Technical Information
- %TEMP%\6a85.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\6a85.tmp' --ping<Full path to file> 7D509779E6E15DE6E897B3AEC955F45128270C5C0BA51565A00DBC23DE73B3EADE5F5FA9E38F16E14A4CC38607D58B5697E790D1F623769966ABA13AD0129C3D
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\6a85.tmp' --ping<Full path to file> 7D509779E6E15DE6E897B3AEC955F45128270C5C0BA51565A00DBC23DE73B3EADE5F5FA9E38F16E14A4CC38607D58B5697E790D1F623769966ABA13AD0129C3D' (with hidden window)