Technical Information
- %TEMP%\66b6.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\66b6.tmp' --ping<Full path to file> 9CE221E5EFA70DE5D4DCA593D31ABAF9B0EEF35AEE4DC7BE678B6BA71D7F84395D29AD66C0D1FCAE15C9FF47DC5D02FAD8FF0B42DD61628499CE2F31569E7CCC
- '%TEMP%\66b6.tmp' --ping<Full path to file> 9CE221E5EFA70DE5D4DCA593D31ABAF9B0EEF35AEE4DC7BE678B6BA71D7F84395D29AD66C0D1FCAE15C9FF47DC5D02FAD8FF0B42DD61628499CE2F31569E7CCC' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"