Technical Information
- %TEMP%\f311.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f311.tmp' --ping<Full path to file> 05307A611B0FE208236BF9634E61849E1D4DA43C1D68075DC5E9CC9DEC662BBFF8F961D256A464D94CD55A7983CF64979467C9F2182CB24B82E009CA3F0A1A1C
- '%TEMP%\f311.tmp' --ping<Full path to file> 05307A611B0FE208236BF9634E61849E1D4DA43C1D68075DC5E9CC9DEC662BBFF8F961D256A464D94CD55A7983CF64979467C9F2182CB24B82E009CA3F0A1A1C' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"