Technical Information
- %TEMP%\334f.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '34.##9.100.209':443
- '34.##9.100.209':443
- '%TEMP%\334f.tmp' --ping<Full path to file> FE9A223498A1A58153750AA5FDD32CA41CD68716C940211A9540E26DF3A782514934D8540A1F4604A0E244D79DDF5258B8484FB90CF51B22F784A5FF3479E0C5
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\334f.tmp' --ping<Full path to file> FE9A223498A1A58153750AA5FDD32CA41CD68716C940211A9540E26DF3A782514934D8540A1F4604A0E244D79DDF5258B8484FB90CF51B22F784A5FF3479E0C5' (with hidden window)