Technical Information
- %TEMP%\6e6a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\6e6a.tmp' --ping<Full path to file> 4CC348DB150B5912C61493B7082C48D7B885E9F04E0E5F9F2558E7267CB10E103DE8173F38366CD9E6EB989206B83A4F200D2A01D422A6B2AA11685A1AFB1250
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\6e6a.tmp' --ping<Full path to file> 4CC348DB150B5912C61493B7082C48D7B885E9F04E0E5F9F2558E7267CB10E103DE8173F38366CD9E6EB989206B83A4F200D2A01D422A6B2AA11685A1AFB1250' (with hidden window)