Technical Information
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
- %TEMP%\GxVoqqN.txt
- %TEMP%\32679826.jpg
- <Full path to file>
- 'th#####cil.duckdns.org':1604
- DNS ASK th#####cil.duckdns.org
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe'
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen %TEMP%\32679826.jpg