Technical Information
- %TEMP%\72b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- DNS ASK ne###.##ficeapps.live.com
- '%TEMP%\72b.tmp' --ping<Full path to file> 7591E0AA1C85B48630918B267A69C1C914A6F548E1AF9ECE0BFEBA29E235A366A40EF2E3EEBDA06FF6BC7EA52C67A20CB107813C813B1AFE8FB2EA6FFDA0A6FF
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\72b.tmp' --ping<Full path to file> 7591E0AA1C85B48630918B267A69C1C914A6F548E1AF9ECE0BFEBA29E235A366A40EF2E3EEBDA06FF6BC7EA52C67A20CB107813C813B1AFE8FB2EA6FFDA0A6FF' (with hidden window)