Technical Information
- %TEMP%\7e98.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\7e98.tmp' --ping<Full path to file> 4DF9B51FB075CE2CF68152F9D5485FFA7A1AEBBA9A30ABCB49DFD821A556EC244EF2FE1912D717284A549F945FA211542FC4644FFB999DE854F941C7EBF3A950
- '%TEMP%\7e98.tmp' --ping<Full path to file> 4DF9B51FB075CE2CF68152F9D5485FFA7A1AEBBA9A30ABCB49DFD821A556EC244EF2FE1912D717284A549F945FA211542FC4644FFB999DE854F941C7EBF3A950' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"