Technical Information
- %TEMP%\a0a2.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\a0a2.tmp' --ping<Full path to file> AFF7C9A2832362F229356FB20CACAAEB5219A3C66B14648690AD8D88342FE14CE0F23B688984E07487009A65647D1ED6B2A31C6A55B6FB458B3DA1CABE615CB4
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\a0a2.tmp' --ping<Full path to file> AFF7C9A2832362F229356FB20CACAAEB5219A3C66B14648690AD8D88342FE14CE0F23B688984E07487009A65647D1ED6B2A31C6A55B6FB458B3DA1CABE615CB4' (with hidden window)