Technical Information
- %TEMP%\5f08.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5f08.tmp' --ping<Full path to file> BB37D23BF35A014F3B7BE90BA16A340AE8948B0A01004E15D2A69275B142003207B278775B07C8C10094B2CA4046423165F4F3455B5D9DC13C0E6A1C76DB0F57
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\5f08.tmp' --ping<Full path to file> BB37D23BF35A014F3B7BE90BA16A340AE8948B0A01004E15D2A69275B142003207B278775B07C8C10094B2CA4046423165F4F3455B5D9DC13C0E6A1C76DB0F57' (with hidden window)