Technical Information
- %TEMP%\894b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\894b.tmp' --ping<Full path to file> 66ED09CC922FB2174096DE0A68D0CA69D175B87474BB09E9566EC2F5E7FC83828E1B506D178757C98F659B70257B96E164E4464D48FD6B81FC97B69B10107AE1
- '%TEMP%\894b.tmp' --ping<Full path to file> 66ED09CC922FB2174096DE0A68D0CA69D175B87474BB09E9566EC2F5E7FC83828E1B506D178757C98F659B70257B96E164E4464D48FD6B81FC97B69B10107AE1' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"