Technical Information
- %TEMP%\2e07.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2e07.tmp' --ping<Full path to file> DCFE2DB9C3A1E2F7EA4EFDD28F4FB6618432BCF0CB80DFF3E3578611B4CBFA6C503B3E50B0C82FB17138848B80A8DBA9C767C4A89CCF6391EFF24FB438C00052
- '%TEMP%\2e07.tmp' --ping<Full path to file> DCFE2DB9C3A1E2F7EA4EFDD28F4FB6618432BCF0CB80DFF3E3578611B4CBFA6C503B3E50B0C82FB17138848B80A8DBA9C767C4A89CCF6391EFF24FB438C00052' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"