Technical Information
- %TEMP%\3c01.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3c01.tmp' --ping<Full path to file> 8BFFBD44F8C7AA1AFD0F8F08BEE77B4D4B0AB8F0A00B923C69EF10D4B004F06D9E7B03767581A2E2759B0F965DBA68338CDCE7EEAD71649E3CB5CE366A6F1FC1
- '%TEMP%\3c01.tmp' --ping<Full path to file> 8BFFBD44F8C7AA1AFD0F8F08BEE77B4D4B0AB8F0A00B923C69EF10D4B004F06D9E7B03767581A2E2759B0F965DBA68338CDCE7EEAD71649E3CB5CE366A6F1FC1' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"