Technical Information
- %TEMP%\2c5d.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2c5d.tmp' --ping<Full path to file> 5DC2259441150E301EEDBFBC043609ED145948570E07EB52D02C7A175AF1B4B23EF170B1CEE7EB0CC60CE9BB20BED242906C1A2D952B1961E9EC4A55A129E0B5
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\2c5d.tmp' --ping<Full path to file> 5DC2259441150E301EEDBFBC043609ED145948570E07EB52D02C7A175AF1B4B23EF170B1CEE7EB0CC60CE9BB20BED242906C1A2D952B1961E9EC4A55A129E0B5' (with hidden window)