Technical Information
- %TEMP%\3513.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3513.tmp' --ping<Full path to file> A91BF04B932050653A9D0EB98ABA3B5D1B90C0B24606F0B083B201B52C6A6F33D33CEFDEA5B51ED37B1733243C71B39088F77A04AC63F69FA4BED831C39D45C5
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\3513.tmp' --ping<Full path to file> A91BF04B932050653A9D0EB98ABA3B5D1B90C0B24606F0B083B201B52C6A6F33D33CEFDEA5B51ED37B1733243C71B39088F77A04AC63F69FA4BED831C39D45C5' (with hidden window)