Microsoft Visual Studio browser launcher tool for web applications debugging Located at: C:\Program Files\Microsoft Visual Studio\<version>\Community\Common7\IDE\VSLaunchBrowser.exe; C:\Program Files (x86)\Microsoft Visual Studio\<version>\Community\Common7\IDE\VSLaunchBrowser.exe.
vslaunchbrowservslaunchbrowserSandbox: execFile · Timeout: 30s
network.transfer.download security.execution.command Outputs
process.output Command execution output
network_trafficprocess_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | medium |
| Disk I/O | low |
Download and execute payload from remote server (It will download a remote file to INetCache and open it using the default app associated with the supplied file extension with VSLaunchBrowser as parent process.)
VSLaunchBrowser.exe .exe {REMOTEURL:.exe}Execute payload via VSLaunchBrowser as parent process (It will open a local file using the default app associated with the supplied file extension with VSLaunchBrowser as parent process.)
VSLaunchBrowser.exe .exe {PATH_ABSOLUTE:.exe}Execute payload from WebDAV server via VSLaunchBrowser as parent process (It will open a remote file using the default app associated with the supplied file extension with VSLaunchBrowser as parent process.)
VSLaunchBrowser.exe .exe {PATH_SMB}| Type | Rule / Indicator |
|---|---|
| ioc | cmd.exe as sub-process of VSLaunchBrowser |
| ioc | URL on a VSLaunchBrowser command line |
| ioc | VSLaunchBrowser making unexpected network connections or DNS requests |
vslaunchbrowser is a Windows LOLBin. Microsoft Visual Studio browser launcher tool for web applications debugging Located at: C:\Program Files\Microsoft Visual Studio<version>\Community\Common7\IDE\VSLaunchBrowser.exe; C:\Program Files (x86)\Microsoft Visual Studio<version>\Community\Common7\IDE\VSLaunchBrowser.exe.