Technical Information
- %TEMP%\9175.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9175.tmp' --ping<Full path to file> B8DD5DF58CCF304D9CA5672AE214709BA437130C41BA415DD56347EDC74072B609E4E8BE7220A441B8870DB35206EB8DD2DF56E7B04F2EDC3530793E191EBC0F
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\9175.tmp' --ping<Full path to file> B8DD5DF58CCF304D9CA5672AE214709BA437130C41BA415DD56347EDC74072B609E4E8BE7220A441B8870DB35206EB8DD2DF56E7B04F2EDC3530793E191EBC0F' (with hidden window)