Technical Information
- %TEMP%\4549.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\4549.tmp' --ping<Full path to file> 3D7E096295CB1CA361CB995377F9D6094BFEC42D63BFC03950DE2BA0374CBD3F95BD832EDF5166F0AEBF49A2BBBEC89AB4922F68C93AA7CA0D664DB76596BD3D
- '%TEMP%\4549.tmp' --ping<Full path to file> 3D7E096295CB1CA361CB995377F9D6094BFEC42D63BFC03950DE2BA0374CBD3F95BD832EDF5166F0AEBF49A2BBBEC89AB4922F68C93AA7CA0D664DB76596BD3D' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"