Technical Information
- %TEMP%\1fbf.tmp
- '%TEMP%\1fbf.tmp' --ping<Full path to file> 803FFC3E39D926405967C55C82D9FA180688638FE73DF74427B4E34CF0DA6A14A6B016F9FC60F0E501B7CE22B2D128BACC801D61855D30C7C339BA777144910C
- '%TEMP%\1fbf.tmp' --ping<Full path to file> 803FFC3E39D926405967C55C82D9FA180688638FE73DF74427B4E34CF0DA6A14A6B016F9FC60F0E501B7CE22B2D128BACC801D61855D30C7C339BA777144910C' (with hidden window)