Technical Information
- %TEMP%\43ac.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\43ac.tmp' --ping<Full path to file> 89DEA9811E13C58E06E0F34573A996A96B521746D79C68CDEA0A633A209E17521A6A0C97C23F3D4331D399E6C45941C05B7B31E24B3DE39C723060E24DE7FF5E
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\43ac.tmp' --ping<Full path to file> 89DEA9811E13C58E06E0F34573A996A96B521746D79C68CDEA0A633A209E17521A6A0C97C23F3D4331D399E6C45941C05B7B31E24B3DE39C723060E24DE7FF5E' (with hidden window)