Technical Information
- %TEMP%\897a.tmp
- '%TEMP%\897a.tmp' --ping<Full path to file> 6A3433E65F823BFDE33D2B53DC93B5118A60D058471D401EF1C95A6C2DDD0EEF0F6C5E6DC32F14E336983214532A11C2CA45762C4E4A63AA9DB81E58B5F8B3B2
- '%TEMP%\897a.tmp' --ping<Full path to file> 6A3433E65F823BFDE33D2B53DC93B5118A60D058471D401EF1C95A6C2DDD0EEF0F6C5E6DC32F14E336983214532A11C2CA45762C4E4A63AA9DB81E58B5F8B3B2' (with hidden window)