Technical Information
- %TEMP%\8e24.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\8e24.tmp' --ping<Full path to file> 41A4A3E7C8EE83286F388567BFB149D76A9E8AB2BE6263F816D847BC31DBCDCA94EAE7F90070063EF67141929CD51A47F86C5437BE7059F9F87BD52B44E64929
- '%TEMP%\8e24.tmp' --ping<Full path to file> 41A4A3E7C8EE83286F388567BFB149D76A9E8AB2BE6263F816D847BC31DBCDCA94EAE7F90070063EF67141929CD51A47F86C5437BE7059F9F87BD52B44E64929' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"