Technical Information
- %TEMP%\d42.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\d42.tmp' --ping<Full path to file> 0031265836F5BE21085ABA328A4CEA31274EFCF773C4A1721967FD067450C6BB282DD1B1095AA1C4D4848E2E79F9B28EE14F66478B07A05120DF896A108C81DC
- '%TEMP%\d42.tmp' --ping<Full path to file> 0031265836F5BE21085ABA328A4CEA31274EFCF773C4A1721967FD067450C6BB282DD1B1095AA1C4D4848E2E79F9B28EE14F66478B07A05120DF896A108C81DC' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"