Technical Information
- %TEMP%\fb5e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\fb5e.tmp' --ping<Full path to file> 3D753C2964FE7D520FCB4EE91D34BD2B8C470B623FBFD43200AB83A347989453FAB95C9E03E9EF91E348094799B77A9F8B7E2862A164635F1BECC756AB2EC92D
- '%TEMP%\fb5e.tmp' --ping<Full path to file> 3D753C2964FE7D520FCB4EE91D34BD2B8C470B623FBFD43200AB83A347989453FAB95C9E03E9EF91E348094799B77A9F8B7E2862A164635F1BECC756AB2EC92D' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"