vsls-agent.exe

Agent for Visual Studio Live Share (Code Collaboration)

Paths

  • c:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\Common7\IDE\Extensions\Microsoft\LiveShare\Agent\vsls-agent.exe

Commands

Execute

Load a library payload using the --agentExtensionPath parameter (32-bit)

Use case: Execute proxied payload with Microsoft signed binary

Privileges: User

vsls-agent.exe --agentExtensionPath {PATH_ABSOLUTE:.dll}

Detection

Resources