Technical Information
- %TEMP%\554f.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\554f.tmp' --ping<Full path to file> 4C5DBF3302756C0CD4DB8F1A94B56D163CC131F35A2990DB8BAB3524DC2815EF04AAA61A7AD3AAC5453FC342A16ED1D9AC72CAC44AF0E333F98B8E65D7AFB8F6
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\554f.tmp' --ping<Full path to file> 4C5DBF3302756C0CD4DB8F1A94B56D163CC131F35A2990DB8BAB3524DC2815EF04AAA61A7AD3AAC5453FC342A16ED1D9AC72CAC44AF0E333F98B8E65D7AFB8F6' (with hidden window)