Technical Information
- %TEMP%\18ea.tmp
- '%TEMP%\18ea.tmp' --ping<Full path to file> FFCE8C6972666E0933D312E202D13C5B9A4E585F4C677FCE0722CE97B68D258C9F35B2BDE29BECB56E2664520665F1805C52AA3652869A3752AE4DA433B35A6D
- '%TEMP%\18ea.tmp' --ping<Full path to file> FFCE8C6972666E0933D312E202D13C5B9A4E585F4C677FCE0722CE97B68D258C9F35B2BDE29BECB56E2664520665F1805C52AA3652869A3752AE4DA433B35A6D' (with hidden window)