Technical Information
- %TEMP%\4685.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\4685.tmp' --ping<Full path to file> D86A039335DE14E73DCC8E96E77F97048F80B98AB664D6E130B3CFB84E38EA7F4A55A7E87ECF2A29ED8BEE4C35B2D73A9533FD0670E5E7C69146C63DDD818167
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\4685.tmp' --ping<Full path to file> D86A039335DE14E73DCC8E96E77F97048F80B98AB664D6E130B3CFB84E38EA7F4A55A7E87ECF2A29ED8BEE4C35B2D73A9533FD0670E5E7C69146C63DDD818167' (with hidden window)