Technical Information
- %TEMP%\3275.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\3275.tmp' --ping<Full path to file> 95B5A25ABD577DFB6021120874B256DFDCAC7FD12DD1A639EE992BEF4843234B0854D42306D5D6F18B122111BF791EA5BAC3442DC154E5FD6FD3EEFEF359683B
- '%TEMP%\3275.tmp' --ping<Full path to file> 95B5A25ABD577DFB6021120874B256DFDCAC7FD12DD1A639EE992BEF4843234B0854D42306D5D6F18B122111BF791EA5BAC3442DC154E5FD6FD3EEFEF359683B' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"