Technical Information
- %TEMP%\bd6b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\bd6b.tmp' --ping<Full path to file> 87514EF2A2EAFA1539A1DA454B4956EF98D83A083E3147B7904E66C7077C312A3DD8E9821161065026FC5426B592735884754AAE6AB13998D39CA791D6A75515
- '%TEMP%\bd6b.tmp' --ping<Full path to file> 87514EF2A2EAFA1539A1DA454B4956EF98D83A083E3147B7904E66C7077C312A3DD8E9821161065026FC5426B592735884754AAE6AB13998D39CA791D6A75515' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"