Technical Information
- %TEMP%\cbf2.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\cbf2.tmp' --ping<Full path to file> 5D9FF081E176EBE8DC2AD8B5475E872489BA45A199EE056E044B90B23180E56909B45EDBC6B487B754AEE0DAECE05137B6E7F228EC0CA47BB416BE451E50829D
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\cbf2.tmp' --ping<Full path to file> 5D9FF081E176EBE8DC2AD8B5475E872489BA45A199EE056E044B90B23180E56909B45EDBC6B487B754AEE0DAECE05137B6E7F228EC0CA47BB416BE451E50829D' (with hidden window)