Technical Information
- %TEMP%\eb07.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\eb07.tmp' --ping<Full path to file> 4E39EC8539E16E780F63C5D6238EE3EF05AA3E0B333118912D8135309D7970C92749D167756A511C1489F895C04FEB3DA9AD57E8E61CDF485C7ECAB0D4C32E39
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\eb07.tmp' --ping<Full path to file> 4E39EC8539E16E780F63C5D6238EE3EF05AA3E0B333118912D8135309D7970C92749D167756A511C1489F895C04FEB3DA9AD57E8E61CDF485C7ECAB0D4C32E39' (with hidden window)