Technical Information
- %TEMP%\51b7.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\51b7.tmp' --ping<Full path to file> 484A0C1B4EC92E82B296179D862F5343949FF15A0D19B17438969171E304BF7C9391C83F936E31A5EBEA3227A31CF667C8A22D67DE027E66ED995F1FD6B1B0DA
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\51b7.tmp' --ping<Full path to file> 484A0C1B4EC92E82B296179D862F5343949FF15A0D19B17438969171E304BF7C9391C83F936E31A5EBEA3227A31CF667C8A22D67DE027E66ED995F1FD6B1B0DA' (with hidden window)