Technical Information
- %TEMP%\5896.tmp
- '%TEMP%\5896.tmp' --ping<Full path to file> 1B4A454185F40D8855DEDE711F1DDD9662FF442D390E72A6614BC4D8188688FF9398A77F95797B4D8D94D64703B7B699239BB467E57683732F7E6F08F9216A8C
- '%TEMP%\5896.tmp' --ping<Full path to file> 1B4A454185F40D8855DEDE711F1DDD9662FF442D390E72A6614BC4D8188688FF9398A77F95797B4D8D94D64703B7B699239BB467E57683732F7E6F08F9216A8C' (with hidden window)