Technical Information
- %TEMP%\f563.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f563.tmp' --ping<Full path to file> 1745BD79DE11D0F8670132E9C59C8D3629B2E3025A2D3DDC922DBC139E248BC60D61FB2B3F55AE45E8406567744657B00AF848AA97C49DC3188ADEC90D6C1652
- '%TEMP%\f563.tmp' --ping<Full path to file> 1745BD79DE11D0F8670132E9C59C8D3629B2E3025A2D3DDC922DBC139E248BC60D61FB2B3F55AE45E8406567744657B00AF848AA97C49DC3188ADEC90D6C1652' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"