Technical Information
- %TEMP%\2d12.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2d12.tmp' --ping<Full path to file> F839D7CB0F5D35AF323E91561194230862851EC9C94A9EA474715D1937FC1A02157E354F9AFD85AB377A16B682B2065B342BEDFE683B1E94D9C4DC51BECDE267
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\2d12.tmp' --ping<Full path to file> F839D7CB0F5D35AF323E91561194230862851EC9C94A9EA474715D1937FC1A02157E354F9AFD85AB377A16B682B2065B342BEDFE683B1E94D9C4DC51BECDE267' (with hidden window)