,
        "code": "BIG7-HKL6",
        "worker": "12D3ViLBBY - Launcher",
        "link": "hxxps[://]evoliongame[.]com/Evolion%20Launcher[.]exe"
    },
    {
        "id": 91,
        "code": "GSQ6-3UIK",
        "worker": "12trueseller - Archive",