Technical Information
- %TEMP%\130e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\130e.tmp' --ping<Full path to file> CF74CC81321754A570F6C0E5E141228A5F83AF97AFE3F3E81CCA59A3818805385476B1B1B0275063285038B8147CD22A79C59957E09917BD2FE485C6C7BDDABF
- '%TEMP%\130e.tmp' --ping<Full path to file> CF74CC81321754A570F6C0E5E141228A5F83AF97AFE3F3E81CCA59A3818805385476B1B1B0275063285038B8147CD22A79C59957E09917BD2FE485C6C7BDDABF' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"