Technical Information
- %TEMP%\a8bd.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\a8bd.tmp' --ping<Full path to file> 971F44B092FF02964F4C95FD8CB3090E92E61E0293CE4A54D0F1CBE457096B55418988C018839449ACC2BAEF65793B67EDE1F27B8E8A5B203A093A32550A67EB
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\a8bd.tmp' --ping<Full path to file> 971F44B092FF02964F4C95FD8CB3090E92E61E0293CE4A54D0F1CBE457096B55418988C018839449ACC2BAEF65793B67EDE1F27B8E8A5B203A093A32550A67EB' (with hidden window)