Technical Information
- %TEMP%\694d.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\694d.tmp' --ping<Full path to file> E27DF66CDEBDEF52E1BCAE26FD51F894E2F81ECF58E17792D5F274B575B2F0BC8900EE5B21653C1FDA5AAE7A8429D2F4A87F1043E43A6577258857DCD6C363F3
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\694d.tmp' --ping<Full path to file> E27DF66CDEBDEF52E1BCAE26FD51F894E2F81ECF58E17792D5F274B575B2F0BC8900EE5B21653C1FDA5AAE7A8429D2F4A87F1043E43A6577258857DCD6C363F3' (with hidden window)