.. / Devtoolslauncher.exe
Star

Binary will execute specified binary. Part of VS/VScode installation.


Paths:


Resources:
https://twitter.com/_felamos/status/1179811992841797632

Acknowledgement:
felamos - @_felamos


Detection:
DeveloperToolsSvc.exe spawned an unknown process



Execute

The above binary will execute other binary.
devtoolslauncher.exe LaunchForDeploy [PATH_TO_BIN] "argument here" test
Usecase:Execute any binary with given arguments and it will call developertoolssvc.exe. developertoolssvc is actually executing the binary. https://i.imgur.com/Go7rc0I.png
Privileges required:User
OS:Windows 7 and up with VS/VScode installed
Mitre:T1218



The above binary will execute other binary.
devtoolslauncher.exe LaunchForDebug [PATH_TO_BIN] "argument here" test
Usecase:Execute any binary with given arguments.
Privileges required:User
OS:Windows 7 and up with VS/VScode installed
Mitre:T1218