Technical Information
- %TEMP%\5480.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5480.tmp' --ping<Full path to file> 1814A736BFFED62E2BC601AA1DA3538271D4CB236CDD09FE4E23B38D76D467F2F55AC3011D1D5CFBAAD8971AC4BEB7C755BFB11310BD8AA983E657DDA48A8A33
- '%TEMP%\5480.tmp' --ping<Full path to file> 1814A736BFFED62E2BC601AA1DA3538271D4CB236CDD09FE4E23B38D76D467F2F55AC3011D1D5CFBAAD8971AC4BEB7C755BFB11310BD8AA983E657DDA48A8A33' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"