Technical Information
- %TEMP%\7a23.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\7a23.tmp' --ping<Full path to file> 774E2F23C542C78CE233C0477884AA29288611B805387D2F969C44CBFF73B1B2801A602E61882F8C7C6B92E41B9F6929844D64B7A04685D97F9A78906F9D9E35
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\7a23.tmp' --ping<Full path to file> 774E2F23C542C78CE233C0477884AA29288611B805387D2F969C44CBFF73B1B2801A602E61882F8C7C6B92E41B9F6929844D64B7A04685D97F9A78906F9D9E35' (with hidden window)