Technical Information
- %TEMP%\2606.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2606.tmp' --ping<Full path to file> 3F74A495D59144661FB0895F0BDC01CC6E2DD9B173F7712546F4CE1370625307720487B860E5EC9901229537999DF4D82E5888F9726A3EFFCFF040F318B3E816
- '%TEMP%\2606.tmp' --ping<Full path to file> 3F74A495D59144661FB0895F0BDC01CC6E2DD9B173F7712546F4CE1370625307720487B860E5EC9901229537999DF4D82E5888F9726A3EFFCFF040F318B3E816' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"