Technical Information
- %TEMP%\4134.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\4134.tmp' --ping<Full path to file> C61B970BBAD5A302A2D03214E84DDA6116758FB43FF3C53C0EB10D145033F59A79B860EF86C338E72B3868E77A00E9B71ED5D7AD3B081DDC90E2DD165FF778A0
- '%TEMP%\4134.tmp' --ping<Full path to file> C61B970BBAD5A302A2D03214E84DDA6116758FB43FF3C53C0EB10D145033F59A79B860EF86C338E72B3868E77A00E9B71ED5D7AD3B081DDC90E2DD165FF778A0' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"