Technical Information
- %TEMP%\f14c.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f14c.tmp' --ping<Full path to file> 4822B02F37B0C10F6426DA17AE7F497DF6C00C2B8D08FE5A0F90C9E09268E40756E9D5B44324FAB10DEBA19B6844E8A498FEFD59ABBDE6D9A5F256B6B6961881
- '%TEMP%\f14c.tmp' --ping<Full path to file> 4822B02F37B0C10F6426DA17AE7F497DF6C00C2B8D08FE5A0F90C9E09268E40756E9D5B44324FAB10DEBA19B6844E8A498FEFD59ABBDE6D9A5F256B6B6961881' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"