Technical Information
- %TEMP%\2a1f.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2a1f.tmp' --ping<Full path to file> 6968AC2A73B9E75FC2FEC980EE361EF914702E8CDF711E2AC4E3E01CDFFA9270978FFC93420BB7027C0028672CDC7094498D109CF7AC95BDCB0D081465840557
- '%TEMP%\2a1f.tmp' --ping<Full path to file> 6968AC2A73B9E75FC2FEC980EE361EF914702E8CDF711E2AC4E3E01CDFFA9270978FFC93420BB7027C0028672CDC7094498D109CF7AC95BDCB0D081465840557' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"