edgehtml.dll

  • File Path: C:\Windows\SysWOW64\edgehtml.dll
  • Description: Microsoft Edge Web Platform

Hashes

Type Hash
MD5 FE2D19E8F3D3F702A9D5C7E9C1D0C949
SHA1 186EFF41A87D8D59722340BF6387CFD797F0A7EF
SHA256 AFF210B719CA2E4900AE0E44D3EE4BE3ACDB29202E3777639D2EE9E64903016D
SHA384 BE3202A46E5C1D6CBA4C9B45C1216F4AFA983510CEC55DA646C0DC5F620A281F0A75768D27DF5407979119CE1434C29B
SHA512 7D7DBDBA3C9BB725DAB7989AC6C3F5D17CAEDF47680C5FC2555DF688326900FB201F1F553757DC8E891AEAC4E79A96870A7177FEA7C23C4121A4964B5C378B92
SSDEEP 393216:yniuJcKdyvFlkN3A3kMlJbMqt1vt0b2VF7C6RIx1:yvcKgFlkN3A3kiM+vtfV9Pi1
IMP 9B62B8FE4117BDEB623B6872ECC42CB4
PESHA1 CBF838040385A225123E10B2E5E9F70A5DF20E77
PE256 DF2126759D36726C4DAC2A749796DF780FBCD1F38F82AAE090A42834F1C23AB4

DLL Exports:

Function Name Ordinal Type
ShowModelessHTMLDialog 126 Exported Function
Streams_CreateByteChunk 127 Exported Function
Streams_CreateDefaultSizedByteChunk 135 Exported Function
ShowModalDialog 125 Exported Function
PrintHTML 122 Exported Function
ShowHTMLDialog 123 Exported Function
ShowHTMLDialogEx 124 Exported Function
Streams_CreateDefaultSizedWideCharChunk 136 Exported Function
Streams_CreateWritableStream 145 Exported Function
TravelLogCreateInstance 146 Exported Function
UninitializeLocalHtmlEngine 147 Exported Function
Streams_CreateWideCharChunk 144 Exported Function
Streams_CreateReadableStream 137 Exported Function
Streams_CreateReadableStreamFromFileHandle 142 Exported Function
Streams_CreateReadableStreamFromFilePath 143 Exported Function
CreateCoreWebView 111 Exported Function
CreateDiagnosticsToolObject 112 Exported Function
CreateHTMLPropertyPage 113 Exported Function
ConvertAndEscapePostData 110 Exported Function
CIGTestHookLoadLibraryWorkerThread 107 Exported Function
ClearPhishingFilterData 108 Exported Function
ClearTemporaryWebDataAsync 109 Exported Function
DllCanUnloadNow 114 Exported Function
GetWebPlatformObject 119 Exported Function
InitializeLocalHtmlEngine 120 Exported Function
MatchExactGetIDsOfNames 121 Exported Function
GetColorValueFromString 118 Exported Function
DllEnumClassObjects 115 Exported Function
DllGetClassObject 116 Exported Function
Fetch_CreateOriginAgnosticFetch 117 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EDGEHTML.DLL
  • Product Name: Microsoft Edge Web Platform
  • Company Name: Microsoft Corporation
  • File Version: 11.00.19041.508 (WinBuild.160101.0800)
  • Product Version: 11.00.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/aff210b719ca2e4900ae0e44d3ee4be3acdb29202e3777639d2ee9e64903016d/detection/

Possible Misuse

The following table contains possible examples of edgehtml.dll being misused. While edgehtml.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_susp_rundll32_by_ordinal.yml - 'EDGEHTML.dll' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.