From 247511bca85446726c0dce774e3c2aee31586d1c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mert=20Da=C5=9F?= <48562581+mertdas@users.noreply.github.com> Date: Sun, 3 Sep 2023 21:51:32 +0300 Subject: [PATCH] Update msedge_proxy.yml --- yml/OSBinaries/msedge_proxy.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/yml/OSBinaries/msedge_proxy.yml b/yml/OSBinaries/msedge_proxy.yml index 95a0e80..c347c19 100644 --- a/yml/OSBinaries/msedge_proxy.yml +++ b/yml/OSBinaries/msedge_proxy.yml @@ -18,7 +18,7 @@ Commands: Privileges: User MitreID: T1105 OperatingSystem: Windows 10, Windows 11 - - Command: C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe --disable-gpu-sandbox --gpu-launcher="C:\Windows\system32\cmd.exe /c ping google.com &&" + - Command: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe" --disable-gpu-sandbox --gpu-launcher="C:\Windows\system32\cmd.exe /c ping google.com &&" Description: msedge_proxy.exe will execute file in the background Usecase: Executes a process under a trusted Microsoft signed binary Category: Execute