LOL · OtherMSBinary

vsjitdebugger.exe

1 techniqueWindowsLOLBASGPL-3.0

Execute

ExecutionWindows

Executes specified executable as a subprocess of Vsjitdebugger.exe.

Use Execution of local PE file as a subprocess of Vsjitdebugger.exe.

Vsjitdebugger.exe {PATH:.exe}

Evidence: Upstream reference
Environment: Local host
Context: user
Native: Execute
MITRE: T1127
Detection: Sigma: github.com/SigmaHQ/sigma/blob/683b63f8184b93c9564c4310d10c571cbe367e1e/rules/windows/process_creation/proc_creation_win_susp_use_of_vsjitdebugger_bin.yml
Refs: twitter.com/pabraeken/status/990758590020452353
lolbas-project.github.io/lolbas/OtherMSBinaries/vsjitdebugger/