Technical Information
- %TEMP%\d5a6.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\d5a6.tmp' --ping<Full path to file> 7174BF88B6CE114FF470E627E3CAAEF3E745CA57366EAD2706B9383C8F9079FF0B2CF069FF505E1BA49A6980575A665DC8424DFB53D2EBB38F2CC2D756C059AC
- '%TEMP%\d5a6.tmp' --ping<Full path to file> 7174BF88B6CE114FF470E627E3CAAEF3E745CA57366EAD2706B9383C8F9079FF0B2CF069FF505E1BA49A6980575A665DC8424DFB53D2EBB38F2CC2D756C059AC' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"