hxxps://traumalab[.]itch[.]io/trauma-lab

Analysis

user interaction
yes
max time kernel
32s
max time network
95s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 22:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://traumalab.itch.io/trauma-lab
Sample261024-2fcfdaxvcs

Score

3^/10

discovery persistence ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5848	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4896	chrome.exe
4896	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe

Suspicious use of AdjustPrivilegeToken 62 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe
Token: SeShutdownPrivilege	4896	chrome.exe
Token: SeCreatePagefilePrivilege	4896	chrome.exe

Suspicious use of FindShellTrayWindow 40 IoCs

pid	Process
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe
4896	chrome.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4896 wrote to memory of 4144	4896	chrome.exe	91
PID 4896 wrote to memory of 5484	4896	chrome.exe	92
PID 4896 wrote to memory of 5848	4896	chrome.exe	93
PID 4896 wrote to memory of 5484	4896	chrome.exe	92
PID 4896 wrote to memory of 4524	4896	chrome.exe	95
PID 4896 wrote to memory of 4816	4896	chrome.exe	97
PID 4896 wrote to memory of 4456	4896	chrome.exe	96
PID 4896 wrote to memory of 4524	4896	chrome.exe	95
PID 4896 wrote to memory of 4816	4896	chrome.exe	97
PID 4896 wrote to memory of 4456	4896	chrome.exe	96
PID 4896 wrote to memory of 2016	4896	chrome.exe	98
PID 4896 wrote to memory of 4664	4896	chrome.exe	100
PID 4896 wrote to memory of 5068	4896	chrome.exe	101
PID 4896 wrote to memory of 4664	4896	chrome.exe	100
PID 4896 wrote to memory of 5068	4896	chrome.exe	101
PID 4896 wrote to memory of 2552	4896	chrome.exe	102
PID 4896 wrote to memory of 2552	4896	chrome.exe	102
PID 4896 wrote to memory of 4148	4896	chrome.exe	103
PID 4896 wrote to memory of 4148	4896	chrome.exe	103
PID 4896 wrote to memory of 2356	4896	chrome.exe	104
PID 4896 wrote to memory of 2356	4896	chrome.exe	104
PID 4896 wrote to memory of 2904	4896	chrome.exe	105
PID 4896 wrote to memory of 2904	4896	chrome.exe	105
PID 4896 wrote to memory of 5152	4896	chrome.exe	107
PID 4896 wrote to memory of 5152	4896	chrome.exe	107
PID 4896 wrote to memory of 1236	4896	chrome.exe	109
PID 4896 wrote to memory of 1236	4896	chrome.exe	109
PID 4896 wrote to memory of 3684	4896	chrome.exe	111
PID 4896 wrote to memory of 3684	4896	chrome.exe	111
PID 4896 wrote to memory of 4112	4896	chrome.exe	112
PID 4896 wrote to memory of 4112	4896	chrome.exe	112
PID 4896 wrote to memory of 4980	4896	chrome.exe	113
PID 4896 wrote to memory of 4980	4896	chrome.exe	113
PID 4896 wrote to memory of 5552	4896	chrome.exe	115
PID 4896 wrote to memory of 2468	4896	chrome.exe	116
PID 4896 wrote to memory of 412	4896	chrome.exe	117
PID 4896 wrote to memory of 4520	4896	chrome.exe	118

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://traumalab.itch.io/trauma-lab
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ff98a9fc728,0x7ff98a9fc734,0x7ff98a9fc740
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,5468459073897401354,5376032586473720574,262144 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:5484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1984,i,12289466115544937853,2516197271725869229,524288 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2216,i,12502217991062361179,2614922617132700350,524288 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:13
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3100,i,16162153885211397246,15651277469401990495,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3120,i,11825124896161304319,7774423907030950197,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5172,i,7666206563016336394,13742735684298804910,524288 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5300,i,10651260797962754089,6629398318335428975,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5272,i,5820568675561841413,7636106437474731046,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5708,i,16996160343360363615,16539078738302432908,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5292,i,8966884675010313362,6335238602869041190,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5716,i,18101499817822122366,2062770070262716997,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5748,i,6186232339880855030,881408992141111906,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6496,i,10230546902281298281,2348301506633125643,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6640,i,15433254104517195941,10970560953662495231,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5652,i,13414466011421275828,3350559757134279296,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:3684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6624,i,9705019227943716121,2963339174196956168,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6160,i,2642559943385928766,6472107849019265289,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5976,i,6824611736064547029,18000687235079647094,524288 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:5552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5488,i,5666615497792960603,4647388751420963187,524288 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
  2⤵
  PID:2468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,13479249048987551255,16245561007257953588,524288 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
  2⤵
  PID:412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5300,i,18027851747389499277,721762863561132215,524288 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:14
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5488,i,15247560762046557604,11932698485551055706,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6904,i,7600919266359274519,11800345998440648013,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=6980 /prefetch:1
  2⤵
  PID:1320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6140,i,1130679265860690175,10204940196772723949,2097152 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3712,i,4579323558449453124,12410342477347204684,524288 --field-trial-handle=1948,i,15205071135218347607,18283538024945626705,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:12
  2⤵
  PID:3428

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2164

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:692

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:1928

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

045b3773-9063-4933-a541-4d0b635d5ef1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\045b3773-9063-4933-a541-4d0b635d5ef1.tmp
Size 5KB
SHA256 5bbeb36f066f9f9984be379da2c5c308c1bb474a2b9703c3be7e4dcebfb1c2b2
MD5 ca94819ef3405c98a8931f1a442e2009
SHA1 f9948b69ecad611102aea165c3909fc63be59a52
SHA512 bf8a0e91fa8723d306cb988d3c7183accd251885616563c0ed7cfab7f81644b0e2c74857880b5cad6fb1f316feed71020dbb73f66401b73fe9cebfa677e3e2df
SSDEEP 96:tbJ0d+TWqN/K890wxi+9M7fX3urjUzvdUCSl8h4otop5OpKDVB6kGGfvteer5Auk:tt0oWqNVVxi+9oPmeiU2MsrBv0M+Wtw/
TLSH
T1BFC13B71786D687799E7E556B0023D53CEB4606B6621DFB4EDEE0F1C02E70AC1346523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f6f1937-b01d-4fd8-8615-dd7429b3ab05.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\0f6f1937-b01d-4fd8-8615-dd7429b3ab05.tmp
Size 5KB
SHA256 7242f6abfcec0ffa9b34d1362367f3661211b83ad78eed560700818371ef7792
MD5 e00e2b31e966a7d73f0ff1a8f8027859
SHA1 39833538150cc5c1a6fa0f87d2a5dd929701ad7e
SHA512 668a748b78591b1c5495c132290f6d5f8466c80db98717b94ce5d234ee4a844f6cdb23f2531a5d16b6507ad6c5ac6cd3cd548c3bae9ea1d78951dff367b080df
SSDEEP 96:tbJ0d+TWqN/K890wxi+9M7fX3urjUzvdUCSl8h4otop5OpIDVB6cGovtepYWtRkJ:tt0oWqNVVxi+9oPmeiU2M+rcvpYWtGdX
TLSH
T102C1E770A86D9C6B49F6A586B1033D438EB8606B6A25AEA4FDEA5E0C01E34DC1347523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79f5cd5c-cc19-4100-b5c1-aa2f42d8ddda.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\79f5cd5c-cc19-4100-b5c1-aa2f42d8ddda.tmp
Size 4KB
SHA256 9b96b1ae3baa4540f89a4093b2d460be5ca559e5f680d5679158c9b18b241df7
MD5 0845195bfff79034a952743fe34b7c0b
SHA1 55429054faba4665bed4aee416c5ffed1a20b6d7
SHA512 7f6b13d57f0ef151d77790e18d29dad276856523a96976984364430bdde7a9441694c3daa6412a500b2736ba7beb44495809a6775bcb02eeb23915f67ddbfb63
SSDEEP 96:CC0d+TWqN/K890wxi+9M7fX3urjUBdyRDotok5Op0cDVB6vGyvtBWG0c93bOv4a:CC0oWqNVVxi+9oP8DUDM0KrDeW9c93bQ
TLSH
T1CCA10931A879997789F6D585B1463E53CFB970ABA521DFD4E8EE1D1C10B30AC0342627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81fdaf95-a722-4620-b025-54f2af52a343.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\81fdaf95-a722-4620-b025-54f2af52a343.tmp
Size 5KB
SHA256 7d6ed4cd555fc0c727f147416a3e0ef9f02099d196da99d97823532db1ebf7f3
MD5 6d26dbfc672f0f5aaf5e704b2e60676a
SHA1 25a819c73587e8759ccb5ec54f8a6a2be555a139
SHA512 7b2d41546c36e6c1b8936c6a77d2f04345c0b77d53df7eb32d7c9222a8d3c0ff834011639c4462bb24b9623592c89f5f2a28b8175fafc51835febcdaf2004be3
SSDEEP 96:tC0d+TWqN/K890wxi+9M7fX3urjUzvdUCSl8h4otop5OpVDVB6WGyvteer5Au+WW:tC0oWqNVVxi+9oPmeiU2MdritM+Wtwd1
TLSH
T1D5C13B71786D687799E7E556B0023D53CEB4606B66119FA4DDEA0F1C02E70AC1347523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

888d34c9-9072-4269-a7d8-5f1fac89fcda.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\888d34c9-9072-4269-a7d8-5f1fac89fcda.tmp
Size 5KB
SHA256 408291be6ed4c40a8185febed0f184b1685551ccdee3d0ce3cdb434fd14b8488
MD5 3a4a7d4d81de4bbca35b443c11bd2054
SHA1 ab1454ce9da82ea1271bbdb8ccea0729aa754ee1
SHA512 b99d2d7a81e32a82a65e67f658b9bb8bf2c3356245f58f4f3d1a31c7d29c53a3b179f579be5e726a2885cb57062e28b7778b0b4ecb9cc62b63bef3fe5402bb35
SSDEEP 96:tbJ0d+TWqN/K890wxi+9M7fX3urjUzvdUCSl8h4otop5OpIDVB6cGovteer5Au+7:tt0oWqNVVxi+9oPmeiU2M+rcvM+Wtwd1
TLSH
T1E5C13B71786D687799E7E556B0023D53CEB4606B66219FB4EDEE0F1C02E70AC1346523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a858993-fd58-4228-8eed-bb8e14864994.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6a858993-fd58-4228-8eed-bb8e14864994.tmp
Size 12KB
SHA256 87fd888fdb276878a6969fc5b3c7eb8f66b402c658127c49a8bbf6352f93df6e
MD5 88f1c08bcf3e6cf19f56c872c6b5a4d0
SHA1 8cb2e888af898b076b94d3da0ea365800ee4f38d
SHA512 151c6a391f08c9c1c9377feb213cadc21ee12c5a477449884e7dd7d9421042171687fe97aed77583c86067e5986526f40f8741023602cd93fcaec7da9bebf317
SSDEEP 192:gRx8CR0v7cvAPRp2qnAlmXsb+WNnU4BbMeXH2z7J2q+zkwFYLaLiyIsnAUgE:gRx8qwA6XNXw7+e323J+zlea2E
TLSH
T18942A56DA910B93B9DDAC21AFB227757D3F5202174D01E84E6FDC92C21E79CC622B50B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8d6f3e6d-a154-4f29-9889-7945258a8686.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8d6f3e6d-a154-4f29-9889-7945258a8686.tmp
Size 11KB
SHA256 8c7577b544ed7b37385a604e13b40c4aea4648d3fae8962db8611e8a63408e51
MD5 732de8cdfa44549aee916b3128c61ae3
SHA1 6201a4a55c97cdb8b57cb3f61ba893d5dd358b5d
SHA512 9eaa398ed23d1f4dae033777b1069636a7e8002d4594f290b2f598fe3e323c19011e7f57a6c16f1c0f5707f938b0c4452ee8efb283aab7141207038e04899ecb
SSDEEP 192:ens4K6fb7KxkXqK4I40pUZNCgVLHrKHfFKslESfFXzKD/wX+ErUkKN902A/gkoPn:usjYb7KxkXqKf/pUZNCgVLH2HfgslzFQ
TLSH
T1BE32F92BA48D9A3F4FD8D51DDC136F4FACB502966228092497FB9C0803F978E514A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000033

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033
Size 24KB
SHA256 f9074ac7ced776e010599f95c47c4f0306f31db29414d5dd9d8b80a844ce009d
MD5 bd9541be6af68e4dcdf4d9363ac06f26
SHA1 8b648d53599ec344fa9790f8ad2ed045194d5e1d
SHA512 7cbab524ae46f03f742908ba800e3e1bcfa992c10e0da189cd4fc81c22760ff2bc37acddafe54b87cec1142ce4196744c1104bcb7a0592ee6b2f5bbd2051a58e
SSDEEP 384:jWiPFVfdUiuti5OjtUfdTvsHUhVnp3tHjK3ieS6+NZoWZrM/q6Cb5hkNC1bMT:jWePlEZijskrDK336NZoerM6kNCVMT
TLSH
T126B2F10342AEC9B5EF4D02CB64947A97F00BAFD831EB1541545DAC9B1EB1232FE181E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 696B
SHA256 c7293d9e97f2deb5586fba698f983156fda9b872477ec1c3fc90a971eea71f37
MD5 cbdd0abe7bbe359c9e81bdded2eb6d13
SHA1 54506a993615709933f0f9d1df8c893f28b43e43
SHA512 1254f6289dad3d0e7a05ef5ca79a78dde3f8c7b89d658371dfb3f15d7172c9185b1007138c01e825412990fab4b876fc31cc79e0782f09fa051adb7f8ebcd1e5
TLSH
T1160124A927D60300EF64113974C01C9C752A114AA622D75321E486B04867BDBF00B53C
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

552f7b61-f563-4507-8f55-c08be42216d7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\552f7b61-f563-4507-8f55-c08be42216d7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8885d141-8f6d-4719-bbe6-917266945000.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8885d141-8f6d-4719-bbe6-917266945000.tmp
Size 8KB
SHA256 d73cb3a3627186c64183f311e0a934c8f5b6ffea7b2fe1ff415a12183a26dd96
MD5 f656313a6e8c703b397fb7979e60de41
SHA1 2b1ee948ac0f16b52ce926d6fda4cef8bf8444c5
SHA512 ecf8100c9322511c034b68574867a18d7cfd5a9475578695a63a2801ae577aa174a8cba14cbfcc39c5d5bae1602f1e28bfe92f5fd93dd1f58bbc6edbeb3b65f0
SSDEEP 192:Dfe1jrJjujMjAj4nJwJjaJGaaEm8CjCj2jIR+vjjHjhzjhHjIjBHj7jpjhkjtP4c:Dfe1jdjujMjAj4nJ8jaJGaaErCjCj2jL
TLSH
T166029CF7C7E4466DC91256F0AB153F2BDE2A095E42683C0689E8AF4F93E14B1D34094F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6719069-4c3e-43f8-ba24-cd5222f51eda.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a6719069-4c3e-43f8-ba24-cd5222f51eda.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

ca570c57-878f-40a8-808e-081603527bb1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ca570c57-878f-40a8-808e-081603527bb1.tmp
Size 11KB
SHA256 45cfa6aa7c4702af56cb4d32e94349cbc673dc66369c1e6eead144d6d92ef3a7
MD5 0f7c8e3918a7b727bb5846c8e4630df0
SHA1 6841dd10d6ab3f1859d1255dc7a0380d9e8da746
SHA512 0cf825c1bec787d7082d7dd58e6b7e9d810a80a574cbcb45528af6b76c617969ff9ad2a504cd7b374d7e0ea5b162c09074f8130808b64a4ea0e79d85b84c33cf
SSDEEP 192:gRxgCRpv7cvAPRp2ilcXsb+WNnU4BqP2nH2z7J2q+zkwFYLa/iyIsnAUge:gRxgqpA6XIXw7q2H23J+zleaKe
TLSH
T13632A66DED24B93B9CDAD21AFB267753D6F5103134902E84E6FD882C15E79CC622B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4ed622c-29ca-4e2f-a1ad-87bb437e5262.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e4ed622c-29ca-4e2f-a1ad-87bb437e5262.tmp
Size 12KB
SHA256 f8ee4de3c7a7c5c57e831090bb740e305342540f32af666c9c92a9a6cabcf44b
MD5 759008cd223e80bd2d040aca438b5092
SHA1 07ef45edde56d94f3f2401174ce8507b669c1632
SHA512 f816704c10e1206b521bb4ff518a64861079cf29f17c3d559c46d29d1406b9eebc303aae1dee30be033a99d6e9b51c3950ae8e1a20e5ac9d089cb94e7a4c352f
SSDEEP 192:gRx8CRCv7cvOPRp0qnOqlmXsb+WNnU4BbMepH2z7J2q+zkwFYLaFiyIsnAUgE:gRx8qOAoXcXw7+e523J+zleaoE
TLSH
T13E42A56DA810B93B9DDAC21AFB227757E3F5203164901E84E6FDC92C15E79CC621B50B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f223d994-64b6-48af-b1f2-9d15650e2d42.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f223d994-64b6-48af-b1f2-9d15650e2d42.tmp
Size 12KB
SHA256 94379c027e571266d716ceff789e6ac954bbc3a01c38b20b5ab780f3314374f7
MD5 8f7b2f34d237bd094744221cadfa078f
SHA1 8928fd662d1393b5ab2e50265dcccc59feb13efb
SHA512 7ecf7d73ecaf4e44294ddcee36751742322be051e47f501c7811b7d4c8f1cc7cba9f96f1e0f5a9ff5f4a166372992fa3b5563debbb06e9b9dd4c9a4b8d4f3ab8
SSDEEP 192:gRx8CRZv7cvAPRp2qnOqlmXsb+WNnU4BbMeXH2z7J2q+zkwFYLaLiyIsnAUgE:gRx8q5A6XOXw7+e323J+zlea2E
TLSH
T1F042A66DA910B93B9DDAC21AFB227757E3F5202174D01E84E6FDC92C11E79CC621B50B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraumaLab-v1.19.html

Path C:\Users\Admin\Downloads\TraumaLab-v1.19.html
Size 2.0MB
SHA256 1ed0d2c073eb66dfb90dcac6da8bbc78aa64b9309bc0bf8cfdeb8d58d845ac50
MD5 f41e615d4e430675fff3650e0d9f7fef
SHA1 8a82d8b3cc0d96b4b8ad50cbc74f89b38f289f7b
SHA512 87022274535db2b5f37b23e9581fbe80e21f129264d6cf594c8cad274444e26e0391bdffe5d3931a9a111cd8e1b1af3c15cd4b28523ba9652955a072f863b882
SSDEEP 49152:BYEJCZVX6KWp41+uHioPtyXe90LLZE3HXP+8L:8L
TLSH
T1B6A5C0721355333B006252DA494B314BF97484373603ECC4ED2D25692FAE1E69BBE6EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download