Technical Information
- %TEMP%\19c5.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\19c5.tmp' --ping<Full path to file> 319871DA72714A61769A0F4F59374D4A1A1C0D473D6D8B0237064CE2697B89700A4FB59241069F717A6104B348CCDDE1243E4419E891CED22EE28D9DA7CCCF1C
- '%TEMP%\19c5.tmp' --ping<Full path to file> 319871DA72714A61769A0F4F59374D4A1A1C0D473D6D8B0237064CE2697B89700A4FB59241069F717A6104B348CCDDE1243E4419E891CED22EE28D9DA7CCCF1C' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"