Technical Information
- %TEMP%\9f99.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9f99.tmp' --splash<Full path to file> 6E37D85DFF09B9BD7A42AC818DC30FEC7E03EDD57FC89AF98EE35E73AA0958990C8F8D73CEE3377E5153B625484904030929D90903AA885599AB61FDFFFE1EB3
- '%TEMP%\9f99.tmp' --splash<Full path to file> 6E37D85DFF09B9BD7A42AC818DC30FEC7E03EDD57FC89AF98EE35E73AA0958990C8F8D73CEE3377E5153B625484904030929D90903AA885599AB61FDFFFE1EB3' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"