LOLBAS. GitHub
LIVING OFF THE LAND / OS BINARIES

vbc.exe

View source

Binary file used for compile vbs code

Compile
02COMMAND EXAMPLES
01ATT&CK TECHNIQUES
02DETECTION RESOURCES
01CAPABILITIES
01 / TRADECRAFT

Command reference

2 examples

Compile2

EXAMPLE 01T1127

Binary file used by .NET to compile Visual Basic code to an executable.

COMMAND
vbc.exe /target:exe {PATH_ABSOLUTE:.vb}
USE CASE
Compile attacker code on system. Bypass defensive counter measures.
PRIVILEGES
User
OPERATING SYSTEM
Windows 7, Windows 10, Windows 11
EXAMPLE 02T1127

Binary file used by .NET to compile Visual Basic code to an executable.

COMMAND
vbc -reference:Microsoft.VisualBasic.dll {PATH_ABSOLUTE:.vb}
USE CASE
Compile attacker code on system. Bypass defensive counter measures.
PRIVILEGES
User
OPERATING SYSTEM
Windows 7, Windows 10, Windows 11
02 / ON DISK

Known paths

C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
C:\Windows\Microsoft.NET\Framework\v3.5\vbc.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe
C:\Windows\Microsoft.NET\Framework64\v3.5\vbc.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\vbc.exe
03 / DEFENSIVE INTELLIGENCE

Detection & indicators

2 resources
COMMUNITY RESEARCH

Acknowledgements

Lior Adar
Hai Vaknin(Lux)