Technical Information
- %TEMP%\c9bf.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\c9bf.tmp' --ping<Full path to file> A98B00F9337AB863B4CA4D5A90793FF55F5B697F390D363DF8A38A48A3BF88CA014993976A363894FF21284A6EE3797E8D1F2344D1B4D771B2AE396A880E69CD
- '%TEMP%\c9bf.tmp' --ping<Full path to file> A98B00F9337AB863B4CA4D5A90793FF55F5B697F390D363DF8A38A48A3BF88CA014993976A363894FF21284A6EE3797E8D1F2344D1B4D771B2AE396A880E69CD' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"