Analysis

  • max time kernel
    150s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/11/2026, 04:49

General

  • Target
    2026-11-12_3e3b4ede851544870e6006c9fda79269_glassworm_icedid_njrat.exe
  • Size 9.3MB
  • Sample261113-ffvfasfx2v
  • SHA256 8179adf11f8f8d2dafda56803502b486ec522444dfe245ede7b20762a40c62f1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • Suspicious use of AdjustPrivilegeToken 33 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-12_3e3b4ede851544870e6006c9fda79269_glassworm_icedid_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-12_3e3b4ede851544870e6006c9fda79269_glassworm_icedid_njrat.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of AdjustPrivilegeToken
    PID:3164

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        my-documents.jsonl

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-jobs-f9d16772d24d\history\my-documents.jsonl
        • Size 294B
        • SHA256 a1d7ab0e99da4bb789d99d9e0fb5c42734e9d8c6109ad5c284be0976a1cf2c02
        • MD5 SHA1 SHA512 TLSH

        my-documents-2.json

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-jobs-f9d16772d24d\jobs\my-documents-2.json
        • Size 1KB
        • SHA256 9473079a08877afec527e99ae2a3b2a74d8b7da57ffafef7c7f6251abdd1ec74
        • MD5 SHA1 SHA512 TLSH

        my-documents.json

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-jobs-f9d16772d24d\jobs\my-documents.json
        • Size 1KB
        • SHA256 c0711ad72b7302dd6363c1fd2d8ad8641f5a75d5df348e6acb66caab79f6e8d3
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-560b301eec7b\config
        • Size 180B
        • SHA256 24d114359eb8f2f9d602877efd4215b81e39a8273ea495a8d2c680e30253df38
        • MD5 SHA1 SHA512 TLSH

        config.tmp-425a9f7bc55a64d2

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-560b301eec7b\config.tmp-425a9f7bc55a64d2
        • Size 180B
        • SHA256 0af33f0d1c6db6327ba89fa7c93b451466016ab883ab0936e09012ef4243e0d8
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-897904a9549a\config
        • Size 180B
        • SHA256 df3ad5e8725c03c079fe71873944caaaa72c1bb9a72db37895131d8139e84f4f
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-897904a9549a\config
        • Size 180B
        • SHA256 d353c98bc4738d213901bc88cea1d941d06c5e1d8ee4dd11ef4b25bfccc6766e
        • MD5 SHA1 SHA512 TLSH

        recovery

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-897904a9549a\recovery
        • Size 160B
        • SHA256 ab63f06860462f09f6ffb1ccb66440ba0f03aabbe8aa65ec771404c245c480f5
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-a5a29cccb70e\config
        • Size 180B
        • SHA256 0fa7751fcc3f13b54bb3dbf8724db1009e341f9eb5869965b2700226004bf6d9
        • MD5 SHA1 SHA512 TLSH

        recovery.tmp-46d5bc7e6318ac72

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-keys-a5a29cccb70e\recovery.tmp-46d5bc7e6318ac72
        • Size 160B
        • SHA256 8902913e1b37bc75288585fac6c829653a3fdf3d8e20ab436a5dc062a41c8f33
        • MD5 SHA1 SHA512 TLSH

        393918cc4379453fe0a5e62ba3b642fc7486de34fa12f7fd3c22dfd3cfbd7e7c

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-055dca72d645\repo\locks\393918cc4379453fe0a5e62ba3b642fc7486de34fa12f7fd3c22dfd3cfbd7e7c
        • Size 68B
        • SHA256 0aaa06ceb9dac5da05b5955aa1a22947337eae2f9320b65911cab1e122d49b25
        • MD5 SHA1 SHA512 TLSH

        7511b6cba5a7f6ba3c79c38470bf17173bbedda60c7369d85b51e11f2c0a9c92

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-055dca72d645\repo\locks\7511b6cba5a7f6ba3c79c38470bf17173bbedda60c7369d85b51e11f2c0a9c92
        • Size 64B
        • SHA256 05e8dacab5756d0a699bf2e5f6a1ece1c2bcad33ee8de279a32892e62210316d
        • MD5 SHA1 SHA512 TLSH

        ad3a54980e9052d29484a07dc80214e574db9d8c3df6e9604228e9cd01f18c01

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-055dca72d645\repo\locks\ad3a54980e9052d29484a07dc80214e574db9d8c3df6e9604228e9cd01f18c01
        • Size 69B
        • SHA256 d88ab072e1feeaf681748d4da80259d63fea2b5bb468f20068d0595d5cbd7768
        • MD5 SHA1 SHA512 TLSH

        c5d9cfcbc03ab5435c0402233544192bf13f0502af3fd984c004c45486b46033

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-055dca72d645\repo\locks\c5d9cfcbc03ab5435c0402233544192bf13f0502af3fd984c004c45486b46033
        • Size 68B
        • SHA256 46d6cd35ec86c04745338b7305b394d759c27c34e19bce4f620dc2f9eb09c802
        • MD5 SHA1 SHA512 TLSH

        ead4bcd377361443dd33fb408cbaa5bc23bbeb526447b1720e5fe71961110697

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-055dca72d645\repo\locks\ead4bcd377361443dd33fb408cbaa5bc23bbeb526447b1720e5fe71961110697
        • Size 70B
        • SHA256 e19254b85b16ba2219e62f891fee3044f956662c326273c00d32b0d69b24d765
        • MD5 SHA1 SHA512 TLSH

        report.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0bdc421017bf\src\report.tmp
        • Size 100B
        • SHA256 71ca923fcede19f00b2329835dc8341b0fc048b460207e4f48a8164f448a026d
        • MD5 SHA1 SHA512 TLSH

        a.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\src\a.bin
        • Size 3.0MB
        • SHA256 480a5ff522fb52a7f767aa5169efd1850044096d3088a169360631ee3e336509
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\src\c.bin
        • Size 3.0MB
        • SHA256 7d2ba553ab7bd9ffd44046868abc1319d5a2f9cb83b6db8a22af54d8e210afaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\config
        • Size 180B
        • SHA256 3e5194ef4ae7a0a3b8ae594291e4cf0196446295b55eabc3c8002d108fb97afd
        • MD5 SHA1 SHA512 TLSH

        97f8b8980c3f0324df963d7cee202d6ea36d0cec469d6147933c3163337c1b76

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\data\97\97f8b8980c3f0324df963d7cee202d6ea36d0cec469d6147933c3163337c1b76
        • Size 3.0MB
        • SHA256 79306874848a00bc08812be9de37bf8bc8ac626dc9deb046e033cc439f6f57d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        99b98cef8dc8331c5ed221cb9e67f8b46793cb986e19c63e080b748bcf24ba8a

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\data\99\99b98cef8dc8331c5ed221cb9e67f8b46793cb986e19c63e080b748bcf24ba8a
        • Size 3.0MB
        • SHA256 49d6c504833f3e67f4120fbf068143b8e6ded0bd6ec7a448dd4d988d01c062b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        229486ad20e31775001a8ea151107a8489d1c1ac5465caa01ef2b02ff5585ff4

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\index\229486ad20e31775001a8ea151107a8489d1c1ac5465caa01ef2b02ff5585ff4
        • Size 633B
        • SHA256 b104065fede0f97a98fc53e7d1233eb64bebf05522048495c8668261b25ce3ba
        • MD5 SHA1 SHA512 TLSH

        629588455595c7f48fcc4030f1234423f414dd2e4e5914445b6fd5f80433d016

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\index\629588455595c7f48fcc4030f1234423f414dd2e4e5914445b6fd5f80433d016
        • Size 546B
        • SHA256 d3f7e55cf3b2b3ca5e03ebb34b3a5053c0d161d0572866eba84e00963dd49275
        • MD5 SHA1 SHA512 TLSH

        6973fdddf2af53d6c78a565c73d6d049540339e99e8a0b255a9249bdffbd78c0

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\index\6973fdddf2af53d6c78a565c73d6d049540339e99e8a0b255a9249bdffbd78c0
        • Size 1KB
        • SHA256 c472b76469d4f3ae9b6e46a9bc78a24fccd76a7af5bf899796b309ca37b1dfd3
        • MD5 SHA1 SHA512 TLSH

        7cbfe5040e33c72e38179cf9c06bd660780fcd401b3395128f495c8cec841106

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\index\7cbfe5040e33c72e38179cf9c06bd660780fcd401b3395128f495c8cec841106
        • Size 546B
        • SHA256 25309cbb3d1dbeafdffa7ceb77ee33d2de30feef88467563a1229bd121989096
        • MD5 SHA1 SHA512 TLSH

        ab830206455d2addfce8e5ed312b0e939dfac95c8e1efedaef057e905b6311eb

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\index\ab830206455d2addfce8e5ed312b0e939dfac95c8e1efedaef057e905b6311eb
        • Size 194B
        • SHA256 073881e970716a4a9e2aab5e4f79d6fa6e9f668cee0a2a3f4811f4327104d05d
        • MD5 SHA1 SHA512 TLSH

        3d9313d1a9a0ac6458b56d8e28a65f5e507fd73876466411f74181dfb33f0d43

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\snapshots\3d9313d1a9a0ac6458b56d8e28a65f5e507fd73876466411f74181dfb33f0d43
        • Size 195B
        • SHA256 5f8acc635b50fc229bc1405d4db4a9893915e165699b5f685196b5f3941139db
        • MD5 SHA1 SHA512 TLSH

        e1de382cdc7236f14aa7d407de39d82a538e59bca961918ef2561bbadaf935b3

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-0ff6722e2d3a\repo\snapshots\e1de382cdc7236f14aa7d407de39d82a538e59bca961918ef2561bbadaf935b3
        • Size 227B
        • SHA256 440d5ea3b249ecccbeadf61717c6dee3b879caf19e928ee65474dcdf3c8ff0dd
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-17a53af42fc0\repo\config
        • Size 180B
        • SHA256 206f9b9b9d47ce99c1937b080552fb03ab651eeb6ab5ab75310e6884d1c6772d
        • MD5 SHA1 SHA512 TLSH

        2382cfcc6c45c792696a877b5d641b3955cc3b736a93b65d7be2688a501d755e

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-17a53af42fc0\repo\snapshots\2382cfcc6c45c792696a877b5d641b3955cc3b736a93b65d7be2688a501d755e
        • Size 195B
        • SHA256 b2e40994ee243923686afaccc30a0a2e8239fe366e0169a95d320d6de390725f
        • MD5 SHA1 SHA512 TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-2052adf1827d\repo\config
        • Size 180B
        • SHA256 f8e4afda4223c93606e64c3e326fca21abef2a02e4de28ee4ef00b469a2623a0
        • MD5 SHA1 SHA512 TLSH

        a.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\src\a.txt
        • Size 5B
        • SHA256 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
        • MD5 SHA1 SHA512

        new.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\src\new.txt
        • Size 8B
        • SHA256 b37d2cbfd875891e9ed073fcbe61f35a990bee8eecbdd07f9efc51339d5ffd66
        • MD5 SHA1 SHA512

        тест.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\src\sub\deeper\тест.txt
        • Size 12B
        • SHA256 8898cd6a1c9777bbb832388868a66967c501a8ab02291e595816b7b23470c838
        • MD5 SHA1 SHA512

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\repo\config
        • Size 180B
        • SHA256 604006abc549e414daf8b9e741d4edc816fda30098ea70575e5ea98244ecd939
        • MD5 SHA1 SHA512 TLSH

        e62b48e41c115cad46fbd4287aa507fc596d49dc2ed59bdb7b1020f99ea16750

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\repo\data\e6\e62b48e41c115cad46fbd4287aa507fc596d49dc2ed59bdb7b1020f99ea16750
        • Size 6.0MB
        • SHA256 1a85ed4b372d473f6a98d1625f61cba39e4057acce5e42f31302b6eb841b24fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0424985f0fb8726ac0061a3706de5dd93e4db3bfdd1886850b35fda61d791ce2

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\repo\snapshots\0424985f0fb8726ac0061a3706de5dd93e4db3bfdd1886850b35fda61d791ce2
        • Size 195B
        • SHA256 96ba64146c624f3236f921b94922985e74345f5cfe4ca83979ee93972e9b02ea
        • MD5 SHA1 SHA512 TLSH

        576f84103774cf687ff1380b420f834e7911585b49cdb761581aba429c7bb062

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\repo\snapshots\576f84103774cf687ff1380b420f834e7911585b49cdb761581aba429c7bb062
        • Size 225B
        • SHA256 72e9bbe232afc4b26b69db31be875308af43fab6e488ad38e3c6f7f652615351
        • MD5 SHA1 SHA512 TLSH

        dup.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5ad678c1ecee\src\sub\dup.bin
        • Size 6.0MB
        • SHA256 73f9b12fb90f11509ab44109d9608c0ec2584217f7cf7e967bdc8ef7b0a65f8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5af2853a26a7\repo\config
        • Size 180B
        • SHA256 4d194de59aab9d4502943e44065aea85e85c0b5baf3cc44077c6ba81eb37327e
        • MD5 SHA1 SHA512 TLSH

        9cb75266c266e0d249a2fc46739d5c038343131065be9b7346ed7e62884d0460

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5af2853a26a7\repo\data\9c\9cb75266c266e0d249a2fc46739d5c038343131065be9b7346ed7e62884d0460
        • Size 1.0MB
        • SHA256 c92b3f808cd957cf5db84053fd3827cb7b5df7a5bbf0ff8179483b46c1fb4bec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        85ef7085a6c2a5a40636c82f50a5cbcf0d0d457b184decf00c564f42bec41c45

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-5af2853a26a7\repo\snapshots\85ef7085a6c2a5a40636c82f50a5cbcf0d0d457b184decf00c564f42bec41c45
        • Size 192B
        • SHA256 1d4cb299ccc7f0d25010d4589ef82eee7024ab241fa1deea12fb226b95ca5b30
        • MD5 SHA1 SHA512 TLSH

        52a69ce4ddfb9b4371a58837b55a47d70ab1755c316e5ef2783b450bd5143a6d

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\repo\snapshots\52a69ce4ddfb9b4371a58837b55a47d70ab1755c316e5ef2783b450bd5143a6d
        • Size 195B
        • SHA256 aa2eb8188ed850b950a44eb53581a5b1a95a2fcad2e240a1f5a133d525998597
        • MD5 SHA1 SHA512 TLSH

        557de94c6646f1589297e1af57939aca8e80f62d82aff5ed26d4197f4f3321f4

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\repo\snapshots\557de94c6646f1589297e1af57939aca8e80f62d82aff5ed26d4197f4f3321f4
        • Size 226B
        • SHA256 dff38d1cc9f62b17c5b9ab1722c3abd5633d2227f972a790c1728dab13dc7b2a
        • MD5 SHA1 SHA512 TLSH

        826468042cbe44093d85eed7b11a46229834ab0c4de1e3e58c96fa5d2021b575

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\repo\snapshots\826468042cbe44093d85eed7b11a46229834ab0c4de1e3e58c96fa5d2021b575
        • Size 226B
        • SHA256 d0571904b2c6ad0aee55bdb14ef7d6f012de6a1813e278b4903fbaeddeba66a6
        • MD5 SHA1 SHA512 TLSH

        doc25.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc25.txt.locked
        • Size 39KB
        • SHA256 abdb91c0e936b8bb35def55cbc2081e9eceeeb46c7e33949d12a9a41f3ed2dc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc26.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc26.txt.locked
        • Size 39KB
        • SHA256 a4f612942286025ad91630b692e4897e8141eefb49c995ce85c70cc32766764f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc27.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc27.txt.locked
        • Size 39KB
        • SHA256 58eb8ef91cebd443f28a541c90562062fe4e939b73810349afd5df7569d92c14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc28.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc28.txt.locked
        • Size 39KB
        • SHA256 ca4e008b75b7c8114a4895a5da3e9f4635ecbf2c9e52c73c333594c5e670958e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc29.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc29.txt.locked
        • Size 39KB
        • SHA256 9e3330bd260314da6bfe21200e334d24175edbb44dfd5c4e7eed40c33525b8a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc30.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc30.txt.locked
        • Size 39KB
        • SHA256 e6f6fb8e667a11f46b1884e71d9207f2671a1e5c01f52b4012190a20de1d2986
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc31.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc31.txt.locked
        • Size 39KB
        • SHA256 30b28bb1eda35cb34b39fdec936e577c02ad30d6ff63d35a5fd4522ca00a7f6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc32.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc32.txt.locked
        • Size 39KB
        • SHA256 6738da486d7158349dad8d480d4cafdd839d3eb3ccf0a814b4d74ccde7373136
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc33.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc33.txt.locked
        • Size 39KB
        • SHA256 8bc89f5b5072a7a16a5265c2081b41237bd6098dd222e4d1dd470a4807b35762
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc34.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc34.txt.locked
        • Size 39KB
        • SHA256 d67529915062c5b3a2be3e67434d255a8c552dd520b81dd55945cfb4b4409ff5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc35.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc35.txt.locked
        • Size 39KB
        • SHA256 7db711aa892a7edbe44133b750f84ba664150327067fcd92953eb433dc8056cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc36.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc36.txt.locked
        • Size 39KB
        • SHA256 621e5e08f0db11b7839d9cce7fe62c550b6b21df62811c1be8924836d42618cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc37.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc37.txt.locked
        • Size 39KB
        • SHA256 7f48937ed2f3478ed633285b9e1426dc818dce39bf4df90ecb89ef85147a0746
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc38.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc38.txt.locked
        • Size 39KB
        • SHA256 625525d1d456f91d9e1dd4f9aeb55b46b5665cae29df34c837ab7a36a281b5fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc39.txt.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\doc39.txt.locked
        • Size 39KB
        • SHA256 4a68aba8732bfa653615060dfbf9bcd9db5df61726bb7f6ca9aa80926f2eda22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo0.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo0.jpg.locked
        • Size 39KB
        • SHA256 5211722d0988883a12fd69b482bb9563a004170151eecbeaf81b130c69ce86a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo1.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo1.jpg.locked
        • Size 39KB
        • SHA256 d9f33f39dfbdff1fa916e84dbb0de19e264ff2d65ea4b9b1b78b8981cd40bd9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo2.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo2.jpg.locked
        • Size 39KB
        • SHA256 8c06d7f7b7c61b09665dd37838123a724c784b60c9de973df447044aa1d51e6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo3.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo3.jpg.locked
        • Size 39KB
        • SHA256 82e6e125965463a10c385743498f8230b9fed5abc7bf3784e2b79a30fa58f44f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo4.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo4.jpg.locked
        • Size 39KB
        • SHA256 e20891b37ff4dec82871f7fa81ad0007284ee38a74c275628db907216352ee42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo5.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo5.jpg.locked
        • Size 39KB
        • SHA256 496d5e99ad011052abffe38d209844392810717568895a7b7e3fbd7bee3b2bac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo6.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo6.jpg.locked
        • Size 39KB
        • SHA256 b8b7ee0e99c47880737b9ef9fa0970e59881cf8738d7932e25ed68356e13f751
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo7.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo7.jpg.locked
        • Size 39KB
        • SHA256 b173b5da8309b6cd9b1f29df26dfed6cfdeb8ad78595317b7c05b3817ee7be57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo8.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo8.jpg.locked
        • Size 39KB
        • SHA256 f1f6276304f5bf53c8292b91948794174063e9e8292aa77082c4b546ca6a0cd9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        photo9.jpg.locked

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-6f9f2f45df29\src\photo9.jpg.locked
        • Size 39KB
        • SHA256 a57b9550e859b9e18797b00cfb94995fa9cd6e5b7721ac7baf05437a86e4c2bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        top.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-704673dd9542\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-704673dd9542\src\top.txt
        • Size 3B
        • SHA256 28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39
        • MD5 SHA1 SHA512

        4e8f8cb9dd60247fb5f835d104feb11b1de93185a4042d2e2bcd087ede79d8a6

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\a\snapshots\4e8f8cb9dd60247fb5f835d104feb11b1de93185a4042d2e2bcd087ede79d8a6
        • Size 232B
        • SHA256 0e4c912f02308bc4123685ba9527ff4d0a03d8b958e19db81e58343654dc7002
        • MD5 SHA1 SHA512 TLSH

        4e8f8cb9dd60247fb5f835d104feb11b1de93185a4042d2e2bcd087ede79d8a6

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\a\snapshots\4e8f8cb9dd60247fb5f835d104feb11b1de93185a4042d2e2bcd087ede79d8a6
        • Size 261B
        • SHA256 3dc946b9753afccb689e17e687c11ac0208d50703b3ceeb324283785fde70618
        • MD5 SHA1 SHA512 TLSH

        cdf03db8a692d0b17e6d953d3b633677244d2d931b8d2139621396314e34fabb

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\a\snapshots\cdf03db8a692d0b17e6d953d3b633677244d2d931b8d2139621396314e34fabb
        • Size 204B
        • SHA256 e6b164cec99c585870feaadf5fda4b16109e5ad4b19e6bcee58155e18c8c0466
        • MD5 SHA1 SHA512 TLSH

        f6e94ca38e2cbe0c5c5eec18cb3d779246e7ec75bfa10af7353ed61b9ce699b0

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\a\snapshots\f6e94ca38e2cbe0c5c5eec18cb3d779246e7ec75bfa10af7353ed61b9ce699b0
        • Size 232B
        • SHA256 fdf301c71a835f37177a5e4d1372b41a45a5f0d092d48f9662af2c499c6695d3
        • MD5 SHA1 SHA512 TLSH

        3742d8775e6f8207b1eb748238b2374bc466b27992a70b68f50899f5040e0a71

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\b\snapshots\3742d8775e6f8207b1eb748238b2374bc466b27992a70b68f50899f5040e0a71
        • Size 312B
        • SHA256 bce7f0bf1d16a5567ebb83f69505819609ea659e9de4fae0ac75b36cf233509a
        • MD5 SHA1 SHA512 TLSH

        3742d8775e6f8207b1eb748238b2374bc466b27992a70b68f50899f5040e0a71

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\b\snapshots\3742d8775e6f8207b1eb748238b2374bc466b27992a70b68f50899f5040e0a71
        • Size 337B
        • SHA256 2b742fab0e07479bf52bbc695b3203910328749b8c6fa9494866537ff320ceef
        • MD5 SHA1 SHA512 TLSH

        8e3b4b24eabaff7ad98f6a9ba8d2a96193bceada75f4045f5663ac54d6080b77

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\b\snapshots\8e3b4b24eabaff7ad98f6a9ba8d2a96193bceada75f4045f5663ac54d6080b77
        • Size 281B
        • SHA256 c8c82d68ab9107c2ef947edec1dfabe408e5b6a5aa88d14d7894841b51042692
        • MD5 SHA1 SHA512 TLSH

        copy.map

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\copy.map
        • Size 1KB
        • SHA256 068d73eed1d20769d12f91fe51e18e52d0c338b9eef673170b96b09cd2bec95d
        • MD5 SHA1 SHA512 TLSH

        copy.map

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\copy.map
        • Size 2KB
        • SHA256 b8c876ec9881080031d81fb81de80a978fc008a3f9d3db6b8fc50df39b7c62ce
        • MD5 SHA1 SHA512 TLSH

        copy.map.tmp-6907f1eb41b3

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\copy.map.tmp-6907f1eb41b3
        • Size 1KB
        • SHA256 5cddddc0c7f0bf66a86815c88c7a94226ecd2b1746f1b573485a3c2f6bd8b957
        • MD5 SHA1 SHA512 TLSH

        one.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\src\one.bin
        • Size 2.0MB
        • SHA256 4b0f29b191bbd084193acf6735c070c7bf44a118af215cfdef10474126360576
        • MD5 SHA1 SHA512 SSDEEP TLSH

        two.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\out\C\Users\Admin\AppData\Local\Temp\vaultik-test-a42b23813f1a\src\sub\two.txt
        • Size 1KB
        • SHA256 1a305990be0d102ab68bc5fd6690640f65c8ce6df9916e37b1ab433816f6a6e8
        • MD5 SHA1 SHA512 TLSH

        e144e19da8e29d2ce77b578084daf2b23aa1a32cc82e2f06122101c06d2a287c

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-e123fc68f6dd\repo\snapshots\e144e19da8e29d2ce77b578084daf2b23aa1a32cc82e2f06122101c06d2a287c
        • Size 189B
        • SHA256 8596e5700a11e4a88357db7021974f887d2a88e8d171ca79b474018784dce8fa
        • MD5 SHA1 SHA512 TLSH

        same.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-test-e123fc68f6dd\src\same.txt
        • Size 100B
        • SHA256 5b782723095294b5402d4e0eb80412fcb6adc899c8e7670bdd0bb54170cabe79
        • MD5 SHA1 SHA512 TLSH

        77357d03dd80ce02e287dbe88e142b9157cb84d48e2d4d14f3a2accbb47c570a

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-48431bc014e5\repo\snapshots\77357d03dd80ce02e287dbe88e142b9157cb84d48e2d4d14f3a2accbb47c570a
        • Size 232B
        • SHA256 bdb0f4bbfd88883adf676f0159d391a4e2be85c2fe941d23455ecf2f4e4e8bf9
        • MD5 SHA1 SHA512 TLSH

        d1a86dd8a1a9c3c7d5b60a59529d22677056931f581b4cb0156e01fbccaa6aba

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-48431bc014e5\repo\snapshots\d1a86dd8a1a9c3c7d5b60a59529d22677056931f581b4cb0156e01fbccaa6aba
        • Size 234B
        • SHA256 1c69c9e7db46217fa7634d17c6a423699ac3cd8611a7bfe55385ca4895b4f052
        • MD5 SHA1 SHA512 TLSH

        d1a86dd8a1a9c3c7d5b60a59529d22677056931f581b4cb0156e01fbccaa6aba

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-48431bc014e5\repo\snapshots\d1a86dd8a1a9c3c7d5b60a59529d22677056931f581b4cb0156e01fbccaa6aba
        • Size 202B
        • SHA256 c64c6d19c433861c565e44ba5adcc17390201299860afa7a49538325c49453de
        • MD5 SHA1 SHA512 TLSH

        gone.txt

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-48431bc014e5\src\gone.txt
        • Size 100B
        • SHA256 6b4dc7176cc7ba6290bb3834f36067d9ec64fb625bd9d65ed1269f93dd1e0987
        • MD5 SHA1 SHA512 TLSH

        same.bin

        • Path C:\Users\Admin\AppData\Local\Temp\vaultik-versions-48431bc014e5\src\same.bin
        • Size 292KB
        • SHA256 7e9d60924b2c517e0ac5eebba80fbabb78d8bbf57a989bedab973c23137f20c7
        • MD5 SHA1 SHA512 SSDEEP TLSH