Technical Information
- %TEMP%\9cea.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9cea.tmp' --ping<Full path to file> 49E5AD60B338967D5CCDC4EB9F01431704562CF5D8DCBE3F6555AB8C7615D14E5D2F3961D461F2A237AAB48685331EF406008E450428944C343AD73E0743E485
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\9cea.tmp' --ping<Full path to file> 49E5AD60B338967D5CCDC4EB9F01431704562CF5D8DCBE3F6555AB8C7615D14E5D2F3961D461F2A237AAB48685331EF406008E450428944C343AD73E0743E485' (with hidden window)