Technical Information
- %TEMP%\b6fc.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\b6fc.tmp' --ping<Full path to file> 5C7E0B1BC3C7C591F5FA6F6AF8A374D1F15752F2F329FA433E01C62F0FF75BB00826EC0EB0CC8BDFE9C0C2E37DE4911E70630D2636046C7F8F52C57015EB3550
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\b6fc.tmp' --ping<Full path to file> 5C7E0B1BC3C7C591F5FA6F6AF8A374D1F15752F2F329FA433E01C62F0FF75BB00826EC0EB0CC8BDFE9C0C2E37DE4911E70630D2636046C7F8F52C57015EB3550' (with hidden window)