Technical Information
- %TEMP%\be7e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\be7e.tmp' --ping<Full path to file> 164F0F9B8855A66CA53BA5028BDDA396FD38D9825695B5DC0678DBEFC2C84D1EA8DA362A664EC5C0576BA9BF8AA494D6C28D172E3B2EBEBCAE6611DC73A8FCF0
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\be7e.tmp' --ping<Full path to file> 164F0F9B8855A66CA53BA5028BDDA396FD38D9825695B5DC0678DBEFC2C84D1EA8DA362A664EC5C0576BA9BF8AA494D6C28D172E3B2EBEBCAE6611DC73A8FCF0' (with hidden window)