Overview

overview

8

Static

static

3

Madium-Boo...er.exe

windows10-2004-x64

6

Madium-Boo...er.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    334s
  • max time network
    336s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 19:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Madium-Bootstrapper.exe
  • Size 6.9MB
  • Sample260705-yqwp8abs3j
  • SHA256 1650251facc91ff98b7c710c9a3949ddcc1c91c08fd4c789ca0295be977c0b26
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceransomwarespywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 6 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 3 IoCs
    defense_evasiontrojan
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 14 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\Madium-Bootstrapper.exe
    "C:\Users\Admin\AppData\Local\Temp\Madium-Bootstrapper.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious use of WriteProcessMemory
    PID:2852
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Madium-Bootstrapper.exe --user-data-dir="C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2852.3028.9634104428711290720 /pfhostedapp:61c0aabfa8df695873c3ee689f14a57fcf0256a5
      2⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:3556
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView /prefetch:4 /pfhostedapp:61c0aabfa8df695873c3ee689f14a57fcf0256a5 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffa70a65fd8,0x7ffa70a65fe4,0x7ffa70a65ff0
        3⤵
          PID:2740
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView" --webview-exe-name=Madium-Bootstrapper.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1980 --field-trial-handle=1984,i,7372974486813129723,6418360950424131208,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:61c0aabfa8df695873c3ee689f14a57fcf0256a5
          3⤵
            PID:5620
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView" --webview-exe-name=Madium-Bootstrapper.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2276 --field-trial-handle=1984,i,7372974486813129723,6418360950424131208,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:61c0aabfa8df695873c3ee689f14a57fcf0256a5
            3⤵
              PID:5900
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView" --webview-exe-name=Madium-Bootstrapper.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2484 --field-trial-handle=1984,i,7372974486813129723,6418360950424131208,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:61c0aabfa8df695873c3ee689f14a57fcf0256a5
              3⤵
                PID:5476
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView" --webview-exe-name=Madium-Bootstrapper.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3504 --field-trial-handle=1984,i,7372974486813129723,6418360950424131208,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:61c0aabfa8df695873c3ee689f14a57fcf0256a5 /prefetch:1
                3⤵
                  PID:2388
              • C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe
                "C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe"
                2⤵
                • Executes dropped EXE
                • Checks whether UAC is enabled
                • Modifies system certificate store
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of WriteProcessMemory
                PID:3296
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=3296.2456.8976569612762056300 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                  3⤵
                  • Drops file in Windows directory
                  • Enumerates system info in registry
                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                  • Suspicious use of WriteProcessMemory
                  PID:1544
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView /prefetch:4 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x19c,0x7ffa70a65fd8,0x7ffa70a65fe4,0x7ffa70a65ff0
                    4⤵
                      PID:2896
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1724 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                      4⤵
                        PID:1916
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2088 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                        4⤵
                          PID:2632
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2540 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                          4⤵
                            PID:3904
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3468 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521 /prefetch:1
                            4⤵
                              PID:2544
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4412 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                              4⤵
                                PID:2428
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4372 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                                4⤵
                                  PID:2672
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3736 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                                  4⤵
                                    PID:960
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4004 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                                    4⤵
                                      PID:5000
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4444 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                                      4⤵
                                        PID:4236
                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4332 --field-trial-handle=1728,i,9989715122932910581,4507632438476600693,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:4ada4ec5f41badf2c164a7ee26988a4239b31521
                                        4⤵
                                          PID:2960
                                      • C:\Users\Admin\AppData\Local\Madium\Bin\lsp\luau-lsp.exe
                                        "C:\Users\Admin\AppData\Local\Madium\Bin\lsp\luau-lsp.exe" lsp --definitions:@roblox=C:\Users\Admin\AppData\Local\Madium\Tools\lsp\globalTypes.d.luau --docs=C:\Users\Admin\AppData\Local\Madium\Tools\lsp\docs.json
                                        3⤵
                                        • Executes dropped EXE
                                        PID:4332
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
                                    1⤵
                                    • Drops file in Windows directory
                                    • Enumerates system info in registry
                                    • Modifies data under HKEY_USERS
                                    • Modifies registry class
                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                    • Suspicious use of FindShellTrayWindow
                                    • Suspicious use of WriteProcessMemory
                                    PID:5024
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffa6d8ec188,0x7ffa6d8ec194,0x7ffa6d8ec1a0
                                      2⤵
                                        PID:5200
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2132,i,13989075277522526786,16713693285216329013,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:11
                                        2⤵
                                        • Downloads MZ/PE file
                                        • System Time Discovery
                                        PID:2932
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,18055935801408635769,10505733101964643369,262144 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
                                        2⤵
                                          PID:3968
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2744,i,16024255897102797699,15418995026908215759,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:13
                                          2⤵
                                            PID:1124
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,4713947112643604881,16243207564699643805,2097152 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
                                            2⤵
                                              PID:4812
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,9109196615148128078,13176072146814035931,2097152 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
                                              2⤵
                                                PID:1440
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,2403357065346250202,1727406915183444569,2097152 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
                                                2⤵
                                                  PID:592
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,12578360239106907919,4877742036561205402,2097152 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:9
                                                  2⤵
                                                    PID:5800
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,16892409767305104143,801068214289631411,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:14
                                                    2⤵
                                                      PID:3376
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,3517159953945716630,4305191023037200429,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
                                                      2⤵
                                                        PID:6128
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,9269830794981724388,14552767618052009106,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
                                                        2⤵
                                                          PID:4732
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,1118375846028011202,15875276939534161323,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
                                                          2⤵
                                                            PID:6760
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,1118375846028011202,15875276939534161323,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
                                                            2⤵
                                                              PID:6776
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,11956225239362077178,3548420784062410324,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:14
                                                              2⤵
                                                                PID:5276
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7180,i,8524440392471347224,15843157937171093504,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:14
                                                                2⤵
                                                                  PID:6456
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7156,i,5777668118692421340,6029877124307082260,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:14
                                                                  2⤵
                                                                    PID:6912
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6332,i,16115581831004554521,13859512244574156668,2097152 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:1
                                                                    2⤵
                                                                      PID:7128
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6724,i,12906906250003362498,15342376716960024427,2097152 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:1
                                                                      2⤵
                                                                        PID:5000
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,14175930377181700842,8560195750726357610,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:14
                                                                        2⤵
                                                                          PID:5148
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4444,i,8662457459819714807,17263701214627158853,2097152 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:1
                                                                          2⤵
                                                                            PID:1404
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,870485560834797466,10660156777078871673,524288 --field-trial-handle=2268,i,3828166329159087004,4422086274715978880,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:14
                                                                            2⤵
                                                                              PID:3156
                                                                            • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
                                                                              "C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
                                                                              2⤵
                                                                              • Executes dropped EXE
                                                                              • Checks whether UAC is enabled
                                                                              • Drops file in Program Files directory
                                                                              • System Location Discovery: System Language Discovery
                                                                              • Enumerates system info in registry
                                                                              • Modifies Internet Explorer settings
                                                                              • Modifies registry class
                                                                              PID:5276
                                                                              • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe" -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 5276
                                                                                3⤵
                                                                                • Executes dropped EXE
                                                                                PID:2960
                                                                              • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe" -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 5276
                                                                                3⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                PID:2932
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                              2⤵
                                                                              • Drops file in Windows directory
                                                                              • Enumerates system info in registry
                                                                              • Modifies data under HKEY_USERS
                                                                              • Modifies registry class
                                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                              PID:6976
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffa6d8ec188,0x7ffa6d8ec194,0x7ffa6d8ec1a0
                                                                                3⤵
                                                                                  PID:6716
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1656,i,1846344648360777266,6166282023838661598,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:11
                                                                                  3⤵
                                                                                  • System Time Discovery
                                                                                  PID:7144
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,15297581437301931934,10929586977668629104,262144 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
                                                                                  3⤵
                                                                                    PID:6420
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,1789130712402622220,4484835861237488352,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:13
                                                                                    3⤵
                                                                                      PID:5300
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3920,i,10719825296347221640,396748279768331381,2097152 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:1
                                                                                      3⤵
                                                                                        PID:4060
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,1715546011525208854,9763817018739544114,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:14
                                                                                        3⤵
                                                                                          PID:2460
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3880,i,17356354428186214405,15995356762268662700,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:14
                                                                                          3⤵
                                                                                            PID:456
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5064,i,5606585832828679757,16558993894861676494,2097152 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:1
                                                                                            3⤵
                                                                                              PID:6448
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,13701556735435865388,16405244893409361371,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
                                                                                              3⤵
                                                                                                PID:1400
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,13701556735435865388,16405244893409361371,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
                                                                                                3⤵
                                                                                                  PID:3256
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,14344144477578527916,10019947957007252129,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
                                                                                                  3⤵
                                                                                                    PID:2592
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,8508272009788332456,4712353792759637751,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
                                                                                                    3⤵
                                                                                                      PID:6240
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,1037755529260120310,1903868069832499662,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
                                                                                                      3⤵
                                                                                                        PID:6024
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,2901681212593131254,1407154430265344073,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
                                                                                                        3⤵
                                                                                                          PID:6888
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,4017960050126967905,17655057521601283398,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
                                                                                                          3⤵
                                                                                                            PID:3260
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,2679224510672078114,5192582364840355594,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:14
                                                                                                            3⤵
                                                                                                              PID:3588
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,1126910527884022284,15668389066033334112,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:14
                                                                                                              3⤵
                                                                                                                PID:1160
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4868,i,6720895261463216266,202702554285135343,262144 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:10
                                                                                                                3⤵
                                                                                                                  PID:6528
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,2204795706367824304,12022026347718251343,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
                                                                                                                  3⤵
                                                                                                                    PID:5976
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,14971435446014491999,10828127203437322797,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
                                                                                                                    3⤵
                                                                                                                      PID:6744
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4028,i,10629977608373013357,4544996716585152322,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
                                                                                                                      3⤵
                                                                                                                        PID:4120
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,16519123685087448491,15858887576407636159,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
                                                                                                                        3⤵
                                                                                                                          PID:1552
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4016,i,12819444362394769736,13558215809807509045,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
                                                                                                                          3⤵
                                                                                                                            PID:3292
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2040,i,16138480168816018209,2874736762884813550,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:14
                                                                                                                            3⤵
                                                                                                                              PID:7020
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,15116156938345636959,4378116899818501324,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:14
                                                                                                                              3⤵
                                                                                                                                PID:5540
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,12789598432326395596,12193188624805409710,524288 --field-trial-handle=2476,i,7385861612135362182,17674645781990477298,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:14
                                                                                                                                3⤵
                                                                                                                                  PID:4488
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                              1⤵
                                                                                                                                PID:4876
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                1⤵
                                                                                                                                  PID:6192
                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                  1⤵
                                                                                                                                    PID:6436
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                    1⤵
                                                                                                                                      PID:5440
                                                                                                                                    • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                                                                      "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:4164
                                                                                                                                    • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                                                                      "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                      PID:6564
                                                                                                                                    • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                                                                      "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:3324
                                                                                                                                    • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                                                                      "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                      PID:3368
                                                                                                                                    • C:\Windows\system32\taskmgr.exe
                                                                                                                                      "C:\Windows\system32\taskmgr.exe" /4
                                                                                                                                      1⤵
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • Checks SCSI registry key(s)
                                                                                                                                      • Checks processor information in registry
                                                                                                                                      • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                                      • Suspicious use of SendNotifyMessage
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:5440
                                                                                                                                    • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                                                                      "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:3656
                                                                                                                                    • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                                                                      "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                      PID:6696
                                                                                                                                    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                      1⤵
                                                                                                                                      • Modifies registry class
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:1124
                                                                                                                                    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                      1⤵
                                                                                                                                      • Modifies registry class
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:752
                                                                                                                                    • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                                                                      "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:5968
                                                                                                                                    • C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe
                                                                                                                                      "C:\Program Files (x86)\Roblox\Versions\version-5cf2272675e145f5\RobloxPlayerBeta.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                      PID:2412

                                                                                                                                    Network

                                                                                                                                          MITRE ATT&CK Enterprise v16

                                                                                                                                          Replay Monitor

                                                                                                                                          Loading Replay Monitor...

                                                                                                                                          Downloads

                                                                                                                                          RobloxStudioInstaller.exe
                                                                                                                                          • Path C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe
                                                                                                                                          • Size 9.6MB
                                                                                                                                          • SHA256 4fb6633176abb8d1be846cc49d65bf4a4a358af81b750bd2bca87604fdc98dd7
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Madium.exe
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Bin\Madium.exe
                                                                                                                                          • Size 13.6MB
                                                                                                                                          • SHA256 4f9daf33fa48205e687af95fba1eb84a1048ef1e07af031998ca5cac2e12e60f
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          luau-lsp.exe
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Bin\lsp\luau-lsp.exe
                                                                                                                                          • Size 16.1MB
                                                                                                                                          • SHA256 9e85ce9370f208c97f1dfc1b8fcf7185fe64386f23130a65fc834f5323a0d653
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          editor.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Config\editor.json
                                                                                                                                          • Size 426B
                                                                                                                                          • SHA256 6aa74a67c01373cfb79483dcdb9c330512518458df91128ec8501d3f1612ae84
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          editor.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Config\editor.json
                                                                                                                                          • Size 432B
                                                                                                                                          • SHA256 684fc2bfb0677cb80c0724bec02ad5e2f1d07ddc223808fa68717de941ba67ec
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          editor.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Config\editor.json
                                                                                                                                          • Size 433B
                                                                                                                                          • SHA256 9d20ef75fc9f9828fc3a13f7373d1f6425c2ec79dbba70d92ad43536847a609f
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          editor.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Config\editor.json
                                                                                                                                          • Size 435B
                                                                                                                                          • SHA256 54ede4b4e2f01485da3bf90088a3b1e92fcaaf8949d7cd7c5df748f01cc05f78
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          editor.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Config\editor.json
                                                                                                                                          • Size 437B
                                                                                                                                          • SHA256 9b43142dc29729ca4329f056b43ff835d53d65d262a73e711382b300863ffa52
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          editor.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Config\editor.json
                                                                                                                                          • Size 452B
                                                                                                                                          • SHA256 24ae71ad6bfefaf31f2740d3f287c166e3ea902391ebe091c39429b11a98ea9e
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          ui.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Config\ui.json
                                                                                                                                          • Size 36B
                                                                                                                                          • SHA256 c8d89df060705d2971c39f7338698d24d0e0ecb3f7537e9f541cb66fb2fbea20
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          ui.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Config\ui.json
                                                                                                                                          • Size 34B
                                                                                                                                          • SHA256 34faf35078debf5f4b594e7e62fda4f2cfe5a1569e9125320e0ef9e2ef61404a
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          docs.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\Tools\lsp\docs.json
                                                                                                                                          • Size 44KB
                                                                                                                                          • SHA256 0a44d5ed4ab0da89ee2e80fe7369c399ad1f3c3c2c181a7f95b22f69036ca54e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 42231cf5f6d8d91e6f78a9a83cc1777756d1db5f8acd6bff81f678cd299b4f4b
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 ff8c0da8c251d2e3b7e32e634d01351268e2aef79643e8163cc697079f8223ff
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Code Cache\js\index
                                                                                                                                          • Size 24B
                                                                                                                                          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          • Size 240B
                                                                                                                                          • SHA256 4bb630d60743d2d9bd69e64f607232d8182afda8313832a32ed61c10b283d3c7
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index~RFe597eea.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe597eea.TMP
                                                                                                                                          • Size 48B
                                                                                                                                          • SHA256 794650a2dab708b0ea99f1a35fe5cf5a888a93bb0213485e74c9bc6667279199
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          ExtensionActivityComp
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\ExtensionActivityComp
                                                                                                                                          • Size 4KB
                                                                                                                                          • SHA256 9827429749037198cb3d19a851ccff2adafad344fbade7220aa022d3c9e2fa85
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Network Persistent State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Network\Network Persistent State
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 f9b684b9cfa8a308a751e1735ea293cd8f9e1a09b4a3f1f1774ee3436bc69440
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Network Persistent State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Network\Network Persistent State
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 d387a60df7f2190551f8feaf59397fa2b1a2158b36045e52bb48e1525c03f174
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Network Persistent State~RFe5a49ad.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Network\Network Persistent State~RFe5a49ad.TMP
                                                                                                                                          • Size 59B
                                                                                                                                          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          TransportSecurity
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Network\TransportSecurity
                                                                                                                                          • Size 356B
                                                                                                                                          • SHA256 fefeec2b15f0c63992c239a59afe199f5a746d8aa12b71aef4b3271f6b0a4ccd
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          TransportSecurity~RFe5d202d.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Network\TransportSecurity~RFe5d202d.TMP
                                                                                                                                          • Size 356B
                                                                                                                                          • SHA256 3b9baeef59109aa1871a29a6632658aae9f3c84ff4e022b2a2230494363e5315
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Preferences
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\Preferences
                                                                                                                                          • Size 6KB
                                                                                                                                          • SHA256 0510eb63e865eecffbf18f1f82378c646ef938b9e82fc76d926a1e94d5180fa8
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          d482b14f-5ec8-4326-8364-60b48dc6aed6.tmp
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Default\d482b14f-5ec8-4326-8364-60b48dc6aed6.tmp
                                                                                                                                          • Size 6KB
                                                                                                                                          • SHA256 653da2638083f13f4d1907ede3bcdec3498ba95bc842cffdeaf686f75212b3fe
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                                                                          • Size 16KB
                                                                                                                                          • SHA256 e3ad5514de81b404fbb4b669505026abc030ebca4302b57ea7273a470eca8c24
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                                                                          • Size 17KB
                                                                                                                                          • SHA256 51ad1bb8d9c4c8bf4d1e44bdd0cb9a097cd19a86c0b7680e22f4d2b13675b795
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 a107f550f7f557c6f74ec7b208a956d699706eedc9cdb85d53b4612fc363d7c6
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 d51ca003672ebc804757edf88d8fe11411bb91146f55255950fb73bf33f24a1a
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                                                                          • Size 15KB
                                                                                                                                          • SHA256 be233d7a9fb116a6234da1a7ea90b7c428cac6c24c24390fcb5c293574807a72
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                                                                          • Size 15KB
                                                                                                                                          • SHA256 77f298b519f7e90af69ed1ab9c24a3d151c7a56f08a6995e7359317ea8130b11
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                                                                          • Size 17KB
                                                                                                                                          • SHA256 ee4142c35757cecded9d7f6b6b45a7f009e7e9d71ea88b26493048745d3ae11f
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State
                                                                                                                                          • Size 17KB
                                                                                                                                          • SHA256 ce748983c8f712d734a35d851bf944d61ebc8b3eac297e9c4674375e0ac3a38a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State~RFe592cd3.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Madium\WebView\EBWebView\Local State~RFe592cd3.TMP
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 6fb7ca09cde6013716a6b98f0a7115ffe51974d195b3d48d9952dd42f06b02e4
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 d027e41305c78ecbbd01b0f2e9b79eb90b2755585709b552886ad5ebc5a4a959
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 56ba52427ece10b53dc5ad26b268efb78e7400b13b5c3b3414bc32ba2f5f8c0f
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 5e1a5fea1006889b9c3bcf0a470a6a4256d5300a4b7036038ddce5fd042c424c
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 674d24008448b140a9b320032b4ed333cf5a592b073bf375c453c816d33c703b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          55a6adbb-4341-4c28-bd6d-f9d26a5249d8.tmp
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\55a6adbb-4341-4c28-bd6d-f9d26a5249d8.tmp
                                                                                                                                          • Size 1B
                                                                                                                                          • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          5d523be7-e0da-405f-9e0e-1b7e6f1ed67c.tmp
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5d523be7-e0da-405f-9e0e-1b7e6f1ed67c.tmp
                                                                                                                                          • Size 414B
                                                                                                                                          • SHA256 d134405932d672cdee85030dc1e1b99c7143acd8f77d76e0ac1ad6772e4e7219
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          LOG.old
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                          • Size 357B
                                                                                                                                          • SHA256 cf60ccb000a4613c8cdc7874766558cca28fe418a6f23e24ee6384d072609a11
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          MANIFEST-000001
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                          • Size 158B
                                                                                                                                          • SHA256 58df99898a55e1f9642c890f638e66d441f66da79f87d797c820155b821d8162
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          BookmarkMergedSurfaceOrdering
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                          • Size 6B
                                                                                                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          • Size 5KB
                                                                                                                                          • SHA256 4ef8db9ed50c06b72d81a0a518bf9c598c1a9c6ca947d1a793200a9b581b3d53
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          • Size 4KB
                                                                                                                                          • SHA256 932181902e144c516432e78ffd4c968d5a7fd80772c0f850c16970e17cbd77da
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index~RFe59e9f9.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e9f9.TMP
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 71ba8a8cb2bbb5a609de3a8805f16328135bb631a8082dc278efb5b7ee03fb4a
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          SiteList-Enterprise.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                          • Size 2B
                                                                                                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          Edge Profile.ico
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                          • Size 70KB
                                                                                                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          computed_hashes.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
                                                                                                                                          • Size 429B
                                                                                                                                          • SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          verified_contents.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          content.js
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
                                                                                                                                          • Size 9KB
                                                                                                                                          • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Favicons
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
                                                                                                                                          • Size 20KB
                                                                                                                                          • SHA256 63297a716615d9126d55be6a094053e4bfbe0ed784e00aace6f4d18b17b3faed
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          History
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
                                                                                                                                          • Size 224KB
                                                                                                                                          • SHA256 0611abde89233bab1fd7f6a31261eb91009a044d18d8a7ff87bee77177826bdf
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          3ffa6a78-f800-4fc5-8c2c-314fc8f47b1c.tmp
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3ffa6a78-f800-4fc5-8c2c-314fc8f47b1c.tmp
                                                                                                                                          • Size 40B
                                                                                                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          Network Persistent State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                          • Size 5KB
                                                                                                                                          • SHA256 6488d06efa92d6e54087be444b43c97a0829edd69a43bffe4c6309e5844beaa6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Network Persistent State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                          • Size 7KB
                                                                                                                                          • SHA256 3f7fba0fdf18afc2891a0163f505bd10315d8953cd4d3d2d8c139d11f99789bc
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Network Persistent State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                          • Size 7KB
                                                                                                                                          • SHA256 21cfb0f8911f45ac28c134faa2a200b3c0552a6880ba0011b35ef1aa15313fce
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Preferences
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 17KB
                                                                                                                                          • SHA256 820f1d5b1966be5c7203e1c7d43aa5b3213599cd361a4f2de66dd46499dca81c
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Preferences
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 16KB
                                                                                                                                          • SHA256 b9a9c3ab3aa051039705d62c517578a257836ec65cabb9c599e8b494765542c4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Preferences
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 15KB
                                                                                                                                          • SHA256 8095c74848f5c7d0369d130a123755e9acfcfb29dde1677cc7b02ae3fdb0b26a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Secure Preferences
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                          • Size 32KB
                                                                                                                                          • SHA256 970be32384b4c324082f837bb805b3111baafe7ca8f67f0b014fdc3ad3e41483
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\23ec0676-3406-4b2b-aedb-7c0e1b255a32\index-dir\the-real-index
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 61b1fa6352e97b1687c4ca48a92c70485c3e4f112244c39c05405020ea1a136a
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index~RFe5aa74d.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\23ec0676-3406-4b2b-aedb-7c0e1b255a32\index-dir\the-real-index~RFe5aa74d.TMP
                                                                                                                                          • Size 48B
                                                                                                                                          • SHA256 4e26b259608ad53cd496e9f31c47e1eb116d0c00669e0502c1c8ac0c12c1ccf1
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d4db5ca-f483-4d6f-ac67-ba3b47a7ec5d\index-dir\the-real-index
                                                                                                                                          • Size 72B
                                                                                                                                          • SHA256 a375852a2b59fdb856a4b3ade323fceb7fb27345a987e4076667aad6f368cb37
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d4db5ca-f483-4d6f-ac67-ba3b47a7ec5d\index-dir\the-real-index
                                                                                                                                          • Size 72B
                                                                                                                                          • SHA256 8fd6eb52bedddcba93e63944654ad6728e862acdef733f9212f5016ded471b4c
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\546debcb-1733-4547-b4db-916d75206e0d\index-dir\the-real-index
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 4a523bf30b8d66a4397df5b1c57dd13bbed6156818a5bb37ef7ea35e153d05b2
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\546debcb-1733-4547-b4db-916d75206e0d\index-dir\the-real-index
                                                                                                                                          • Size 744B
                                                                                                                                          • SHA256 2ea9d3f146c9b769f469490649a89f8f5abb4990eb2eaa8e8c9677840766052f
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index~RFe598f65.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\546debcb-1733-4547-b4db-916d75206e0d\index-dir\the-real-index~RFe598f65.TMP
                                                                                                                                          • Size 744B
                                                                                                                                          • SHA256 2c60b6441d024b5cb81d1a96249e3bfce89c98f509a964f7c15352c1d7cd5342
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          index.txt
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 259B
                                                                                                                                          • SHA256 be2d83a2abf3fd50e2325f9ab703bdd6665e388242e96ba67ac77231be6b432c
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          index.txt
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 161B
                                                                                                                                          • SHA256 5cc820a9087d390fc30c1af9f013bd3428afeb1e089000a664c5c9ff6465ace9
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          index.txt
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 490B
                                                                                                                                          • SHA256 beaada819f53f86499d68afa8b5529d88349c9d915b575fcd4a9d222ddd551f0
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          index.txt
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 371B
                                                                                                                                          • SHA256 a3d1f29593719ee71e44a6e13619a817f9d573d8334fdc052a82a12552caa52e
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          index.txt
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 386B
                                                                                                                                          • SHA256 c8cfa628091dedb6222082ef67e64524a4eca82a5d868631e6b7071fb4f76e80
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          000003.log
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
                                                                                                                                          • Size 4KB
                                                                                                                                          • SHA256 3e0d28641875a3d48ccb8964f824bc317b8c1065b312d843199b3cf6343bd392
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          LOG
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
                                                                                                                                          • Size 338B
                                                                                                                                          • SHA256 5d854e8be1450fb67512c0823162795c3a9fde7f6526779ad49e37503f6c7d97
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                          • Size 72B
                                                                                                                                          • SHA256 98b87065e4bd390c5fa266bbd74cd76f875d72030fd61b980750bdb9cb485cbf
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                          • Size 72B
                                                                                                                                          • SHA256 358f1130aff656426bd2fe543e5526a414452a23418c306119c6b1aaee5116c4
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          the-real-index~RFe59e380.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59e380.TMP
                                                                                                                                          • Size 48B
                                                                                                                                          • SHA256 7308afa7621457f3b4a64f3711f4da6cc12afb018eb1aaece12f8badfd06df15
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          000003.log
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
                                                                                                                                          • Size 172B
                                                                                                                                          • SHA256 b5e416748305929cb515c996779b5d000aa58c8fbc8a7a081b88439dd55889cd
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          LOG
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
                                                                                                                                          • Size 350B
                                                                                                                                          • SHA256 90e7fbab8f0c8903e45baff89aacfb4a9af299a2292cafe3412f84355dc3d7a2
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          000003.log
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
                                                                                                                                          • Size 175B
                                                                                                                                          • SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          LOG
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
                                                                                                                                          • Size 326B
                                                                                                                                          • SHA256 17fc5ffa368f649c520098503b67100ed5405a29d6df91be639efee311f9b8b5
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          sync_diagnostic.log
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                          • Size 4KB
                                                                                                                                          • SHA256 07061af1572bee396ab2e7788364c44538526b87e68072c25db755075e888f5d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          LOG
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
                                                                                                                                          • Size 337B
                                                                                                                                          • SHA256 4bb0f7e7b054b0fbb95bcb8ffadd28bf680730014d615fe487a0a8c485973ac3
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          OperationConfig
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                          • Size 22KB
                                                                                                                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          OperationConfig~RFe5b0329.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b0329.TMP
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Last Version
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
                                                                                                                                          • Size 14B
                                                                                                                                          • SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 38KB
                                                                                                                                          • SHA256 ea629a2bdfc95f7c28d4949a59f6ab42e5e60c75c32d423eea1bc381e44bcea1
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 35KB
                                                                                                                                          • SHA256 8b8d8a16086725a1a3c7cd1d3a5bd574ad4cedad3500829d272612659c20717e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 68KB
                                                                                                                                          • SHA256 55e3b0659f737b33c91d61f2063a1499c2f7ea3a4ed99afe356986e05e0d597e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 38KB
                                                                                                                                          • SHA256 2c3d8c76964c94e6753dee8cc1e6472ce6206420dd7a35d89009740b0c6b00a7
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 42KB
                                                                                                                                          • SHA256 c897d394377a0de034cc14bd7d521e3b889209708509e315d0594c8c575dba24
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 38KB
                                                                                                                                          • SHA256 1eb22b37eec44f4a3f1f2a5043072b29a70dd53e0a629981b0bfafdac4277dc6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 35KB
                                                                                                                                          • SHA256 4aade2d5a42e496bcc8de5cb087b7d5dd69244237361c305c8d000cc1c5c4f85
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          campaign_history
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
                                                                                                                                          • Size 20KB
                                                                                                                                          • SHA256 f40878a3804b09fb5dfa33e3fe75eed764852c7ff69b08355aa4c35d5f1aa3c1
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          data_1
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                                                                                                          • Size 264KB
                                                                                                                                          • SHA256 b42252397ec7a59ee39e7a2ebe03e269aca07c7e3b5ea61e5acfd03115eadf3d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Variations
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
                                                                                                                                          • Size 86B
                                                                                                                                          • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          2935c2e0-ab20-402a-b174-15273e057721.tmp
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\2935c2e0-ab20-402a-b174-15273e057721.tmp
                                                                                                                                          • Size 252B
                                                                                                                                          • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          metadata.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 972B
                                                                                                                                          • SHA256 590065152acec5cf42dffc28eb04749514feaa899eb2ae04edce7d38a148fbda
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          metadata.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 372B
                                                                                                                                          • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          metadata.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 492B
                                                                                                                                          • SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          metadata.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 612B
                                                                                                                                          • SHA256 98d9b184e4c7220b5aaf7ae412b0c1b3f32e3dc4933afcf852538b8082017b9e
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          metadata.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 757c40068c8b44526fedddbae76f4ef49d46e6f99e9c5b6ac7daee04f31c52bc
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          metadata.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 732B
                                                                                                                                          • SHA256 a5548ca519cf47ecb420c8f1299a8a50517fa463459a704ef2ff17c4db35117a
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          metadata.json
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 852B
                                                                                                                                          • SHA256 142a7cc7a4933a976aae32a9d04e1758464486092207243f09edbbad51f1d934
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          980102b2-1fc9-437b-ad8d-86780d599b32.tmp
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\980102b2-1fc9-437b-ad8d-86780d599b32.tmp
                                                                                                                                          • Size 13B
                                                                                                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 e55eff88570fa2abee6a2e42a5e430ab9fd2038acafb824fa3b8139adc274a94
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 38af245d6dc82f87685e271ff0a930ba63a4277ce7db33195977374ced068eaf
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          settings.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 7f86f4a4a41882c50a02a58c24c24ee1820e5a3312ca0dd8a8053e86ef6eb061
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          throttle_store.dat
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Crashpad\throttle_store.dat
                                                                                                                                          • Size 20B
                                                                                                                                          • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          MANIFEST-000001
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Default\Extension Rules\MANIFEST-000001
                                                                                                                                          • Size 41B
                                                                                                                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          SCT Auditing Pending Reports
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                                                                                                          • Size 2B
                                                                                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          000001.dbtmp
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Default\Sync Data\LevelDB\000001.dbtmp
                                                                                                                                          • Size 16B
                                                                                                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                          Submit Download

                                                                                                                                          data_0
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\GraphiteDawnCache\data_0
                                                                                                                                          • Size 8KB
                                                                                                                                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                          Submit Download

                                                                                                                                          data_1
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\GraphiteDawnCache\data_1
                                                                                                                                          • Size 264KB
                                                                                                                                          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                          Submit Download

                                                                                                                                          data_2
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\GraphiteDawnCache\data_2
                                                                                                                                          • Size 8KB
                                                                                                                                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                          Submit Download

                                                                                                                                          data_3
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\GraphiteDawnCache\data_3
                                                                                                                                          • Size 8KB
                                                                                                                                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Local State
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 964dfe1405f772cdeeda5fdd0a24a2f7cd27b100d6087c2f23e99357a432f0b9
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Local State
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 fa0aea1beb70584a543e032b2a1eb548df9771f125b6e3bab037326c1ead1679
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Local State
                                                                                                                                          • Size 15KB
                                                                                                                                          • SHA256 07d6414bb97817032be695f590f44bb189d935e14c90373374fba39914d8a6e6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Local State~RFe590526.TMP
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\MadiumLottie-{10B5D71C-87A9-459E-BD53-5F4BD51C8653}\wv2\EBWebView\Local State~RFe590526.TMP
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 0d86aa5b008c54382a413cefbfc3813e237acbe6c82060598c561059ab8ad71b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          content_new.js
                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5024_444521802\CRX_INSTALL\content_new.js
                                                                                                                                          • Size 10KB
                                                                                                                                          • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          Madium.lnk
                                                                                                                                          • Path C:\Users\Admin\Desktop\Madium.lnk
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 4aa19b53d0a81f1c878259bd82cab076727c1413cc83a391c3fb481b8915f5a2
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          RobloxPlayerInstaller.exe
                                                                                                                                          • Path C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
                                                                                                                                          • Size 9.6MB
                                                                                                                                          • SHA256 c377f327acf6f974085678aeb267ef49caf229abcc290fcbcaa88d3c5b28d571
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          hyph-bn.hyb
                                                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1544_329581297\hyph-bn.hyb
                                                                                                                                          • Size 703B
                                                                                                                                          • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          hyph-mr.hyb
                                                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1544_329581297\hyph-mr.hyb
                                                                                                                                          • Size 687B
                                                                                                                                          • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          hyph-nn.hyb
                                                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1544_329581297\hyph-nn.hyb
                                                                                                                                          • Size 141KB
                                                                                                                                          • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                          Submit Download

                                                                                                                                          manifest.json
                                                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1544_606370519\manifest.json
                                                                                                                                          • Size 135B
                                                                                                                                          • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          protocols.json
                                                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1544_606370519\protocols.json
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          LICENSE
                                                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6976_1235473725\LICENSE
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                          Submit Download

                                                                                                                                          memory/752-3109-0x00000155801E0000-0x00000155802E0000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/752-3140-0x0000015583C20000-0x0000015583C40000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/752-3127-0x0000015593E00000-0x0000015593F00000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/752-3126-0x00000155839C0000-0x00000155839E0000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/752-3154-0x00000155941A0000-0x00000155941C0000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/1124-2917-0x00000205801F0000-0x00000205802F0000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/1124-2916-0x00000205801F0000-0x00000205802F0000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/1124-2915-0x00000205801F0000-0x00000205802F0000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/1124-2947-0x0000020583D10000-0x0000020583D30000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/1124-2961-0x0000020594230000-0x0000020594250000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/1124-2931-0x0000020593E30000-0x0000020593F30000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/1124-2929-0x00000205839F0000-0x0000020583A10000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2388-117-0x00007FFA92EA0000-0x00007FFA92EA1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2428-2299-0x00007FFA925D0000-0x00007FFA925D1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2428-2298-0x00007FFA93100000-0x00007FFA93101000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2672-2426-0x0000017F8DFD0000-0x0000017F8DFD1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2672-2423-0x0000017F8DFD0000-0x0000017F8DFD1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2672-2409-0x0000017F8DFD0000-0x0000017F8DFD1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2672-2411-0x0000017F8DFD0000-0x0000017F8DFD1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2672-2425-0x0000017F8DFD0000-0x0000017F8DFD1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2672-2428-0x0000017F8DFD0000-0x0000017F8DFD1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2672-2427-0x0000017F8DFD0000-0x0000017F8DFD1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/2672-2424-0x0000017F8DFD0000-0x0000017F8DFD1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/5440-2633-0x00000252A37D0000-0x00000252A37D1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/5440-2625-0x00000252A37D0000-0x00000252A37D1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/5440-2632-0x00000252A37D0000-0x00000252A37D1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/5440-2634-0x00000252A37D0000-0x00000252A37D1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/5440-2635-0x00000252A37D0000-0x00000252A37D1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/5440-2631-0x00000252A37D0000-0x00000252A37D1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/5440-2627-0x00000252A37D0000-0x00000252A37D1000-memory.dmp
                                                                                                                                          Download

                                                                                                                                          memory/5620-91-0x00007FFA92EA0000-0x00007FFA92EA1000-memory.dmp
                                                                                                                                          Download