MS Edge update (.exe) could not be recognized

[burialfaith]

Greetings,

I’m using Windows 10 Home version 22H2 (OS Build 19045.5854). Every here and then MS Edge update process triggers HIPS alert. (Please see the pictures below). I would appreciate confirmation from COMODO representative whether this is the correct way MS Edge updates or if this is the result of malicious code executing.

1. Here is the first HIPS alert triggered during a MS Edge update. We can see that the process originates from C:\Program Files (x86)\Microsoft\Temp\EU244A.tmp\ .
   

   

2. Clicking on the “MicrosoftEdgeUpdat…” blue link within the HIPS alert (in the above picture) displays the following message (in the next picture) where the file initiating the HIPS alert (MicrosoftEdgeUpdate.exe) cannot be found.
   

   
   
   I think it could be normal that the .exe file wouldn’t be “available” since it got halted by HIPS. At this point, I’m wondering if Microsoft is just releasing a new file before COMODO authenticates it and flags it as safe. Is this hypothesis right or is updating MS Edge via C:\Program Files (x86)\Microsoft\Temp\EU244A.tmp\ an abnormal way to update MS Edge? As clicking the “three dots” button in Edge top right corner and then on “Help and feedback” > “About Microsoft Edge” updates the browser; then why exactly would Edge updates from two different ways?

3. Clicking on “Allow” button from the HIPS alert in picture 1 (above) results in the following HIPS alert (please see picture below) where the unrecognized MicrosoftEdgeUpdate.exe tries to edit the registry.
   

   

4. Clicking “Allow” on the second HIPS alert (from picture 3) displays this last HIPS alert. (Please see picture below).
   

   

Thank you for answering my inquiries,
Regards,

B

[C.O.M.O.D.O_RT]

Hi burialfaith,

Thank you for reporting.
We will check and update you .

Thanks
C.O.M.O.D.O RT