Technical Information
- %TEMP%\f217.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f217.tmp' --ping<Full path to file> 0A41CB2D3473368701F65FC70C4B3E12EAEA27F6FB4E4E50BB63D08C1E5B358583E6CF5F1EEA2D4137C234659EDEB36F5879D6AE1E70AFB7D6236710FFD14093
- '%TEMP%\f217.tmp' --ping<Full path to file> 0A41CB2D3473368701F65FC70C4B3E12EAEA27F6FB4E4E50BB63D08C1E5B358583E6CF5F1EEA2D4137C234659EDEB36F5879D6AE1E70AFB7D6236710FFD14093' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"