Overview

overview

10

Static

static

3

2026-07-19...at.exe

windows10-2004-x64

10

2026-07-19...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/07/2026, 01:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-19_87950cd5820bf5e778ce8e86d0a7143f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 97.0MB
  • Sample260720-bfkhwadv6v
  • SHA256 53d52d184f5fc53ef915e747d927a93be523d0adcf2ce905057fc4ad03638ac7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
ransomwarespywarestealer

Malware Config

Extracted

Path

  • C:\Users\Admin\AppData\Local\Temp\_MEI35442\config.txt

Ransom Note
  • Payment Code: 123 Secret Code: 123 Timer Duration: 168 hours Start on Startup: True Close on Alt: False Ransom Note: All your files have been encrypted with Vortex Tools Ransomware! any damage is not done by me. Your documents, photos, databases, and other important files have been locked with our unique encryption. To get your files back, you must pay 5 EURO to the following Address: 123 After payment, send an email to Useful [email protected] with your payment ID and you will receive the decryption key. If you do not pay within 7 days, your files will be permanently lost. Any attempt to modify or delete the encrypted files will result in permanent data loss. EDUCATIONAL PURPOSE ONLY - This is a simulation, not real ransomware

Signatures

  • Loads dropped DLL 47 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Looks up external IP address via web service 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Modifies registry class 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-19_87950cd5820bf5e778ce8e86d0a7143f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-19_87950cd5820bf5e778ce8e86d0a7143f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3544
    • C:\Users\Admin\AppData\Local\Temp\2026-07-19_87950cd5820bf5e778ce8e86d0a7143f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-19_87950cd5820bf5e778ce8e86d0a7143f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      PID:4188

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\_bz2.pyd
        • Size 84KB
        • SHA256 5453a58bbb460be785a298830c64e11b1334a9c26f1b9b0af2b491ff5da8ac4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\_ctypes.pyd
        • Size 137KB
        • SHA256 16e834e926e08bc184f929240436f74d9adad701247d72d5e8a32297aa4030eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\_lzma.pyd
        • Size 156KB
        • SHA256 63ef6ee710321cf8492f9f225d3d18c99794b7e40851785649ae5e17e2461720
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\_zstd.pyd
        • Size 490KB
        • SHA256 5aa97046006c1a3ea2164ed373074a02399826481b13cd4286ac9bc3d01df092
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-console-l1-1-0.dll
        • Size 21KB
        • SHA256 87c8e57e1fc1bff7cf9dfff06af1bdd43a67652ba96d4c35d14e5f22bd17164f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-datetime-l1-1-0.dll
        • Size 21KB
        • SHA256 fdb29afc4ec3585586d8415de087d6c6993c5a1171f57dd5185389eca33ba948
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-debug-l1-1-0.dll
        • Size 21KB
        • SHA256 4626ba7d6181906a130cb32a965c33d8f41940b23ab2946b51da3eda3f5a1d99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 21KB
        • SHA256 8289c551e17e2648bc5384e7ce4787ebea452c10e799e6da96cec930885c7584
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-fibers-l1-1-0.dll
        • Size 21KB
        • SHA256 acd898771c674e63b0f3e67d98826c93143b391ae8c58563c2da7b98475ced14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 22d8959cc8e03078e28b2140911803368993cf4750743cb5e4011fc469dc1dbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-file-l1-2-0.dll
        • Size 21KB
        • SHA256 3b114c3944cb6e0c4f43d4a90248f8bf0ee0230a2096b788f2a2b3f12b59c458
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-file-l2-1-0.dll
        • Size 20KB
        • SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-handle-l1-1-0.dll
        • Size 21KB
        • SHA256 950a9c745e331fa77a46696cc85cdc6556597428392e65689acaca3177104e3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 8c0df823dc018907436f1bc964b1073f41241fb1fad633f75997b9324d311f65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 21KB
        • SHA256 c0188b846ca54fd398650af690b55d713c06b0c2570c3d2304539ec15d4667cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 21KB
        • SHA256 7c66dee567ba583d242f87d442caf38c0ce95bb1d36cd2bd74825c44e54d9078
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 4ea560dbe8a2970388fb0d738b47e65caa417a2f187e3a9827b696ce01ab41eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-memory-l1-1-0.dll
        • Size 21KB
        • SHA256 68bc19911007ab92d263cb40277a6afc084ca413178ad40b919302b7bbb14b38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 21KB
        • SHA256 045bd4b41c0568fc916a21cc366da93597768d8ead45411c244cf98d605dbaaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 86c8c545c8f358cbe9b822c58c6af3fe00078af0422af0e391d32270cc6d8921
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 21KB
        • SHA256 ae2b8199066cb22395180d86bdc955dc2d33a6bd8d64b61ba77573d1e78b8d70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 c27e4c79489c6be0eaaf7b082792c95ff7bf8adc4f67cf65f7a1a66d03c9bb87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-profile-l1-1-0.dll
        • Size 21KB
        • SHA256 0a422b5f26d89e799f0e80065c5738829ac476765613198f8b142b62753b3be7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 21KB
        • SHA256 e7e3f289510fcb895b22b756f64e596a4a736bf3e7cae8e71e393680dbb80f02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-string-l1-1-0.dll
        • Size 21KB
        • SHA256 96d361bad0f010b1c815cb536cebdbc9cfd1034fbabbd43b612827b2d464de60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-synch-l1-1-0.dll
        • Size 21KB
        • SHA256 e03d483fba05a5a50ef3ac414b904b2ff24ffbed08908b1e7f6a9416f9711856
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 e67f6f15acae34dc5ef98de01d89466136232ded7305da22d2f0a454327ad079
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 21KB
        • SHA256 af3f19f3ae063e4fb687242391df2eda6535c7c490b38b0a6870e07c6ddace99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-timezone-l1-1-0.dll
        • Size 21KB
        • SHA256 10b56211a2de348342c0cf4bcd2c91c53a0656f9476b6c0f02af88c29f392841
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-core-util-l1-1-0.dll
        • Size 21KB
        • SHA256 a46b6708fb8e5ee9183037a479b0896552785c598d99a8339e2a05e32ea23d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-conio-l1-1-0.dll
        • Size 21KB
        • SHA256 ee81ab5e33d73561172c2effc57272daa2b8e9297d30e20884177dd964fd3137
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-convert-l1-1-0.dll
        • Size 25KB
        • SHA256 69e6ae713da2e6dd587aee3f5192d72ea2a37b352b123f8462c6d60f7a1e0fac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-environment-l1-1-0.dll
        • Size 21KB
        • SHA256 6a951c49959f820c55b0884fe74723aaaa302a13d93ec9c6c5db21a703af34de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 21KB
        • SHA256 90d420f9193daddc9a577ce5f37d043de87ccd25967e2a9a57492394e62bb5ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 3bd8121250a67f5422b2ac2a3af070016ea0bd26e56ba36a81ff6665b936fdd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-locale-l1-1-0.dll
        • Size 21KB
        • SHA256 cd557478f332ab196f81d274ae433c83ddf95cc9ef7579077fc31af4dc761f58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 1a5092b4e489c89b5455258169ff25f31d5ccde589989fce64092b8d7cd9d45b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-process-l1-1-0.dll
        • Size 21KB
        • SHA256 21a538ef083b282739fe98f078ca1ce141b0f81554fe624d363c8b4a297d158b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 25KB
        • SHA256 7300fbff1c371d248ab748a9b20484ee8204c82041e80b691abe9734353dd47d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 25KB
        • SHA256 01a2fa8bfd1bad090c0ecc227663c21b343ee843f617cd0c039da930493be901
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-string-l1-1-0.dll
        • Size 25KB
        • SHA256 34837d23079efd40377722266c69c9159710b4f2805ee57968c75025e9f9b1c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 b4df98e42f93fbf94a58d1924850d58f4dc6f280207c1e2b7911cf11692f65c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\api-ms-win-crt-utility-l1-1-0.dll
        • Size 21KB
        • SHA256 30eab6b13258b545642972d2a1bd1916cd3d1ee109f6c0706bfa0d1752e2e6af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\base_library.zip
        • Size 1.3MB
        • SHA256 29735ba36fe6dd5572ad901f0e7dd08dbd649a913466e932e65200088dac07a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        config.txt
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\config.txt
        • Size 756B
        • SHA256 aa23e41bf3821bb80769ae7f0ff86b0805d8c7fa692d213d8edb9d56141db44f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\pyexpat.pyd
        • Size 200KB
        • SHA256 529ed47ffe7ba1e9f17689e314374720f23cf8baf897bdfc6897df4d5acceb1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\python3.dll
        • Size 71KB
        • SHA256 156c5aca2d43320f6c4fa501becfa3d4b1251983881783c1ce29645a9a8b445f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\python314.dll
        • Size 6.4MB
        • SHA256 fa173b946772926fbece65f0761da70410bffc1a75dc6a2086fcdc8ec6551f31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\select.pyd
        • Size 31KB
        • SHA256 629d56f251138fec4c43b0ddd87b85656dbbb6eceb933cc593f4654683f21ca6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35442\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        screenshot.png
        • Path C:\Users\Admin\AppData\Local\Temp\tmp_us3ulm8\screenshot.png
        • Size 423KB
        • SHA256 ac30ff44e18f95277a3ae7a3f69ec6bf25b01058562eb9a77a023e0c07d4a792
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        telegram_accounts.json
        • Path C:\Users\Admin\AppData\Local\Temp\tmp_us3ulm8\telegram_accounts.json
        • Size 2B
        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
        • MD5 SHA1 SHA512
        Submit Download

        memory/4188-1283-0x00007FFAB17B0000-0x00007FFAB1A13000-memory.dmp
        Download