Technical Information
- %TEMP%\7d0b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\7d0b.tmp' --ping<Full path to file> 5412AC489F987DCE64FF181A145C117729CBD37D851B5EB4C8D1AADBD824AF751F5A0913DD8EC6A12A875CF8E945E65F8B54DE3F0E8AE0E56C6FCE41E185811B
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\7d0b.tmp' --ping<Full path to file> 5412AC489F987DCE64FF181A145C117729CBD37D851B5EB4C8D1AADBD824AF751F5A0913DD8EC6A12A875CF8E945E65F8B54DE3F0E8AE0E56C6FCE41E185811B' (with hidden window)