Technical Information
- %TEMP%\112f.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\112f.tmp' --ping<Full path to file> D03AB3BDD6971E3F48EEBDDBEC685D5D86F8DC2C0A0892511DC1DB00555C4CDFA762031A4DF2333463B05F0F4A437D2315561EFB37C056AC20D33B4BCCCEE971
- '%TEMP%\112f.tmp' --ping<Full path to file> D03AB3BDD6971E3F48EEBDDBEC685D5D86F8DC2C0A0892511DC1DB00555C4CDFA762031A4DF2333463B05F0F4A437D2315561EFB37C056AC20D33B4BCCCEE971' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"