Technical Information
- %TEMP%\ce36.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\ce36.tmp' --ping<Full path to file> 226AA22F95DCE07CBB35BE9F9BA8DBF77CD69DDFCE29C4EBD7B9330BC22F1F9632E5B240BBECC73549197F6E9DF78CE86FAB59C0BA97AF18A02442D3A61C9DD1
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\ce36.tmp' --ping<Full path to file> 226AA22F95DCE07CBB35BE9F9BA8DBF77CD69DDFCE29C4EBD7B9330BC22F1F9632E5B240BBECC73549197F6E9DF78CE86FAB59C0BA97AF18A02442D3A61C9DD1' (with hidden window)