Technical Information
- %TEMP%\2145.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2145.tmp' --ping<Full path to file> E8D88D61AF05C813F4C9F24A789DA5421D533D3460AB85A409313726467A69D171F39390EE6BA77C128EAFC7A4B258E429A02C3E1C300CA481E7CF786513E5BB
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\2145.tmp' --ping<Full path to file> E8D88D61AF05C813F4C9F24A789DA5421D533D3460AB85A409313726467A69D171F39390EE6BA77C128EAFC7A4B258E429A02C3E1C300CA481E7CF786513E5BB' (with hidden window)