Technical Information
- %TEMP%\a950.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\a950.tmp' --ping<Full path to file> C100702ECB419CB8F4A5DBA4E324824F76A79316C22EEA4AF67A285460426C56541F61F66B20EBF4941E884F1C9CB8699714D7C9A3525CEF6076106B76885652
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\a950.tmp' --ping<Full path to file> C100702ECB419CB8F4A5DBA4E324824F76A79316C22EEA4AF67A285460426C56541F61F66B20EBF4941E884F1C9CB8699714D7C9A3525CEF6076106B76885652' (with hidden window)