Technical Information
- %TEMP%\620c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\620c.tmp' --ping<Full path to file> CBC674A6443630CEA675D97EC0F8C7275594530542B713484DFB8776B60C2B23E6BDFC325ADD8A5759F64FEF2E04819020EF6347CE7D988C1B5B704D88399A7A
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\620c.tmp' --ping<Full path to file> CBC674A6443630CEA675D97EC0F8C7275594530542B713484DFB8776B60C2B23E6BDFC325ADD8A5759F64FEF2E04819020EF6347CE7D988C1B5B704D88399A7A' (with hidden window)