Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/11/2026, 04:49

General

  • Target
    2026-11-12_3e3b4ede851544870e6006c9fda79269_glassworm_icedid_njrat.exe
  • Size 9.3MB
  • Sample261113-ffvfasfx2v
  • SHA256 8179adf11f8f8d2dafda56803502b486ec522444dfe245ede7b20762a40c62f1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • Suspicious use of AdjustPrivilegeToken 33 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-12_3e3b4ede851544870e6006c9fda79269_glassworm_icedid_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-12_3e3b4ede851544870e6006c9fda79269_glassworm_icedid_njrat.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of AdjustPrivilegeToken
    PID:4532

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        my-documents-2.json

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-jobs-62cacdaec3f2\jobs\my-documents-2.json
        • Size 1KB
        • SHA256 9473079a08877afec527e99ae2a3b2a74d8b7da57ffafef7c7f6251abdd1ec74
        • MD5 SHA1 SHA512 TLSH

        my-documents.json

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-jobs-62cacdaec3f2\jobs\my-documents.json
        • Size 1KB
        • SHA256 c0711ad72b7302dd6363c1fd2d8ad8641f5a75d5df348e6acb66caab79f6e8d3
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-2228198105ff\config
        • Size 180B
        • SHA256 770d479197464ce6fe97b290b09ebb89ca074ebbe93809ba57d87b64b2e5d4dd
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-2228198105ff\config
        • Size 180B
        • SHA256 19ebcea35a7bad9e68b139947cf086b8137aff4a08aac200621874163b8a5a2d
        • MD5 SHA1 SHA512 TLSH

        recovery

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-2228198105ff\recovery
        • Size 160B
        • SHA256 885843b2b65cb2db7b262024e69a4ec22a05961875dcdfe3b29b082de1ba96fe
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-93144cf35038\config
        • Size 180B
        • SHA256 138888e38bcc3204d34b6500e4ee4d3cb94eb10693d402038249015984f0b31b
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-93144cf35038\config
        • Size 180B
        • SHA256 a79b48534b4107bce7e511b9f65f1ce8ba15624dc8640e9ff7cd2ca636f79fb2
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-980481950368\config
        • Size 180B
        • SHA256 0edfa46bf5f968591312206303b9ebc1fc84535a2e1edc11a8f9ec022b8d0d19
        • MD5 SHA1 SHA512 TLSH

        recovery.tmp-f716953414bfb217

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-980481950368\recovery.tmp-f716953414bfb217
        • Size 160B
        • SHA256 c9237f0037df2163ece38cb016791b95399893172c0ea50404d949c64fb2f9cc
        • MD5 SHA1 SHA512 TLSH

        283c2bf7cf5ac8155f6a2b23de1a13b9f40964e5005cbece1582ed542d407d00

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ceeaea62a17\repo\locks\283c2bf7cf5ac8155f6a2b23de1a13b9f40964e5005cbece1582ed542d407d00
        • Size 64B
        • SHA256 5e6f5d8bf3d9978b1a7fe9f51929430fa1819761f1ab2c2940a4f6804355b0f2
        • MD5 SHA1 SHA512 TLSH

        7e8d626b61c91e7b7c3a902a161cd54de51ca61fb7b4b90d04d4789270755809

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ceeaea62a17\repo\locks\7e8d626b61c91e7b7c3a902a161cd54de51ca61fb7b4b90d04d4789270755809
        • Size 68B
        • SHA256 979e626e2dc565c734b8b07185e64fa12625b67573428b47eca3672738f2b496
        • MD5 SHA1 SHA512 TLSH

        870ce22eca5bfbc54cadda9336679ea2bac9b24678a2c4a1fea12584b11dae0e

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ceeaea62a17\repo\locks\870ce22eca5bfbc54cadda9336679ea2bac9b24678a2c4a1fea12584b11dae0e
        • Size 68B
        • SHA256 103ecbd699cb07da6c69c2f6d2e81c800336922e2ebe5a11338ff49e49d93c84
        • MD5 SHA1 SHA512 TLSH

        b058444379becc6efd381177a924a3810b63c82284cc2c37bb764d89aaac2609

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ceeaea62a17\repo\locks\b058444379becc6efd381177a924a3810b63c82284cc2c37bb764d89aaac2609
        • Size 69B
        • SHA256 f7789367bd20b991d126bce39b2b0aafdf4d81cbaa48b4cbd852776ecebed17f
        • MD5 SHA1 SHA512 TLSH

        d875aae8b6f711fe1011a8afc191bc58314f0ddd0525c8c96e2df3dbc4dae66c

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ceeaea62a17\repo\locks\d875aae8b6f711fe1011a8afc191bc58314f0ddd0525c8c96e2df3dbc4dae66c
        • Size 70B
        • SHA256 d49bbe1da49bbf671d0bf6c82e6afe225e5b469300e874554a2b0f761da4b985
        • MD5 SHA1 SHA512 TLSH

        top.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0f558b938673\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-0f558b938673\src\top.txt
        • Size 3B
        • SHA256 28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39
        • MD5 SHA1 SHA512

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-19d5ef86880a\repo\config
        • Size 180B
        • SHA256 0e13aee34607a04d145d6ff6b96d5ac97a45e8d1767336e26c12fed659fbb0fc
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-21957deaca50\repo\config
        • Size 180B
        • SHA256 a26fc8cb88a21f4c9460aa44d5f161877652a92c356f7839b53230a4ca75d9ca
        • MD5 SHA1 SHA512 TLSH

        ba87c9d1772b600640f60e2c6b47976c19ffa84b37c14699f6783c4bd880019c

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-21957deaca50\repo\data\ba\ba87c9d1772b600640f60e2c6b47976c19ffa84b37c14699f6783c4bd880019c
        • Size 3.0MB
        • SHA256 0c1349b76f6c0c77f78551fd907071a000a8ce513d01bc9dee66f1f82d4af908
        • MD5 SHA1 SHA512 SSDEEP TLSH

        3e43a313fe697dcf04f151945f4787461023d352c19806b11fb1bc9f68d1a219

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-21957deaca50\repo\snapshots\3e43a313fe697dcf04f151945f4787461023d352c19806b11fb1bc9f68d1a219
        • Size 195B
        • SHA256 77541df72a72a78e92acc698d151262b1fd8a8eaa85ced77bbf9771e0e3200cf
        • MD5 SHA1 SHA512 TLSH

        001023d36c9ef889d746c14750c18835a102e18f6e810db5fcca21745f2066df

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\repo\snapshots\001023d36c9ef889d746c14750c18835a102e18f6e810db5fcca21745f2066df
        • Size 226B
        • SHA256 bd4f8687f31f86b665bc8bd09d084f4252862af0cf34aed66a7baec716a28a9a
        • MD5 SHA1 SHA512 TLSH

        2ef682c4b0c9cd4365244f8de9a4982e1c10f85dbff21b90684d0d2ffaeaa23d

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\repo\snapshots\2ef682c4b0c9cd4365244f8de9a4982e1c10f85dbff21b90684d0d2ffaeaa23d
        • Size 226B
        • SHA256 48c211bd47d7836c254924c3d7d2e6ae61abc6dbc5fc184c388dbb5fc7db5386
        • MD5 SHA1 SHA512 TLSH

        5b2c0872d60841c2717bfbca0a943bf2e963473fcbda945e9dae95cd281eb05f

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\repo\snapshots\5b2c0872d60841c2717bfbca0a943bf2e963473fcbda945e9dae95cd281eb05f
        • Size 195B
        • SHA256 ce155c5509a45c01934eaea5933793548f732762888a9df51b822b796f547130
        • MD5 SHA1 SHA512 TLSH

        doc25.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc25.txt.locked
        • Size 39KB
        • SHA256 abdb91c0e936b8bb35def55cbc2081e9eceeeb46c7e33949d12a9a41f3ed2dc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc26.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc26.txt.locked
        • Size 39KB
        • SHA256 a4f612942286025ad91630b692e4897e8141eefb49c995ce85c70cc32766764f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc27.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc27.txt.locked
        • Size 39KB
        • SHA256 58eb8ef91cebd443f28a541c90562062fe4e939b73810349afd5df7569d92c14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc28.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc28.txt.locked
        • Size 39KB
        • SHA256 ca4e008b75b7c8114a4895a5da3e9f4635ecbf2c9e52c73c333594c5e670958e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc29.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc29.txt.locked
        • Size 39KB
        • SHA256 9e3330bd260314da6bfe21200e334d24175edbb44dfd5c4e7eed40c33525b8a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc30.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc30.txt.locked
        • Size 39KB
        • SHA256 e6f6fb8e667a11f46b1884e71d9207f2671a1e5c01f52b4012190a20de1d2986
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc31.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc31.txt.locked
        • Size 39KB
        • SHA256 30b28bb1eda35cb34b39fdec936e577c02ad30d6ff63d35a5fd4522ca00a7f6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc32.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc32.txt.locked
        • Size 39KB
        • SHA256 6738da486d7158349dad8d480d4cafdd839d3eb3ccf0a814b4d74ccde7373136
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc33.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc33.txt.locked
        • Size 39KB
        • SHA256 8bc89f5b5072a7a16a5265c2081b41237bd6098dd222e4d1dd470a4807b35762
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc34.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc34.txt.locked
        • Size 39KB
        • SHA256 d67529915062c5b3a2be3e67434d255a8c552dd520b81dd55945cfb4b4409ff5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc35.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc35.txt.locked
        • Size 39KB
        • SHA256 7db711aa892a7edbe44133b750f84ba664150327067fcd92953eb433dc8056cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc36.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc36.txt.locked
        • Size 39KB
        • SHA256 621e5e08f0db11b7839d9cce7fe62c550b6b21df62811c1be8924836d42618cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc37.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc37.txt.locked
        • Size 39KB
        • SHA256 7f48937ed2f3478ed633285b9e1426dc818dce39bf4df90ecb89ef85147a0746
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc38.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc38.txt.locked
        • Size 39KB
        • SHA256 625525d1d456f91d9e1dd4f9aeb55b46b5665cae29df34c837ab7a36a281b5fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc39.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\doc39.txt.locked
        • Size 39KB
        • SHA256 4a68aba8732bfa653615060dfbf9bcd9db5df61726bb7f6ca9aa80926f2eda22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo0.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo0.jpg.locked
        • Size 39KB
        • SHA256 5211722d0988883a12fd69b482bb9563a004170151eecbeaf81b130c69ce86a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo1.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo1.jpg.locked
        • Size 39KB
        • SHA256 d9f33f39dfbdff1fa916e84dbb0de19e264ff2d65ea4b9b1b78b8981cd40bd9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo2.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo2.jpg.locked
        • Size 39KB
        • SHA256 8c06d7f7b7c61b09665dd37838123a724c784b60c9de973df447044aa1d51e6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo3.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo3.jpg.locked
        • Size 39KB
        • SHA256 82e6e125965463a10c385743498f8230b9fed5abc7bf3784e2b79a30fa58f44f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo4.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo4.jpg.locked
        • Size 39KB
        • SHA256 e20891b37ff4dec82871f7fa81ad0007284ee38a74c275628db907216352ee42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo5.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo5.jpg.locked
        • Size 39KB
        • SHA256 496d5e99ad011052abffe38d209844392810717568895a7b7e3fbd7bee3b2bac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo6.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo6.jpg.locked
        • Size 39KB
        • SHA256 b8b7ee0e99c47880737b9ef9fa0970e59881cf8738d7932e25ed68356e13f751
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo7.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo7.jpg.locked
        • Size 39KB
        • SHA256 b173b5da8309b6cd9b1f29df26dfed6cfdeb8ad78595317b7c05b3817ee7be57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo8.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo8.jpg.locked
        • Size 39KB
        • SHA256 f1f6276304f5bf53c8292b91948794174063e9e8292aa77082c4b546ca6a0cd9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo9.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-63ffe072d4d1\src\photo9.jpg.locked
        • Size 39KB
        • SHA256 a57b9550e859b9e18797b00cfb94995fa9cd6e5b7721ac7baf05437a86e4c2bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        a.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\src\a.txt
        • Size 5B
        • SHA256 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
        • MD5 SHA1 SHA512

        new.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\src\new.txt
        • Size 8B
        • SHA256 b37d2cbfd875891e9ed073fcbe61f35a990bee8eecbdd07f9efc51339d5ffd66
        • MD5 SHA1 SHA512

        тест.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\src\sub\deeper\тест.txt
        • Size 12B
        • SHA256 8898cd6a1c9777bbb832388868a66967c501a8ab02291e595816b7b23470c838
        • MD5 SHA1 SHA512

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\repo\config
        • Size 180B
        • SHA256 15f2b0e8837c016a504d3ba0ac1980217012505fdd7a7ff0be1d3d922419e145
        • MD5 SHA1 SHA512 TLSH

        709bd602f9526f422710542250d0f5ec2b259c0392a6f87c60cda82b3f13905c

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\repo\data\70\709bd602f9526f422710542250d0f5ec2b259c0392a6f87c60cda82b3f13905c
        • Size 6.0MB
        • SHA256 d5ecfe7900426f93cbd5f6c1d7e8cae542c6afdac1a61d9868f83d705bb0c350
        • MD5 SHA1 SHA512 SSDEEP TLSH

        5724b3ad0179e7647246dcb7d6e64fd5e3ed994db92e029da482cdff7768d8f1

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\repo\snapshots\5724b3ad0179e7647246dcb7d6e64fd5e3ed994db92e029da482cdff7768d8f1
        • Size 195B
        • SHA256 bc5ca11188f2da5275fa2cbb8835a9c7799208b7e8571c2a88022677281008fa
        • MD5 SHA1 SHA512 TLSH

        615b2f208abd198d569e416c19ecdbf3ba2911336470ccfcdb9b3e6620daed8e

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\repo\snapshots\615b2f208abd198d569e416c19ecdbf3ba2911336470ccfcdb9b3e6620daed8e
        • Size 225B
        • SHA256 82f53c7d79550dfa08b9623dae7ea6f251fb230b93c63601fe614b4de2ed27e5
        • MD5 SHA1 SHA512 TLSH

        dup.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6a7edf7157e0\src\sub\dup.bin
        • Size 6.0MB
        • SHA256 73f9b12fb90f11509ab44109d9608c0ec2584217f7cf7e967bdc8ef7b0a65f8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        report.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-7f4859520bd4\src\report.tmp
        • Size 100B
        • SHA256 71ca923fcede19f00b2329835dc8341b0fc048b460207e4f48a8164f448a026d
        • MD5 SHA1 SHA512 TLSH

        a.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\src\a.bin
        • Size 3.0MB
        • SHA256 480a5ff522fb52a7f767aa5169efd1850044096d3088a169360631ee3e336509
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\src\c.bin
        • Size 3.0MB
        • SHA256 7d2ba553ab7bd9ffd44046868abc1319d5a2f9cb83b6db8a22af54d8e210afaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\config
        • Size 180B
        • SHA256 3a6c2e5de7ec95f494d53995918599882008d0577ec193a6f7404c5f44a91ed9
        • MD5 SHA1 SHA512 TLSH

        180b735a8fff655b4f0ce6eb80d24da95ecd7c4ca02eda2f7fdd2aa0e9eaa9df

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\data\18\180b735a8fff655b4f0ce6eb80d24da95ecd7c4ca02eda2f7fdd2aa0e9eaa9df
        • Size 3.0MB
        • SHA256 824183a03f4b979856331d454b7cab898262073cff43fe4ecbec8218ed361d39
        • MD5 SHA1 SHA512 SSDEEP TLSH

        33ba755adc75759360cd3045c9ff119ee52ef1b67df34f1356553908bf7abf14

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\data\33\33ba755adc75759360cd3045c9ff119ee52ef1b67df34f1356553908bf7abf14
        • Size 3.0MB
        • SHA256 9afe68d6bd0282f01271db78fa1d9b0660861d30f580bc42b57615a335e219cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        272044028274cc5f635fab94f489fd5653ec07e5b8f78a38874ac9c54059f70a

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\index\272044028274cc5f635fab94f489fd5653ec07e5b8f78a38874ac9c54059f70a
        • Size 633B
        • SHA256 5a7fcf3e1d9d566c2babfb2328735cd0b3506c5f31d54ce39e2127f4fe8fbc6a
        • MD5 SHA1 SHA512 TLSH

        5926a1603a5c4b7b00a4fcc978fb169222eb0d4b47caef67ed26f13fcc6e6561

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\index\5926a1603a5c4b7b00a4fcc978fb169222eb0d4b47caef67ed26f13fcc6e6561
        • Size 546B
        • SHA256 d20969b112dc48dc629f13cca57ddbfcfb2e66043b1ef743f7bb4af8628fba1d
        • MD5 SHA1 SHA512 TLSH

        6e21e8554ed6828c7c680a869af022844c522533db8b343ed594270e057697eb

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\index\6e21e8554ed6828c7c680a869af022844c522533db8b343ed594270e057697eb
        • Size 194B
        • SHA256 0ab0f6b4debf0b6184fca2b222946088cec6e9b77cce75741afab93f331975aa
        • MD5 SHA1 SHA512 TLSH

        c1dbe259b478842b513fb08c9ff277c6de0ea4e31e8f8e946260dfeeeabfbc42

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\index\c1dbe259b478842b513fb08c9ff277c6de0ea4e31e8f8e946260dfeeeabfbc42
        • Size 1KB
        • SHA256 e606cc92c9866dea7e47ffd9522348b70e3f1f17b998185c32c96e48c684fb0c
        • MD5 SHA1 SHA512 TLSH

        ea40ff55265bb57237156e1a4324bc985e124cee2e2bc1c209aa4093343b4b44

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\index\ea40ff55265bb57237156e1a4324bc985e124cee2e2bc1c209aa4093343b4b44
        • Size 546B
        • SHA256 00a3e5664bb6579041b571cd49cd094f802faa9cb050c2fd1f01760047a5b232
        • MD5 SHA1 SHA512 TLSH

        bf04a5adee426899f65fc67062528981071aa80a0f79a3b0ba733d7fc1a8b656

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\snapshots\bf04a5adee426899f65fc67062528981071aa80a0f79a3b0ba733d7fc1a8b656
        • Size 227B
        • SHA256 0854e3d9322d858ae54e1581d56c48f863a2e65c01d912fc0f39beffc3e8a8cd
        • MD5 SHA1 SHA512 TLSH

        d69140d110effd6c7bcdb1e0ef1fe0d00157cf3d32ad214a2e0ff7353b83317a

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-b36cae760c52\repo\snapshots\d69140d110effd6c7bcdb1e0ef1fe0d00157cf3d32ad214a2e0ff7353b83317a
        • Size 195B
        • SHA256 77dd4bb21ee6584da6d07f345a76c8a9aed2b1c1ccf88778ba01f79296698298
        • MD5 SHA1 SHA512 TLSH

        4f061d6ddb59c71e8c1934107bd5bd15e11894a5b481b62d72b36ec1567d9edc

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-d0c776aba1ca\repo\snapshots\4f061d6ddb59c71e8c1934107bd5bd15e11894a5b481b62d72b36ec1567d9edc
        • Size 189B
        • SHA256 83a8ddc9ed2f65aa14422bc6e7ffc7bc2afd3f3c90b7d5b2f48a39b5e7c45e4f
        • MD5 SHA1 SHA512 TLSH

        same.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-d0c776aba1ca\src\same.txt
        • Size 100B
        • SHA256 5b782723095294b5402d4e0eb80412fcb6adc899c8e7670bdd0bb54170cabe79
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-ec4d93f1ae04\repo\config
        • Size 180B
        • SHA256 5c6355601b89dc67db914ad3ca66674bef99bc7d961379219d002847fbb4f7b0
        • MD5 SHA1 SHA512 TLSH

        21d8f808473331cf15e3f1177ed1c9a26984499aa30af5e1d5765cf24c4aaca7

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-ec4d93f1ae04\repo\data\21\21d8f808473331cf15e3f1177ed1c9a26984499aa30af5e1d5765cf24c4aaca7
        • Size 1.0MB
        • SHA256 dd0d20feafdd9ae1b0ba5cd41063e3715826f79670e0ad7e4bc8f61e7ff08098
        • MD5 SHA1 SHA512 SSDEEP TLSH

        3c996c4a65a816b677c937657f35a4c909757edd6088f83fdca5178863553ce0

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-ec4d93f1ae04\repo\snapshots\3c996c4a65a816b677c937657f35a4c909757edd6088f83fdca5178863553ce0
        • Size 192B
        • SHA256 0ba3a6b7546b130f90986c8d3adfff09ae24e3fa05b9157b96811eeb915e42e6
        • MD5 SHA1 SHA512 TLSH

        126b5b10a6e9b61ac91fa7b40a756b848492cf62fb8a26c8aa6b9b91004a5ba7

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\a\snapshots\126b5b10a6e9b61ac91fa7b40a756b848492cf62fb8a26c8aa6b9b91004a5ba7
        • Size 232B
        • SHA256 9309394248e25c57d528252f632b03e85a98d2e77651343f9e3b297dae5f8380
        • MD5 SHA1 SHA512 TLSH

        126b5b10a6e9b61ac91fa7b40a756b848492cf62fb8a26c8aa6b9b91004a5ba7

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\a\snapshots\126b5b10a6e9b61ac91fa7b40a756b848492cf62fb8a26c8aa6b9b91004a5ba7
        • Size 261B
        • SHA256 ba67a67f8267d7345e17b5ac4a9c2708409e769e9eacf34ea41580286d48e267
        • MD5 SHA1 SHA512 TLSH

        1e573b912cd5691100f88268c8260720210a1cfd3a6f79e1b07004fba34849ae

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\a\snapshots\1e573b912cd5691100f88268c8260720210a1cfd3a6f79e1b07004fba34849ae
        • Size 232B
        • SHA256 ae0687041f5a9c99809431abecb10b013c801dd11ed3c412a9c50dd9b0840dc9
        • MD5 SHA1 SHA512 TLSH

        26b6b6f4dffe1cf7e45ca8449160411a9705bd7948594de88d5ad8f04974db30

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\a\snapshots\26b6b6f4dffe1cf7e45ca8449160411a9705bd7948594de88d5ad8f04974db30
        • Size 204B
        • SHA256 a3c65e8d9fdd304da464375e7635c172ea756c5cf5f76584717c740dce921322
        • MD5 SHA1 SHA512 TLSH

        a13fb3005bee1b11d735b5d32f4e5546423ee617cf5264f370abf4894fa3af6b

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\b\snapshots\a13fb3005bee1b11d735b5d32f4e5546423ee617cf5264f370abf4894fa3af6b
        • Size 312B
        • SHA256 010a909e798983cf232f4a291d8c2e14766a0c01b8fe69fcea6c9aa41041ff1f
        • MD5 SHA1 SHA512 TLSH

        a13fb3005bee1b11d735b5d32f4e5546423ee617cf5264f370abf4894fa3af6b

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\b\snapshots\a13fb3005bee1b11d735b5d32f4e5546423ee617cf5264f370abf4894fa3af6b
        • Size 337B
        • SHA256 05f68528e9b5ba8faf7a290fc5e3255f73956a1941f71e4eacb7201c14149107
        • MD5 SHA1 SHA512 TLSH

        ca3f9edabe582c08fb5d2b29ebb75358bfbe6bde265957ab72564dc3683e3773

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\b\snapshots\ca3f9edabe582c08fb5d2b29ebb75358bfbe6bde265957ab72564dc3683e3773
        • Size 282B
        • SHA256 3760bd928db4c0d49bfbe39b678d01d6e06d47f4010eb11f3ad38e1cdb392ee7
        • MD5 SHA1 SHA512 TLSH

        copy.map

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\copy.map
        • Size 2KB
        • SHA256 fbb2cd9b1bdc2e662f2ab4183b47f85d9300918f7273101706e1faae0dfaed3f
        • MD5 SHA1 SHA512 TLSH

        copy.map

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\copy.map
        • Size 1KB
        • SHA256 2c5a99d743cb8213d5f3a49be7837eee45b218f492e3d69f4c7253ae47883c82
        • MD5 SHA1 SHA512 TLSH

        copy.map.tmp-ed4b13b5c4c7

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\copy.map.tmp-ed4b13b5c4c7
        • Size 1KB
        • SHA256 10fd6993d1f5fa09661f95bbb203173b9f35fee473cf3c8e9c5b49788f549ebb
        • MD5 SHA1 SHA512 TLSH

        one.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\src\one.bin
        • Size 2.0MB
        • SHA256 4b0f29b191bbd084193acf6735c070c7bf44a118af215cfdef10474126360576
        • MD5 SHA1 SHA512 SSDEEP TLSH

        two.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-f2e1b31106cc\src\sub\two.txt
        • Size 1KB
        • SHA256 1a305990be0d102ab68bc5fd6690640f65c8ce6df9916e37b1ab433816f6a6e8
        • MD5 SHA1 SHA512 TLSH

        016547f0fc248671fad9d73362d80ce6c6d174c5036ac098aa6926ba05118d11

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-5797280508d6\repo\snapshots\016547f0fc248671fad9d73362d80ce6c6d174c5036ac098aa6926ba05118d11
        • Size 234B
        • SHA256 eea80665cdc2585d83d8490ec0aff3d99e38bc1f7377b184a1d79b00baca0111
        • MD5 SHA1 SHA512 TLSH

        016547f0fc248671fad9d73362d80ce6c6d174c5036ac098aa6926ba05118d11

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-5797280508d6\repo\snapshots\016547f0fc248671fad9d73362d80ce6c6d174c5036ac098aa6926ba05118d11
        • Size 202B
        • SHA256 1aa6c28a08dbf57ad7047005d11799dc8af70015fb4f3fc8b2f12930c0971f67
        • MD5 SHA1 SHA512 TLSH

        8b8892d3232a1ff45301e3569c04f399c4d32314e1fba1dc9e2f210f458ba930

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-5797280508d6\repo\snapshots\8b8892d3232a1ff45301e3569c04f399c4d32314e1fba1dc9e2f210f458ba930
        • Size 232B
        • SHA256 7c52e40c17118498e200310253b2058c71365ce8c9a72ed39b33155bdf2ccc8c
        • MD5 SHA1 SHA512 TLSH

        gone.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-5797280508d6\src\gone.txt
        • Size 100B
        • SHA256 6b4dc7176cc7ba6290bb3834f36067d9ec64fb625bd9d65ed1269f93dd1e0987
        • MD5 SHA1 SHA512 TLSH

        same.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-5797280508d6\src\same.bin
        • Size 292KB
        • SHA256 7e9d60924b2c517e0ac5eebba80fbabb78d8bbf57a989bedab973c23137f20c7
        • MD5 SHA1 SHA512 SSDEEP TLSH