Just letting you know that about an hour ago I tried deploying your RAT ufile.io/r50xy and the scammer ran it on my VM (so I have restored to a previous snapshot within about 3 mins of it being opened, and if you can connect to your RAT then you’re connecting to the scammer) but I don’t think the scammer took it.