Technical Information
- %TEMP%\115e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\115e.tmp' --ping<Full path to file> 8500C486AB2F85D93B005407066AA88D37912257D0365D76B708994F2F0DDCF0BFA48915E9BDD314BC9D60DCA5248D29069C962FD3ED340BA4F5C51CF12C14AE
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\115e.tmp' --ping<Full path to file> 8500C486AB2F85D93B005407066AA88D37912257D0365D76B708994F2F0DDCF0BFA48915E9BDD314BC9D60DCA5248D29069C962FD3ED340BA4F5C51CF12C14AE' (with hidden window)