Technical Information
- %TEMP%\5f77.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5f77.tmp' --ping<Full path to file> DA668BF8119B344F646D6F7EE1CBD832FDDA84FEBAB8685D241DB30912A25E793A4C0B7517101A604967648A54A5CB61FF0DEE78EB0E14A6F9B4538A99AF4995
- '%TEMP%\5f77.tmp' --ping<Full path to file> DA668BF8119B344F646D6F7EE1CBD832FDDA84FEBAB8685D241DB30912A25E793A4C0B7517101A604967648A54A5CB61FF0DEE78EB0E14A6F9B4538A99AF4995' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"