Technical Information
- %TEMP%\d854.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\d854.tmp' --ping<Full path to file> EAB8D53CD912FDEF31FB6F971D73BAFE10D305E619444450E5542B7434F995233966BF0B5A65938799D4C5EFECAE593FAA542C0254A73CC49DFC4CAD12749452
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\d854.tmp' --ping<Full path to file> EAB8D53CD912FDEF31FB6F971D73BAFE10D305E619444450E5542B7434F995233966BF0B5A65938799D4C5EFECAE593FAA542C0254A73CC49DFC4CAD12749452' (with hidden window)