Technical Information
- %TEMP%\3c15.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3c15.tmp' --ping<Full path to file> E0A8DFFB12B98227C1A3CAC7342AAF2065CA305584731D58074A6B4A85D94CE2447DAC7B3BD0793B6E88E021213821E3319DEF0FA92CAC5231B67987DD9A1F4C
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\3c15.tmp' --ping<Full path to file> E0A8DFFB12B98227C1A3CAC7342AAF2065CA305584731D58074A6B4A85D94CE2447DAC7B3BD0793B6E88E021213821E3319DEF0FA92CAC5231B67987DD9A1F4C' (with hidden window)