CatalogLOLBAS

LOL · OtherMSBinary

Devtoolslauncher.exe

2 techniquesWindowsLOLBASGPL-3.0

Execute

ExecutionWindows

The above binary will execute other binary.

Use Execute any binary with given arguments and it will call `developertoolssvc.exe`. `developertoolssvc` is actually executing the binary.

devtoolslauncher.exe LaunchForDeploy {PATH_ABSOLUTE:.exe} "{CMD:args}" test
Evidence
Upstream reference
Environment
Local host
Context
user
Native
Execute
MITRE
T1127

Execute

ExecutionWindows

The above binary will execute other binary.

Use Execute any binary with given arguments.

devtoolslauncher.exe LaunchForDebug {PATH_ABSOLUTE:.exe} "{CMD:args}" test
Evidence
Upstream reference
Environment
Local host
Context
user
Native
Execute
MITRE
T1127