Technical Information
- %TEMP%\7c6f.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\7c6f.tmp' --ping<Full path to file> 48FA25F2AF4136B322DA7A38D463FEE175AE7D430B6F0A341E8CBF9548B97EED029C6EAAD0C26E3A6FD5A1FCBF50B508F15D1394ABD6A580EDB37F2876662D00
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\7c6f.tmp' --ping<Full path to file> 48FA25F2AF4136B322DA7A38D463FEE175AE7D430B6F0A341E8CBF9548B97EED029C6EAAD0C26E3A6FD5A1FCBF50B508F15D1394ABD6A580EDB37F2876662D00' (with hidden window)