Technical Information
- %TEMP%\13a3.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\13a3.tmp' --ping<Full path to file> ABF9B985DCD946C9CD41A5CF2E54E5F27961F3C25A0C3D210D33FC0367B1503B1D741B2AE09DC9EFB5EAA5E1505FDBED5E12EBFD31D6617C3C821536246922E5
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\13a3.tmp' --ping<Full path to file> ABF9B985DCD946C9CD41A5CF2E54E5F27961F3C25A0C3D210D33FC0367B1503B1D741B2AE09DC9EFB5EAA5E1505FDBED5E12EBFD31D6617C3C821536246922E5' (with hidden window)