Technical Information
- %TEMP%\8b63.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\8b63.tmp' --ping<Full path to file> AA0DE1D2018CECF04C9D386B19D4BD5D6891E32B5FACABEEEF58E8067715493AA72525E70137DAB7149859BA17B9292B6DD5854A1C282A55D932DED3638D1DD2
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\8b63.tmp' --ping<Full path to file> AA0DE1D2018CECF04C9D386B19D4BD5D6891E32B5FACABEEEF58E8067715493AA72525E70137DAB7149859BA17B9292B6DD5854A1C282A55D932DED3638D1DD2' (with hidden window)