Technical Information
- %TEMP%\7b28.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\7b28.tmp' --ping<Full path to file> 0765B4C1BB639EB518636CD299EFA297E412E117C7FB4551833109DC969D0443CF76A022BBBFB9F5D18CE6265620FE8934788E1E5BC20E43EE0B566D6568897E
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\7b28.tmp' --ping<Full path to file> 0765B4C1BB639EB518636CD299EFA297E412E117C7FB4551833109DC969D0443CF76A022BBBFB9F5D18CE6265620FE8934788E1E5BC20E43EE0B566D6568897E' (with hidden window)