From dd7be51f56abe5e2552a87e9cd00949c478b4c76 Mon Sep 17 00:00:00 2001
From: hegusung <7390383+hegusung@users.noreply.github.com>
Date: Sun, 13 Oct 2024 17:36:40 +0200
Subject: [PATCH] Update msedgewebview2.yml Tags

Added Tags:
Execute: EXE
---
 yml/OSBinaries/msedgewebview2.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/yml/OSBinaries/msedgewebview2.yml b/yml/OSBinaries/msedgewebview2.yml
index 83f76cd..c89260d 100644
--- a/yml/OSBinaries/msedgewebview2.yml
+++ b/yml/OSBinaries/msedgewebview2.yml
@@ -11,6 +11,8 @@ Commands:
     Privileges: Low privileges
     MitreID: T1218.015
     OperatingSystem: Windows 10, Windows 11
+    Tags:
+    - Execute: EXE
   - Command: msedgewebview2.exe --utility-cmd-prefix="calc.exe"
     Description: This command launches the Microsoft Edge WebView2 browser control without sandboxing and will spawn calc.exe as its subprocess.
     Usecase: Proxy execution of binary
@@ -18,6 +20,8 @@ Commands:
     Privileges: User
     MitreID: T1218.015
     OperatingSystem: Windows 10, Windows 11
+    Tags:
+    - Execute: EXE
   - Command: msedgewebview2.exe --disable-gpu-sandbox --gpu-launcher="calc.exe"
     Description: This command launches the Microsoft Edge WebView2 browser control without sandboxing and will spawn calc.exe as its subprocess.
     Usecase: Proxy execution of binary
@@ -25,6 +29,8 @@ Commands:
     Privileges: User
     MitreID: T1218.015
     OperatingSystem: Windows 10, Windows 11
+    Tags:
+    - Execute: EXE
   - Command: msedgewebview2.exe --no-sandbox --renderer-cmd-prefix="calc.exe"
     Description: This command launches the Microsoft Edge WebView2 browser control without sandboxing and will spawn calc.exe as its subprocess.
     Usecase: Proxy execution of binary
@@ -32,6 +38,8 @@ Commands:
     Privileges: User
     MitreID: T1218.015
     OperatingSystem: Windows 10, Windows 11
+    Tags:
+    - Execute: EXE
 Full_Path:
   - Path: C:\Program Files (x86)\Microsoft\Edge\Application\114.0.1823.43\msedgewebview2.exe
 Detection: