Technical Information
- %TEMP%\c928.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\c928.tmp' --ping<Full path to file> 24157D909983639CD28191E9DEBC7B9F4A429128CF8C20CCDC9EA77310EA3CE08FD3CE8017A6D37379C903572A5378847086C83ADCA603D371E4570A50A1F08F
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\c928.tmp' --ping<Full path to file> 24157D909983639CD28191E9DEBC7B9F4A429128CF8C20CCDC9EA77310EA3CE08FD3CE8017A6D37379C903572A5378847086C83ADCA603D371E4570A50A1F08F' (with hidden window)