Technical Information
- %TEMP%\b135.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\b135.tmp' --ping<Full path to file> 9626A0F411AAD50EB6A7D3B2E56DF542336B4727D1602A12852D85413FBBA66E1FAFA3B82723C52D9C928F3E16A280F2C56383C6562265653A3A2352E2E77059
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\b135.tmp' --ping<Full path to file> 9626A0F411AAD50EB6A7D3B2E56DF542336B4727D1602A12852D85413FBBA66E1FAFA3B82723C52D9C928F3E16A280F2C56383C6562265653A3A2352E2E77059' (with hidden window)