Technical Information
- %TEMP%\a3ae.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\a3ae.tmp' --ping<Full path to file> 2FCCA5005084D4E0D1B79A302EA593D64DDDD389954C11C26DB328B86583DDC0A81F9A8ABD693A8760B64A0F43C714B02FC0E6129312B66A838355DF0C278207
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\a3ae.tmp' --ping<Full path to file> 2FCCA5005084D4E0D1B79A302EA593D64DDDD389954C11C26DB328B86583DDC0A81F9A8ABD693A8760B64A0F43C714B02FC0E6129312B66A838355DF0C278207' (with hidden window)