Used to compile and execute code

Paths:

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Msbuild.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Msbuild.exe
C:\Windows\Microsoft.NET\Framework\v3.5\Msbuild.exe
C:\Windows\Microsoft.NET\Framework64\v3.5\Msbuild.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Msbuild.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Msbuild.exe

Detection: Msbuild.exe should not normally be executed on workstations

AWL bypass

Build and execute a C# project stored in the target XML file.

msbuild.exe pshell.xml

Execute

Build and execute a C# project stored in the target csproj file.

msbuild.exe project.csproj