Technical Information
- %TEMP%\6a75.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\6a75.tmp' --ping<Full path to file> 19F91B132F75724C24BBC449A5EBD192E110C873C6CE657A03611D68F53DF1C896B555A3AD0F844633182A3F1E39C10AE9D17E22E8FAB672B4D592E37DEE5ABB
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\6a75.tmp' --ping<Full path to file> 19F91B132F75724C24BBC449A5EBD192E110C873C6CE657A03611D68F53DF1C896B555A3AD0F844633182A3F1E39C10AE9D17E22E8FAB672B4D592E37DEE5ABB' (with hidden window)