EDR ALERT

Unusual Module Loaded by Signed Process

Process

teams_updater.exe

Signature

Valid

Module

C:\Users\MLee\Downloads\version.dll

Parent

explorer.exe

A trusted executable can be abused to load attacker-controlled code.