Technical Information
- %TEMP%\36b9.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\36b9.tmp' --ping<Full path to file> 2A824AEEA2184FC8E9B74F484315948F1D5841BC4471F17330DE3AFD053C45EB7A5B6A6C106069A7478CBECB42995DBA8843174A93557354A248770BA7FC124E
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\36b9.tmp' --ping<Full path to file> 2A824AEEA2184FC8E9B74F484315948F1D5841BC4471F17330DE3AFD053C45EB7A5B6A6C106069A7478CBECB42995DBA8843174A93557354A248770BA7FC124E' (with hidden window)