Technical Information
- %TEMP%\32b3.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\32b3.tmp' --ping<Full path to file> 1A6BA4C3577DE76AECD655F70A6A18258A58414E150FAD67F2E0AD838FA8B87CEC90F5346E6E2268BB527467F52AA498A5E1FFDCBF6CE71E01F7253FC08CAA59
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\32b3.tmp' --ping<Full path to file> 1A6BA4C3577DE76AECD655F70A6A18258A58414E150FAD67F2E0AD838FA8B87CEC90F5346E6E2268BB527467F52AA498A5E1FFDCBF6CE71E01F7253FC08CAA59' (with hidden window)