Technical Information
- %TEMP%\4652.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\4652.tmp' --splash<Full path to file> 14693AB0542202F0F90308E2422DA833905442D7BCC328965E011D135A0B585CE7BF1F7F5B5C19FAC783CEB57116922F42298D9F1F523C0C7158ED3AC8D97CD1
- '%TEMP%\4652.tmp' --splash<Full path to file> 14693AB0542202F0F90308E2422DA833905442D7BCC328965E011D135A0B585CE7BF1F7F5B5C19FAC783CEB57116922F42298D9F1F523C0C7158ED3AC8D97CD1' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"