Technical Information
- %TEMP%\7a2e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\7a2e.tmp' --ping<Full path to file> 5B259A1CCA2A6241DA9A88305899A1A10FB3EB312AA4C853E7D201AB78F287E7887FBF525ADBEAA9CCF9DE8E3169CFBC96C840AF4FE32E08F24328567D57228E
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\7a2e.tmp' --ping<Full path to file> 5B259A1CCA2A6241DA9A88305899A1A10FB3EB312AA4C853E7D201AB78F287E7887FBF525ADBEAA9CCF9DE8E3169CFBC96C840AF4FE32E08F24328567D57228E' (with hidden window)