Technical Information
- %TEMP%\a553.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\a553.tmp' --ping<Full path to file> 6C74322E6EF4556BFEE37BCE3B73412D74A59B04EC498CC44DEBF48D840F05D86303E5DB905CC205292BEBED3C9CC4E0227021996D5665B3F354CA34FD55DD78
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\a553.tmp' --ping<Full path to file> 6C74322E6EF4556BFEE37BCE3B73412D74A59B04EC498CC44DEBF48D840F05D86303E5DB905CC205292BEBED3C9CC4E0227021996D5665B3F354CA34FD55DD78' (with hidden window)