edgehtml.dll

  • File Path: C:\Windows\system32\edgehtml.dll
  • Description: Microsoft Edge Web Platform

Hashes

Type Hash
MD5 D395FD0DA9EFBE7228A5917A933419D9
SHA1 D93F19BF629DF834BD8C0345D5D4F80D2093318B
SHA256 A7289A9D7D5735C95D0D1A2AA4C6F3D9057C2C8B93A141B07FCD34CF6FE20C0F
SHA384 63BAC03D2BCE9BDB0C1FD29ABA4440A96F239A5698CA4DB9A95CF129409DA801853F155FC3D8538E851593CCF4DD3978
SHA512 791458AE2495442F45D68453CFF329082EE7DB172D4BB2B6B10CB9BE5D57F2F40A0E8C93F3F934D7753D9E83202BEF7F25B457C604AAE14B878E5E774D4A48BB
SSDEEP 393216:CwziajSfu5t8md1BUv0vAevIVRapAulbXGh022TG:PziakRO9T
IMP F89E4E381A7D6672BF32E3401968DE95
PESHA1 B4E44BAA3407E65EDA70610E10FC55F7A08D507C
PE256 14EC0AC49FE5B01B41790FFE679D21082030F78AE992EF42D1E1CCB069CA31EB

DLL Exports:

Function Name Ordinal Type
ShowModelessHTMLDialog 126 Exported Function
Streams_CreateByteChunk 127 Exported Function
Streams_CreateDefaultSizedByteChunk 135 Exported Function
ShowModalDialog 125 Exported Function
PrintHTML 122 Exported Function
ShowHTMLDialog 123 Exported Function
ShowHTMLDialogEx 124 Exported Function
Streams_CreateDefaultSizedWideCharChunk 136 Exported Function
Streams_CreateWritableStream 145 Exported Function
TravelLogCreateInstance 146 Exported Function
UninitializeLocalHtmlEngine 147 Exported Function
Streams_CreateWideCharChunk 144 Exported Function
Streams_CreateReadableStream 137 Exported Function
Streams_CreateReadableStreamFromFileHandle 142 Exported Function
Streams_CreateReadableStreamFromFilePath 143 Exported Function
CreateCoreWebView 111 Exported Function
CreateDiagnosticsToolObject 112 Exported Function
CreateHTMLPropertyPage 113 Exported Function
ConvertAndEscapePostData 110 Exported Function
CIGTestHookLoadLibraryWorkerThread 107 Exported Function
ClearPhishingFilterData 108 Exported Function
ClearTemporaryWebDataAsync 109 Exported Function
DllCanUnloadNow 114 Exported Function
GetWebPlatformObject 119 Exported Function
InitializeLocalHtmlEngine 120 Exported Function
MatchExactGetIDsOfNames 121 Exported Function
GetColorValueFromString 118 Exported Function
DllEnumClassObjects 115 Exported Function
DllGetClassObject 116 Exported Function
Fetch_CreateOriginAgnosticFetch 117 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EDGEHTML.DLL.MUI
  • Product Name: Microsoft Edge Web Platform
  • Company Name: Microsoft Corporation
  • File Version: 11.00.19041.1 (WinBuild.160101.0800)
  • Product Version: 11.00.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/a7289a9d7d5735c95d0d1a2aa4c6f3d9057c2c8b93a141b07fcd34cf6fe20c0f/detection/

Possible Misuse

The following table contains possible examples of edgehtml.dll being misused. While edgehtml.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_susp_rundll32_by_ordinal.yml - 'EDGEHTML.dll' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.