Technical Information
- %TEMP%\26f1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '15#.#01.193.91':443
- '%TEMP%\26f1.tmp' --ping<Full path to file> 0D21FFF2F0865B4194AB489143C1120BF7205A473D8A8887C3E0DD2846900FB695B7C2EFF922F4230CE033688E97CE835A296F5CF9C9B26B32128920AA02833B
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\26f1.tmp' --ping<Full path to file> 0D21FFF2F0865B4194AB489143C1120BF7205A473D8A8887C3E0DD2846900FB695B7C2EFF922F4230CE033688E97CE835A296F5CF9C9B26B32128920AA02833B' (with hidden window)
