Technical Information
- %TEMP%\527c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\527c.tmp' --ping<Full path to file> 60EC0FEACB1D85070204CA4556EE54F923C0DAC91E2C66AD6FB7B2A062E12CA6BF6880A2173FD12EF9FE1BE151095C159D5DE5707139A2BBF62FBD26916DB79D
- '%TEMP%\527c.tmp' --ping<Full path to file> 60EC0FEACB1D85070204CA4556EE54F923C0DAC91E2C66AD6FB7B2A062E12CA6BF6880A2173FD12EF9FE1BE151095C159D5DE5707139A2BBF62FBD26916DB79D' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"