Overview

overview

7

Static

static

3

Clash Verg...up.exe

windows10-2004-x64

7

Clash Verg...up.exe

windows11-21h2-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-21h2-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows11-21h2-x64

3

$PLUGINSDI...SC.dll

windows10-2004-x64

3

$PLUGINSDI...SC.dll

windows11-21h2-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$TEMP/Micr...up.exe

windows10-2004-x64

6

$TEMP/Micr...up.exe

windows11-21h2-x64

6

clash-verge.exe

windows10-2004-x64

6

clash-verge.exe

windows11-21h2-x64

6

resources/...ervice

macos-10.15-amd64

4

resources/...nstall

macos-10.15-amd64

4

resources/...ll.exe

windows10-2004-x64

1

resources/...ll.exe

windows11-21h2-x64

4

resources/...nstall

macos-10.15-amd64

4

resources/...ll.exe

windows10-2004-x64

1

resources/...ll.exe

windows11-21h2-x64

1

resources/...ce.exe

windows10-2004-x64

1

resources/...ce.exe

windows11-21h2-x64

1

resources/...ck.exe

windows10-2004-x64

7

Resubmissions

31/05/2026, 07:42

260531-jjze7scv8w

31/05/2026, 00:16

260531-akt3faft217

Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    31/05/2026, 00:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    $TEMP/MicrosoftEdgeWebview2Setup.exe
  • Size 1.6MB
  • Sample260531-akt3faft21
  • SHA256 cb9b76a6dace90f5d4635f2d49cbb55a62f41e5e365a22cef4265c013af0bcdd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoverypersistenceprivilege_escalation

Malware Config

Signatures

  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 10 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 14 IoCs
  • Loads dropped DLL 17 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 3 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Modifies data under HKEY_USERS 41 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\MicrosoftEdgeWebview2Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\MicrosoftEdgeWebview2Setup.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2628
    • C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\MicrosoftEdgeUpdate.exe" /installsource taggedmi /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Checks computer location settings
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3704
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:3140
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:3896
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:4040
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:4884
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:2796
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4yMzMuMyIgc2hlbGxfdmVyc2lvbj0iMS4zLjIzMy4zIiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0ie0RGMzU0NUE2LUE3QUYtNDBBRi1BMzBBLUE2NEVDRTNFMjNGQ30iIHVzZXJpZD0iezVDNjYwNTg2LTYyNjAtNDYyRC05N0NELTU0QjJDQTZDNUYyRH0iIGluc3RhbGxzb3VyY2U9InRhZ2dlZG1pIiByZXF1ZXN0aWQ9IntDRDE1Njg0OS0wRUZBLTRCQkYtOTREMy0zOEFFOTAyQkRGQzB9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNTMzNDQ5OTYzOCIgaW5zdGFsbF90aW1lX21zPSIxMDYyIi8-PC9hcHA-PC9yZXF1ZXN0Pg
        3⤵
        • Checks system information in the registry
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:1200
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource taggedmi /sessionid "{DF3545A6-A7AF-40AF-A30A-A64ECE3E23FC}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:2160
  • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
    1⤵
    • Checks system information in the registry
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    • Suspicious use of WriteProcessMemory
    PID:4700
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREFEWSIgcHJvZHVjdF9uYW1lPSJEYWR5IHN1cGVyIHBvd2VyZnVsIFBDIi8-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-
      2⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:1752
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{255E858E-48D8-4582-87E5-30C72CCC0F3C}\MicrosoftEdge_X64_148.0.3967.96.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{255E858E-48D8-4582-87E5-30C72CCC0F3C}\MicrosoftEdge_X64_148.0.3967.96.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:3168
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{255E858E-48D8-4582-87E5-30C72CCC0F3C}\EDGEMITMP_2686C.tmp\setup.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{255E858E-48D8-4582-87E5-30C72CCC0F3C}\EDGEMITMP_2686C.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{255E858E-48D8-4582-87E5-30C72CCC0F3C}\MicrosoftEdge_X64_148.0.3967.96.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
        3⤵
        • Checks computer location settings
        • Drops file in Program Files directory
        • Executes dropped EXE
        PID:2132
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4yMzMuMyIgc2hlbGxfdmVyc2lvbj0iMS4zLjIzMy4zIiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0ie0RGMzU0NUE2LUE3QUYtNDBBRi1BMzBBLUE2NEVDRTNFMjNGQ30iIHVzZXJpZD0iezVDNjYwNTg2LTYyNjAtNDYyRC05N0NELTU0QjJDQTZDNUYyRH0iIGluc3RhbGxzb3VyY2U9InRhZ2dlZG1pIiByZXF1ZXN0aWQ9Ins1MjdGRDY0MS0xNDBCLTQ0MUMtODAyRi03ODMwNTMzRjc2M0J9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-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-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1NTY4NzE4NTcyIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2MTM1NzUwMTMzIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iNzk3IiBkb3dubG9hZF90aW1lX21zPSIyNjE3MiIgZG93bmxvYWRlZD0iMTkzMTQ4NzkyIiB0b3RhbD0iMTkzMTQ4NzkyIiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSIyOTA3OCIvPjwvYXBwPjwvcmVxdWVzdD4
      2⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:4892
  • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4792
    • C:\Windows\SysWOW64\wermgr.exe
      "C:\Windows\system32\wermgr.exe" "-outproc" "0" "4792" "780" "788" "792" "0" "0" "0" "0" "0" "0" "0" "0"
      2⤵
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Enumerates system info in registry
      PID:2924

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        setup.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\148.0.3967.96\Installer\setup.exe
        • Size 5.1MB
        • SHA256 a14996885114643e2419d470a02c29d182bddb0204565ab1987cff0c01774492
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CopilotUpdate.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\CopilotUpdate.exe
        • Size 22KB
        • SHA256 0c03d62ed2866a4e5ed96dd00de03b2910c5468d4c1a006c05e9ecbd72de657b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EdgeUpdate.dat
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\EdgeUpdate.dat
        • Size 12KB
        • SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeComRegisterShellARM64.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\MicrosoftEdgeComRegisterShellARM64.exe
        • Size 189KB
        • SHA256 018afd497a4e99eae2bf24622d3033625049f9bf22520ff2218bd7b1f14c2dd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdate.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\MicrosoftEdgeUpdate.exe
        • Size 201KB
        • SHA256 a8ffab0b134e177655dd255f9b05296bb5ca7c40c5c1a2157db81fc68b350ffd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateComRegisterShell64.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe
        • Size 222KB
        • SHA256 ddc661b958061d92de9ccef0988f0a724f066addba8aecaa04f9fe489724505e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateCore.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\MicrosoftEdgeUpdateCore.exe
        • Size 272KB
        • SHA256 65328dcc7c6968f5e688b7df99807be479017bba0ac5b3e7b83865505cdc911a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NOTICE.TXT
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\NOTICE.TXT
        • Size 4KB
        • SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdate.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdate.dll
        • Size 2.2MB
        • SHA256 55d5ef2974ced0fd55437597118bded0b853c40bfecbefa749625103045d9a08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_af.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_af.dll
        • Size 29KB
        • SHA256 fb2076f02d63ee456d16469e941f4a5fe64e49dba491feb0eefa156e095fe577
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_am.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_am.dll
        • Size 24KB
        • SHA256 2c1022d26eb3d23546fe32625c2a6adce7e8f74280aa927f1db5231a995a683c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ar.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ar.dll
        • Size 26KB
        • SHA256 7550fc42a7968a9987204fce621091027f2665657d4be880801b2b9791afa601
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_as.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_as.dll
        • Size 28KB
        • SHA256 e837b422456fe1e9486c7b6327cdfaa64bc3852c0f4a2281e6d046d024bd1f4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_az.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_az.dll
        • Size 29KB
        • SHA256 9e95b480982d723d07c6deae7a9794cd220fd8df73aded5ef785e0967b9cdc8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bg.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_bg.dll
        • Size 29KB
        • SHA256 bf5789d23ee7321a7ed716974eaa365eb0f8658d7a7f5d45eea663a094cd8624
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bn-IN.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_bn-IN.dll
        • Size 29KB
        • SHA256 556654470d8ea64ec201811329c94a771ef1a97bf2cbb65365a80b1a19471dd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bn.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_bn.dll
        • Size 29KB
        • SHA256 7c55d31387292b5b7203d8bebfd4c10072111f4fad6f0e1f240c901fc9ae5d11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bs.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_bs.dll
        • Size 28KB
        • SHA256 083694af7b52d392760a8b0429ef0cc3169b79f4b08c6c5a5bf8c55305a35a02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ca-Es-VALENCIA.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ca-Es-VALENCIA.dll
        • Size 30KB
        • SHA256 73df23d94da64cee093e62b89184fa8d20ee2340b2b3f809f2d033c1631d4b16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ca.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ca.dll
        • Size 30KB
        • SHA256 0c39e0ba2c0efc8655f6bc11f5a7f0e4e40a8143634e299e15dfa52bfe61b1b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_cs.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_cs.dll
        • Size 28KB
        • SHA256 78c518bf10b075e419e202c72460d37f7b133059d414805d4d3d5356d76a93c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_cy.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_cy.dll
        • Size 28KB
        • SHA256 3037af6f3e79a6e793328b1c0213cac93e32954aa9cb72c65e276b2ee212582f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_da.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_da.dll
        • Size 28KB
        • SHA256 32ddd80b2a8eafd4d7da007b5699977ab16f37f66a6e354063f9846fcdf71967
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_de.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_de.dll
        • Size 30KB
        • SHA256 741e369d2a70e9b2e6de43256f068ea709c69e8e86c528ae9b7a38965ad6ccf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_el.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_el.dll
        • Size 30KB
        • SHA256 28646da05d6420e1bb928cdbceeac677060f16ed46da3143b702e8eff9037579
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_en-GB.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_en-GB.dll
        • Size 27KB
        • SHA256 a31f4483c7ea2c76c739fbf173a185b8a5cb333ae0c6b32883c6c618ce09bf2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_en.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_en.dll
        • Size 27KB
        • SHA256 e49bbe3a00be8cbb5a977efa3c2c213baddb3894e0c83e83a9b82d8224eaf0d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_es-419.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_es-419.dll
        • Size 29KB
        • SHA256 3021f6b7ee1e0ec2f48a44f4ea5921b4fd8a00e4bfafbecc16ef6be648007c04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_es.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_es.dll
        • Size 28KB
        • SHA256 8246c149d65ef4422ecc5e831d60ca922a37abbbc8406f30a673f7332336550b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_et.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_et.dll
        • Size 28KB
        • SHA256 9414ae8569fbe048133bd3cc7775102332f63658b34589714f814468af71325f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_eu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_eu.dll
        • Size 28KB
        • SHA256 a817083632a8108e2bbec76f10fc97679e436175a579dd7ca8fe2e7f3499f858
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fa.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_fa.dll
        • Size 27KB
        • SHA256 f7bef983d6ac1ef6cf985d2d3aa01b7468ea8dbb63bf43fb395da8d835e72375
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_fi.dll
        • Size 28KB
        • SHA256 25048d1a634f8ee38eb2d03b1973606059be8c12657fb42369ed1fe5a44ca47b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fil.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_fil.dll
        • Size 29KB
        • SHA256 ab7b4f96c13cde9b2e4f1953389746739058cc4b8e6d5d05ed1d33f1f4ae8ee4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fr-CA.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_fr-CA.dll
        • Size 30KB
        • SHA256 293bfab47f5164b91a3a57bcb2418f90f4c79d0e5d00a23d2d6fac12b6f25322
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_fr.dll
        • Size 30KB
        • SHA256 fcbe9676371d9c377ba882b7eb057f4d56469e02b66325592803515225497269
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ga.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ga.dll
        • Size 28KB
        • SHA256 8d7c1d3bae0135316f87bf6ac88bcd151e537b47d71c415cae80a8065b7809e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gd.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_gd.dll
        • Size 30KB
        • SHA256 872f2138cba9ecd6b2e5b85b395b07bd9081fcc11e96b6ff693c8fb04743025b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gl.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_gl.dll
        • Size 28KB
        • SHA256 6eaa5dba058947fd67b1daaa9ca6fd3a472edd613be866bce9eef210104f17a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_gu.dll
        • Size 28KB
        • SHA256 c62855cf8b2d2d7f485476af003291bcebb4e61ffae3a43a53ee9812e290ce00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_hi.dll
        • Size 28KB
        • SHA256 4adff29543a75b284174299bd0572796757ed18ac71981e215f4c1eb3c566500
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_hr.dll
        • Size 29KB
        • SHA256 a5f1ae90cb1cf2f9b9f15187bcef42a754c32c5688cf79532e9468b5a4848622
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_hu.dll
        • Size 29KB
        • SHA256 ff08dc555ad3bca3732af3dc6f4c67c3cd75246282320d4c0d23620aa6914b30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_id.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_id.dll
        • Size 28KB
        • SHA256 4f343a09979a08465dccb0c4fbdae00ff2d1e3f6a4ab7aee6a2e3b4ab55981a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_is.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_is.dll
        • Size 28KB
        • SHA256 8ef9473397f39eb960f5b3e12db91be86f15c197c63a68c99f3faba85b8ec79e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_it.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_it.dll
        • Size 30KB
        • SHA256 74cf41d1b2b354dea49f7eab418a903d92e8a851615210a4c5e24e4da4b0e512
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_iw.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_iw.dll
        • Size 25KB
        • SHA256 04b909a509d1771ca0e9f752ab68d66af10e1e84b0bbb9f930bb05254103cf51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ja.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ja.dll
        • Size 24KB
        • SHA256 8d1b1e8d2cda79a66d085946f5d1132f5ad4ebb2b7cd3b1c359115258bb6b9bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ka.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ka.dll
        • Size 29KB
        • SHA256 e5fde47eafac5c48b9b72f12ee4ce797ae9bb586dc626f53fdb10b71cc4998dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kk.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_kk.dll
        • Size 28KB
        • SHA256 8ee7f2b24328b200c4a8cd99384bcb6e2ea5e077f95ce1722178b8f9434ed996
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_km.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_km.dll
        • Size 27KB
        • SHA256 3f00afbb5650c8a04cdcb5f67c747ecbc7cc92f1ec53763a42b96dea9d41825e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kn.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_kn.dll
        • Size 29KB
        • SHA256 43d212c6907cd2327a61349b1f75c9c10aace318992630bb409464895ed8028c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ko.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ko.dll
        • Size 23KB
        • SHA256 15046cc1465337aa2af1600b566c5a0d034367a256ac796a45a623bb13560e95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kok.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_kok.dll
        • Size 28KB
        • SHA256 0fc65973cb9fc7b20dde82f8b51391c255224c64a170dd8d396fa1a4aa26d736
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lb.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_lb.dll
        • Size 30KB
        • SHA256 c1ca04b30f73c92798efd00fcc934e593847a512e0238ea08aa3bcc5deef6e38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lo.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_lo.dll
        • Size 27KB
        • SHA256 166d9c78519ba105fd769d0cbe7c6c3606601c4755863a16b79938b393203a85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lt.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_lt.dll
        • Size 28KB
        • SHA256 b30630b933b3fd6b08878df982fd4bf9639b38b9dc1961b7ed36141bd6149e4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lv.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_lv.dll
        • Size 28KB
        • SHA256 b66d23d33aab67c1c60eb73121d405b9b3688b51fbc0f4e98fdeeb1c366bae43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_mi.dll
        • Size 28KB
        • SHA256 3e68ba281c09fc49937c694d2476a03cc3fa561ba1110bc137c43cb76fc9cc2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mk.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_mk.dll
        • Size 29KB
        • SHA256 f20e5d78b8ef040ce0b89b45c30ab149a86520cdb4fc9af5a230d0db680546ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ml.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ml.dll
        • Size 30KB
        • SHA256 5c10f9a2ff12a12a81383cffd8980c70d45aa9f12df9d9e823e04c54e772000f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_mr.dll
        • Size 28KB
        • SHA256 d36e58938da5884b4bc760d50ab51e832718a17ed275c3d7e4e01f897d821315
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ms.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU6CEE.tmp\msedgeupdateres_ms.dll
        • Size 28KB
        • SHA256 2825aea41e692e5c2501a0252948aed0e01b81901a66f6e36aab62ed22c25c16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdate.log
        • Path C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
        • Size 379KB
        • SHA256 428315f60d71c496b5b2aa542b10b7bd2d63e8aa96573bf724f7834205da7c55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3704-243-0x0000000000040000-0x0000000000075000-memory.dmp
        Download

        memory/3704-209-0x0000000075130000-0x000000007536D000-memory.dmp
        Download

        memory/3704-201-0x0000000075130000-0x000000007536D000-memory.dmp
        Download

        memory/3704-200-0x0000000000040000-0x0000000000075000-memory.dmp
        Download