Technical Information
- %TEMP%\fe1d.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\fe1d.tmp' --ping<Full path to file> 860544563826FA839582A3B8F4A8DCDDF83CA8839668B72712514E96BA06861EA1E72190935283452B0F0C5D08DEC27339F433EB45451EFE2B29DF8CE6D03F41
- '%TEMP%\fe1d.tmp' --ping<Full path to file> 860544563826FA839582A3B8F4A8DCDDF83CA8839668B72712514E96BA06861EA1E72190935283452B0F0C5D08DEC27339F433EB45451EFE2B29DF8CE6D03F41' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"