Technical Information
- %TEMP%\f9f7.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f9f7.tmp' --ping<Full path to file> 05AC61601ACF80052BECB2A8A0698CA8CF669A80F2B3503D148DE401C20EC52B090C9ECDA1D4B9E8C34620EA341B219E2CFE4797285CFEB6DECBE79ECEB41A83
- '%TEMP%\f9f7.tmp' --ping<Full path to file> 05AC61601ACF80052BECB2A8A0698CA8CF669A80F2B3503D148DE401C20EC52B090C9ECDA1D4B9E8C34620EA341B219E2CFE4797285CFEB6DECBE79ECEB41A83' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"