Technical Information
- %TEMP%\1a5.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1a5.tmp' --ping<Full path to file> 8C48B06A12C716DCF384B04852DEC3DD015FD588D496A896610925339F37A17FC781F8A5402F879787B6DBC138963850A5DB9295844D57BF99CB7C13D58F32E9
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\1a5.tmp' --ping<Full path to file> 8C48B06A12C716DCF384B04852DEC3DD015FD588D496A896610925339F37A17FC781F8A5402F879787B6DBC138963850A5DB9295844D57BF99CB7C13D58F32E9' (with hidden window)