Technical Information
- %TEMP%\b0ec.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\b0ec.tmp' --ping<Full path to file> 5AD605EA70DB69EBA3D502B52B1DF9FDFB64E5E27B15152C3EC35E0DAFCFD18581E26BB161C4D3FB610FB6E88CF8E42A5D4514C0675A66F9DBFA7DE417AA6BB0
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\b0ec.tmp' --ping<Full path to file> 5AD605EA70DB69EBA3D502B52B1DF9FDFB64E5E27B15152C3EC35E0DAFCFD18581E26BB161C4D3FB610FB6E88CF8E42A5D4514C0675A66F9DBFA7DE417AA6BB0' (with hidden window)