Technical Information
- %TEMP%\d73b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\d73b.tmp' --ping<Full path to file> A21C58177FFD5BBE5B87EBBE9195366361EA235BAABCB338C10D9B3670EBEDBED292671BC2888478B58FA07913D371CE0E9EB73BA8EE24B60FF9EEDA5D14A353
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\d73b.tmp' --ping<Full path to file> A21C58177FFD5BBE5B87EBBE9195366361EA235BAABCB338C10D9B3670EBEDBED292671BC2888478B58FA07913D371CE0E9EB73BA8EE24B60FF9EEDA5D14A353' (with hidden window)