Technical Information
- %TEMP%\2793.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2793.tmp' --ping<Full path to file> 7B3B4233DE404A60FA7B8931D1AD4A4DFFADE5E97304EC89DD8EEF50EF5D3B95F4F33CE60E37411426287F87064D5777EA4C0F37DF9500665EEC5FFBC77B3D17
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\2793.tmp' --ping<Full path to file> 7B3B4233DE404A60FA7B8931D1AD4A4DFFADE5E97304EC89DD8EEF50EF5D3B95F4F33CE60E37411426287F87064D5777EA4C0F37DF9500665EEC5FFBC77B3D17' (with hidden window)