MicrosoftEdgeUpdate[.]exe

General

Target
MicrosoftEdgeUpdate.exe
Size 210KB
Sample260823-ldpd6avfpd
SHA256 54545f352215a9c0f370a01980aadcd5749a93589931662d89a974d7bd60f476
MD5 a4fc8ec5bc41c41918b0c1541e4e4be6
SHA1 618c61a5f7dab66e7ec08e1da08ce24ec41ae65d
SHA512 c42c3c7f44257c023f2d68966f90818ae8fd8aaf0c6bdea87f2e0d701c5e986fdbc689e3af075552cac41fdc8afa5972973dbcde6067ef608dfda87d7e64764d
SSDEEP 3072:BGNpDW3GRzTuN9afQ+eVMoiTs0kH+QmxKuyXTZ+iB+H+HN2IS9pZb2kfBDbguYZb:azTuN9afTJ1kHnuyXTZBB+R8Wpq
TLSH
T1F1246F1233F84A28F8F36E315C759B2AE93FBC319E34E62E1645219E1D35A419D21B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

MicrosoftEdgeUpdate.exe

.exe 210KB

MicrosoftEdgeUpdate.exe

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 54545f352215a9c0f370a01980aadcd5749a93589931662d89a974d7bd60f476
MD5 a4fc8ec5bc41c41918b0c1541e4e4be6
SHA1 618c61a5f7dab66e7ec08e1da08ce24ec41ae65d
SHA512 c42c3c7f44257c023f2d68966f90818ae8fd8aaf0c6bdea87f2e0d701c5e986fdbc689e3af075552cac41fdc8afa5972973dbcde6067ef608dfda87d7e64764d
SSDEEP 3072:BGNpDW3GRzTuN9afQ+eVMoiTs0kH+QmxKuyXTZ+iB+H+HN2IS9pZb2kfBDbguYZb:azTuN9afTJ1kHnuyXTZBB+R8Wpq
TLSH
T1F1246F1233F84A28F8F36E315C759B2AE93FBC319E34E62E1645219E1D35A419D21B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

2e:c5:01:17:b3:45:14:fb:24:6c:c9:7b:35:a7:6f:46:e9:0b:13:51:98:47:8c:51:ad:2c:c7:66:ac:39:29:92

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 3, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

1

Major OS version

5

Entry point

46770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing