Technical Information
- %TEMP%\b08a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\b08a.tmp' --ping<Full path to file> 6C522FC3241F75DC1D3E6EBE336F4A8119F29415A82CBB3197422C68024C493C44221A686365F02042C1F43B6DD205D0E50A78D6928B1DD6C3A7C22642489694
- '%TEMP%\b08a.tmp' --ping<Full path to file> 6C522FC3241F75DC1D3E6EBE336F4A8119F29415A82CBB3197422C68024C493C44221A686365F02042C1F43B6DD205D0E50A78D6928B1DD6C3A7C22642489694' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"