Technical Information
- %TEMP%\6a72.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\6a72.tmp' --ping<Full path to file> B75D668C26B1A7FB8F7E647C8ED389A54BB9433116DB60F89246CB8765E74A1E6D46B2AF9A7A6F23504FF21ADE9D919C1109FAC766668BF4BA0BBBBC9808CF14
- '%TEMP%\6a72.tmp' --ping<Full path to file> B75D668C26B1A7FB8F7E647C8ED389A54BB9433116DB60F89246CB8765E74A1E6D46B2AF9A7A6F23504FF21ADE9D919C1109FAC766668BF4BA0BBBBC9808CF14' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"