Technical Information
- %TEMP%\ca9e.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\ca9e.tmp' --ping<Full path to file> 8E43257074FD9840B188DC14954970159A56F275273091B282003597C80514145929136845FD8EB3DFEB4AD61ACC57AF4FFD2DD6A15002CC3AB8F2507956C0BF
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\ca9e.tmp' --ping<Full path to file> 8E43257074FD9840B188DC14954970159A56F275273091B282003597C80514145929136845FD8EB3DFEB4AD61ACC57AF4FFD2DD6A15002CC3AB8F2507956C0BF' (with hidden window)