Technical Information
- %TEMP%\93f3.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\93f3.tmp' --ping<Full path to file> E6B62CC76BD3298F7DFB899FB0580F1855B7B03638E48BAFF3475C733E79B6289F881F813C6B66C04B148388331467A1B73602915DCD64DED8A9961846BEA9A1
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\93f3.tmp' --ping<Full path to file> E6B62CC76BD3298F7DFB899FB0580F1855B7B03638E48BAFF3475C733E79B6289F881F813C6B66C04B148388331467A1B73602915DCD64DED8A9961846BEA9A1' (with hidden window)