Technical Information
- %TEMP%\ce63.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\ce63.tmp' --ping<Full path to file> D941958733296074345F6D3A426BE88B160ACD9201AAA1BF6AEC15E85B8B99EB111062B59944DBEA6D6C0154353C25AF5FBEC25FA8362975DDF2B3167A8EF086
- '%TEMP%\ce63.tmp' --ping<Full path to file> D941958733296074345F6D3A426BE88B160ACD9201AAA1BF6AEC15E85B8B99EB111062B59944DBEA6D6C0154353C25AF5FBEC25FA8362975DDF2B3167A8EF086' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"