Technical Information
- %TEMP%\9b83.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9b83.tmp' --ping<Full path to file> F4750F1D2457AD93CBDD48FB76DD6F78283BB50B6C7EB942A0D0EA603B25AFE0E2FE46607928A864F4926F84F2EDB2ADEB1F75BC4D60A8F323582E71906183B9
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\9b83.tmp' --ping<Full path to file> F4750F1D2457AD93CBDD48FB76DD6F78283BB50B6C7EB942A0D0EA603B25AFE0E2FE46607928A864F4926F84F2EDB2ADEB1F75BC4D60A8F323582E71906183B9' (with hidden window)