Technical Information
- %TEMP%\a1d.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\a1d.tmp' --ping<Full path to file> C7DD94F0FCC17EA4355042F80E041A717F1C70DF48A895E121043CA48010A8ECEE464D9ADA37BFA258463E37F6C10FCBDB4D231F046689231CE666B7A95EBF63
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\a1d.tmp' --ping<Full path to file> C7DD94F0FCC17EA4355042F80E041A717F1C70DF48A895E121043CA48010A8ECEE464D9ADA37BFA258463E37F6C10FCBDB4D231F046689231CE666B7A95EBF63' (with hidden window)