Technical Information
- %TEMP%\e4c2.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\e4c2.tmp' --ping<Full path to file> 6FBDFCD3A8FC9B63BCD7D2304A0346A1C40E00075AE7005DFF37B860B439C6BC41F068EF9D1287EBDF3B97AE017E2C6D5ED5F5622D23E91AB5C459D50AAACBF9
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\e4c2.tmp' --ping<Full path to file> 6FBDFCD3A8FC9B63BCD7D2304A0346A1C40E00075AE7005DFF37B860B439C6BC41F068EF9D1287EBDF3B97AE017E2C6D5ED5F5622D23E91AB5C459D50AAACBF9' (with hidden window)