Technical Information
- %TEMP%\47a9.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\47a9.tmp' --ping<Full path to file> 6A955BDA4E74CD425831E64821E3077218B39124BC6F2429BBA999F6F9D2659A9098E3C224AB39C99799FDFBC021C0E0E3E4741DCA7AE8D8BAB40240787E7835
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\47a9.tmp' --ping<Full path to file> 6A955BDA4E74CD425831E64821E3077218B39124BC6F2429BBA999F6F9D2659A9098E3C224AB39C99799FDFBC021C0E0E3E4741DCA7AE8D8BAB40240787E7835' (with hidden window)