Technical Information
- %TEMP%\425c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\425c.tmp' --ping<Full path to file> F290AC25E67947DA7923302F086A5E31BA49E05ADD67A88FB2E9D972EF0E5800AA20D165E1A5D9F2AC50AB96D831D778919D1C2E1B3D90ECBF60A4D1A9AFA905
- '%TEMP%\425c.tmp' --ping<Full path to file> F290AC25E67947DA7923302F086A5E31BA49E05ADD67A88FB2E9D972EF0E5800AA20D165E1A5D9F2AC50AB96D831D778919D1C2E1B3D90ECBF60A4D1A9AFA905' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"