Technical Information
- %TEMP%\285a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\285a.tmp' --ping<Full path to file> 69F2726B4139301D4E3D0A59578253070EA3D1B2E4429ECE4981538CEAAD678CE6751E58E3EB84C25A57B75B01B065357CD4A626715F63A8E5C8C0815B56BCAD
- '%TEMP%\285a.tmp' --ping<Full path to file> 69F2726B4139301D4E3D0A59578253070EA3D1B2E4429ECE4981538CEAAD678CE6751E58E3EB84C25A57B75B01B065357CD4A626715F63A8E5C8C0815B56BCAD' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"