Technical Information
- %TEMP%\4acb.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\4acb.tmp' --ping<Full path to file> 0169CE985651B099197804EDCF403C62C3392C6E849998F65B1E6BE028442C41BB3478FBE14FC2B63E4D81FFF26131FD1849388D1DBB993B0A0CA2456DE423A9
- '%TEMP%\4acb.tmp' --ping<Full path to file> 0169CE985651B099197804EDCF403C62C3392C6E849998F65B1E6BE028442C41BB3478FBE14FC2B63E4D81FFF26131FD1849388D1DBB993B0A0CA2456DE423A9' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"