Technical Information
- %TEMP%\f49b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f49b.tmp' --ping<Full path to file> 01C9A6698E207350B369C75420D3F028267EC627F4A27EA6CEC87072A03F5A058363D2E8F8C5CB9E4F836A84F581A191DABA7A3A8A194FB675B6EBD61308E3DB
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\f49b.tmp' --ping<Full path to file> 01C9A6698E207350B369C75420D3F028267EC627F4A27EA6CEC87072A03F5A058363D2E8F8C5CB9E4F836A84F581A191DABA7A3A8A194FB675B6EBD61308E3DB' (with hidden window)