Technical Information
- %TEMP%\3294.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3294.tmp' --ping<Full path to file> 682C1DD1F9414E8282CCB8A92913170F7156DB46A91AD0126E54450631E97B44877FA67AC9103E199A3405937BC9FA6EE52E82EB8154272B343B320C90F97F79
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\3294.tmp' --ping<Full path to file> 682C1DD1F9414E8282CCB8A92913170F7156DB46A91AD0126E54450631E97B44877FA67AC9103E199A3405937BC9FA6EE52E82EB8154272B343B320C90F97F79' (with hidden window)