Technical Information
- %TEMP%\2a89.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\2a89.tmp' --ping<Full path to file> 755E8FAFED469018B02E575CD5E0881A36148125468A81C67FC8CB9053BB055A38415DDEB71263CED4F2F9A3A5AAA85B7006064C9B30B00068DFF92D6C442071
- '%TEMP%\2a89.tmp' --ping<Full path to file> 755E8FAFED469018B02E575CD5E0881A36148125468A81C67FC8CB9053BB055A38415DDEB71263CED4F2F9A3A5AAA85B7006064C9B30B00068DFF92D6C442071' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"