Technical Information
- %WINDIR%\microsoft.net\framework\v4.0.30319\msbuild.exe
- '18#.#22.57.199':80
- http://18#.#22.57.199/Pvrlhjtj_Zhbxcqia.png
- '%WINDIR%\syswow64\cmd.exe' /c timeout 20' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c timeout 20
- '%WINDIR%\syswow64\timeout.exe' 20
- '%WINDIR%\microsoft.net\framework\v4.0.30319\msbuild.exe'