Technical Information
- %TEMP%\4886.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\4886.tmp' --ping<Full path to file> ACA93C05DCC9FF00AD999122DEED9E4114E07368D2FCB8885EB8C2B0FA294660B766F8A060CE2D8F5E56E3E480FA6772A47BFB80511EE2371ACFDE96BCAE37FF
- '%TEMP%\4886.tmp' --ping<Full path to file> ACA93C05DCC9FF00AD999122DEED9E4114E07368D2FCB8885EB8C2B0FA294660B766F8A060CE2D8F5E56E3E480FA6772A47BFB80511EE2371ACFDE96BCAE37FF' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"