Technical Information
- %TEMP%\1d7d.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1d7d.tmp' --ping<Full path to file> F7EC6374987872259720098F1DB56B446F102B088093866DEFF8D9E8F47D0AB2F3D9C358A4F8CB5AA384EFD2781D520953D8B3A30AF9EDECC12D654BB201A8BC
- '%TEMP%\1d7d.tmp' --ping<Full path to file> F7EC6374987872259720098F1DB56B446F102B088093866DEFF8D9E8F47D0AB2F3D9C358A4F8CB5AA384EFD2781D520953D8B3A30AF9EDECC12D654BB201A8BC' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"