Technical Information
- %TEMP%\ea9c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\ea9c.tmp' --ping<Full path to file> 02E40646EA6A2BC5A024A7668FD6D019C282F489F721D4A8B46AC50D472E3C6E90090397D3B5DCC79E06A64CFCC945E5C8094811AA7B0AB8C69F1FE71E050A43
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\ea9c.tmp' --ping<Full path to file> 02E40646EA6A2BC5A024A7668FD6D019C282F489F721D4A8B46AC50D472E3C6E90090397D3B5DCC79E06A64CFCC945E5C8094811AA7B0AB8C69F1FE71E050A43' (with hidden window)