Technical Information
- %TEMP%\9992.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9992.tmp' --ping<Full path to file> E9B4473E572CB82EB6186342B326870D8B9D726FCBEA2D08E3CEE9B27E8B0A6649C3C75B4EDED4575C79BE0D75B7835B569A4794864BA5CE6B23980D8B4DB17F
- '%TEMP%\9992.tmp' --ping<Full path to file> E9B4473E572CB82EB6186342B326870D8B9D726FCBEA2D08E3CEE9B27E8B0A6649C3C75B4EDED4575C79BE0D75B7835B569A4794864BA5CE6B23980D8B4DB17F' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"