Technical Information
- %TEMP%\5659.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5659.tmp' --ping<Full path to file> 892073FDB527C5296341CE6D8284ED5D625D2ECB9AF97E4644A25457EA26CF090FC4927B0F51060B7D3C92169C842373D6D70E142CCAA376809646DFB8F2980D
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\5659.tmp' --ping<Full path to file> 892073FDB527C5296341CE6D8284ED5D625D2ECB9AF97E4644A25457EA26CF090FC4927B0F51060B7D3C92169C842373D6D70E142CCAA376809646DFB8F2980D' (with hidden window)