Technical Information
- %TEMP%\5aeb.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5aeb.tmp' --ping<Full path to file> 7FF5228AB178EF9AC0EE1409F1356F2058C0F76F05EEF0ECAF54F0CAD156EE679A9F4F556155E0413ABC132D127F0CEBEC02612C0256853F62C7DCED06020416
- '%TEMP%\5aeb.tmp' --ping<Full path to file> 7FF5228AB178EF9AC0EE1409F1356F2058C0F76F05EEF0ECAF54F0CAD156EE679A9F4F556155E0413ABC132D127F0CEBEC02612C0256853F62C7DCED06020416' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"