Technical Information
- %TEMP%\f832.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f832.tmp' --ping<Full path to file> 1CFED1F94BE30698CAE031D7F50D7B9C5E8BF62D32325FD86E13246D3E37E85B8301912C1E053671E3EAF0E8AB5E0F8A57AB83D3346063E72E7DA477A317CCDD
- '%TEMP%\f832.tmp' --ping<Full path to file> 1CFED1F94BE30698CAE031D7F50D7B9C5E8BF62D32325FD86E13246D3E37E85B8301912C1E053671E3EAF0E8AB5E0F8A57AB83D3346063E72E7DA477A317CCDD' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"