Technical Information
- %TEMP%\91c7.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\91c7.tmp' --ping<Full path to file> 6FACC2D3115529F54EC9AB7F5DBC228E837264EF6A408A956875164F8D1DE78109A472793969B27943DD566938B69ED3D241C3E8AFCC71AB9061267C48DB984C
- '%TEMP%\91c7.tmp' --ping<Full path to file> 6FACC2D3115529F54EC9AB7F5DBC228E837264EF6A408A956875164F8D1DE78109A472793969B27943DD566938B69ED3D241C3E8AFCC71AB9061267C48DB984C' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"