Technical Information
- %TEMP%\c218.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\c218.tmp' --ping<Full path to file> 3ECC2F52AD214912441FC8294D3860F00729E88BACDB75E53B936381C11063B8FA97404DB1FF699701C6493B9D13736C7CA9E33CF44C14BFFBDCD9BAC165E7A0
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\c218.tmp' --ping<Full path to file> 3ECC2F52AD214912441FC8294D3860F00729E88BACDB75E53B936381C11063B8FA97404DB1FF699701C6493B9D13736C7CA9E33CF44C14BFFBDCD9BAC165E7A0' (with hidden window)