Technical Information
- %TEMP%\cc6a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\cc6a.tmp' --ping<Full path to file> A85954AB8CD8A0E251FBA7BD5E463D7841DD2F156774F4A0A1AB0ECF95347C8810D2A51DEF666211E4D0432E94F7D79225FEB3763D50B0CB05D3A44A2ED3296C
- '%TEMP%\cc6a.tmp' --ping<Full path to file> A85954AB8CD8A0E251FBA7BD5E463D7841DD2F156774F4A0A1AB0ECF95347C8810D2A51DEF666211E4D0432E94F7D79225FEB3763D50B0CB05D3A44A2ED3296C' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"