Technical Information
- %TEMP%\ed35.tmp
- '%TEMP%\ed35.tmp' --ping<Full path to file> 3543D70BAD10EFEDE39047FB161A29F13605C75FEBFE72A629EE70F89BFD6ABAE08630027B88E64564E8B4A384A6505F80E9DD4FE20F6ACEF5C2FDF9B8C44C21
- '%TEMP%\ed35.tmp' --ping<Full path to file> 3543D70BAD10EFEDE39047FB161A29F13605C75FEBFE72A629EE70F89BFD6ABAE08630027B88E64564E8B4A384A6505F80E9DD4FE20F6ACEF5C2FDF9B8C44C21' (with hidden window)