Technical Information
- %TEMP%\1722.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1722.tmp' --ping<Full path to file> 0DAF1B8C30E5C39A9EC3C793391D17D950C20531D88350C00A34A1E3AB70002E230F1475492720B4699C0F53893D9FCE332C5B47739F389064E2DABC02B8DE31
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\1722.tmp' --ping<Full path to file> 0DAF1B8C30E5C39A9EC3C793391D17D950C20531D88350C00A34A1E3AB70002E230F1475492720B4699C0F53893D9FCE332C5B47739F389064E2DABC02B8DE31' (with hidden window)