Technical Information
- %TEMP%\681c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\681c.tmp' --ping<Full path to file> 8A384E8394441E5A16CB3BFC6571054DD6900F85FC2B082DB3DC528E13133C664F5ED1F1E9BA3DC6EC0C5C7151F5410D20C7096BB47B00AC97E8B033D4CE6D1B
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\681c.tmp' --ping<Full path to file> 8A384E8394441E5A16CB3BFC6571054DD6900F85FC2B082DB3DC528E13133C664F5ED1F1E9BA3DC6EC0C5C7151F5410D20C7096BB47B00AC97E8B033D4CE6D1B' (with hidden window)