Technical Information
- %TEMP%\fc0a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\fc0a.tmp' --ping<Full path to file> 75E7C063D38490857DC99A42907B0C6EC2138ECE261C616FC4748C3F89F7A2E36821D60A02A3060825677477AD0F69298E73F8142279BB471A0FBC63AC3EEECF
- '%TEMP%\fc0a.tmp' --ping<Full path to file> 75E7C063D38490857DC99A42907B0C6EC2138ECE261C616FC4748C3F89F7A2E36821D60A02A3060825677477AD0F69298E73F8142279BB471A0FBC63AC3EEECF' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"