Technical Information
- %TEMP%\3abe.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3abe.tmp' --ping<Full path to file> 7C8DBB16A278580FC44E20DC579D1628C92FBD8A72ADFA9E2CF9EDA7F85A21FBCE9F1BA3B0341E0461805D65008E17D8779B236CA4480B98EE7430006F44C301
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\3abe.tmp' --ping<Full path to file> 7C8DBB16A278580FC44E20DC579D1628C92FBD8A72ADFA9E2CF9EDA7F85A21FBCE9F1BA3B0341E0461805D65008E17D8779B236CA4480B98EE7430006F44C301' (with hidden window)