Technical Information
- %TEMP%\1831.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1831.tmp' --ping<Full path to file> 5C9819F2976E1C53FAE743ABBB8D265B1B05D8A2322316CB60AC542C8B8694B420DF5FFD2F07C482CC9F87B3B1611A0A8F61DD7ACA99A389EAE34321A395949B
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\1831.tmp' --ping<Full path to file> 5C9819F2976E1C53FAE743ABBB8D265B1B05D8A2322316CB60AC542C8B8694B420DF5FFD2F07C482CC9F87B3B1611A0A8F61DD7ACA99A389EAE34321A395949B' (with hidden window)