Analysis Overview
Threat Level: Known bad
The file http://link.seilerinst.com/ls/click?upn=u001.cEqgdhrRZKxRF2HzHb4-2FTVNSvwR2gUPLdJeIgfgg8ciEZ40FQ4vOw6Y1wKnQIQVHSeQr7QXxDUmb0wGmH3jJnCW6Y3XzdS7Ccl4QHkCGUzwgtkuYrCh3N4IgyW6jxhL77qoUeHiecm5CPwkRwcHKL7FsS6RvPBFh6nmLcf4ZzBtrNza1gSNhr3vvvB1wkdkQSRPTkMKJ0LGYAXxqI-2F-2BFUeMZLtptgK9XpdWRAOhjMNo-3DIbYh_zb7wV6j-2F21a2jJHEJfT-2FOWzTaPqg4EUmh5Yu4poHgl12exB-2BEMEJoh1Pz2Bxg7fFqwQQjFyin-2Fyv9u-2FwrMMpsAPES5zcVmy0FI6qKoV-2FPP-2FY4tkLDq9RTl2L1GDw5nmAFFGUub0fUn-2FzNOEOXFMSYZnm2zrfh3BxwmbA4MSs6EZsACgrEgIfTWqD5BYbKFuTGnaSlxYkUsSv8ncf9m57vEY-2FpiRoZ2M6-2BJAjR1-2BAbOX5y-2Fe1rneSbzq-2BXusx3dFMYlh2lL5P84OVUbqj4wK-2BwJFDg2JDarfnVQIevVZam7g9l68IHxgYJt0OqXK77uhdn4U69-2FK6G1tr94mdTx3z6rEDrBxXF7h86mvA-2FxPb9pmDkWTOpWuScJggzSlglkHPXxzSTfLeY56PJqO5lU482hDw0-2FAgR0P4wJmpD5M33DeAsmG7xenwRFykEU9PlvBX6b8XXZxzZ7VSCDa7DsVzU-2BcptzLd-2Fnv9Cx3TFYOuu3k-3D was found to be: Known bad.
Malicious Activity Summary
Detected google phishing page
Browser Information Discovery
Enumerates system info in registry
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2025-01-28 13:42
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2025-01-28 13:42
Reported
2025-01-28 13:45
Platform
win10v2004-20241007-en
Max time kernel
145s
Max time network
151s
Command Line
Signatures
Detected google phishing page
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Browser Information Discovery
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument http://link.seilerinst.com/ls/click?upn=u001.cEqgdhrRZKxRF2HzHb4-2FTVNSvwR2gUPLdJeIgfgg8ciEZ40FQ4vOw6Y1wKnQIQVHSeQr7QXxDUmb0wGmH3jJnCW6Y3XzdS7Ccl4QHkCGUzwgtkuYrCh3N4IgyW6jxhL77qoUeHiecm5CPwkRwcHKL7FsS6RvPBFh6nmLcf4ZzBtrNza1gSNhr3vvvB1wkdkQSRPTkMKJ0LGYAXxqI-2F-2BFUeMZLtptgK9XpdWRAOhjMNo-3DIbYh_zb7wV6j-2F21a2jJHEJfT-2FOWzTaPqg4EUmh5Yu4poHgl12exB-2BEMEJoh1Pz2Bxg7fFqwQQjFyin-2Fyv9u-2FwrMMpsAPES5zcVmy0FI6qKoV-2FPP-2FY4tkLDq9RTl2L1GDw5nmAFFGUub0fUn-2FzNOEOXFMSYZnm2zrfh3BxwmbA4MSs6EZsACgrEgIfTWqD5BYbKFuTGnaSlxYkUsSv8ncf9m57vEY-2FpiRoZ2M6-2BJAjR1-2BAbOX5y-2Fe1rneSbzq-2BXusx3dFMYlh2lL5P84OVUbqj4wK-2BwJFDg2JDarfnVQIevVZam7g9l68IHxgYJt0OqXK77uhdn4U69-2FK6G1tr94mdTx3z6rEDrBxXF7h86mvA-2FxPb9pmDkWTOpWuScJggzSlglkHPXxzSTfLeY56PJqO5lU482hDw0-2FAgR0P4wJmpD5M33DeAsmG7xenwRFykEU9PlvBX6b8XXZxzZ7VSCDa7DsVzU-2BcptzLd-2Fnv9Cx3TFYOuu3k-3D
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xd8,0x114,0x7ffe93e646f8,0x7ffe93e64708,0x7ffe93e64718
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2020 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2680 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5288 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5288 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=1184 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2400 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2188 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3068 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2952 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6372 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6660 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2200 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,10538161095630221146,1896774893477473395,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1292 /prefetch:2
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | link.seilerinst.com | udp |
| US | 167.89.115.28:80 | link.seilerinst.com | tcp |
| US | 167.89.115.28:80 | link.seilerinst.com | tcp |
| US | 8.8.8.8:53 | www.seiler-ds.com | udp |
| US | 172.67.198.132:443 | www.seiler-ds.com | tcp |
| US | 8.8.8.8:53 | 228.249.119.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 140.32.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.115.89.167.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.153.16.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 167.173.78.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 132.198.67.172.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | 149.220.183.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 56.163.245.4.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 241.42.69.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 102.90.33.23.in-addr.arpa | udp |
| GB | 95.101.143.183:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | seilerinst.com | udp |
| US | 104.21.33.134:80 | seilerinst.com | tcp |
| US | 104.21.33.134:80 | seilerinst.com | tcp |
| US | 104.21.33.134:443 | seilerinst.com | tcp |
| US | 8.8.8.8:53 | 183.143.101.95.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 134.33.21.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.seilerinst.com | udp |
| US | 8.8.8.8:53 | www.seilersolutions.com | udp |
| US | 172.67.222.127:443 | www.seilersolutions.com | tcp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | js.stripe.com | udp |
| US | 8.8.8.8:53 | region1.google-analytics.com | udp |
| US | 8.8.8.8:53 | 127.222.67.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.213.58.216.in-addr.arpa | udp |
| US | 216.239.34.36:443 | region1.google-analytics.com | tcp |
| US | 8.8.8.8:53 | a.nel.cloudflare.com | udp |
| US | 35.190.80.1:443 | a.nel.cloudflare.com | tcp |
| US | 35.190.80.1:443 | a.nel.cloudflare.com | udp |
| US | 8.8.8.8:53 | use.typekit.net | udp |
| FR | 23.72.250.86:443 | use.typekit.net | tcp |
| US | 8.8.8.8:53 | 36.34.239.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 1.80.190.35.in-addr.arpa | udp |
| FR | 23.72.250.86:443 | use.typekit.net | tcp |
| FR | 23.72.250.86:443 | use.typekit.net | tcp |
| US | 8.8.8.8:53 | 86.250.72.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | p.typekit.net | udp |
| FR | 23.72.250.81:443 | p.typekit.net | tcp |
| US | 8.8.8.8:53 | 81.250.72.23.in-addr.arpa | udp |
| FR | 99.86.91.91:443 | js.stripe.com | tcp |
| US | 8.8.8.8:53 | 172.214.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 91.91.86.99.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 7.98.51.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | google.conm | udp |
| US | 8.8.8.8:53 | th.bing.com | udp |
| US | 8.8.8.8:53 | r.bing.com | udp |
| FR | 23.192.237.214:443 | r.bing.com | tcp |
| FR | 23.192.237.214:443 | r.bing.com | tcp |
| GB | 95.101.143.202:443 | th.bing.com | tcp |
| GB | 95.101.143.202:443 | th.bing.com | tcp |
| US | 8.8.8.8:53 | 202.143.101.95.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 214.237.192.23.in-addr.arpa | udp |
| GB | 142.250.187.196:443 | www.google.com | tcp |
| US | 8.8.8.8:53 | koi-3rcw2avhck.marketingautomation.services | udp |
| US | 130.211.21.179:443 | koi-3rcw2avhck.marketingautomation.services | tcp |
| US | 8.8.8.8:53 | tracker.metricool.com | udp |
| US | 104.26.6.108:443 | tracker.metricool.com | tcp |
| US | 216.239.34.36:443 | region1.google-analytics.com | udp |
| US | 130.211.21.179:443 | koi-3rcw2avhck.marketingautomation.services | udp |
| US | 8.8.8.8:53 | 196.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 179.21.211.130.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 108.6.26.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 227.187.250.142.in-addr.arpa | udp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| US | 8.8.8.8:53 | login.microsoftonline.com | udp |
| US | 8.8.8.8:53 | 195.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | m.stripe.network | udp |
| US | 151.101.192.176:443 | m.stripe.network | tcp |
| US | 8.8.8.8:53 | m.stripe.com | udp |
| US | 54.201.87.73:443 | m.stripe.com | tcp |
| US | 8.8.8.8:53 | 176.192.101.151.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.160.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 73.87.201.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 237.21.107.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.229.111.52.in-addr.arpa | udp |
| US | 35.190.80.1:443 | a.nel.cloudflare.com | udp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | e443ee4336fcf13c698b8ab5f3c173d0 |
| SHA1 | 9bf70b16f03820cbe3158e1f1396b07b8ac9d75a |
| SHA256 | 79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b |
| SHA512 | cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd |
\??\pipe\LOCAL\crashpad_5020_BJLGSMGWRESIYMQK
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 56a4f78e21616a6e19da57228569489b |
| SHA1 | 21bfabbfc294d5f2aa1da825c5590d760483bc76 |
| SHA256 | d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb |
| SHA512 | c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 1c34d61f52518d1ca99e1282073279c9 |
| SHA1 | 5b142138c4ce6fc34a3567abea05579e952f7cdb |
| SHA256 | 9f33927ecfddce81faac0cb9da5536fc37426f2d1f9e2ea5f7541e0396faded1 |
| SHA512 | 7a5a7fc03ff1ebd39b2d61cc46bb6cd51e32dc81a7f9962b478a27ef580f916b47815ea72f94f4427af30b2e3ba823787fb6039b1d0dca4addb59564e88b2668 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 6752a1d65b201c13b62ea44016eb221f |
| SHA1 | 58ecf154d01a62233ed7fb494ace3c3d4ffce08b |
| SHA256 | 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd |
| SHA512 | 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 9b90df93dfc0ab80eaeddb335c773f05 |
| SHA1 | 8f2a2824c652f9117e5063f7c9d395bf305d492d |
| SHA256 | 544385ca6e7ec3717ef500bd2af8257a746ac7a76bdf2b1d9d62afa1ffbc0c87 |
| SHA512 | 31daf149e770f7e58f44a1a8c8071e9e15b9c9164bb0bd995c13b34c1387cab30e94134ce284b8cf71936445ea15aae1e43bf07ef8681b70d2c4cc69c6521fe0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b4af0cf5-1d8b-40a7-bf88-3b8e4ba9d2e3.tmp
| MD5 | 0588e825996ccab42ca530d1dcbc8f81 |
| SHA1 | 61e46f4d6a4d0a1da2f447bee2a6728f2b53b712 |
| SHA256 | 9b62a56e43a5045790a0b78e56bce1f6a739e26c95ae18c25b11360c13492c0d |
| SHA512 | d6c00b67522725ffb3cd8c568ae36d297db5799859b6175bb2274514d21686cd0b54f19a65d8624013c665cc59d37a85b1c063cd5d051b837e3916e0448cdd70 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 352b9177d39adaadf624ae3c16c8c2ba |
| SHA1 | 8a17a6d597ab2508040cdaaaa5259b593f4aeba4 |
| SHA256 | 7a6b47b29810a66516e4cb81fd78b9ca89333f797ac90b57cbba6f6836cbcf48 |
| SHA512 | 6855cb965e972c96a8d45e1072b6b504413f0a5472582593e26d8f0c8650c5b95e278be25b9dea4efcafc7a25f0aedab51de1521b6e52bb904df36ab1463c9ef |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 5fae9fff14d235dd452698db7fae217f |
| SHA1 | 707d61305f3c343f2d7b0826d0eb062957ca9287 |
| SHA256 | e4280cbc77e1b5eeda5ca07bb2b4207c702debba53a13c6b6985a77f84a32a31 |
| SHA512 | 766ae91161edcb99a89baef717ebac0d6f839419c5191157c93e7c92c321e91f3cecd347352f5f2f67f3e5211671293a42328222b757ed09a1298b7535468fe2 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034
| MD5 | ba958dfa97ba4abe328dce19c50cd19c |
| SHA1 | 122405a9536dd824adcc446c3f0f3a971c94f1b1 |
| SHA256 | 3124365e9e20791892ee21f47763d3df116763da0270796ca42fd63ecc23c607 |
| SHA512 | aad22e93babe3255a7e78d9a9e24c1cda167d449e5383bb740125445e7c7ddd8df53a0e53705f4262a49a307dc54ceb40c66bab61bec206fbe59918110af70bf |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58912f.TMP
| MD5 | 2acafc965614998f128c317259659c6e |
| SHA1 | 0e1bec5eb1fa461b7815c8b6af7b75c94c076775 |
| SHA256 | acb19da743e1f5470e253951865029d680d69b408656df753425374df3eae415 |
| SHA512 | 2c32e5d8599439a984e5bdd7b1d4619fc69567f853e4a804df858f5dc3cbd4b2cace5ed0d4d15673571ac2bc239c0965ccd02ff4b077c6565683585358bd438b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 25fcc1858f412b7b69bc244ff1525240 |
| SHA1 | ad45e4cb2d3cf97976ea1db970bd0d7859336b07 |
| SHA256 | 00af4fa6bdf601ef21efb5cd30b047dc68ad427e895bbd39e6480baa213cad22 |
| SHA512 | 98f66becb50384b092283534920d26738fc6dfc86bac4f003b8ab75026e51934779cacf8b99d722931904a6d37b31c8ff128b26b215dca14327fb1ce14c02e09 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | cb59867f37fd6138fb6dccd99fbd0b07 |
| SHA1 | 43c843309bb22c346c86ab2c2509e99c3d80031e |
| SHA256 | 60a508c8ebd4fac06143e019782ac157f2551c7920f3e9095b1f88df8e175474 |
| SHA512 | bf1464d9ad6d05a9c79e9f69952250ac2586db58152c71e87ead9d77fe3656e235d14c0a5c3c444e38c5e8ce18bc3471c0740bce37065662a1bfecf5c010ed3f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 92fbce9ff3b31d6a07b9ffb3304484c0 |
| SHA1 | 5d32008815eb1d4a2bf2f8e10b559167563e73ce |
| SHA256 | 59694b0d32686ffb3d40785a948c31c61af480ac17b94b501f1fe95f4a9e7035 |
| SHA512 | b83cd9a4d3fc343f35b0ac6dbdab3152ead5943b67b3fc763b3a0cfee203651de15be409d344f3a9a4e94bb0b9fc35b4ce3a77bc2afab6417e04d76369e71738 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | fffc84fec2bee0c9225b9e9ca839c1d7 |
| SHA1 | 58509d602fccad84e1d380a0f394ec4a33615dac |
| SHA256 | 8861dd578bfb328f26ee613a8f5c132d78323de30e47ea272043afe101b01f07 |
| SHA512 | af8db3f79dcef421c63888b9919bdf1f78fdc446acd4faac51d47c8e9c4b5a5bc9c6cd0a6534c0ad082246d82eabafb36e1b5f4cab0ce8c93a82459101e4e32c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 20dd00b590fb2b2de73d3ec5298daf59 |
| SHA1 | acb183c005e03ec7c5c76e138656004219d68080 |
| SHA256 | bf8e1d12046f0afdb0869d9a6e1fa226669edd94b075ceb05ac94db61fcb6287 |
| SHA512 | 93820537e9ba78d78adf19d6cc673edb60744cc635adc767d9877fc079b6e64928462e499f081ece3b74bc79be420a808d2cfc902657219ab270d14c320535ac |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | b1088da27202ae2bbee611baacc94673 |
| SHA1 | 8684922be8a7beddf89cf61f003e5f2248905d54 |
| SHA256 | 81b8c96ff2bdc257cef0364bb4d56067ee9f5fadb94944776bd2cdae83a19015 |
| SHA512 | 1a4ff0f750f486e77d9aa6deaf9416615904b0dc9195c8bdca1d526306c736f9514c0d4c7ac5f3c23a4b776243f528866881885068b95926563f263f26dcd016 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 98262438690274712bd8f45d9f1b94ed |
| SHA1 | f5a9f1be9755443a374633acfca79e9938c5da91 |
| SHA256 | 692fb454b8d19e0db152b3192e035b37ac0851cb61a4673439f76ad3ee66529c |
| SHA512 | 9093f76905cdf37e582711cb3c6ce1340cdeb194272658a6037dc34f45f04bd37ef3a5dc0cbe1c7723d850a6e3c5a311b6f01d83adb69e00a7745d42f695ca9a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 2a8c428f1c5273c0b56f6fd1ca49048c |
| SHA1 | 3bb939fe6deaa91a305134f4cd4af47069a7af04 |
| SHA256 | d67437b3073002fac7bdf237f17efb81ea9d5f5134e75eca46cee0eecfed86ad |
| SHA512 | ece77e6997832d7933634ca792ac8d95c58bb1b03e01ea05bff1150bc0de5920adf7b3232da234738a4f8b6e3f9b84f36b5c84b0915c5984c67ab20b91038e6a |