Technical Information
- %TEMP%\b863.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\b863.tmp' --ping<Full path to file> DAD5CCCA3811B999500B1BA43141543256D12EFBA250CDC3A63DBE329A07D858AC2531BE1F896FB755A1DBECB978D53669FA64B233EBBCAB87BBDBCBDCA586CE
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\b863.tmp' --ping<Full path to file> DAD5CCCA3811B999500B1BA43141543256D12EFBA250CDC3A63DBE329A07D858AC2531BE1F896FB755A1DBECB978D53669FA64B233EBBCAB87BBDBCBDCA586CE' (with hidden window)