Technical Information
- %TEMP%\258c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\258c.tmp' --ping<Full path to file> C01EB53BEC06612EDD9F2973DBEAD324BFB7CD5F920177CEA63CFFB43115F09E4A02A317D4FF63280677F365635B9E3EA907ECDAA36F33E47F161DB785E9080A
- '%TEMP%\258c.tmp' --ping<Full path to file> C01EB53BEC06612EDD9F2973DBEAD324BFB7CD5F920177CEA63CFFB43115F09E4A02A317D4FF63280677F365635B9E3EA907ECDAA36F33E47F161DB785E9080A' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"