Technical Information
- %TEMP%\146a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\146a.tmp' --ping<Full path to file> F7C54F2289D90D1894A0CFF122A7D5365E8611872C7FF4E54464A197B917686BA63FC28B828DFEAA690FA96286F0BA684846D962530DA8CBC8C801BB12B13E19
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\146a.tmp' --ping<Full path to file> F7C54F2289D90D1894A0CFF122A7D5365E8611872C7FF4E54464A197B917686BA63FC28B828DFEAA690FA96286F0BA684846D962530DA8CBC8C801BB12B13E19' (with hidden window)