CryptoScan (Volatility 3 Plugin)

Location

volatility3-1.0.1\volatility3\framework\plugins\windows\cryptoscan.py
volatility3-1.0.1\bob.jpg
volatility3-1.0.1\wordlist.txt

BTC (BoB Tracers of Coin) 강정윤 박준성 이문규 임민택 정현덕

python ./vol.py -f [memory.mem] windows.cryptoscan --pid [Process ID] --[btc,eth,xrp]

python .\vol.py -f sample.mem windows.cryptoscan --pid --btc

--[btc,eth,xrp]: Types of cryptocurrency that you want to extract transactions from.

Name		Name	Last commit message	Last commit date
Latest commit History 51 Commits
CryptoScan_exportPDF.py		CryptoScan_exportPDF.py
Cryptoscan_Report.pdf		Cryptoscan_Report.pdf
README.md		README.md
bob.jpg		bob.jpg
cryptoscan.py		cryptoscan.py
cryptoscan_backup.py		cryptoscan_backup.py
description.txt		description.txt
memmap.py		memmap.py
pslist_edit.py		pslist_edit.py
regex_test.py		regex_test.py
wordlist.txt		wordlist.txt