Technical Information
- %TEMP%\e57e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\e57e.tmp' --ping<Full path to file> 6C9DC0F4EFDF83AADE477F0330E3E705EF21E50F94C1571D3591CB25DAF1D5B7CAA910B12837A294E300DC72FD4E51E6B29CC01DF8DEF5CBEFCC7CD37D328C57
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\e57e.tmp' --ping<Full path to file> 6C9DC0F4EFDF83AADE477F0330E3E705EF21E50F94C1571D3591CB25DAF1D5B7CAA910B12837A294E300DC72FD4E51E6B29CC01DF8DEF5CBEFCC7CD37D328C57' (with hidden window)