Technical Information
- %TEMP%\56c6.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\56c6.tmp' --ping<Full path to file> BFCE6850F8B42A90B9F38C458D57F82DEB1F6202CFB02E641F48B09BE8F3EBA4F0C4671C497512B0C04E9F9C61132EF5ED207072285C2C23ABCBCF86315E344A
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\56c6.tmp' --ping<Full path to file> BFCE6850F8B42A90B9F38C458D57F82DEB1F6202CFB02E641F48B09BE8F3EBA4F0C4671C497512B0C04E9F9C61132EF5ED207072285C2C23ABCBCF86315E344A' (with hidden window)