Technical Information
- %TEMP%\8fb0.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\8fb0.tmp' --ping<Full path to file> 1FEA5B89BD639B247724917AF7CA53DF73DF2F8A6A3E0947D1793FF09689191874206DBEE5194ED969D3EB11DDA590AB44A00372FE3C289D6FC3AA641725512A
- '%TEMP%\8fb0.tmp' --ping<Full path to file> 1FEA5B89BD639B247724917AF7CA53DF73DF2F8A6A3E0947D1793FF09689191874206DBEE5194ED969D3EB11DDA590AB44A00372FE3C289D6FC3AA641725512A' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"