Technical Information
- %TEMP%\8e89.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\8e89.tmp' --ping<Full path to file> AD9E9DEE8D1A7E7E14057C16026F28158B6C38EDAF0F3E810116F733D32D4697845DA1AAC899D87D15C0F02D76E7BED0D28EAEF4CB04C1DB2C686696A8E5DD39
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\8e89.tmp' --ping<Full path to file> AD9E9DEE8D1A7E7E14057C16026F28158B6C38EDAF0F3E810116F733D32D4697845DA1AAC899D87D15C0F02D76E7BED0D28EAEF4CB04C1DB2C686696A8E5DD39' (with hidden window)