Technical Information
- %TEMP%\513b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\513b.tmp' --ping<Full path to file> 688121A57E0D43EE84C219A47E2FD08EF7B8E69BA51855595975E4CED71931B9CBDF723D51D9295BD63CF8EC4285485EEDA8A4BA843BAD1702B94F9915E6AE5E
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\513b.tmp' --ping<Full path to file> 688121A57E0D43EE84C219A47E2FD08EF7B8E69BA51855595975E4CED71931B9CBDF723D51D9295BD63CF8EC4285485EEDA8A4BA843BAD1702B94F9915E6AE5E' (with hidden window)