Technical Information
- %TEMP%\2f49.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2f49.tmp' --ping<Full path to file> A92CCFC075B428516741A527A9404D1C401165ED9FF9F4C91C1DB145B3D18222DB50094438C7B904146B0385D7DEEE2162CCCEE242B6C9BBB37E8AD02F7A5A98
- '%TEMP%\2f49.tmp' --ping<Full path to file> A92CCFC075B428516741A527A9404D1C401165ED9FF9F4C91C1DB145B3D18222DB50094438C7B904146B0385D7DEEE2162CCCEE242B6C9BBB37E8AD02F7A5A98' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"