Technical Information
- %TEMP%\e594.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\e594.tmp' --ping<Full path to file> 71C67C8847B26427CE40D2E5D359255D5F7982669D0C931B262957672C5AD49F72643FBEBF7E660A3684559B761D8E35D32D187719260652C25A9A70B8D4DE81
- '%TEMP%\e594.tmp' --ping<Full path to file> 71C67C8847B26427CE40D2E5D359255D5F7982669D0C931B262957672C5AD49F72643FBEBF7E660A3684559B761D8E35D32D187719260652C25A9A70B8D4DE81' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"