Technical Information
- %TEMP%\1e77.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1e77.tmp' --ping<Full path to file> 492A6770BFEE11A5E475B79AE88AEEDB7025D96BB42744D84B5E86AA8C0F7EF771652B4CDAC17615239F99AAB929E063EEA7628EBE2CEFADCDE7B8060928D99F
- '%TEMP%\1e77.tmp' --ping<Full path to file> 492A6770BFEE11A5E475B79AE88AEEDB7025D96BB42744D84B5E86AA8C0F7EF771652B4CDAC17615239F99AAB929E063EEA7628EBE2CEFADCDE7B8060928D99F' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"