Technical Information
- %TEMP%\f341.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f341.tmp' --ping<Full path to file> ABBF24FC99CE8411C2C7C8B3EBD33FB90D671D4823CD14D9B1434CFD5108DFBA6F116D4073794A7C3FE755343CE11624099585BCB596A1F255EC0474F2D2FF3A
- '%TEMP%\f341.tmp' --ping<Full path to file> ABBF24FC99CE8411C2C7C8B3EBD33FB90D671D4823CD14D9B1434CFD5108DFBA6F116D4073794A7C3FE755343CE11624099585BCB596A1F255EC0474F2D2FF3A' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"