Technical Information
- %TEMP%\4e22.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\4e22.tmp' --ping<Full path to file> 8B084EEB6AE50BC14A61C6C060BAD93613B6592BDA7022092AF7107B7FDC309856F4AE892383BB2FE46A97F620DAE28A2660C1E5748D16F433B900F22E7870CA
- '%TEMP%\4e22.tmp' --ping<Full path to file> 8B084EEB6AE50BC14A61C6C060BAD93613B6592BDA7022092AF7107B7FDC309856F4AE892383BB2FE46A97F620DAE28A2660C1E5748D16F433B900F22E7870CA' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"