Technical Information
- %TEMP%\9a52.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9a52.tmp' --ping<Full path to file> 792357C274DF8652D27105C04C3B1BC5C21E04C28D45B0D22F0E28592D4FFB92496BCE2FD94396438E005EEEE676BCE3823129D04807AF1E512BA6C966E63188
- '%TEMP%\9a52.tmp' --ping<Full path to file> 792357C274DF8652D27105C04C3B1BC5C21E04C28D45B0D22F0E28592D4FFB92496BCE2FD94396438E005EEEE676BCE3823129D04807AF1E512BA6C966E63188' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"