Technical Information
- %TEMP%\9ccb.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\9ccb.tmp' --ping<Full path to file> AE5C41A7F5272BD9B809658BC0F4205B0A5000D47997A6E1033749641710CF42C485EEC04F5021309B51541FD0E27D10AF5A72347D94EB134468FB32EFC5798A
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\9ccb.tmp' --ping<Full path to file> AE5C41A7F5272BD9B809658BC0F4205B0A5000D47997A6E1033749641710CF42C485EEC04F5021309B51541FD0E27D10AF5A72347D94EB134468FB32EFC5798A' (with hidden window)