Technical Information
- %TEMP%\b1f0.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\b1f0.tmp' --ping<Full path to file> 1A879E634D652702346738F42C52BA1F7690B9BB6C68F99060A8FEF01D5DDAE940C3072DABA776DB50AFE0C35C4574E85714577E2FA9261AA76BEDFFF3DD7D65
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\b1f0.tmp' --ping<Full path to file> 1A879E634D652702346738F42C52BA1F7690B9BB6C68F99060A8FEF01D5DDAE940C3072DABA776DB50AFE0C35C4574E85714577E2FA9261AA76BEDFFF3DD7D65' (with hidden window)