Technical Information
- %TEMP%\f584.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f584.tmp' --ping<Full path to file> CA6EAE3A3BB2F4B42FEE0FFA446F0F8EF64A2061C70BE495CD828B4264B24CE375ECFC5314EE499F26795DC7CA1FE2CE3BE57227F0AE413E1293D2C829116D8B
- '%TEMP%\f584.tmp' --ping<Full path to file> CA6EAE3A3BB2F4B42FEE0FFA446F0F8EF64A2061C70BE495CD828B4264B24CE375ECFC5314EE499F26795DC7CA1FE2CE3BE57227F0AE413E1293D2C829116D8B' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"