Technical Information
- %TEMP%\2d6b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2d6b.tmp' --ping<Full path to file> 6BF5BE6DC2BF68D4DCCB07030F59472067831ADFC432127E03CD7754FF6864094EE57BFEA0A71B0A51FF8053E6325C682A9B9B8194091D1A2619D569207765E6
- '%TEMP%\2d6b.tmp' --ping<Full path to file> 6BF5BE6DC2BF68D4DCCB07030F59472067831ADFC432127E03CD7754FF6864094EE57BFEA0A71B0A51FF8053E6325C682A9B9B8194091D1A2619D569207765E6' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"