Technical Information
- %TEMP%\aa84.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\aa84.tmp' --ping<Full path to file> 256E1FA010DED62F1106A86F6C87D9D5BD4D00A87090EC79C724A191DAA9FAA4E5E161E08613CEEA6190744677A4AC0284CBE5EFC5CF577EC3F72CB82D58230F
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\aa84.tmp' --ping<Full path to file> 256E1FA010DED62F1106A86F6C87D9D5BD4D00A87090EC79C724A191DAA9FAA4E5E161E08613CEEA6190744677A4AC0284CBE5EFC5CF577EC3F72CB82D58230F' (with hidden window)