Technical Information
- %TEMP%\69f1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\69f1.tmp' --ping<Full path to file> E9329466C87D2BDB00A8912AB9217C35EFECBA0284A661500773239C426ECF41CA28DAB9913D0C76832053B0047C10DC5488720706DC669CA63894A1B0697B9A
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\69f1.tmp' --ping<Full path to file> E9329466C87D2BDB00A8912AB9217C35EFECBA0284A661500773239C426ECF41CA28DAB9913D0C76832053B0047C10DC5488720706DC669CA63894A1B0697B9A' (with hidden window)