Technical Information
- %TEMP%\ddef.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\ddef.tmp' --ping<Full path to file> A5B5A9000E9DF121D683E513BFDEB98C450CB9F87CD93B44D30E1801FB66A48F67651EEDF53EBECE7C2A2D647EAD9C6925B37F8762476400200374B4D06E6F05
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\ddef.tmp' --ping<Full path to file> A5B5A9000E9DF121D683E513BFDEB98C450CB9F87CD93B44D30E1801FB66A48F67651EEDF53EBECE7C2A2D647EAD9C6925B37F8762476400200374B4D06E6F05' (with hidden window)