Technical Information
- %TEMP%\8a26.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\8a26.tmp' --ping<Full path to file> 1678EC3DA1209E5C560006C822A5C3D940972C0F382057B32208BBF1BB9B8CAACFBF7E163356CDA6C5962C0318ED65267A5E2FC5FA0928AAB9056F3B50022400
- '%TEMP%\8a26.tmp' --ping<Full path to file> 1678EC3DA1209E5C560006C822A5C3D940972C0F382057B32208BBF1BB9B8CAACFBF7E163356CDA6C5962C0318ED65267A5E2FC5FA0928AAB9056F3B50022400' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"