Technical Information
- %TEMP%\d40b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\d40b.tmp' --ping<Full path to file> C1B63C0BCA0BDED8032179A117F99FE583278B35E956E9DA898C132307DC41EFEC19924733405E52356CFED6C09A2FB631F8EA0DDE1FE14A5E5E0CC41AA4D027
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\d40b.tmp' --ping<Full path to file> C1B63C0BCA0BDED8032179A117F99FE583278B35E956E9DA898C132307DC41EFEC19924733405E52356CFED6C09A2FB631F8EA0DDE1FE14A5E5E0CC41AA4D027' (with hidden window)