Technical Information
- %TEMP%\ec06.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\ec06.tmp' --ping<Full path to file> E244D27FC5597891F498314761F612FE6D43CFEF551CD6F346E23184084AEE4F6CD825EBD3349EDE0EB9DC1C4D1D66FC22D1DB65F70D24CEFB908491B6FF25CC
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\ec06.tmp' --ping<Full path to file> E244D27FC5597891F498314761F612FE6D43CFEF551CD6F346E23184084AEE4F6CD825EBD3349EDE0EB9DC1C4D1D66FC22D1DB65F70D24CEFB908491B6FF25CC' (with hidden window)