Technical Information
- %TEMP%\66b4.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\66b4.tmp' --ping<Full path to file> EA6383A15BC567FB8F96D68B242EAF0E9A74678AC584F39B21D9A19FD2A4DDF4B96809FE3DAC92CF1DB1F4ED6C19449316568F7D7691E88FD2C51B08289E6903
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\66b4.tmp' --ping<Full path to file> EA6383A15BC567FB8F96D68B242EAF0E9A74678AC584F39B21D9A19FD2A4DDF4B96809FE3DAC92CF1DB1F4ED6C19449316568F7D7691E88FD2C51B08289E6903' (with hidden window)