Technical Information
- %TEMP%\1f81.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1f81.tmp' --ping<Full path to file> 2D9E2ADFF3CC3C25BE7B19625DE74A6E8B3CC4C500C1E0409688AC635FEB182CFEB266881EEE522DFEA194A8ED850B4DE6D4FDC286CA682DFAC20120FAFAE3FC
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\1f81.tmp' --ping<Full path to file> 2D9E2ADFF3CC3C25BE7B19625DE74A6E8B3CC4C500C1E0409688AC635FEB182CFEB266881EEE522DFEA194A8ED850B4DE6D4FDC286CA682DFAC20120FAFAE3FC' (with hidden window)