Technical Information
- %TEMP%\fc8c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\fc8c.tmp' --ping<Full path to file> DFCA9202E39EEA3E438C6D1A91DDEEFEBDDEE59E15CB3230F7C5F38F2F51473BEDA33E8C9CAA344BB13BFAC77F1DEFBD86397285CEF260499FA5FC893FAA3EA5
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\fc8c.tmp' --ping<Full path to file> DFCA9202E39EEA3E438C6D1A91DDEEFEBDDEE59E15CB3230F7C5F38F2F51473BEDA33E8C9CAA344BB13BFAC77F1DEFBD86397285CEF260499FA5FC893FAA3EA5' (with hidden window)