Technical Information
- %TEMP%\e761.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\e761.tmp' --ping<Full path to file> 0C13540A794C21741F66F18FA9A7D0BAD1B8914CCB27530CD60787A1DA873FE2B641A3C416226599354A7AAC17718FDE530DE0C11B4E3CAC8A71577E5C3446BA
- '%TEMP%\e761.tmp' --ping<Full path to file> 0C13540A794C21741F66F18FA9A7D0BAD1B8914CCB27530CD60787A1DA873FE2B641A3C416226599354A7AAC17718FDE530DE0C11B4E3CAC8A71577E5C3446BA' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"