Technical Information
- %TEMP%\8bc6.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\8bc6.tmp' --ping<Full path to file> DE020B11B32661A770286D6C83C1398C2D1782A4F4A1596EC971C33FC20439B8F7B676B448FD9283DB6F2D03371E02780368ECA09A6C8B41EEF66E03C9082FEC
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\8bc6.tmp' --ping<Full path to file> DE020B11B32661A770286D6C83C1398C2D1782A4F4A1596EC971C33FC20439B8F7B676B448FD9283DB6F2D03371E02780368ECA09A6C8B41EEF66E03C9082FEC' (with hidden window)