Technical Information
- %TEMP%\9386.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9386.tmp' --ping<Full path to file> 0840CB2FCED6F2CD08895FC0734127056349DE350C64027E6EF9E858EAF8FD747A08B7763CF673E422485833873A3D10D65E4B632E914F023ABAF9D8418CD87F
- '%TEMP%\9386.tmp' --ping<Full path to file> 0840CB2FCED6F2CD08895FC0734127056349DE350C64027E6EF9E858EAF8FD747A08B7763CF673E422485833873A3D10D65E4B632E914F023ABAF9D8418CD87F' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"