LOLBAS. GitHub
LIVING OFF THE LAND / OTHER MICROSOFT BINARIES

VSIISExeLauncher.exe

View source

Binary will execute specified binary. Part of VS/VScode installation.

Execute
01COMMAND EXAMPLES
01ATT&CK TECHNIQUES
01DETECTION RESOURCES
01CAPABILITIES
01 / TRADECRAFT

Command reference

1 examples

Execute1

EXAMPLE 01T1218

The above binary will execute other binary.

COMMAND
VSIISExeLauncher.exe -p {PATH:.exe} -a "{CMD:args}"
USE CASE
Execute any binary with given arguments.
PRIVILEGES
User
OPERATING SYSTEM
Windows 10 and up with VS/VScode installed
Execute · EXE
02 / ON DISK

Known paths

C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\ProjectSystem\VSIISExeLauncher.exe
03 / DEFENSIVE INTELLIGENCE

Detection & indicators

1 resources

Indicators & detection notes

  • IOC

    VSIISExeLauncher.exe spawned an unknown process

FURTHER READING

Research & resources

COMMUNITY RESEARCH

Acknowledgements

timwhite