Technical Information
- %TEMP%\7e14.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\7e14.tmp' --ping<Full path to file> FFAA570A22E130AC0587886C65BFD327CA965AB25F41D2460E65A929D9EECCBDCB71D3CCB7A7DCFE705AE8FB2176DEE2DFF675204C717717E145BC8B8AD3EE0F
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\7e14.tmp' --ping<Full path to file> FFAA570A22E130AC0587886C65BFD327CA965AB25F41D2460E65A929D9EECCBDCB71D3CCB7A7DCFE705AE8FB2176DEE2DFF675204C717717E145BC8B8AD3EE0F' (with hidden window)