Technical Information
- %TEMP%\52bf.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\52bf.tmp' --ping<Full path to file> 3112B91774161EF061158E81C42F2A97B33D06AA844F0F31C11BB762ADB7FAAB779D563BA72FE16776B0ABA65BF49ADD91009FD3B7AA0562A7D032CAFD42545E
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\52bf.tmp' --ping<Full path to file> 3112B91774161EF061158E81C42F2A97B33D06AA844F0F31C11BB762ADB7FAAB779D563BA72FE16776B0ABA65BF49ADD91009FD3B7AA0562A7D032CAFD42545E' (with hidden window)