Technical Information
- %TEMP%\28e8.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\28e8.tmp' --ping<Full path to file> C0A66367A859D2351425FF519C2094829AE71ECF5E65E3861A4C1AA762F6A2156B353EA59D437F198FB86375735F9672294FC65A7A24FDA0F911089740182254
- '%TEMP%\28e8.tmp' --ping<Full path to file> C0A66367A859D2351425FF519C2094829AE71ECF5E65E3861A4C1AA762F6A2156B353EA59D437F198FB86375735F9672294FC65A7A24FDA0F911089740182254' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"