Technical Information
- %TEMP%\2878.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2878.tmp' --ping<Full path to file> 748F11A3E3FE2D93DDE9ABF5A2FBA425751AC6C4FAB1CCE2EBCEC9B86F73A5C236BECA726329F9637F136A870EF71246BCF39F2E1D25ECB93ED14D796F2BDE98
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\2878.tmp' --ping<Full path to file> 748F11A3E3FE2D93DDE9ABF5A2FBA425751AC6C4FAB1CCE2EBCEC9B86F73A5C236BECA726329F9637F136A870EF71246BCF39F2E1D25ECB93ED14D796F2BDE98' (with hidden window)