Technical Information
- %TEMP%\3210.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3210.tmp' --ping<Full path to file> B67282CB1C2DAF75D94FAEFD192A2B6DB65B80D20B3C07CEBD86C557F1B1F7865DD7A0C01A1F32B18F18A1473854D3476B32F64AE45FC16FF299E90D075F7CF2
- '%TEMP%\3210.tmp' --ping<Full path to file> B67282CB1C2DAF75D94FAEFD192A2B6DB65B80D20B3C07CEBD86C557F1B1F7865DD7A0C01A1F32B18F18A1473854D3476B32F64AE45FC16FF299E90D075F7CF2' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"