Technical Information
- %TEMP%\39e8.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\39e8.tmp' --ping<Full path to file> 9DC7050D1C4BF6F2BA9E93182B280F676EE1CD821A96F4C19236538839F45499254048EC574C772C95AB7E3EE6AC16A504B0C6667661E8B18F5CABFC03A2CBB0
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\39e8.tmp' --ping<Full path to file> 9DC7050D1C4BF6F2BA9E93182B280F676EE1CD821A96F4C19236538839F45499254048EC574C772C95AB7E3EE6AC16A504B0C6667661E8B18F5CABFC03A2CBB0' (with hidden window)