Technical Information
- %TEMP%\3d2e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3d2e.tmp' --ping<Full path to file> 4A60B661C5F51E4DE962F24387AC5E2EB2E903785D12EEDC629D15B7459514308F9B3FA2D7665646DFBE07114D37CD5CC46A7B911BBF8B9919ADCBB24497384F
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\3d2e.tmp' --ping<Full path to file> 4A60B661C5F51E4DE962F24387AC5E2EB2E903785D12EEDC629D15B7459514308F9B3FA2D7665646DFBE07114D37CD5CC46A7B911BBF8B9919ADCBB24497384F' (with hidden window)