MovieReaper File Manager Mass Filesystem Manipulation from Telemetry msedge.exe

Arnold Chan@slaz

•updated 22 days ago•0•0•1

Detects bulk filesystem operations (create, copy, rename, move, delete) performed by the masqueraded process 'msedge.exe' located in 'C:\ProgramData\Microsoft\Windows\Telemetry\', indicative of the MovieReaper 'file manager' module performing mass file manipulation.