hxxps://alwaysappleftd[.]com/software/Lockra1n[.]html

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
19/04/2026, 19:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://alwaysappleftd.com/software/Lockra1n.html
Sample260419-ydeaeagy2j

Score

4^/10

discovery persistence ransomware

Malware Config

Signatures

Drops file in Windows directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping448_462172047\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping448_708375842\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping448_708375842\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4008	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134211012178562454"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2783838373-340812344-1280766377-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2783838373-340812344-1280766377-1000\{DCC57103-49D8-4814-A8E7-F828D7A2254F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6004	msedge.exe
6004	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeRestorePrivilege	1144	7zG.exe
Token: 35	1144	7zG.exe
Token: SeSecurityPrivilege	1144	7zG.exe
Token: SeSecurityPrivilege	1144	7zG.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 448 wrote to memory of 4496	448	msedge.exe	83
PID 448 wrote to memory of 4008	448	msedge.exe	84
PID 448 wrote to memory of 2000	448	msedge.exe	85
PID 448 wrote to memory of 2000	448	msedge.exe	85
PID 448 wrote to memory of 2000	448	msedge.exe	85
PID 448 wrote to memory of 5108	448	msedge.exe	86
PID 448 wrote to memory of 5108	448	msedge.exe	86
PID 448 wrote to memory of 2816	448	msedge.exe	88
PID 448 wrote to memory of 2816	448	msedge.exe	88
PID 448 wrote to memory of 4312	448	msedge.exe	89
PID 448 wrote to memory of 2816	448	msedge.exe	88
PID 448 wrote to memory of 4312	448	msedge.exe	89
PID 448 wrote to memory of 4312	448	msedge.exe	89
PID 448 wrote to memory of 452	448	msedge.exe	90
PID 448 wrote to memory of 1108	448	msedge.exe	91
PID 448 wrote to memory of 452	448	msedge.exe	90
PID 448 wrote to memory of 452	448	msedge.exe	90
PID 448 wrote to memory of 1108	448	msedge.exe	91
PID 448 wrote to memory of 1108	448	msedge.exe	91
PID 448 wrote to memory of 4604	448	msedge.exe	96
PID 448 wrote to memory of 1308	448	msedge.exe	97
PID 448 wrote to memory of 4604	448	msedge.exe	96
PID 448 wrote to memory of 1308	448	msedge.exe	97
PID 448 wrote to memory of 3272	448	msedge.exe	99
PID 448 wrote to memory of 3640	448	msedge.exe	103
PID 448 wrote to memory of 3640	448	msedge.exe	103
PID 448 wrote to memory of 3640	448	msedge.exe	103
PID 448 wrote to memory of 648	448	msedge.exe	104
PID 448 wrote to memory of 648	448	msedge.exe	104
PID 448 wrote to memory of 3900	448	msedge.exe	105
PID 448 wrote to memory of 3900	448	msedge.exe	105
PID 448 wrote to memory of 3080	448	msedge.exe	106
PID 448 wrote to memory of 3080	448	msedge.exe	106
PID 448 wrote to memory of 2872	448	msedge.exe	107
PID 448 wrote to memory of 2872	448	msedge.exe	107
PID 448 wrote to memory of 3856	448	msedge.exe	108
PID 448 wrote to memory of 3856	448	msedge.exe	108
PID 448 wrote to memory of 2412	448	msedge.exe	109
PID 448 wrote to memory of 2412	448	msedge.exe	109
PID 448 wrote to memory of 3080	448	msedge.exe	110
PID 448 wrote to memory of 3080	448	msedge.exe	110
PID 448 wrote to memory of 2220	448	msedge.exe	111
PID 448 wrote to memory of 2220	448	msedge.exe	111
PID 448 wrote to memory of 2220	448	msedge.exe	111
PID 448 wrote to memory of 1312	448	msedge.exe	118
PID 448 wrote to memory of 4784	448	msedge.exe	119
PID 448 wrote to memory of 2264	448	msedge.exe	120
PID 448 wrote to memory of 3392	448	msedge.exe	123
PID 448 wrote to memory of 3392	448	msedge.exe	123
PID 448 wrote to memory of 4840	448	msedge.exe	124
PID 448 wrote to memory of 4840	448	msedge.exe	124
PID 448 wrote to memory of 4840	448	msedge.exe	124
PID 448 wrote to memory of 3068	448	msedge.exe	125
PID 448 wrote to memory of 1424	448	msedge.exe	126
PID 448 wrote to memory of 1424	448	msedge.exe	126
PID 448 wrote to memory of 1424	448	msedge.exe	126
PID 448 wrote to memory of 8	448	msedge.exe	127
PID 448 wrote to memory of 8	448	msedge.exe	127
PID 448 wrote to memory of 880	448	msedge.exe	130
PID 448 wrote to memory of 4240	448	msedge.exe	131
PID 448 wrote to memory of 4240	448	msedge.exe	131
PID 448 wrote to memory of 876	448	msedge.exe	132
PID 448 wrote to memory of 876	448	msedge.exe	132
PID 448 wrote to memory of 876	448	msedge.exe	132

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://alwaysappleftd.com/software/Lockra1n.html
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe8918c188,0x7ffe8918c194,0x7ffe8918c1a0
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,15607973040869933038,3782631447547617898,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,18315792001027336158,14503044032272080860,262144 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2640,i,1220171109509507024,6276794546883165187,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,10501187275184903468,16544089143072256768,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3544,i,10180254521021592201,15494176706662869266,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,8541431937303735814,7073118496252099201,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,13860186916669645244,3950184186063462887,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,5156804714337917589,8606421265006028044,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,3519286718940750768,6386381155257350947,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,567797603520245156,372758160707791227,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,567797603520245156,372758160707791227,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5868,i,13880592728653998184,15303183399612215002,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,1634629569943683400,1905690968609742968,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,9433762116790985452,11936347258605964966,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,3766774129790858423,5044953786186393860,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,3319979084888697446,5317299931048872292,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,18211992610218629384,3751122697797992053,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,6697888198056655688,9515590866465527009,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,6121777909162420639,16261300577755247151,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3788,i,4989789458699604148,13438045964431561579,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,17159627137001374754,5486643236188961868,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,12342608655379275564,5101833380940490604,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,13831060826710671194,189437445489575315,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:8
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,8604050375147670693,3509855056021540494,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6596,i,1592081514592236128,9434557538378541461,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,2616694944383637079,9763501188626150431,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=2788,i,123892118127623327,18026877747947662303,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,8596621963738451046,18237166434851439272,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,5295029601939893033,4884973241839859215,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,14493509956794741254,2178034809325821337,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=780,i,13712374591029419662,6427597753204094198,2097152 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=3860 /prefetch:1
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7008,i,7280000543489464491,12559502448844007417,524288 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6932 /prefetch:8
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6468,i,12699854623567534275,15732232879603090858,262144 --field-trial-handle=2292,i,8331655533251450707,16130936844427446717,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6004

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3392

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4384

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap9981:100:7zEvent30117
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 cf0266ac99d59d8e7bf7d06daaae58886aa69f3d629c74fbbf7794adfd2219a7
MD5 855c93f4f21d237e49deeb0724f94d4d
SHA1 9ddc8ddc10d3e5b48f893c6a47c2caefbff1140f
SHA512 0ffe3618dda92cf0c32f53b88d8586e4100a7bf6ff98a8c85877c4ffa8b392b45a5f3092f9ce911a0b58f4fa82e09244626a391f4deb58dc0c7adc95b0ed3fe9
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P71:fwUQC5VwBIiElEd2K57P71
TLSH
T151B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5bda7a4acde298b84944249ed34d5f4674b498a9ab3f35787c59b8f7a9a1aaed
MD5 dfc8ac88f96ffe8348bce76837920954
SHA1 787d07afc824d92e954563b275efb5a49c6fc276
SHA512 72be7e33e6964b22ed7243503c858ab3f3c02b7c8a4a188b612a13618c3bdccb35c49ee49690b28e188ac7a585df290375e609eae08846e2359f92e3e6054b90
TLSH
T13ED0805D52B39C21CDB6D5B004053F453656D557554B9356D4323C381C5314159C12D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9dc0e8e0b3744cd2688352565f359bc3c2a3049763bbb5af7d458c7c14fc65c8
MD5 4a181341ed5806b77c1ba57a47d171f7
SHA1 34371d7deb64a3224bb6528cd2b0853bccdff309
SHA512 d6b7c787c9227af20082a7c78c2be50c64a0e6b7705d189840149b9f139092b6de707919723bbc294dd1635b975f8e198a2a11b77251b5558d265bfa5bca2baa
TLSH
T1F3D0805D12F39C21CDB6D5B004053F453656D557554BD357D4323C380C5314159C12D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b971f8d8ff4ba22972b9333c278935c0ed4b7b3285dcbf2e718f3b9884c9c9cc
MD5 26d27c2ba542496d9a4b77bf422d6b96
SHA1 c3c81bf195eaf3ccf1f117b9e7520096b8c32408
SHA512 024dfcd0f9cfd0cbd34ae4b4444a2e777f527855c98f0a527d15cb5c594f03afeff119b3492dd1dc34bb08334362697b0c6bf5b6721eb41d8835841bd3ef9e5b
TLSH
T14171A1439F918C78EBE045B41BFE31853E349B7922BB4E1406D5F47E9BD2B1080C04E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 15197258ecd387827d3fd8b755f73cb2cdaaae2873f546c663ee0d968b28c8a0
MD5 48e1f4902f3c404bd9de35bbaf5587a1
SHA1 e737a14d2424cb82fa2ff75bf1315479327a4e45
SHA512 7b833dcd48331b368ee94e770d071c322bfa96f434666b83b63c7276d5a1d6a0d5b0a9e32dfb128847587b953434bdb3a7dbbcd55a321dc905b0a5a1c86c9df1
TLSH
T103717F439FA58CB8EBE145B41BFE31853E789B7922BB4E1406D5F47E9BD6B1180C08D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58896f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58896f.TMP
Size 3KB
SHA256 c85b631a1784546611aac5f4c67305a3fae8d38101004ed149b72a4e6ed45984
MD5 b903da84b04e44474ba633f11cb3a811
SHA1 0aa7288b51a3f668937fa2b35e8126e1ff45da81
SHA512 71810d1c7fce23a268cf450b5d285f0d1c803c85975a58abc0d3e691b1d4cc194991009de6402a8cf5f6f312f431d6d372ef30a5dbcd29d81df831ef9f166243
TLSH
T114717F439F958CB8EBE145B41BFE31853E789B7922BB4E1406D9F47E9BD6B1180C04D4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 792b38135e42abf3e0249ad6b050c66825036e589e8ccc57b964f1ec1068eece
MD5 02350ebdcd0bac0b4a8c025724d96a76
SHA1 cdb9f0669eb035541065062337a2064299426665
SHA512 46e36fc6b8f31b1a0e7e8834eeb27778eaaf4530df06547a5e80b96e8fca658beced4925647a13d0716a87c558333a7ccf0c48e8c89309831195fa4749f8f764
TLSH
T1BB619CF7C3E9866DC91146F4BA287E2BCE1D0928432C3D5AC9E8AF5BA3E2470D14154E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4e1ed44acc7b7e22a567940ccb7bc09cae1e9d0b848c3dca21d93814258d7726
MD5 6c5876989f42ddf29c7eee0401f0302b
SHA1 3e0c05cb340ee053c231f7576407ce20f5cc6e24
SHA512 17c9119877abd628c03f60ce98cbd8d14137e8b8ec21a531a1eeedc3433993239124383e6415b7314dcb0bc1d041518c6cd359296f27cb7f6b4ae07a2cd75aea
SSDEEP 192:sxZaRHyM//K1Ml8UQl9W/f4sMFYMbAXIdpZ+HW6+WN8vEdegl/XmFJ9Ig5mVJ:sxZa9qvW/f4sMFY4IHbnder78
TLSH
T13A62D756AA34A977CCCBD20DB945BB53D6F50562A6940E44AEFCCB0C00E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7f62cf4215a22f481819d14f0b35c8bad583eda1bce66a1d847fd3dd02662907
MD5 fb7191969e87187ec4611db8e7903a18
SHA1 58391ae25e11b2ebd1334b73d9ab5a4c7734a069
SHA512 f955cfcfabd20a4360383d8a95daf00e2030e12368f84b1cf60171b505893d4bd2863fa78bffb8f7e99f690424582964db71fcac68a7f05344507c04d91eb35f
SSDEEP 192:sxZaRHyM//K1Ml8MkW/f4s0NYKIdpJHW6+WNGY/m7fJ9Ig4J:sxZazMW/f4s0NYDJHbG77c
TLSH
T19942F916AA349977CCCBD209FA55BF43D6F90573A2940E44A9FCDA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 43b45aa93da08c1d871cd00a37b906377ff44c362de2f5d3a8cb4542f1268db3
MD5 870a3e7a41b676249c11109f390aff89
SHA1 fa68aa5b8fe16f3eea056138801aaef10b519280
SHA512 fdde038d941766837f0a07dd082bc31d5ddc1f1588f4998a6deecb8a995f796722fb24eaf6e1b92a37c3e43dafbe0302c36c1fc588e55ce7f60e84e8263670c7
SSDEEP 192:sxZaRHyM//K1Ml8MjW/f4sMFYMbAXIdpZ+HW6+WN8C5fegl/27FJ9Ig5mVJ:sxZa9bW/f4sMFY4IHbTfen78
TLSH
T17A62E856AA34A977CCCBD20DB945BB53D6F50572A6910E44AEFCCA0C00E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8829eac5784baac9b1bfe2eddc0cbaf803cd828221af62ef3174a92a295a806b
MD5 477e159105c7deea0bbdd63d19a4a4d9
SHA1 0c3888142168effb867c97a2d4b3b57002db7efd
SHA512 ec56ee9153319b30fed3ae7e95cc29fe4cd0dc546927cfa30eeeeb14f38cdc65f67c57a58ee42ee132089621749e7ba07a6999924ea7961178af127b57b44bb6
SSDEEP 192:sxZaRHyM//K1Ml8MkW/f4sMFYMbAIIdp3RHW6+WN81a/egl/3ufJ9Ig5mVJ:sxZa9MW/f4sMFY5BHbj/ed78
TLSH
T1FC62E856AA34997BCCCBD209B945BB53D6F50572A6950E44AEFCCB0C00E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 283c0d296095a24bdc8e269e5d0d55793de7841917ec1d8f1d40526b7b35ed73
MD5 c32aa683ac8ee48aaf23ca08ee4d606f
SHA1 7e472b6de39ce4469f6019788bf23d41e71ed8b1
SHA512 7bf79bdf7deba73de88bca5eb0083d8892a3c1bc50f0d97b618470e5e2b494bc6be0bed51207de471ebbc6ab601bfff6ace523cbc4e4f487dd0d9d9a2bd379b8
SSDEEP 192:sxZaRHyM//K1Ml8M9W/f4sMFYMbArIdp3gHW6+WN81a/egl/3ufJ9Ig5mVJ:sxZa91W/f4sMFY0QHbj/ed78
TLSH
T16D62E956AA349977CCCBD20DB545BB53D6F50562A6910E44AEFCCB0C00E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 619ee648917c7b05b786f2794ea6ad8f5255a5994daee386c025a3c92139ffc3
MD5 6e7ac16a6c8345683131b484701a32ed
SHA1 5dd1fc444ba393fc04765c71e3c2a5e602d53718
SHA512 a7abb17d31e034bca2a45cb9e903e5a34aa59e4a27707d4f77d7dfe4f511a4cd735e3c7a2879758cf427071f63662de8fef0cc9c3a1a240605e03970be0cc4e7
SSDEEP 768:+u8If/7Wvjdwx8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyyLlsu7F5roQKpGg2:+u8If/7Wvjdwxu1jaTyLeQFydpG7
TLSH
T1EBD20A2B680CCB7E4F844EACDC2AAF976ED802CB96A4495447FA484C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bb72c769b9a5434e47fcb2b3e9a329297a80e6d888281aedf36c222266fea990
MD5 3d63ac6f841e030dd088154baf14b839
SHA1 e2c43b8912210c7e36d8ad72e5b02b9ffcacb2e9
SHA512 c5f85cb6c78407648e1b2b6ce53e2d9e2a157b9bec14d89f801f46b7d7410d2150ce77a8976414520889e81dec6f640af589b602dc82c518bd896eb6f84a83b4
SSDEEP 96:K4h+KS/sjg82CGACaNTU0AKcVUeAwE09+MNR3Y3vxNrdRDCBoyUlDKcaU/Dwz7Qk:c/sjg82CGRaNg0YVUe5E09+MNR3Y3vxc
TLSH
T185910552357B02803A7E754B81B5B63F528334633115A62B3BB905F25F6AE10DCFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 96ebed9ec9db8cbab70efebb642dda208dd23297138efe7829318e4cdc61b897
MD5 5fcca77ecad1caa5921682c97cfe7ba8
SHA1 8476fa2c42ee904f841ed1e4c6d8a5a1d4be383a
SHA512 0c02d8c9f3f5039e91965135c660ad14366d00d79646cdcae5dd3ac75c13ae172e80bb49db848147d56b0f8cc5f5b5c306c2e0cc0cbc66cb85fc2d69b77fad4d
SSDEEP 384:nLiFvjccCs+Bt0S329sNi8TUNTUlIlApgcOICM6DfpwJ4I2hL5Qbx+2BnXU/AatH:mF7ccQERwg1Xdw2hLCdlBnXabW6Wm
TLSH
T188D282F598E7993AD9AE4B83A73E2E065EBCC15375845990BBC44E0CCC871BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3f5da9077032e2056d00ded8ca22b0012e8ebba7a97e64e97ece6581b57aea3c
MD5 a76d684d17f79fa4f20a7ff26faa6bee
SHA1 2657905ca72683a13bff2d609920925b90d0552a
SHA512 ba224fbdbc998f6533da3a5cb5ef9cac8600397f81779c699e87f21ac67c80d2d745eaec973d6f713e6d44f5b984785e9146aa5d058c57e8f8f903c3e4d16de8
SSDEEP 192:uudfLsNlkOQyojw5o35tQmiU1Azpj4jJ4I2LFLoeF9KbgeN+269L5jq4U8:nZsNlkOgcO56MjJ4I2hL5Qbx+2GnU8
TLSH
T155320A36A8386C3A5FF3AD55B9473B13AFE4126B96C52F44D6E84B0C00D739C234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 a3cba24b08b58c3c77a1d615f9bb09360b206774652589e8d7efabd55c48cac7
MD5 7ed250e15314182e76424a9dfbccbef2
SHA1 0f865f4fa78baabc92ed90e7586ccdf5ffe91e53
SHA512 7f75030fb8aae4656c431a802807db0f9aee566d7de0f92cb3ac39055bd74c3bcbf39ff07663944129c3637e41dc7e2d809184ffc001434ce856c7168f84ae51
SSDEEP 384:nLiFejccCs+Bt0S32dsN18TUNTUlIlApgcOcCM6DfYwJ4I2hL5Qbx+27nXU/AatH:mFIccQ8Mwg1PEw2hLCdl7nXabW6Wm
TLSH
T13AD292F598E7993AD9AE4B83A73E2E065EBCC15775885980BBC44E0CCC871BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 b8ec11334afac90af39277e54a46f47cf1ceb5628d2f45e02c789108d1582d46
MD5 8953d9674b56c14c9ceab23c234c3c19
SHA1 4f0b431ef2c53ccba9f7b5186ca05821279fc903
SHA512 0f61f129ed7c76cce68262c7d66280401a68071423cdb4fe70a990f88be40dea9790c4e82731702acc962931269a7775614ba3fb72b17bf975bd6203bc26fa9d
SSDEEP 384:nLiF2jccCs+Bt0S32IsN18TUNTUlIlApgcOcCM6DfYwJ4I2hL5Qbx+23nXU/AatH:mFwccQFMwg1PEw2hLCdl3nXabW6Wm
TLSH
T10BD292F598E7993AD9AE4783A73E2E065EBCC15775885980BBC44E0CCC871BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c7984fae88a0ae741faf94e0980839ae8161c50409cd3d29e56ac4077c9b7067
MD5 6929a8db983e949841410485cfd95dca
SHA1 21bce54e65d5d001f102a36b05058b80b8d01dd8
SHA512 e901aa12ead69182b079de89f1f042df5f9592639f15e266e2c21b10d873dcef59368f72ce70e656c730153631de8e2647c94b4d91f9822486e1efffe32201b1
SSDEEP 192:9ONu6s2QmiUy6wBoJ4I2LFLoeF9i4vkoU6:9ONu6JCBoJ4I2hL5ThU6
TLSH
T10102FA35A83CBC7B8EF3AD55B8473B276FE8122BA6952F44D6E44B0C00D769C1347926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5f80b9606256e098f9eeb52ed69a1c64d8eed4c53740b7c320757a577c36dbe4
MD5 0591c9fa0084c0d879af90bb863d6ec8
SHA1 7e610e9fa0e420180228960889fdd6fbf258dcf2
SHA512 b4197b44f71c44d3237d2badb77deeadbb5ea281a3fcc7e6846bb56e5bd4b3801ee687d311147c350dd42809065e00a82dff6bef4754489961f0fbe44e0f1c09
SSDEEP 192:IONQ6sdQmiUyXwcoJ4I2LFLoeF9KbgeN+26yc0jq4U6:IONQ64ncoJ4I2hL5Qbx+2BnU6
TLSH
T1DC120A36A8787C7B5FF3AD66B8473B175FE8121BA6856F40DAD80B0C00D769C134B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bb2a95d969727679fbb6d7aa8caeec02b9914eead54d75c569431f9db7d049b0
MD5 4729a3f46d57ec26ded3ee1473ea6aaf
SHA1 edc4e5a1db5a0f27f3d573ca60fa91c74a318179
SHA512 b9e7dcc4b8fca25f0b16da971d4e3254d64695047ba6f58b2e64c215174b9705b862220616e3230c835d2a660d3b5725c8241a08af161a56a46b6cf90bf79f6a
SSDEEP 384:nijccCs+Bt0S35sNlAIgcOcfMjJ4I2hL5Qbx+2snXU/AatId6uf3m:MccQZhaG2hLCdlsnXabW6Wm
TLSH
T18A825B3698B86C3A9AF39965F5473B076FF451AB56942E54EAD88F0C00C72DC130B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7fe5a3e2175222c0421654c1884f3677adc0efe15b44fbc6c3e049601bf5ca24
MD5 e8afb992ea33a60a22fb5b8e035d8397
SHA1 368a1544036fe4f02315654aa7c608d353559597
SHA512 ccee02f28fd05a2b8018b61dadb98062c1210f70a8d3062cd6a3f843df9915ddba4050b87b0619e004a0764e26dd5ca974a2d8fd448ed9bda19b4a089f101b00
SSDEEP 384:nmjccCs+Bt0S35sNlApgcOcsMjJ4I2hL5Qbx+2snXU/AatId6uf3m:gccQZklG2hLCdlsnXabW6Wm
TLSH
T1A6825B36A8786C3B9AF39951F5473B076FF451AB56942F54EAD88F0C00C72DC130B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c27308bde3fdb6f4f01c88ca11dba3117bd3308562f29946f2616d74ec2e915f
MD5 e3eb7fc851de49ddb8c141e9c46110b7
SHA1 fc4e6347d4a54708923ca2224c10c92f5395a510
SHA512 2cd3ff6be50ff7bb2d0037e6519bd21a247c85092c9da225d1d1ff6ae70b7e70ba5a85ac8906a8d9ae09059dbc65699002334a6968aa8e7c3dd657d35f76386c
SSDEEP 384:nmjccCs+Bt0S35sNrApgcOcsMjJ4I2hL5Qbx+2snXU/AatId6uf3m:gccQZalG2hLCdlsnXabW6Wm
TLSH
T125825B36A8786C3B9AF39951F5473B076FF451AB56942F54EAD88F0C00C72DC130B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6b9e347ff22a22a03bb2402f841df6c00dffad2107d5cf86e83c9a7facd1e491
MD5 65d0d2b5e0a48bbf96c20f6fac821d25
SHA1 827a801154b35309b88f562daf69e94315eb60bb
SHA512 7203f379ce343418d65f1836b4ccbaa13e1b7c39c4c26e1ac5d496c3c4b10742578a81381537d3fd12eeeac71e882af471ade6f4fc32e26086f0661e5075a4fb
TLSH
T1B4E00202134000A1C11C03340287160027D2C01001B68307D91111948C136006C36F12
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58fba1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58fba1.TMP
Size 392B
SHA256 cd7398605875f7edc8a980326f5c7af744742912a28f8b93d9813b824a3e8395
MD5 b0a69d23205b30d67fb8cee03e7af767
SHA1 64275e720d11d36f21028588f622968661c9f155
SHA512 592b9fe534dcb6d8c092f6ef8265421fd59c5519ac4f4d848ec070c2381364763cf589181d7cdff7a43cd43053fb13ccc394c62732c366ad0253e8671e80ac0d
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

0e563063-d02a-4bd7-8c63-35287230540b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0e563063-d02a-4bd7-8c63-35287230540b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1c67118ceb8cbf23516e5399158a452465640b256a8838e49eb951b5a96834e6
MD5 4ab03ad0e51fa0a63caf78b9a6be7b5a
SHA1 75cd6860ef70290f346501b77c5f2e89ce45c4c6
SHA512 8b4ae7acaf3d81362d23cc0b40f8e27f731700006620ab1729d1039e913a6b6a9f55d079f15c05b9bd195ac5c169aac6d78e2a85fbd3fa3065b9c11eb1236f20
TLSH
T16C41F85CB6EA1108B3B36F5AAFF6A96D447F7C672E06D49E10110E8F0A62B40D971733
MD5 SHA1 SHA512 TLSH

Submit Download

3a3610a8-3c79-48de-af54-92372447e5f5.tmp

Path C:\Users\Admin\AppData\Local\Temp\3a3610a8-3c79-48de-af54-92372447e5f5.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir448_837592624\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

master

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\PongoOS\.git\logs\refs\heads\master
Size 174B
SHA256 281cf0f8aabe85465cbd921409032ac4d55d9186ca2be2405563161d68556e4c
MD5 4282be308a4ae99a4e8bd6ce8ab16344
SHA1 104cbf8d3701ea8d1a79892dd90a97b58057b3d5
SHA512 d3f1e16de0e9bddbd09b81adc851aab24d3636f3cbc57746e6a2faa133b441c530dd43281d4eac410233dfc870a4fa28ccfad7d6d9740b8ffbf0fc362639d8e5
TLSH
T16FC02BCF139C5148EF1C7BE04000344EA2643010FFCB787C31DB82A0801E14B0C1B890
MD5 SHA1 SHA512 TLSH

Submit Download

HEAD

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\PongoOS\.git\modules\newlib\logs\refs\remotes\origin\HEAD
Size 173B
SHA256 f2b0bf31f1c6cbc8daaa1ab7148865c397214eb5a86a48e32c75df142f1a65ef
MD5 888475838fb51e9f6767d930689a5623
SHA1 6d9e7aaa5953c7c4f240df5999f6e642485f39aa
SHA512 3fb4cc9c3f642873b2b83d3b02520b23a9f18b5967e7f39b33eefa82b05d686221d97e55125128860ce99d68855346ec34fc42dda4c44c600b6dd1d05fa88f9a
TLSH
T156C02BCB058890C9FF1C1EC40100FCC49279300CFDF0DCAC03EB408040000407603591
MD5 SHA1 SHA512 TLSH

Submit Download

description

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\description
Size 73B
SHA256 85ab6c163d43a17ea9cf7788308bca1466f1b0a8d1cc92e26e9bf63da4062aee
MD5 a0a7c3fff21f2aea3cfa1d0316dd816c
SHA1 9635f1b7e12c045212819dd934d809ef07efa2f4
SHA512 f7e152f75b124c3e1c5d12f00427729d9eec4e2c1bf70d7606440a6600d003367eb178331e75ab976a61496e79c2c822020849d28ffd170946397b934611b471
TLSH
T1E5A022322EC8CE20020023083C08ACC20EB30A2E23CC3002208B000F23F30C20F20FB0
MD5 SHA1 SHA512 TLSH

Submit Download

applypatch-msg.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\applypatch-msg.sample
Size 478B
SHA256 0223497a0b8b033aa58a3a521b8629869386cf7ab0e2f101963d328aa62193f7
MD5 ce562e08d8098926a3862fc6e7905199
SHA1 4de88eb95a5e93fd27e78b5fb3b5231a8d8917dd
SHA512 536cce804d84e25813993efdd240537b52d00ce9cdcecf1982f85096d56a521290104c825c00b370b2752201952a9616a3f4e28c5d27a5b4e4842101a2ff9bee
TLSH
T125F02781599AB7374046051BEB2CF6AD9880D8D893926F10A0EC4938B67F5E862FAF51
MD5 SHA1 SHA512 TLSH

Submit Download

commit-msg.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\commit-msg.sample
Size 896B
SHA256 1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437
MD5 579a3c1e12a1e74a98169175fb913012
SHA1 ee1ed5aad98a435f2020b6de35c173b75d9affac
SHA512 d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb
TLSH
T1C81127DE95656BB6480701011E1CB3F96D40D63C42C5EE10E0CE983EFB1D85602B9FDE
MD5 SHA1 SHA512 TLSH

Submit Download

post-update.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\post-update.sample
Size 189B
SHA256 81765af2daef323061dcbc5e61fc16481cb74b3bac9ad8a174b186523586f6c5
MD5 2b7ea5cee3c49ff53d41e00785eb974c
SHA1 b614c2f63da7dca9f1db2e7ade61ef30448fc96c
SHA512 473ad124642571656276bf83b9ff63ab1804d3c23a5bdae52391c6f70a894849ac60c10c9d31deff3938922ce83b68b1e60c11592bbf7ea503f4acd39968cefa
TLSH
T119C0C0C89D41F4105091114A003D44BC4E0B80416106083070744B1FE28C45F3F4FDB8
MD5 SHA1 SHA512 TLSH

Submit Download

pre-applypatch.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\pre-applypatch.sample
Size 424B
SHA256 e15c5b469ea3e0a695bea6f2c82bcf8e62821074939ddd85b77e0007ff165475
MD5 054f9ffb8bfe04a599751cc757226dda
SHA1 f208287c1a92525de9f5462e905a9d31de1e2d75
SHA512 cb78aa7e9b9c146e5db65d86dd83f04e2b6942a06fab50c704a0fd900683f3b6ad1164e74afe2f267f6da91cdff0b9ab07713e12cefc6f8d741b5df194f4fda6
TLSH
T168E0A3204496637340410059AF3561FC4F40C4CC83E2394040ED8BA9F62F5D461F9D30
MD5 SHA1 SHA512 TLSH

Submit Download

pre-merge-commit.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\pre-merge-commit.sample
Size 416B
SHA256 d3825a70337940ebbd0a5c072984e13245920cdf8898bd225c8d27a6dfc9cb53
MD5 39cb268e2a85d436b9eb6f47614c3cbc
SHA1 04c64e58bc25c149482ed45dbd79e40effb89eb7
SHA512 e4dc204494f5062efa3032b00c64707a4f38978040482501b3e085f071e3ee5a9737d537e6a52002ceb4ebe2bfe09e555c5d969581e80b3eba2a922015c67960
TLSH
T1CDE02B11495A63B340C60210563861BD6B41D8CD93E1589061DC8F3FE71F6CA21F9EB1
MD5 SHA1 SHA512 TLSH

Submit Download

pre-rebase.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\pre-rebase.sample
Size 4KB
SHA256 4febce867790052338076f4e66cc47efb14879d18097d1d61c8261859eaaa7b3
MD5 56e45f2bcbc8226d2b4200f7c46371bf
SHA1 288efdc0027db4cfd8b7c47c4aeddba09b6ded12
SHA512 00d21d5d72386c3d9b5a1c36ba85201f730556a8295d4353af54af7892ab81010d42aff209ec1fda61c54e4dda3737cea5fda64f09d40ce5004ae28239565025
SSDEEP 96:vJ7EgXasqXq6zaqK1ep8m5MDVUT2bTEwEWDhG38deyig9yhCLtQH:vJ4gXasI1zaqKwUTHhzeyil4tm
TLSH
T158A1A95ABB09D2F54DE3D2EF169DB0B7D385C07E03D4894479CC82793B0765921EA2E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pre-receive.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\pre-receive.sample
Size 544B
SHA256 a4c3d2b9c7bb3fd8d1441c31bd4ee71a595d66b44fcf49ddb310252320169989
MD5 2ad18ec82c20af7b5926ed9cea6aeedd
SHA1 705a17d259e7896f0082fe2e9f2c0c3b127be5ac
SHA512 ee08c11fab7e896b2e09c241954ba7640338b12c75cd8040daf053c31b2f22236d7a0deac736f89d305236312fdb4f560a38d4d8debdcc9dcdd23b2d975907d5
TLSH
T113F0E1AEB307B1F0055501B81C18B08C9675910D803F4E41C0CED179398D44F32D1618
MD5 SHA1 SHA512 TLSH

Submit Download

prepare-commit-msg.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\prepare-commit-msg.sample
Size 1KB
SHA256 e9ddcaa4189fddd25ed97fc8c789eca7b6ca16390b2392ae3276f0c8e1aa4619
MD5 2b5c047bdb474555e1787db32b2d2fc5
SHA1 2584806ba147152ae005cb675aa4f01d5d068456
SHA512 50ec8a0dd98427e80a82a8d8ce44462a845876e1594c9d0e89483ce9a8aaad616edea0e5c45c1bb69d8fe7f520c6f2260d6fa350d77b400899c3ae375e965bfb
TLSH
T1B231DC72954E4BB6198B55527A0CF3FC9A00D51C63967C02E4CCC238F72E0A593A7BEA
MD5 SHA1 SHA512 TLSH

Submit Download

push-to-checkout.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\hooks\push-to-checkout.sample
Size 2KB
SHA256 a53d0741798b287c6dd7afa64aee473f305e65d3f49463bb9d7408ec3b12bf5f
MD5 c7ab00c7784efeadad3ae9b228d4b4db
SHA1 508240328c8b55f8157c93c43bf5e291e5d2fbcb
SHA512 586efb6a206f73d8a94561266153a624e2753830bc431a283bed998c46ac00a9df4995ddfd0aa852b1a22b4672c80f2c33cee3fe2e3321e392ff4cef26dbf75e
TLSH
T18C5160E36289A33200714290A28DACF4674546FC33692D2489B9D03C65B9CEEC3FF6F5
MD5 SHA1 SHA512 TLSH

Submit Download

HEAD

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.git\logs\refs\remotes\origin\HEAD
Size 234B
SHA256 2784984c4239f6fb9dd39994812b53bc97e2f39c55f9439b5a7007dd062556bb
MD5 2cb0fbf08147fe0d4416d542824c5f04
SHA1 c4c3bf0c879bd8e3772da06b31a358fab2c1b4be
SHA512 7bee286c32b5f095d4cd9d9265601750f5b08258b766656134f3ffdb3eb538bb94a76a19cbfcddf1db6a3c6caa8f6043eed1003b400bf1841c3eb2eb67497752
TLSH
T18FD023930DE15380CF2128E5EC46F5844711310C82C0E4C159728D01B54390556AD5C5
MD5 SHA1 SHA512 TLSH

Submit Download

gtar_LICENSE

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.licenses\gtar_LICENSE
Size 34KB
SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
MD5 1ebbd3e34237af26da5dc08a4e440464
SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
TLSH
T15FF2835FB74413B2018206A26A9F68DEE319D03A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

img4tool_LICENSE

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.licenses\img4tool_LICENSE
Size 7KB
SHA256 da7eabb7bafdf7d3ae5e9f223aa5bdc1eece45ac569dc21b3b037520b4464768
MD5 e6a600fd5e1d9cbde2d983680233ad02
SHA1 f45ee1c765646813b442ca58de72e20a64a7ddba
SHA512 da6bcf3b76076d488f9a728debc7297b1bed6d94eb9cc44b15344c9b663a240c34434cc5511181f2a9b0e810b22449f5b13d793b7f225336f810367153bc8fd1
SSDEEP 192:wheJvhVL0qhYqlpIle4RrJQSqOBng4kS/cKM6L:rvjxhYWpce48engvA
TLSH
T1A2F1C07B674013F602C305526A8F61CEA36AA07A36738D6438ADC25C1767C3593B77EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libdmg-hfsplus_LICENSE

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script\.licenses\libdmg-hfsplus_LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iproxy

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script_pale\Darwin\iproxy
Size 106KB
SHA256 3762471d4b90f92c31d81b7b7172278537ae7ef228bca7904e2d38e4a6680187
MD5 e44e58acf96e80dbef95a37f294bf881
SHA1 627a6a0d4013d2c673750d10a618e29424689c0a
SHA512 f577874c012cc538aba054bfa331d51d3a2e16d9063962cb0f3116e08fe2315c4dc39e926908c27a45a94239561c06beeb7a8214786b0194fd13f0e8ec002fd3
SSDEEP 1536:VTPX4AFveLdOTgir8lzCY2iMHrwbQ08ncmb/gL+:Z4RL0TgiYZB2pdlnrA+
TLSH
T16EB33B1777A1D0ACD4858430936FD323C772FD592B34629F1BD47A652FF8EA0BA1620A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sshpass

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\SSHRD_Script_pale\Darwin\sshpass
Size 35KB
SHA256 b1b7d11fac3c2f63ec72a021014234d3d0d1ec15433d26bd674c7c3a3fbdb310
MD5 e9e775a8cfc2d97c32d75c39ba66d581
SHA1 8d14bef4b476dc954cbbf9cc963a752fda9057aa
SHA512 48b1edad13eacac08fc1028858b27ddcfc5b3b92953f6ad6d627b2e3bac4849038e15188713eed8108d40428990241f6cf6987390b6676ea1fa7850fd736ec3f
SSDEEP 192:sFRW2Qlco7qax+vVU0fDMI2kP8KFMsAjw7ll1NQ6GqbEK32y+M:AMtr7qax+vVUsr8Jqll1NQ6GqbEK37+M
TLSH
T1D4F2A34377490CB5D1054378D3BA4762A362FE984E22934327A8F65A0FB9BE83E4160F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HEAD

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\ipwndfu_public\.git\logs\refs\remotes\origin\HEAD
Size 212B
SHA256 53c98921842a79cce04d67a684683ac7f30b510e4d258677dcdd4f6b06bd124a
MD5 9d67d0d916ab2408c17384868a92c862
SHA1 ed02f235fbe323f29d78148422f48e7bc55713ea
SHA512 a7848f2353cd4f8735d08221e336a2249b72572b76533908b233a65139a0337eabf9284b145cac7f6756b979eb27761043b2a3bd38debf878ceabc4db272cd56
TLSH
T174D080F75DF52684FF1463CC93C5B00E1735344CDFE05555659E510040C0419150C58D
MD5 SHA1 SHA512 TLSH

Submit Download

libusb-1.0.22.high_sierra.bottle.tar.gz

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\ipwndfu_public\libusbfinder\bottles\libusb-1.0.22.high_sierra.bottle.tar.gz
Size 159KB
SHA256 7b1fd86a5129620d1bbf048c68c7742ecad450de138b8186bf8e985a752b2302
MD5 0a007418e850e998f3008ba46ad72182
SHA1 81ff46847a901aa013112dece65c49472232781b
SHA512 462d834a6d1028a37e8d8cb5c3b4a3cde74b7c83765ad2052707c911790d6923609ce330d02436a121dfcf190f8e0fb6a2080b0329807145803c79b1c789afe1
SSDEEP 3072:iZ5UxEaKbHiKM/8B2Zs1qhaxZ1VoC1jMGifIDaRGFxEYMOJxO7pg2dyVxe:iWENiKyZrYx3VoClKWQpg4
TLSH
T12AF312DD068CE21C87B83F6CE4A418EEB9F977A23736288AD8FC52A43513C1D57945D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HEAD

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\jailbreak\PongoOS\.git\HEAD
Size 23B
SHA256 f6f2b945f6c411b02ba3da9c7ace88dcf71b6af65ba2e0d89aa82900042b5a10
MD5 4cf2d64e44205fe628ddd534e1151b58
SHA1 acbaef275e46a7f14c1ef456fff2c8bbe8c84724
SHA512 76b199f1bffdc6d21547895431b0f85f3857df400225cbd1ae55e7ded09786a8a44e1cb21f1feff4951cf57c893043a0be696dcb0e4f5758a4d6081a833eb6cf
MD5 SHA1 SHA512

Submit Download

fsmonitor-watchman.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\jailbreak\PongoOS\.git\hooks\fsmonitor-watchman.sample
Size 4KB
SHA256 e0549964e93897b519bd8e333c037e51fff0f88ba13e086a331592bf801fa1d0
MD5 a0b2633a2c8e97501610bd3f73da66fc
SHA1 0ec0ec9ac11111433d17ea79e0ae8cec650dcfa4
SHA512 5168643c1768ec83554a9066754507a781b6d14251a46a469222d462efc6ca87a72c90679154e8a723349c91e7772b32ac9b08dfe313cded0ee0a6f17885079e
SSDEEP 96:GFCscBOvOFXDgRvi/3UCwN4ZlkRo/j5SpoNOBoi+geBIzCa:GFCsEOmWRa8CwN4ZqRo7geEk3IzCa
TLSH
T122A1A6B0D38AD363927A74C9EE4845B43AFF40B023705C68693C463167A8536D3B9CF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pre-commit.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\jailbreak\PongoOS\.git\hooks\pre-commit.sample
Size 1KB
SHA256 f9af7d95eb1231ecf2eba9770fedfa8d4797a12b02d7240e98d568201251244a
MD5 305eadbbcd6f6d2567e033ad12aabbc4
SHA1 a79d057388ee2c2fe6561d7697f1f5efcff96f23
SHA512 7cfb0a58abed1915ee1b261a1c661c7e2deea4e9227f77f5875af1a25c82e19245ba12dcb2f5052d994d0e81a3465daf37f9d8c670e17f9c96742f60fdfaaa56
TLSH
T1B33161429BE0B535012043844A9E75BAAF0796EC0331702615D9C1ACF36D661A3BEDF1
MD5 SHA1 SHA512 TLSH

Submit Download

pre-push.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\jailbreak\PongoOS\.git\hooks\pre-push.sample
Size 1KB
SHA256 ecce9c7e04d3f5dd9d8ada81753dd1d549a9634b26770042b58dda00217d086a
MD5 2c642152299a94e05ea26eae11993b13
SHA1 a599b773b930ca83dbc3a5c7c13059ac4a6eaedc
SHA512 cc98bbe0e3865e2023af04416e10689e3aecd3f3928cf90c2acc0d3d7306388886779025c8967c8ea198af1f4fe29d16c65d4e1d546c7a8fa513f5ba7df16850
TLSH
T13B218695810F5B371DFA01A87A1086F29F3CC0E016AED6210EDB810DD91F7DEE1B6AD0
MD5 SHA1 SHA512 TLSH

Submit Download

update.sample

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\jailbreak\PongoOS\.git\hooks\update.sample
Size 3KB
SHA256 8d5f2fa83e103cf08b57eaa67521df9194f45cbdbcb37da52ad586097a14d106
MD5 647ae13c682f7827c22f5fc08a03674e
SHA1 730e6bd5225478bab6147b7a62a6e2ae21d40507
SHA512 be3780974589d06eddba6fa0aa15a3e3dfe390e2827a1a6ae5cb83d6ac47e79ef9b1bbb53f067372f8dc70db0350d3770e78537fd3cfe734200ff824eca4cada
TLSH
T1D7718546B305E5B0147BA621BC4FE0961D89571B27B42E533CC5F47CC8BF39111DAEA9
MD5 SHA1 SHA512 TLSH

Submit Download

exclude

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\jailbreak\PongoOS\.git\info\exclude
Size 240B
SHA256 6671fe83b7a07c8932ee89164d1f2793b2318058eb8b98dc5c06ee0a5a3b0ec1
MD5 036208b4a1ab4a235d75c181e685e5a3
SHA1 c879df015d97615050afa7b9641e3352a1e701ac
SHA512 9828c6ecdf91bf117416e17f4ee9caee2e1e37b6fb00b9ff04035ace17a3089b9d0a25c6baa1046c0e1c62d3da88838e8fca74ea82973d6b975905fde58f3072
TLSH
T196D0974BA3C8401461DAB0B43C4AF716A917C3310D24FA22A2F3C0C8415A3E801D92A2
MD5 SHA1 SHA512 TLSH

Submit Download

HEAD

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\jailbreak\PongoOS\.git\refs\remotes\origin\HEAD
Size 32B
SHA256 cdc65e67690c4c6475174e5ec662b70655246a2f3924354778835ab3be70aa76
MD5 73a00957034783b7b5c8294c54cd3e12
SHA1 d9427cda09aba1cdde5c69c2b13c905bddb0bc51
SHA512 0d686b330d5704fdbb9588d62bbddda273f86b24db52ddbdb73c0c304aabb8e6f8a1df806b360113de6783bdc138f8731c03c22db1537cc4ad14975eb28d031f
MD5 SHA1 SHA512

Submit Download

1a300d26e5c2e033afdee82564c980fd161c17e8

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\mdmunlock\default\1a300d26e5c2e033afdee82564c980fd161c17e8
Size 181B
SHA256 97704a8960b4facceef54397a08fb5d0a456247c3627359215aa2a27df22656c
MD5 2de6a04cdba79ed13580c47dfd70cc5f
SHA1 bcefe0558555914d731c16b1778c49e77fe06b99
SHA512 605dc81b28c530fc8ebcf3c5a28486af8bbd3303ee5df53b5424e492e5dbe01baa0468fa4da1398451a62dff4d45067a2bf765f7def9ca0890883484de38a13b
TLSH
T1F6C0C0860640FC2D00C09BCF176DE1455310D35BACF1049D50E01CD143070E523083BF
MD5 SHA1 SHA512 TLSH

Submit Download

ideviceinfo

Path C:\Users\Admin\Downloads\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\mdmunlock\ideviceinfo
Size 3.3MB
SHA256 549cca47bbedc824e4e37a520502e4b8b39c61bf767d795eb08233f0cac3c245
MD5 e1d5769388359acbd8376ba9f604caf8
SHA1 9a273e68b09bf935199d4df67470717a90def182
SHA512 0d556c2fca2c9fc240798e3acb90ad26d75f43114f398d5bdc7c097944a2665aedcdf5809419ea807c336af8474684646674764f2b9d9f74a1dc95873333ef3b
SSDEEP 98304:sqLs+POlSBLEK5rpcAJQG65eVAKmE9WL62ceJUG3B2lDGW:i1bAJB68VAKmE9WL62ceJUG3B2lDGW
TLSH
T138F56B23A6A08C1AC4C19170573FC3125B31F8496B20FB9E27C4BB69BF79D95BB1A705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Passra1n_v1.0_Beta.zip

Path C:\Users\Admin\Downloads\Passra1n_v1.0_Beta.zip
Size 23.8MB
SHA256 967efcd3c74405af64cd1c3ba03602077bedbd8eb50dcfca763d05eb52f33119
MD5 ace4c01604369c2e00aef183626830eb
SHA1 7eb7cd593a96e367ebd56a17c09ce928961e1385
SHA512 a321823682669753b866c96d737573f401e597ac56d7bae006d53f6ccc139ee5609fb6195c1bcbeacdd98ee59e0806c470e2ed4e80f205e64566edcfed789c18
SSDEEP 393216:vcvH0XypiAYYa/L8Ev5RuWxseWHeirmEfZup33C0Poy4JIQPFFYYan8Ev5+6uGxF:v9yDYZj8EBRTxUdrtfZxGolVDYZn8EB9
TLSH
T1AC4733A4912241C2F98DBC7EA0062F2763B39C4D15D1D4FA0C96423935BB9F796E4E8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

._pack-41c68e6a37e04dd801118390fc4619253b177199.pack

Path C:\Users\Admin\Downloads\__MACOSX\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\PongoOS\.git\modules\newlib\objects\pack\._pack-41c68e6a37e04dd801118390fc4619253b177199.pack
Size 212B
SHA256 0136c042316c2eb5089f48473b69253204b364ee3550266578892152d0919a91
MD5 09e1e64623bca5cdeb84fb34de54324a
SHA1 5775dd02d900e4e7ebe71fedc7bd3602c3bd0d58
SHA512 e070d250a643d5c30524153a63aba928847b220d0c9b2d5c6e42282d72a06dee9130f867fd0c4185de35f7939e603e4aeb20e088883d1d487f521f332c253631
TLSH
T15DD02B9103C441C9DC0867300CF3154A237B1413C1338A3BF22DCB600B2126B35E0319
MD5 SHA1 SHA512 TLSH

Submit Download

._pack-41c68e6a37e04dd801118390fc4619253b177199.idx

Path C:\Users\Admin\Downloads\__MACOSX\Lockra1n_v3.0_Beta3\Lockra1n.app\Contents\Resources\jailbreak\PongoOS\.git\modules\newlib\objects\pack\._pack-41c68e6a37e04dd801118390fc4619253b177199.idx
Size 212B
SHA256 e94be01bcb6d5dbbf3f921062262033f6b58d1d8c292e980ca8e530e41f87373
MD5 1d888efc498259db10307d12b7c8329e
SHA1 b328a82a60bfbf0126408c2260391932cc9bfb3b
SHA512 812fb83bf6ed6764f764cdc4e44d9bc3d63c932e0ee65767181dd13c6389472e57ba3820573397447372fd36d596b6bbf50d6a96ebe944840ebd34cacfc400ab
TLSH
T1FED02B91A34030C7CA1983B00CA31A807A7A94B7CB325237B87FC180071451476E8707
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1144-2092-0x000001EC533C0000-0x000001EC5355F000-memory.dmp

Download

memory/3392-47-0x00000214A3200000-0x00000214A339F000-memory.dmp

Download