Technical Information
- %TEMP%\fb9d.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\fb9d.tmp' --ping<Full path to file> 06D8C30A2B53645E2E4707E58E033E8BE6D0AD98B652A6A92E0447EB36BCE2243FDBB42A2E6063DBDFF240A04A891D79E9AFF7B9738D4E2247A01524F0028B03
- '%TEMP%\fb9d.tmp' --ping<Full path to file> 06D8C30A2B53645E2E4707E58E033E8BE6D0AD98B652A6A92E0447EB36BCE2243FDBB42A2E6063DBDFF240A04A891D79E9AFF7B9738D4E2247A01524F0028B03' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"