Technical Information
- %TEMP%\110a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\110a.tmp' --ping<Full path to file> D419139AB7D8C956C88E2651E83F2918AAFB8E8BF4E10A2C8CE5FE7AB552BB0A5FF94FE4F00C4A7EC7922C9597E34FD32709E1F35F274B09978770969DC8190A
- '%TEMP%\110a.tmp' --ping<Full path to file> D419139AB7D8C956C88E2651E83F2918AAFB8E8BF4E10A2C8CE5FE7AB552BB0A5FF94FE4F00C4A7EC7922C9597E34FD32709E1F35F274B09978770969DC8190A' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"