Technical Information
- %TEMP%\14db.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\14db.tmp' --ping<Full path to file> FDA40A1CDED5B085E89D9E070D91AFF0C82FC8A7184451E00E05FD962334C02C97F9A2BB06E1BFD8D67194C93E5B19EC98CDBBC03F6FA9B4CE6DD3458747B140
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\14db.tmp' --ping<Full path to file> FDA40A1CDED5B085E89D9E070D91AFF0C82FC8A7184451E00E05FD962334C02C97F9A2BB06E1BFD8D67194C93E5B19EC98CDBBC03F6FA9B4CE6DD3458747B140' (with hidden window)