Technical Information
- %TEMP%\be74.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\be74.tmp' --ping<Full path to file> 8D2CEA7F9235A5DC2C161C76327A62D94463963CF5BCF0C68F899412090637DCA85835E343FE4B9C1025F288B7175803346F5DE96B99D0CD2A09A50CD17C0EBC
- '%TEMP%\be74.tmp' --ping<Full path to file> 8D2CEA7F9235A5DC2C161C76327A62D94463963CF5BCF0C68F899412090637DCA85835E343FE4B9C1025F288B7175803346F5DE96B99D0CD2A09A50CD17C0EBC' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"