Technical Information
- %TEMP%\1280.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1280.tmp' --ping<Full path to file> 792B24E7D6DA541349DF68AA21D564A49C3453E5DDE19938E004546BCDC884A5083B6FF9DC74F9A0F83EC2F7EBE849432AEF2CC4BCD575327F407008FB3DBEE0
- '%TEMP%\1280.tmp' --ping<Full path to file> 792B24E7D6DA541349DF68AA21D564A49C3453E5DDE19938E004546BCDC884A5083B6FF9DC74F9A0F83EC2F7EBE849432AEF2CC4BCD575327F407008FB3DBEE0' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"