Technical Information
- %TEMP%\198e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\198e.tmp' --ping<Full path to file> A9BAE6F9B9EF9F7A789C431BCAE55357859810EF0CC6E1E32550E3067B35F1F4AD3EBD606D1434C3EACA45796F98F2F7F307AF2A34D9BB52D0C3DD4DE8D7AF2C
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\198e.tmp' --ping<Full path to file> A9BAE6F9B9EF9F7A789C431BCAE55357859810EF0CC6E1E32550E3067B35F1F4AD3EBD606D1434C3EACA45796F98F2F7F307AF2A34D9BB52D0C3DD4DE8D7AF2C' (with hidden window)