Technical Information
- %TEMP%\c3cb.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\c3cb.tmp' --ping<Full path to file> F34D3CC465CF6E930A5711A4CDE888A00982A8DD7F7BD358D6E496E96225211307F22C47C6910019E6B52C202B3AAC93E25064BFF7D1A0692F932CD1DDA723C3
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\c3cb.tmp' --ping<Full path to file> F34D3CC465CF6E930A5711A4CDE888A00982A8DD7F7BD358D6E496E96225211307F22C47C6910019E6B52C202B3AAC93E25064BFF7D1A0692F932CD1DDA723C3' (with hidden window)