Technical Information
- %TEMP%\5a4f.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5a4f.tmp' --ping<Full path to file> EB2886A2040F99127C97E3CA546592407AE428F0C216C11F2BC422E885171E0980D18CA69F4A69D96B0B89FB8C0E962D211AECC54CDEC7942355F2D09ABA5A1D
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\5a4f.tmp' --ping<Full path to file> EB2886A2040F99127C97E3CA546592407AE428F0C216C11F2BC422E885171E0980D18CA69F4A69D96B0B89FB8C0E962D211AECC54CDEC7942355F2D09ABA5A1D' (with hidden window)