Technical Information
- %TEMP%\1783.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1783.tmp' --ping<Full path to file> F966A7E30D9A341F82E4A1DCA41C7B36B9D63B8480F1660F84DA9D820A75BD6F665624F8BFB860A7A3BECB4033F476B8915F02FF19F3D335CB69D275B9902168
- '%TEMP%\1783.tmp' --ping<Full path to file> F966A7E30D9A341F82E4A1DCA41C7B36B9D63B8480F1660F84DA9D820A75BD6F665624F8BFB860A7A3BECB4033F476B8915F02FF19F3D335CB69D275B9902168' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"