Technical Information
- %TEMP%\f38e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f38e.tmp' --ping<Full path to file> E74532FE9F3EBC9AF505E99DC884FF92F6A1C79C00E1FB82C5BE18E88C29F2754C722A62AB7500ED8577170194F663DB060300F9527E928F5E3A07E8D5365B76
- '%TEMP%\f38e.tmp' --ping<Full path to file> E74532FE9F3EBC9AF505E99DC884FF92F6A1C79C00E1FB82C5BE18E88C29F2754C722A62AB7500ED8577170194F663DB060300F9527E928F5E3A07E8D5365B76' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"