Technical Information
- %TEMP%\e48a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\e48a.tmp' --ping<Full path to file> 65724A7094FD964FB0EF5A0C0EECE599D9EAF5049975E1AAFDEB51D967386C0084C245026B127A7A4EA6624C20BFF4257F84AF428749BAE6E7F386B176C74EB4
- '%TEMP%\e48a.tmp' --ping<Full path to file> 65724A7094FD964FB0EF5A0C0EECE599D9EAF5049975E1AAFDEB51D967386C0084C245026B127A7A4EA6624C20BFF4257F84AF428749BAE6E7F386B176C74EB4' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"