Technical Information
- %TEMP%\d72d.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\d72d.tmp' --ping<Full path to file> 2EA2E4C03329626268FEF1EBDA048EBB84F7665F0C1E9F90CAC8182EFD8537E0E12E85D0B0BC83FBD0D1CB213931385593BD3F407AA6B322BB58C696F0E97D21
- '%TEMP%\d72d.tmp' --ping<Full path to file> 2EA2E4C03329626268FEF1EBDA048EBB84F7665F0C1E9F90CAC8182EFD8537E0E12E85D0B0BC83FBD0D1CB213931385593BD3F407AA6B322BB58C696F0E97D21' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"