Technical Information
- %TEMP%\707.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\707.tmp' --ping<Full path to file> D691E6BAC8D09BEE02D52BEFCC5D2B75E4CC8C7472BB27F162BACB7EBA3202E038298478274F692FADA8A5D4E01BF2938AD35B044AF1A39D40CE05D7CB0F9AD2
- '%TEMP%\707.tmp' --ping<Full path to file> D691E6BAC8D09BEE02D52BEFCC5D2B75E4CC8C7472BB27F162BACB7EBA3202E038298478274F692FADA8A5D4E01BF2938AD35B044AF1A39D40CE05D7CB0F9AD2' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"