Technical Information
- %TEMP%\c082.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\c082.tmp' --ping<Full path to file> 4638FE5804EE104C849FAC9907126A0DC0E3F5AE24F9BA60B713E823BAF00A4E895C3FA662C9EB24B616D3BFA8FC6E1BD1F434A6258081930DD3F4D09D776895
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\c082.tmp' --ping<Full path to file> 4638FE5804EE104C849FAC9907126A0DC0E3F5AE24F9BA60B713E823BAF00A4E895C3FA662C9EB24B616D3BFA8FC6E1BD1F434A6258081930DD3F4D09D776895' (with hidden window)