Technical Information
- %TEMP%\5dc2.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5dc2.tmp' --ping<Full path to file> 2D7396CA4E333F3015E90E83DC2CDCAA2503EF2D712CA6B925D07BF0C1CFC932046C448034E118EE30AFF963DE9E5CE56B7FFC1F995BE0537AC8D16E5E1758B9
- '%TEMP%\5dc2.tmp' --ping<Full path to file> 2D7396CA4E333F3015E90E83DC2CDCAA2503EF2D712CA6B925D07BF0C1CFC932046C448034E118EE30AFF963DE9E5CE56B7FFC1F995BE0537AC8D16E5E1758B9' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"