Technical Information
- %TEMP%\5b4f.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5b4f.tmp' --ping<Full path to file> 2CACED7FFD24698B825F2BA3EC8DF4E021EEABC92E5BCBE96AB19D5EA8E5214C56B848730EF6439FFA671AC5755682773C70E2D48EE64FD8669E4DE5AE3F0B09
- '%TEMP%\5b4f.tmp' --ping<Full path to file> 2CACED7FFD24698B825F2BA3EC8DF4E021EEABC92E5BCBE96AB19D5EA8E5214C56B848730EF6439FFA671AC5755682773C70E2D48EE64FD8669E4DE5AE3F0B09' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"