Technical Information
- %TEMP%\c254.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\c254.tmp' --ping<Full path to file> 37E42E325FA018853D0BC0618B03AD25C55F7C06E5EC8DB807226B8757CF1A515EAF7FC07F13836AE3C31D89AE23F0D92F2C83B06B0C5CA0688093470568AF50
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\c254.tmp' --ping<Full path to file> 37E42E325FA018853D0BC0618B03AD25C55F7C06E5EC8DB807226B8757CF1A515EAF7FC07F13836AE3C31D89AE23F0D92F2C83B06B0C5CA0688093470568AF50' (with hidden window)