Technical Information
- %TEMP%\3234.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3234.tmp' --ping<Full path to file> 17350E49D9B95F3336DE2679E07113EBFE7D0600F9FFAAC01AFB8CF6C680EF1AD4FCAFE3886C1420145F99E693D9096C1A9E222C5C9B90622B840BD4D3DB17C5
- '%TEMP%\3234.tmp' --ping<Full path to file> 17350E49D9B95F3336DE2679E07113EBFE7D0600F9FFAAC01AFB8CF6C680EF1AD4FCAFE3886C1420145F99E693D9096C1A9E222C5C9B90622B840BD4D3DB17C5' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"