Technical Information
- %TEMP%\4385.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\4385.tmp' --ping<Full path to file> D2C82A02EBCD256681B15E516FE1C4688963C107B65D5E2891D64F6F53523BF954D68C0115863F196A62B3CFD417326D429122171A628B0E3744996F4F294115
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\4385.tmp' --ping<Full path to file> D2C82A02EBCD256681B15E516FE1C4688963C107B65D5E2891D64F6F53523BF954D68C0115863F196A62B3CFD417326D429122171A628B0E3744996F4F294115' (with hidden window)