Technical Information
- %TEMP%\cec.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\cec.tmp' --ping<Full path to file> F4402A3F3C512B7987E0FDDC9C9E01243C339231EB12450CEC024B32235EB73C773F177459D3EA7D34237126A31CC81C066C859BA8DF61305C234D8A12219CF0
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\cec.tmp' --ping<Full path to file> F4402A3F3C512B7987E0FDDC9C9E01243C339231EB12450CEC024B32235EB73C773F177459D3EA7D34237126A31CC81C066C859BA8DF61305C234D8A12219CF0' (with hidden window)