Technical Information
- %TEMP%\a7ba.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\a7ba.tmp' --ping<Full path to file> 0763C6033FE955D37E64A81D2EEEFD9BD2DFD407EAAE469829BAC0519251B0B0855A40115B0D98554B46A8D3A3BC59F3247A1505504E006E8804F100CFFA4339
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\a7ba.tmp' --ping<Full path to file> 0763C6033FE955D37E64A81D2EEEFD9BD2DFD407EAAE469829BAC0519251B0B0855A40115B0D98554B46A8D3A3BC59F3247A1505504E006E8804F100CFFA4339' (with hidden window)