Technical Information
- %TEMP%\60f8.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\60f8.tmp' --ping<Full path to file> 12736F88CA746A687E9F381FF6FD5624749C3E28FF5F21FA2A35881B54D61D44A99AEC0D36BB07C1A69513A778CC45E38D2C04F0AC12F50650F6E255235C7941
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\60f8.tmp' --ping<Full path to file> 12736F88CA746A687E9F381FF6FD5624749C3E28FF5F21FA2A35881B54D61D44A99AEC0D36BB07C1A69513A778CC45E38D2C04F0AC12F50650F6E255235C7941' (with hidden window)