.. /vsls-agent.exe
Star

Execute (DLL)

Agent for Visual Studio Live Share (Code Collaboration)


Paths:

Resources:
Acknowledgements:

Detection:

Execute

  1. Load a library payload using the --agentExtensionPath parameter (32-bit)

    vsls-agent.exe --agentExtensionPath c:\path\to\payload.dll
    Use case
    Execute proxied payload with Microsoft signed binary
    Privileges required
    User
    Operating systems
    Windows 10 21H2 (likely previous and newer versions with modern versions of Visual Studio installed)
    ATT&CK® technique
    T1218
    Tags
    Execute: DLL
    This LOLBAS executes Dynamic-Link Libraries (DLLs).