Technical Information
- %TEMP%\3a1b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3a1b.tmp' --ping<Full path to file> 8DB031399BBCA6B4195E84FC58A988754032E6D3A36B5F5828B26C79486D940B155B1B16ADB7642A3EADB995192C62F3B619688242074AB74852D228AB6DC1B7
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\3a1b.tmp' --ping<Full path to file> 8DB031399BBCA6B4195E84FC58A988754032E6D3A36B5F5828B26C79486D940B155B1B16ADB7642A3EADB995192C62F3B619688242074AB74852D228AB6DC1B7' (with hidden window)