Technical Information
- %TEMP%\f556.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f556.tmp' --ping<Full path to file> 703BFACD7FD0E970436CA8B69899DAED8842B088A09B722DB498692991FE8C3A45BC86124EA19BAF1E9C1FA49D9C8338246F9F6FA0C5D8269F653DC1215135CA
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\f556.tmp' --ping<Full path to file> 703BFACD7FD0E970436CA8B69899DAED8842B088A09B722DB498692991FE8C3A45BC86124EA19BAF1E9C1FA49D9C8338246F9F6FA0C5D8269F653DC1215135CA' (with hidden window)