Romcom Loader Msedge DLL Loaded From Unusual Path
Detects the RomCom loader 'msedge.dll' being loaded from a location outside of the legitimate Microsoft Edge installation directory. This is a known TTP for the RomCom threat group to load their Mythic Agent, often as a result of COM hijacking.
YARA-L
