Technical Information
- %TEMP%\1ad0.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1ad0.tmp' --ping<Full path to file> B633758B285A93EC20766AA59FEC419FD082A0891694261A95E226A41DC35D22B279588DCC707D7E2DFA9A37B06D38B82F9039F754E227E7D0A58611A83B61C7
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\1ad0.tmp' --ping<Full path to file> B633758B285A93EC20766AA59FEC419FD082A0891694261A95E226A41DC35D22B279588DCC707D7E2DFA9A37B06D38B82F9039F754E227E7D0A58611A83B61C7' (with hidden window)