Technical Information
- %TEMP%\3ffc.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3ffc.tmp' --ping<Full path to file> 298E1E4EDCFAF91F8EC5E3C2063FD2B84A44C1DD77C5959DA292E04143A03164F2888B0B7164DF2DA88E62DCD01F33A45C01C4865B5E1146AE91676D665CFA3A
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\3ffc.tmp' --ping<Full path to file> 298E1E4EDCFAF91F8EC5E3C2063FD2B84A44C1DD77C5959DA292E04143A03164F2888B0B7164DF2DA88E62DCD01F33A45C01C4865B5E1146AE91676D665CFA3A' (with hidden window)