Technical Information
- %TEMP%\e011.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\e011.tmp' --ping<Full path to file> 0C60CB7ECBDBEE77199D4EA99F219AD625040F2C760423836DA7EC19A8DF441CA73DF5BF31EB46C0137EE7EA9631703BCEF18BE7701A8F9E712D291CBAAD7FFD
- '%TEMP%\e011.tmp' --ping<Full path to file> 0C60CB7ECBDBEE77199D4EA99F219AD625040F2C760423836DA7EC19A8DF441CA73DF5BF31EB46C0137EE7EA9631703BCEF18BE7701A8F9E712D291CBAAD7FFD' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"