Technical Information
- %TEMP%\61a8.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\61a8.tmp' --ping<Full path to file> E3B098AF928811B926DD0715727FBB640A4D99C4CBA4C34AA535BB365ECCF041D2426064DC1C4C4FA22E99E27081D396B56A49BB95F1E356FDF9F29E3B704B9D
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\61a8.tmp' --ping<Full path to file> E3B098AF928811B926DD0715727FBB640A4D99C4CBA4C34AA535BB365ECCF041D2426064DC1C4C4FA22E99E27081D396B56A49BB95F1E356FDF9F29E3B704B9D' (with hidden window)