Technical Information
- %TEMP%\781c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\781c.tmp' --ping<Full path to file> 402B11C313A08C707629B205E33BFFD8F4FDCDF65A47771D15B645E4AFBA3B3C3426D49D258900D65096C7E41069234C73F250F8B5C4C2A4941293FED73AB2E3
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\781c.tmp' --ping<Full path to file> 402B11C313A08C707629B205E33BFFD8F4FDCDF65A47771D15B645E4AFBA3B3C3426D49D258900D65096C7E41069234C73F250F8B5C4C2A4941293FED73AB2E3' (with hidden window)