Technical Information
- %TEMP%\9925.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9925.tmp' --ping<Full path to file> ACA745F7EA51F338FB60935B6A2C0A28E5955717E692DFB6709FA1B790C7D3ED2CED87715864D4CB3183C6B319D27794922F890C3D8A518BC7622CDC6D2D463D
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\9925.tmp' --ping<Full path to file> ACA745F7EA51F338FB60935B6A2C0A28E5955717E692DFB6709FA1B790C7D3ED2CED87715864D4CB3183C6B319D27794922F890C3D8A518BC7622CDC6D2D463D' (with hidden window)