Technical Information
- %TEMP%\9c08.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9c08.tmp' --ping<Full path to file> C1AD8BDD10B2EBD1C6A376E727AEAE5C64A123C7D767BE35EB27E309A31EF451A319E7DB92DF1702B3235E81ED6DE4B4DDA9C979A7870C886B804EF17086B272
- '%TEMP%\9c08.tmp' --ping<Full path to file> C1AD8BDD10B2EBD1C6A376E727AEAE5C64A123C7D767BE35EB27E309A31EF451A319E7DB92DF1702B3235E81ED6DE4B4DDA9C979A7870C886B804EF17086B272' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"