Overview

overview

7

Static

static

3

BetterTwtt...up.exe

windows10-2004-x64

7

BetterTwtt...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$TEMP/Micr...up.exe

windows10-2004-x64

6

$TEMP/Micr...up.exe

windows11-ltsc_2024-x64

6

better-twttr.exe

windows10-2004-x64

6

better-twttr.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/09/2026, 06:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    $TEMP/MicrosoftEdgeWebview2Setup.exe
  • Size 1.8MB
  • Sample260928-hdan8axcpg
  • SHA256 81c01751c8cc385a5991abb104205d42ac70094350ee8fb9e8ea580b51bb9554
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoverypersistenceprivilege_escalation

Malware Config

Signatures

  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 10 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 14 IoCs
  • Loads dropped DLL 17 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 18 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 3 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Modifies data under HKEY_USERS 41 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\MicrosoftEdgeWebview2Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\MicrosoftEdgeWebview2Setup.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3568
    • C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\MicrosoftEdgeUpdate.exe" /installsource taggedmi /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Checks computer location settings
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4860
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:864
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:3168
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.271.7\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.271.7\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:3452
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.271.7\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.271.7\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:3516
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.271.7\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.271.7\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:3084
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4yNzEuNyIgc2hlbGxfdmVyc2lvbj0iMS4zLjI3MS43IiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0iezVCMjMxRTU2LUUyMDctNDk0Ri04MjczLTJBNUZCMzFFNzdBM30iIHVzZXJpZD0iezgwQ0NGMTQ3LTE0OUUtNDU0Ni1CMzIyLTRCMTMwNDgzQjY5NH0iIGluc3RhbGxzb3VyY2U9InRhZ2dlZG1pIiByZXF1ZXN0aWQ9InsxRkMzN0JDRC05Q0E0LTQyMTgtOTc4Ri0zRDVFREU4RTk0NEN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iMTYiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiIHByb2R1Y3RfdHlwZT0iNDgiIGlzX3dpcD0iMCIgaXNfaW5fbG9ja2Rvd25fbW9kZT0iMCIvPjxvZW0gcHJvZHVjdF9tYW51ZmFjdHVyZXI9IkRBRFkiIHByb2R1Y3RfbmFtZT0iRGFkeSBzdXBlciBwb3dlcmZ1bCBQQyIvPjxleHAgZXRhZz0iJnF1b3Q7czhGYW52d2ZNY2Q2Nmc3TFYyUGVhU1I3V1VPdjBsdUY0aHZpaXJUb2srTT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE5NS42NSIgbmV4dHZlcnNpb249IjEuMy4yNzEuNyIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNTkwMzY1NjQ4NyIgaW5zdGFsbF90aW1lX21zPSI5MDYiLz48L2FwcD48L3JlcXVlc3Q-
        3⤵
        • Checks system information in the registry
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4412
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource taggedmi /sessionid "{5B231E56-E207-494F-8273-2A5FB31E77A3}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        PID:3436
  • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1952
    • C:\Windows\SysWOW64\wermgr.exe
      "C:\Windows\system32\wermgr.exe" "-outproc" "0" "1952" "900" "784" "896" "0" "0" "0" "0" "0" "0" "0" "0"
      2⤵
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Enumerates system info in registry
      PID:3208
  • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
    1⤵
    • Checks system information in the registry
    • Executes dropped EXE
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    • Suspicious use of WriteProcessMemory
    PID:1532
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREFEWSIgcHJvZHVjdF9uYW1lPSJEYWR5IHN1cGVyIHBvd2VyZnVsIFBDIi8-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-
      2⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:1920
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{47C77DD3-6450-48F8-A54F-422B67D52A59}\MicrosoftEdge_X64_154.0.4258.37.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{47C77DD3-6450-48F8-A54F-422B67D52A59}\MicrosoftEdge_X64_154.0.4258.37.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:1400
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{47C77DD3-6450-48F8-A54F-422B67D52A59}\EDGEMITMP_18994.tmp\setup.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{47C77DD3-6450-48F8-A54F-422B67D52A59}\EDGEMITMP_18994.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{47C77DD3-6450-48F8-A54F-422B67D52A59}\MicrosoftEdge_X64_154.0.4258.37.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
        3⤵
        • Checks computer location settings
        • Drops file in Program Files directory
        • Executes dropped EXE
        PID:2392
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4yNzEuNyIgc2hlbGxfdmVyc2lvbj0iMS4zLjI3MS43IiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0iezVCMjMxRTU2LUUyMDctNDk0Ri04MjczLTJBNUZCMzFFNzdBM30iIHVzZXJpZD0iezgwQ0NGMTQ3LTE0OUUtNDU0Ni1CMzIyLTRCMTMwNDgzQjY5NH0iIGluc3RhbGxzb3VyY2U9InRhZ2dlZG1pIiByZXF1ZXN0aWQ9IntDNDU5ODMwMi0zMjFBLTQxRDAtOEM0OC0yMUFCODVDRTkzQjh9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iMTYiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiIHByb2R1Y3RfdHlwZT0iNDgiIGlzX3dpcD0iMCIgaXNfaW5fbG9ja2Rvd25fbW9kZT0iMCIvPjxvZW0gcHJvZHVjdF9tYW51ZmFjdHVyZXI9IkRBRFkiIHByb2R1Y3RfbmFtZT0iRGFkeSBzdXBlciBwb3dlcmZ1bCBQQyIvPjxleHAgZXRhZz0iJnF1b3Q7SGh2SElXcFVOWlRNblYyVlQxbGUzZjVZSlE5T1NvVEQ2TXhIRGxBODlQZz0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTU0LjAuNDI1OC4zNyIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9IjE2IiBpbnN0YWxsZGF0ZT0iNzE4OSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1OTIyNTYzMTA4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PC9hcHA-PC9yZXF1ZXN0Pg
      2⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:2864

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        setup.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\154.0.4258.37\Installer\setup.exe
        • Size 5.7MB
        • SHA256 f3ab7c66413d072a3471acf3098ccc5eac29ed4c23337b6ba5c88e9a0e565900
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge_7z.data
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\154.0.4258.37\Installer\msedge_7z.data
        • Size 6KB
        • SHA256 fd4557f76ab5f44861fb377c625de3d58de3033229047ab78ef0dad0d96b6651
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CopilotUpdate.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\CopilotUpdate.exe
        • Size 22KB
        • SHA256 696bca8ed732601a01d21597105794590818d8a8ee386374ab59fbc8af9ab778
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EdgeUpdate.dat
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\EdgeUpdate.dat
        • Size 12KB
        • SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeComRegisterShellARM64.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\MicrosoftEdgeComRegisterShellARM64.exe
        • Size 195KB
        • SHA256 8bbac36600d9d01a8c051627e25ceeaed28d0094e9271ba150bfe3e4cf086221
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdate.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\MicrosoftEdgeUpdate.exe
        • Size 202KB
        • SHA256 5497dd84321887d18b62fae35689ea4a7d07cad7840853b2bb50bbf7bfac365e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateComRegisterShell64.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe
        • Size 228KB
        • SHA256 64ffe399fd482a5152ef288d98db035429b097e815a7172bcacb7b84597671a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateCore.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\MicrosoftEdgeUpdateCore.exe
        • Size 335KB
        • SHA256 a52ca05f25ee177d5d30bb130e3738b459b096d36ce58d893323237d8ffae3d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NOTICE.TXT
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\NOTICE.TXT
        • Size 4KB
        • SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdate.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdate.dll
        • Size 2.4MB
        • SHA256 fed59a6d338e89758e95f446ae619c445fdefb28786e830cc5ec24b7a46262dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_af.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_af.dll
        • Size 29KB
        • SHA256 bcb348ba43e4e4f6030e248e86fc9e6569b8a195041a408741baafcd08e53af2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_am.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_am.dll
        • Size 24KB
        • SHA256 5fdc5070ee18089e184741f8c2813dff1bf5b668d6c80e20ee01aa81eb584a30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ar.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ar.dll
        • Size 26KB
        • SHA256 49cbf9d6344c996e2f842d8a88486ff48bb8d95a581035805bf5d1adb6f2901c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_as.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_as.dll
        • Size 28KB
        • SHA256 93389ec45f2ec5c8963833caa20b4c7fd85d4116d1efb7d7d67d27dc9ec82fc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_az.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_az.dll
        • Size 29KB
        • SHA256 88722c257e856f5e0090bb5618bc85930c145e31229aafcd0b75024fa7217dd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bg.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_bg.dll
        • Size 29KB
        • SHA256 9b74f2086fd5c73b7594d026bc61a2161f6075b4ab3b0fee31057515a82cfd56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bn-IN.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_bn-IN.dll
        • Size 29KB
        • SHA256 64428c09a147a2197ffe9f45a637f17132f1eea1503b404ea3971589cecca1e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bn.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_bn.dll
        • Size 29KB
        • SHA256 5a8a54ad4ee98f43a48b12ebfc94b619ae6590b839cb105ac8d2bca1911da6be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bs.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_bs.dll
        • Size 28KB
        • SHA256 44241096bedb0cfefb4f95977deaadf9d989d02c29ee994610832606eae4f074
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ca-Es-VALENCIA.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ca-Es-VALENCIA.dll
        • Size 30KB
        • SHA256 31c10cf6ae78fca5376fa2507b1a9d788008aea6987cf889bb0b73710a8074f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ca.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ca.dll
        • Size 30KB
        • SHA256 5a93536f2187a2c5a1a2306c049d1019d955178d1c329f2462c6b25d88db2f6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_cs.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_cs.dll
        • Size 28KB
        • SHA256 f097d84c1ebb12898c15c3260361d26ee2e7a9912feb37bbd9559bdeb1963103
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_cy.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_cy.dll
        • Size 28KB
        • SHA256 540783b5a905dc7c41987a78b01c61e8a436411c3eafb22784f10b2d88f67a97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_da.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_da.dll
        • Size 28KB
        • SHA256 4cbaab36817ecd0b19728353ef68cd112c2374d15a9241f82ec5f3d02ded3d2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_de.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_de.dll
        • Size 30KB
        • SHA256 247fb104ecd8ac77e3b05eb771524f2b2345be2e064504d3a553068686c0f3b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_el.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_el.dll
        • Size 30KB
        • SHA256 0f144382b43620c4ee4c72271b1c1db0acfe94a1cd3df9a481e51d1d14f7b3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_en-GB.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_en-GB.dll
        • Size 27KB
        • SHA256 06642b84734f33bde3d582f837eadde2a09f299f87aecf7aa884cf11ae1cf667
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_en.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_en.dll
        • Size 27KB
        • SHA256 a6239f0dfcd1d11d3e01535cd53edb9828aee05709abd1e08ef70569be030b41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_es-419.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_es-419.dll
        • Size 29KB
        • SHA256 1564f5cae08ec7f0525e1018cb9fe64891334175b87ead881b8e5e9e98dd14e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_es.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_es.dll
        • Size 28KB
        • SHA256 6b735e7d0e0c54c63680ba2bbe837647a50d733eb4ba5702eb619a86fb3ec658
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_et.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_et.dll
        • Size 28KB
        • SHA256 15e2a1c27ed599e849cfceed68b7cfdd851d19e433e18bae6a6030e29e3fdadd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_eu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_eu.dll
        • Size 28KB
        • SHA256 3f6a6508b3e60b4560632285e206e7e163e07c99dad2dd6b9125998d762a42a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fa.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_fa.dll
        • Size 27KB
        • SHA256 45a100b25903a14c379123022899002bbc420878ebeb0fd9f236a60710f4e332
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_fi.dll
        • Size 28KB
        • SHA256 bea0c9005d6f408bf556b0cba7755cee6b9e807d281daf2f21f710c632244bf0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fil.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_fil.dll
        • Size 29KB
        • SHA256 78a81ac6b4c92aa92aa921876c0453bc963f4167fed44897a7dfdefbf8f3a362
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fr-CA.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_fr-CA.dll
        • Size 30KB
        • SHA256 efdf88a10f1ef1609c647166158f95658aa5aae8e83229c6953f0a9b8cc9f2c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_fr.dll
        • Size 30KB
        • SHA256 5500d01ea8dca6398e4240d4d7bc81ecbf128604600570d5fee45f78c87ab209
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ga.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ga.dll
        • Size 28KB
        • SHA256 3c9d5a07cdb3956acfaf5151fc5c3f5a7485c78bad6547316c8a37c3dcd85ac0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gd.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_gd.dll
        • Size 30KB
        • SHA256 e79975d927a65bb61ac1d9cda6884662ca84b8c126897367a84f6ac3d302a9e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gl.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_gl.dll
        • Size 28KB
        • SHA256 27b31308a3cfc9166573a0c1a53e482471446b50a0c3bd4d6cc6bbd23aad050a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_gu.dll
        • Size 28KB
        • SHA256 f0929d8429832238f3635b6e22a81460981e83a6bf37141bd85f451d33abaa71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_hi.dll
        • Size 28KB
        • SHA256 66f9c39752c6ccd8fe025f2c6b2a11232a6c4da5c523af1e849a7371164bf429
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_hr.dll
        • Size 29KB
        • SHA256 aebffb754e309754d1cf9c3745c7dc27bdd07199e67baa8dcc114e7d21e10387
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_hu.dll
        • Size 29KB
        • SHA256 e98bf2596772d9321b70496e775b6fc08285e9d37425b084eaff0d23b09693d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_id.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_id.dll
        • Size 28KB
        • SHA256 d9d759b9a41bf6e5bad83cf7d6e6e519b243848e167f9f74300630cd5c00391f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_is.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_is.dll
        • Size 28KB
        • SHA256 6c0add7387268e889d07e1a1eaf0fdf46f43124ed91da96a21eb7c4c9cfb1f28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_it.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_it.dll
        • Size 30KB
        • SHA256 91761b431db41b0480138d410a093fc614240346e93b2e6f9236e8014f512286
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_iw.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_iw.dll
        • Size 25KB
        • SHA256 7282be8348fdf4dde3bc76d51a0b8f34520939641e4450d86b6b6cd327d7b3f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ja.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ja.dll
        • Size 24KB
        • SHA256 cb3a8689a80c77260e89aca320c0d480f186061ef32a3507d9092df2f7dc720a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ka.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ka.dll
        • Size 29KB
        • SHA256 be35319f2eb09335759e84e8eeec06ea4bd49b8ac0c793fff09cb28c1e928276
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kk.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_kk.dll
        • Size 28KB
        • SHA256 aa1e9a394308cb4dfeb68deada521a85b526741044c61ed5601cdec17470e406
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_km.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_km.dll
        • Size 27KB
        • SHA256 510d1a5381bf8eca30c0afe758f3ca034e52d10a7814027561e05af9c5430f90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kn.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_kn.dll
        • Size 29KB
        • SHA256 a82dde02656365e51706581dbc675ae4bdde721b912abae7c05fab60879664a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ko.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ko.dll
        • Size 23KB
        • SHA256 d25aa635fa21d61b06b33ce73e78558628bc32ea2c6cfcc3228d0ec7ef0dfcac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kok.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_kok.dll
        • Size 28KB
        • SHA256 2bb20e0526af31c732c948a19fa6b4ce665ce2d5eb87c8ec9c913f836b8b6b5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lb.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_lb.dll
        • Size 30KB
        • SHA256 1d299367d834a0d59c7c8f8f769096b939fcc4697b801f0581a37f2a885d616c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lo.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_lo.dll
        • Size 27KB
        • SHA256 aa16486840b2c2417d7e9c593830dfce53f228fe33851b528033243037c27f19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lt.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_lt.dll
        • Size 28KB
        • SHA256 e39e1494a4fc8ca7048f48ff910cb24b97af7d4014d6d3795420b6cdda8c06f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lv.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_lv.dll
        • Size 28KB
        • SHA256 097c65604653336352009bd61b8d2df703424212c285a6078dd9c0436a0a1a40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_mi.dll
        • Size 28KB
        • SHA256 7ed1f89d8690c9464f8047eaadffd30eb5be6339ab5306fbbd10d555e052160b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mk.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_mk.dll
        • Size 29KB
        • SHA256 e615fe32243511b25fce9a628e87a1844de4a6ec0c80eab3add17a6b095265b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ml.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ml.dll
        • Size 30KB
        • SHA256 b5474f40354c87d6110727ac93510597d004a0e6115aa68600d988e014c37e5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_mr.dll
        • Size 28KB
        • SHA256 76a63ab6305e24889ded341dc47a0287fd0b537435a5a23e65babf48873fc11b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ms.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EU4B76.tmp\msedgeupdateres_ms.dll
        • Size 28KB
        • SHA256 007100611682d0fc264a61474a29ba1d342caac7377520138aab502283901125
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdate.log
        • Path C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
        • Size 358KB
        • SHA256 c2e11efe5e15d01df224bde96dfb7c82a2a8f98aa234487816830ca6ce2e13bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4860-240-0x0000000000ED0000-0x0000000000F05000-memory.dmp
        Download

        memory/4860-218-0x0000000074D20000-0x0000000074F89000-memory.dmp
        Download

        memory/4860-198-0x0000000000ED0000-0x0000000000F05000-memory.dmp
        Download

        memory/4860-199-0x0000000074D20000-0x0000000074F89000-memory.dmp
        Download