Technical Information
- %TEMP%\dad4.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\dad4.tmp' --ping<Full path to file> 2E0E1A9AAF68ED0F908A03C1B649E4E2425DDF759C04E135B396C007BC637F52C63288E4807C9C6B8E4D400601B6C95DA39C2E2C76575FC958F947CD54E077C7
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\dad4.tmp' --ping<Full path to file> 2E0E1A9AAF68ED0F908A03C1B649E4E2425DDF759C04E135B396C007BC637F52C63288E4807C9C6B8E4D400601B6C95DA39C2E2C76575FC958F947CD54E077C7' (with hidden window)