Technical Information
- %TEMP%\18e9.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\18e9.tmp' --ping<Full path to file> 31372F2661E7F2E6543158DF64BBCF0D656E219A9DF7FFE05800838F8FFEB91A4BAD80F54138CC43385A7B76E65D9DAEDE6F6CE529CE631B1112BF2F4279D12E
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\18e9.tmp' --ping<Full path to file> 31372F2661E7F2E6543158DF64BBCF0D656E219A9DF7FFE05800838F8FFEB91A4BAD80F54138CC43385A7B76E65D9DAEDE6F6CE529CE631B1112BF2F4279D12E' (with hidden window)