Analysis

  • user interaction
    yes
  • max time kernel
    234s
  • max time network
    204s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    17/10/2026, 02:15

General

  • Target
    http://superpsx.com
  • Sample261017-cpp1dsz16j
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs
  • Suspicious use of FindShellTrayWindow 45 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://superpsx.com
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4272
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffe5993c188,0x7ffe5993c194,0x7ffe5993c1a0
      2⤵
        PID:2292
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,749743075395751259,18366935282913766671,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:11
        2⤵
        • System Time Discovery
        PID:3540
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,4337240813893131375,18354798669584350322,262144 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:2
        2⤵
          PID:2548
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,14606796867392576177,2272363497447482992,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:13
          2⤵
            PID:1636
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3308,i,2513975047739719425,13720145081077073995,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
            2⤵
              PID:4684
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3312,i,534533735148134506,6062969472539499356,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1
              2⤵
                PID:2144
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,4649849141390675249,16104930131785150012,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=3288 /prefetch:1
                2⤵
                  PID:2156
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,11911961711318731009,14130866886178858775,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:9
                  2⤵
                    PID:2516
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4248,i,6493684068094894185,15306304111151340667,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
                    2⤵
                      PID:908
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4264,i,11020391750365608542,16793476600827908812,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:9
                      2⤵
                        PID:4904
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3532,i,16983389012665385113,5772124637845493142,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
                        2⤵
                          PID:2844
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,15046416980125609512,6505479497135417616,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
                          2⤵
                            PID:6052
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,4046450478214403777,834893638793864391,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
                            2⤵
                              PID:2800
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5732,i,16272156689056217115,5795635385003293737,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:1
                              2⤵
                                PID:2672
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5932,i,5532459071910503148,7450565075722090399,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:1
                                2⤵
                                  PID:2220
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6628,i,12281869216380971799,4886675148575764070,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:14
                                  2⤵
                                    PID:1964
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,6555248933835780709,11556413763249916180,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:14
                                    2⤵
                                    • Suspicious use of WriteProcessMemory
                                    PID:4836
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                      cookie_exporter.exe --cookie-json=1132
                                      3⤵
                                        PID:2420
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7016,i,6374154040709140942,5604483654356850319,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:14
                                      2⤵
                                        PID:4820
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7016,i,6374154040709140942,5604483654356850319,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:14
                                        2⤵
                                          PID:5408
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3468,i,3186471279023191825,2372221606650327081,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:1
                                          2⤵
                                            PID:1884
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7380,i,16262047427416119051,648984602637982758,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
                                            2⤵
                                              PID:5180
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7572,i,10705154431211101195,14129541303611918895,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:1
                                              2⤵
                                                PID:5748
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6820,i,508964138741927738,14741107520093733006,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=7260 /prefetch:1
                                                2⤵
                                                  PID:6012
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6004,i,6696651973409340011,12764098118159818367,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:1
                                                  2⤵
                                                    PID:5260
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7744,i,17902703542733252758,2942951745119907166,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:1
                                                    2⤵
                                                      PID:4584
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,12031581374343717322,15031144447526736645,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:14
                                                      2⤵
                                                        PID:5832
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7108,i,9928874843243655832,439296412988783258,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:14
                                                        2⤵
                                                          PID:5116
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,12313886947461611311,1530931332749570130,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
                                                          2⤵
                                                            PID:3172
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7156,i,12131311790657142628,800819715941322007,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:14
                                                            2⤵
                                                              PID:3292
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,4354486191043608761,3997380081528874560,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:14
                                                              2⤵
                                                                PID:5972
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8056,i,4175119192113056410,17989488652278758800,2097152 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:1
                                                                2⤵
                                                                  PID:5660
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8072,i,2781029099095688250,1199101944717559838,524288 --field-trial-handle=2104,i,12974367175859880531,6407654284135513192,262144 --variations-seed-version --mojo-platform-channel-handle=8324 /prefetch:14
                                                                  2⤵
                                                                  • NTFS ADS
                                                                  PID:1048
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                1⤵
                                                                  PID:4116
                                                                • C:\Windows\System32\rundll32.exe
                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                  1⤵
                                                                    PID:5164
                                                                  • C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\Bloodborne.exe
                                                                    "C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\Bloodborne.exe"
                                                                    1⤵
                                                                      PID:1852
                                                                      • C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\bin\bb-gpu-capabilities.exe
                                                                        C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\bin\bb-gpu-capabilities.exe --live-resolution
                                                                        2⤵
                                                                          PID:3392
                                                                      • C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\Play Bloodborne.exe
                                                                        "C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\Play Bloodborne.exe"
                                                                        1⤵
                                                                          PID:5496
                                                                          • C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\Bloodborne.exe
                                                                            "C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\Bloodborne.exe" --play
                                                                            2⤵
                                                                              PID:5384
                                                                              • C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\bin\bb-gpu-capabilities.exe
                                                                                C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\bin\bb-gpu-capabilities.exe --live-resolution
                                                                                3⤵
                                                                                  PID:5684

                                                                            Network

                                                                                  MITRE ATT&CK Enterprise v16

                                                                                  Replay Monitor

                                                                                  Loading Replay Monitor...

                                                                                  Downloads

                                                                                  23b436c4-ccc2-4943-990b-ba28f6ca1543.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\23b436c4-ccc2-4943-990b-ba28f6ca1543.tmp
                                                                                  • Size 8KB
                                                                                  • SHA256 42a65acd4a94562c0d9c64fcf6dcd8c9dfba32014130b7b86ac1c62c1ec7bfff
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  38ca9f2d-1f90-47f8-b8e0-fcfd331f54c5.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\38ca9f2d-1f90-47f8-b8e0-fcfd331f54c5.tmp
                                                                                  • Size 8KB
                                                                                  • SHA256 00b8580808bc2426d6dda515ecd0681558cc1c2ba9342cc0caf3d16e12b39372
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  57b0d410-4f6f-4dab-a987-3d8f9a944c16.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\57b0d410-4f6f-4dab-a987-3d8f9a944c16.tmp
                                                                                  • Size 21KB
                                                                                  • SHA256 8e5d604654e5b258a08174af16f87c077b397223f27f5ba114659d0beeab871a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  settings.dat

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                  • Size 280B
                                                                                  • SHA256 635a17b62bc802a1d6d2ac977e63b5a2027aa2bf3d1b5551e63352afa4362fd9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  settings.dat

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                  • Size 280B
                                                                                  • SHA256 d5203709d191cefd619c9b1777d39aff6cab97309c7e64a26cca768a0982a1c1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  settings.dat

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                  • Size 280B
                                                                                  • SHA256 2aa0ef8543982e42f2141a859cd78cf0f780a6b139ea99c1c2ad33fd4f56cb7b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  04b6e807-1233-4c52-92c9-c957dfe26476.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\04b6e807-1233-4c52-92c9-c957dfe26476.tmp
                                                                                  • Size 28KB
                                                                                  • SHA256 b188cf20b2d5fb2032695f7d07c45806f5a846351f40790641e83f7cac997513
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  1211a2a7-94a7-48ed-b51e-858e0265d29c.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1211a2a7-94a7-48ed-b51e-858e0265d29c.tmp
                                                                                  • Size 14KB
                                                                                  • SHA256 a3a20522f66e73cc1141521fdec758d1ffcfbf3931164134c0c899af4e3dd603
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  421863ab-1306-4fe2-9034-86e2c4750139.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\421863ab-1306-4fe2-9034-86e2c4750139.tmp
                                                                                  • Size 11KB
                                                                                  • SHA256 01af9d530f4ef9010ad55630ea4383289c650952bf79b69767aa4a2acf58081d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4504d924-b2d5-44f2-8b87-f39118141d08.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4504d924-b2d5-44f2-8b87-f39118141d08.tmp
                                                                                  • Size 15KB
                                                                                  • SHA256 e82842d05298a3b6bf49a8ba6dc0f9afd4998f30b0edabf89968456d818e3ff2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  87535e7b-5087-401e-8d88-20e24eeeac97.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\87535e7b-5087-401e-8d88-20e24eeeac97.tmp
                                                                                  • Size 16KB
                                                                                  • SHA256 99ec32a999e9ddc18d00dea25d9e50d51ae9b152ed1048c2ddbc0c5c877a9db3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  997c5a04-6528-42ed-bf1e-25f9226b256f.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\997c5a04-6528-42ed-bf1e-25f9226b256f.tmp
                                                                                  • Size 14KB
                                                                                  • SHA256 976156fd93f7e02dd6dd01af6379d21dbbc65202cb44a800939cd43060565d4d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000081

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                                                                  • Size 32KB
                                                                                  • SHA256 f863530e84d0b12fc59b53da144017104ff5f17b31aba902c69a7dab5922de0b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000082

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                                                                  • Size 38KB
                                                                                  • SHA256 a6698c801b1fc328e282d17f117fb114b4fa1e8a3c151ebef939d97537f0bede
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000083

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                                                                  • Size 26KB
                                                                                  • SHA256 4d725814716ccc00dac3979a298d515266d989a768b427481f5fb1f201139932
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000084

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                                  • Size 30KB
                                                                                  • SHA256 1179a6ca3dc6a651bdff8ac82941de27a19c52b86e4253d276d1145c30ad569d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000085

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                                  • Size 28KB
                                                                                  • SHA256 1b2a7b087a38a3052876f1e6408aa672aeaba54fd28b6114296e329fef55af6f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000086

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                                  • Size 34KB
                                                                                  • SHA256 eeb5638510e1440597c7fc5e2b8a35662cd0abb33bdd2d80ba549c200227117f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000087

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                                  • Size 27KB
                                                                                  • SHA256 30d5bf4123dda0cef17ff8ddfb22f6afada7ee9d016b4eb45229c61f82ca9571
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000088

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                                  • Size 27KB
                                                                                  • SHA256 2376bd93d2a9140e0a9bb2a32e67c6d760986184ac909c34044067ca0527d2f9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000089

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                                                                  • Size 34KB
                                                                                  • SHA256 e21cc8c39f943bd442b7b055f8b372e0237972e4579b2c6c6c4a482ead5538a3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00008a

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                                  • Size 35KB
                                                                                  • SHA256 a59c36a2b1a6a7212997dfdfe466340a046a4e40b20814f9575827d4e74eb035
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00008b

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                                  • Size 38KB
                                                                                  • SHA256 b38765453d6944dc2b2ecc97b556b77f2b6196197678fd2498de909ccefb987b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00008c

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                                  • Size 31KB
                                                                                  • SHA256 4c72371250ad3a964804e903b04d3ac784874bcf6265b8e428c20ffb6c84939f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00008d

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                                  • Size 41KB
                                                                                  • SHA256 2930cafeeb8cfed4682d2e49193f7aea0fb5ab7bb6bc15ea915d4001dcfebf39
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00008e

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                                  • Size 39KB
                                                                                  • SHA256 6b47b7e11bb8f04330276baf2ee0bbba18c54ed8e24c4df20faf1e9c926b3edf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00008f

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                                  • Size 88KB
                                                                                  • SHA256 949dbcba2bbcebb17543ae548e853c5bb1c82cdaebaed437c78f129fbf7a15de
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000092

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                                                  • Size 419KB
                                                                                  • SHA256 db6150e56eaf2574f450002f704d2d7d5a0810b89de21488b4f347e421bf1d6e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000093

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                                                  • Size 70KB
                                                                                  • SHA256 627b286d3dc6641aab3e1bd99fb3f4ef94f6e4ab845c5b24af93cdceb454ce08
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000094

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                                  • Size 206KB
                                                                                  • SHA256 e996a9a8cb511f9c6adaaca6ef1a627d62fbc3bc654c3534023877bff90d99b8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000095

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                                  • Size 27KB
                                                                                  • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_000096

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                                  • Size 78KB
                                                                                  • SHA256 d01a4b3c29c5d6fbabe837f2b40221e342081f31e5aafb5394d0fc83b2675ab1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00009a

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                                  • Size 60KB
                                                                                  • SHA256 6dae0529c9121fb0d49ab49173db60fdb4daa997a0aec9af1f894099a215fbd6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00009c

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                                  • Size 72KB
                                                                                  • SHA256 fcfaf2e8e1a5d8cff6e2c7736a10a6a3faf27d4696d5d4bf1e2d34cf3512b5e0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00009d

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                                  • Size 71KB
                                                                                  • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_00009e

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                  • Size 256KB
                                                                                  • SHA256 058eb9674b820893fff9e55cfe93bd695bd889d05f0f90334d3b989715777d83
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000a0

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                                                                  • Size 512KB
                                                                                  • SHA256 0e169dfd532e84c92cc907faf5b74f77c485659a069564f3fb4df09db5d7d473
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000a1

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
                                                                                  • Size 512KB
                                                                                  • SHA256 02b0a8ad7f3e9727b28cebc2ee1663712b990da7cc10dd96025420be6315dc94
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000a2

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                                  • Size 512KB
                                                                                  • SHA256 934e078410b9deddfb01919752c1d8a6003685dcf003aeb4187c6e2fb3379fd2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000a4

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                                  • Size 17KB
                                                                                  • SHA256 fa7159aaa81b6b616e4e1e729314ee01e515a634f347b8f2c4a945407958558d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000a5

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                                  • Size 19KB
                                                                                  • SHA256 c64c67529ad8eb12e8dbaf84ed7b0e6b54083fff315147771a92f7eb2d3ffdad
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000ac

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
                                                                                  • Size 32KB
                                                                                  • SHA256 08dedb72e969ed4f00e2c766b91ea33f1f6a9032489c13c8ce17d77f362ab1ce
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000ad

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                                                  • Size 32KB
                                                                                  • SHA256 0cc4ea2763a619d38965cb2568dbdac6ffe61cceb4b28dcb9e9bd21d89e71a5b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000af

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                                                                  • Size 18KB
                                                                                  • SHA256 3dd5a566c69fd90ff03c615ede587c7c8d67f7e867af4a52ec32f74173c906d4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000b2

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                                                                  • Size 16KB
                                                                                  • SHA256 8463ed535eccb85e24c0d668a6055b3148777528304e8c9f8d510be0628c0467
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000b6

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                                                                  • Size 40KB
                                                                                  • SHA256 f0db5f4d48339024195c1a2162d85780167483cd37a4a8e9ee63933cc6b70340
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000b7

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                                                                  • Size 39KB
                                                                                  • SHA256 07dfd54361215d7af2f1e0b6dd2ee2209018d6ed18a7850c3d10456da7155550
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000c1

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
                                                                                  • Size 17KB
                                                                                  • SHA256 8c4a43a7349696d083123ec643b4b8e793d1441c03642cd82d9b692a8aa8af2d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000c2

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                                                                  • Size 21KB
                                                                                  • SHA256 8781fecf0148d5d7c5e2fbc994f25bbdbbdd1a281fc1007188461a524e5ea61c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000c3

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                                                                  • Size 22KB
                                                                                  • SHA256 e49d63c87635f1c09195254dcb8adcabcb5eb4d79d159468b35e6626e069c759
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000cb

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                                                                  • Size 64KB
                                                                                  • SHA256 55061fb0c4883eb494b03220ef879ccc8454de623b728d5d12d456da35aee657
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000cf

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                                                                  • Size 60KB
                                                                                  • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000d0

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                                                                  • Size 68KB
                                                                                  • SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000d1

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
                                                                                  • Size 19KB
                                                                                  • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000d2

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
                                                                                  • Size 63KB
                                                                                  • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000d3

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                                                                  • Size 45KB
                                                                                  • SHA256 940e937d624dff1d92f851eb934d25d8f553b21ece4ea0cd28ce09a9c26d42a3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000df

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000df
                                                                                  • Size 36KB
                                                                                  • SHA256 16fd378a7fde064728239e08cb13e6f59a03b09afbf8ea3f8c029fcb18bb4ead
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f_0000e2

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e2
                                                                                  • Size 58KB
                                                                                  • SHA256 c17cd0536ea6d874741569b893dab49fa9d69153f7f6c34d5fb9f3a029ead3b6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  temp-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                  • Size 10KB
                                                                                  • SHA256 b6e5cb3fbe5e15e6a0b36c154c9d9a9d1211ad37c3bc2acd3a94ac43cf02de0e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  temp-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                  • Size 10KB
                                                                                  • SHA256 ef5a70216300c44ebbf05fd901533320a8006e55e133e0f974789a2bc20ce5c7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 3KB
                                                                                  • SHA256 67370bf80ced7bd2375ac7698dcf0accd9e31492e1a2bb4eb67a4963ffab8449
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  data_1

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
                                                                                  • Size 264KB
                                                                                  • SHA256 a10e56a89fd1ad0ceb46a4bc3b19735b6a2e5471a3d172a653ea29f0d2c94e31
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  ccc33fc9-d3b2-4837-8513-17a54e4cd101.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ccc33fc9-d3b2-4837-8513-17a54e4cd101.tmp
                                                                                  • Size 2B
                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                  • MD5 SHA1 SHA512

                                                                                  CURRENT

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\CURRENT
                                                                                  • Size 16B
                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                  • MD5 SHA1 SHA512

                                                                                  MANIFEST-000001

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                  • Size 23B
                                                                                  • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                  • MD5 SHA1 SHA512

                                                                                  LOG

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                                                  • Size 383B
                                                                                  • SHA256 4040901ddfa8fbcfddb2f77abd4a7e7cfcf4310df64de3c7475610e4dd04738e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  01cdb086-6805-4f5d-86e6-53c6bd7fe2a4.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\01cdb086-6805-4f5d-86e6-53c6bd7fe2a4.tmp
                                                                                  • Size 111B
                                                                                  • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  118fc79f-550e-452d-a7c4-2ffdc3d6134c.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\118fc79f-550e-452d-a7c4-2ffdc3d6134c.tmp
                                                                                  • Size 10KB
                                                                                  • SHA256 ffd6057d3d6713d47273689e9ba44dd87c25fa6ca1448138df46c2745ba87371
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  59df2728-a8fa-4df5-abe9-811c1243a3ed.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\59df2728-a8fa-4df5-abe9-811c1243a3ed.tmp
                                                                                  • Size 211B
                                                                                  • SHA256 535ae5b2c5dd37d98e2d6c74deafc39f69be59bfb145229f7f7b58529c7bdf11
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  61d626b4-1054-4688-aa0e-b74adf966cfe.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\61d626b4-1054-4688-aa0e-b74adf966cfe.tmp
                                                                                  • Size 2B
                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                  • MD5 SHA1 SHA512

                                                                                  Sdch Dictionaries

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                  • Size 40B
                                                                                  • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                  • MD5 SHA1 SHA512

                                                                                  b6820658-9fbc-496b-bb49-a7a2b3a51956.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b6820658-9fbc-496b-bb49-a7a2b3a51956.tmp
                                                                                  • Size 10KB
                                                                                  • SHA256 b471972a8e78ddc6a9c7105e71ffba00692cde6ea4fd00f2ee310461be544352
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  temp-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\904eaa8c-5b5e-4f51-8012-a32578e989eb\index-dir\temp-index
                                                                                  • Size 3KB
                                                                                  • SHA256 16bcd9d2b1910a991e91d40d79747d8d5e1c7623122a01a8122ac98304055343
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  temp-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\904eaa8c-5b5e-4f51-8012-a32578e989eb\index-dir\temp-index
                                                                                  • Size 144B
                                                                                  • SHA256 b04116f02947a57548d9b8925b1aa4de86dd1f4997dd0f39f6bb3db11c1990e6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\904eaa8c-5b5e-4f51-8012-a32578e989eb\index-dir\the-real-index
                                                                                  • Size 144B
                                                                                  • SHA256 6ae0d1864ad4aba3970311833049928514dc84e43df9b09d82a14a42683c2657
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  temp-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\92abc819-0593-4267-b584-d982c9c735ec\index-dir\temp-index
                                                                                  • Size 72B
                                                                                  • SHA256 ddc7e0d4f69f363f3aaa140718f8a29769a2c066a1e53f374fcc100b117afeae
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\92abc819-0593-4267-b584-d982c9c735ec\index-dir\the-real-index
                                                                                  • Size 72B
                                                                                  • SHA256 7581e4ea0ff557fca521fc825075939cfd215f65984f055c97272c340fcd9cf0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  index.txt.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                  • Size 371B
                                                                                  • SHA256 afffefa06caec9aa7b011d9c409179ddd8dff08f22d32afa18fe54165c019105
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  temp-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                  • Size 72B
                                                                                  • SHA256 8000c08ff2f94424387bf8f3b06395204b37a8f0096c8720cc91c51f7e1433d5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                  • Size 48B
                                                                                  • SHA256 66ad8c9faf391f86cab6714a7af1f7cecd876c1c79088a5329889330920e1697
                                                                                  • MD5 SHA1 SHA512

                                                                                  sync_diagnostic.log

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                  • Size 4KB
                                                                                  • SHA256 ed9987953ccabde6fea963159f666f1e489605a5f946544f8bd3f58c057b1b3c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  b11f504f-b438-4e74-b8d7-f28aa48a2f8e.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b11f504f-b438-4e74-b8d7-f28aa48a2f8e.tmp
                                                                                  • Size 14KB
                                                                                  • SHA256 a7cc0880ac27a47c36dd06865bdd4022c4919ea2001a476354ba2bd68942c29b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  df092a6e-2e31-462d-b97c-ebdade662840.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df092a6e-2e31-462d-b97c-ebdade662840.tmp
                                                                                  • Size 70KB
                                                                                  • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4e15f121-56d8-4148-9f84-60fbf1c00691.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4e15f121-56d8-4148-9f84-60fbf1c00691.tmp
                                                                                  • Size 22KB
                                                                                  • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  RevisitationBloomfilter

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                  • Size 392B
                                                                                  • SHA256 00ca95614299d90ed699ac532529542972c31abe6ef7360a8e21ebfe134dd3e8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  abef9a2b-b15a-407e-a956-927f9e261ac9.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abef9a2b-b15a-407e-a956-927f9e261ac9.tmp
                                                                                  • Size 18KB
                                                                                  • SHA256 cdb10cac43d57bae16f50c2ec9d63dd9359279d7e8bf465735be5b0612df7800
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  b0089748-2f67-4107-83a2-947b0bbc187f.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b0089748-2f67-4107-83a2-947b0bbc187f.tmp
                                                                                  • Size 392B
                                                                                  • SHA256 61753ef1ecc98d651d0d1c626facc02fa187622265fd0ace58f72ccaaa715717
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b346c8e4-98ae-451a-a47e-e4de3dff3e03.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b346c8e4-98ae-451a-a47e-e4de3dff3e03.tmp
                                                                                  • Size 392B
                                                                                  • SHA256 bff7baf0e05f6f79cd129b1cc5c08e31f82194056081c8ab186fe6a11f61b990
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ccfa65e3-5a15-4c3c-b171-d6d8cdcccc41.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ccfa65e3-5a15-4c3c-b171-d6d8cdcccc41.tmp
                                                                                  • Size 18KB
                                                                                  • SHA256 93b5bb42108508f02acae363379e2ea50ba4a64afc24a953bd63e72b4d65f0db
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  e28ab8b5-9834-446b-b9f4-b5844cba442f.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e28ab8b5-9834-446b-b9f4-b5844cba442f.tmp
                                                                                  • Size 12KB
                                                                                  • SHA256 05325795f43540ad4d08cef8818984da8a52f0ed9591597daa302b9e5aa3a5f9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dd4cbd55-1d1e-4f45-ba3e-c06547e80e46.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dd4cbd55-1d1e-4f45-ba3e-c06547e80e46.tmp
                                                                                  • Size 13B
                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                  • MD5 SHA1 SHA512

                                                                                  fc64dbf1-0338-4666-b6e1-c10f1116e8e2.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fc64dbf1-0338-4666-b6e1-c10f1116e8e2.tmp
                                                                                  • Size 31KB
                                                                                  • SHA256 a3fcf70df15dd6c9c5a15cd882aa31715cc49d8ce8edc655d20156eee1744be5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  settings.json

                                                                                  • Path C:\Users\Admin\AppData\Roaming\bbport-launcher\settings.json
                                                                                  • Size 975B
                                                                                  • SHA256 7f3fb6da94554af984bb82e7bb8cd6e820b51c573287dcbb73f246a575c0f3be
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  36bb986f-4607-484a-989b-463ee5c98cfe.tmp

                                                                                  • Path C:\Users\Admin\Downloads\36bb986f-4607-484a-989b-463ee5c98cfe.tmp
                                                                                  • Size 15KB
                                                                                  • SHA256 7d188667ff59a287cc1ab0ca18d9a6b65ac603609bf4252e9f3dc24ea49a2c74
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Bloodborne-Windows.zip:Zone.Identifier

                                                                                  • Path C:\Users\Admin\Downloads\Bloodborne-Windows.zip:Zone.Identifier
                                                                                  • Size 1KB
                                                                                  • SHA256 b94a97ee417822f5f50342488a58f84807c56f98eae4f804b9a4c6f7332e8774
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  bbport.ini

                                                                                  • Path C:\Users\Admin\Downloads\Bloodborne-Windows\bbport-windows\bbport.ini
                                                                                  • Size 701B
                                                                                  • SHA256 c7597c15607fd35891e364b45e4b129707dc86e1cb1bf3b0a5884468fa1cc142
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  memory/1852-1931-0x000002DDD3AE0000-0x000002DDD40D9000-memory.dmp

                                                                                  memory/1852-1942-0x000002DDD3AE0000-0x000002DDD40D9000-memory.dmp

                                                                                  memory/5384-1946-0x000002966A1E0000-0x000002966A7D9000-memory.dmp

                                                                                  memory/5384-1950-0x000002966A1E0000-0x000002966A7D9000-memory.dmp