CmdID

CmdID / Files

msedgeupdateres_ga.dll

Microsoft Edge Update file version info

Library on Windows 1 known copy with hashes

Is it the real msedgeupdateres_ga.dll?

file version info and known copies
Original namemsedgeupdate.dll in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.135.29\
Signed byMicrosoft Corporation
ProductMicrosoft Edge Update, Microsoft Corporation
DescriptionMicrosoft Edge Update

1 known copy

1.3.135.29 · C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.135.29\msedgeupdateres_ga.dll · signed by Microsoft Corporation

SHA-25639ffdec7448eff7ee47c58fa9e81b9eba36122b6e3c5f1905c8f23244e4221b9SHA-189e3f56be6c001b96ccafbc955a2ef9d58c0130fMD525e53859664c58cd75d153a5d8d915c3

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.