Technical Information
- %TEMP%\8757.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\8757.tmp' --ping<Full path to file> 17A957E0CCF74A6CCA731EFC1148939347C28EB5E9B2D2906C7BB5CEA0570F0AE313CA7EFC798465B275FB18A7D7E6A8B1A5FE54E93C37C5AACCF35D1FEEA181
- '%TEMP%\8757.tmp' --ping<Full path to file> 17A957E0CCF74A6CCA731EFC1148939347C28EB5E9B2D2906C7BB5CEA0570F0AE313CA7EFC798465B275FB18A7D7E6A8B1A5FE54E93C37C5AACCF35D1FEEA181' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"