Microsoft Copilot proxy launcher Located at: C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe.
mscopilot-proxymscopilot-proxySandbox: execFile · Timeout: 30s
security.execution.command Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | low |
| Disk I/O | low |
`mscopilot_proxy.exe` will spawn the provided command. Parent `mscopilot_proxy.exe` process needs to be killed to avoid command being executed an infinite number of times. (Executes a process under a trusted Microsoft signed binary)
mscopilot_proxy.exe --no-startup-window --disable-gpu-sandbox --gpu-launcher="cmd.exe /c calc.exe && taskkill /f /im mscopilot.exe &&"mscopilot-proxy is a Windows LOLBin. Microsoft Copilot proxy launcher Located at: C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe.